Address Reporting
The Address Reporting feature enables VASP users to report blockchain addresses suspected of involvement in fraud, money laundering, sanctions evasion, or other illicit activities. By collaborating across the industry, VASPs contribute to a shared intelligence network that strengthens compliance capabilities and risk prevention.
Creating a New Report
To submit a suspicious address report, click the "+ New Report" button in the Address Reporting page.
Report Information
Fill in the following fields in the report form:
| Field | Required | Description |
|---|---|---|
| Report Title | Yes | - A descriptive title for your report - Maximum: 100 characters - Must be unique — you cannot reuse a title from a previously submitted report |
| Associated Entity | Yes | - The entity (e.g., exchange or service) associated with the reported addresses - Select from the dropdown list - If the entity is not listed, click "Cannot find the Entity Name" to switch to a free-text input field |
| Category | Yes | - The type of suspicious activity - Select one from the dropdown (see Category Reference below) |
| Notes | No | - Additional context or description of the suspicious activity - Maximum: 1,000 characters |
The Report Title is validated for uniqueness when you leave the field. If a report with the same title already exists, an error message will be displayed, and submission will be blocked until you change the title.
When creating a report, select the category that best describes the suspicious activity:
| Category | Description |
|---|---|
| Cybercrime | Addresses linked to cyberattacks, hacking, ransomware, or other computer-related crimes |
| Dark Web Activity | Addresses associated with darknet marketplaces or services |
| Gambling | Addresses connected to unlicensed or illegal gambling operations |
| Sanctioned Entity | Addresses belonging to OFAC-sanctioned entities or individuals |
| Fraud & Scams | Addresses involved in scams, phishing, Ponzi schemes, or other fraudulent activities |
| Terrorist Financing | Addresses suspected of being used to finance terrorism |
| Other | Suspicious activity that does not fit the above categories |
Adding Addresses
You can provide suspicious addresses using one of two methods: Bulk Upload or Manual Input. These two methods are mutually exclusive — you can only use one at a time.
Switching between tabs: If you have already entered data in the current tab and switch to the other, a confirmation dialog will appear warning that your existing data will be cleared. Click Confirm to proceed or Cancel to stay on the current tab.
Option A: Bulk Upload
-
Click the "Bulk Upload" tab.
-
Download the template file by clicking the download template link. The template is an .xlsx file with two columns: Network and Address.
-
Fill in the template with your address data.
-
Upload the completed file (.csv or .xlsx format).
After a successful upload:
-
The upload button is replaced by a file display showing the file icon, file name, a Download button, and a Delete button.
-
The total number of parsed addresses is displayed (e.g., "Total addresses parsed: 99").
If the file contains errors:
-
The file entry is highlighted with a red border and an error message is shown below it.
-
Only the Delete button is available — remove the file and re-upload a corrected version.
Limits:
-
Supported formats: .csv, .xlsx
-
Maximum 500 address rows per upload (excluding the header row)
-
Each row must contain both a Network and an Address value
Option B: Manual Input
-
Click the "Manual Input" tab (selected by default).
-
Each row provides two fields: Network (dropdown) and Address (text input).
-
Click the "+" button to add a new row below the current one.
-
Click the delete button on a row to remove it.
Limits:
-
Minimum 1 address required
-
Maximum 500 addresses
-
When only 1 address row remains, the delete button is hidden
Uploading Evidence (Optional)
You may attach supporting evidence files to strengthen your report.
-
Click the upload area to select files.
-
Supported formats: .png, .jpeg, .pdf, .csv, .xlsx
-
Maximum file size: 5 MB per file
-
Maximum 10 attachments per report
-
Uploaded files are displayed in a list — image files (.png, .jpeg) show a thumbnail preview, while other formats show a file type icon.
-
Each attachment has a delete button to remove it.
Evidence attachments are optional. You can submit a report without any attachments.
Submitting the Report
Once all required fields are completed and at least one address has been provided:
-
Click the "Submit" button at the bottom of the modal.
-
On success, the report enters Under Review status and you are returned to the report list, where the new report appears at the top.
-
If submission fails, an error message is displayed and your entered data is preserved so you can correct the issue and retry.
Managing Reports
After you submit a report, GTR will review the reported content and evidence, combined with additional data analysis, to assess whether each address genuinely qualifies as a high-risk address.
A report progresses through the following statuses after submission:
| Status | Description |
|---|---|
| Under Review | The report has been submitted and is pending review. |
| Approved | All addresses in the report have been reviewed and approved. |
| Rejected | All addresses in the report have been reviewed and rejected. |
| Partially Approved | Some addresses were approved and others were rejected. Check individual address statuses in the report detail. |
Report List
The main page displays all reports submitted by your VASP, sorted by creation time (newest first) with pagination.
The list table contains the following columns:
| Column | Description |
|---|---|
| Report Title | The title you assigned to the report |
| Created Time | The date and time the report was submitted |
| Status | Current review status of the report |
| Action | Contains a "View Details" link |
Filtering Reports
Use the filter controls above the report list to narrow down results:
| Filter | Type | Description |
|---|---|---|
| Report Title | Text search | Fuzzy keyword search on report titles |
| Time Duration | Date range picker | Filter by the report creation date range |
| Status | Tab selector | Quick-switch between: All Status, Pending, Approved, Rejected, Partially Approved |
Report Detail
Click "View Details" on any report to open the report detail modal. The detail view contains:
Report Information:
-
Report Title (displayed alongside the status badge)
-
Created Time
-
VASP (your VASP name)
-
Associated Entity
-
Category
-
Notes
Attachments:
-
Listed with file names and Download buttons
-
Image files show thumbnail previews; other formats show file type icons
Addresses:
-
Header shows the total count (e.g., "Addresses (8)")
-
Each address entry shows:
| Field | Description |
|---|---|
| Address | The blockchain address (with a copy button for one-click copying) |
| Network | The blockchain network |
| Tags | Displayed only for Approved addresses |
| Status | Under Review / Approved / Rejected |
For Rejected addresses, an info icon appears next to the status. Click it to view the rejection reason in a tooltip.
At the bottom of the detail view, a "View in Address Lookup" button lets you jump to the Address Lookup tab with the current report's title pre-filled as a filter.
Address Lookup
The Address Lookup tab provides a searchable view of all addresses your VASP has reported across all reports.
The address lookup table contains the following columns:
| Column | Description |
|---|---|
| Address | The blockchain address (with a copy button) |
| Network | The blockchain network (e.g., ETH, BTC, TRX) |
| Report Time | When the address was submitted |
| Status | Pending / Approved / Rejected |
| Associated Entity | The entity associated with the address |
| Tags | Labels assigned after approval (typically up to 3 tags) |
| Confidence Score | A value from 0 to 1 (one decimal place). Indicates how confident GTR is in the accuracy of the address tags — a higher score means greater confidence. |
| Risk Score | A value from 0 to 10 (one decimal place). Indicates the overall risk level of the address — a higher score means higher risk. |
- Tags, Confidence Score, and Risk Score are only populated for Approved addresses. For other statuses, these fields display "—".
- For Rejected addresses, click the info icon next to the status to view the rejection reason.