Wallet Intelligence / Architecturejilsovereign.com/products/wallet-intelligence/architecture
Architecture

Wallet Intelligence Architecture

Behavioral analytics + risk scoring + compliance attestation

The Wallet Intelligence Engine continuously evaluates wallet activity against fraud patterns, sanctions lists, and regulatory thresholds, producing sealed evidence for every risk determination - across 13+ chains, 50+ exchange relationships, and on-chain heuristics.

13+<
em>/Chains scanned
100+<
em>/Risk patterns
FRE 902<
em>/Sealed determinations
<500<
em>ms/Risk-score latency

§ 01Business Architecture

AudienceBanks (BSA/AML), custodians, exchanges, payment networks, card issuers, regulated stablecoin issuers.
BuyerBSA Officer, CISO, Head of Compliance.
Economic ModelPer-wallet-month, volume-tiered. Risk-event subscription pricing for ongoing monitoring.
PartnersChainalysis (BYO), TRM (BYO), Elliptic (BYO), ScamSniffer.

§ 02Technical Architecture

Chain analyzer

Real-time scan across 13+ chains. Wallet clustering via deposit-pattern + behavioral fingerprints.

Risk scorer

100+ patterns - mixers, sanctioned addresses, hack proceeds, scam-token interactions, layering.

Sanctions matcher

OFAC SDN crypto + UN + EU + UK against wallet + counterparty addresses.

Behavioral engine

Layering detection, time-of-day anomalies, gas-pattern fingerprints, peeling-chain detection.

CourtChain™ seal

Each risk determination sealed with reasoning + source citations.

Data SourcesEtherscan label cloud, Chainalysis (BYO), TRM (BYO), OFAC SDN crypto, ScamSniffer, DefiLlama, internal scam-token registries.

§ 03Process Flow

01
Wallet observed
Inbound deposit, outbound transfer, or KYT screening request.
02
Chain analyzed
Cluster identification, sanctions match, scam-token check, layering detection.
03
Risk score
100+ pattern weighted-score. 0-100 risk band returned.
04
Verdict attestation
Score + reasoning + cited evidence sealed.
05
Action policy
Hold / Approve / Escalate based on customer-set thresholds.

§ 04Plain English Example

Worked example

Plain English: a wallet processes $500K, flagged at 12% sanctions risk

Custodian receives $500K inbound from a fresh wallet. Engine traces source: 4 hops back to a CEX deposit (KYC'd) but two hops back routes through a Tornado Cash-style mixer used by 3 OFAC SDN addresses 8 days prior. Score: 12% direct sanctions exposure, 41% layering. Custodian's policy holds the deposit pending KYT review, ships sealed CREB™ to BSA officer for SAR decision.

§ 05Capabilities Summary

Chains13+ chains, real-time
Risk patterns100+ - mixers, sanctioned, hacks, scams, layering, peeling, gas-fingerprint
SanctionsOFAC SDN crypto + UN + EU + UK
BYOChainalysis, TRM, Elliptic - customer rides their own subscription
Latency<500ms for score; sub-second for KYT decision