58 of 66 respondents classified P2P transfers as high risk, reflecting heightened concern where no regulated intermediary is involved.
FATF 2026 Readiness
Operationalize FATF’s unhosted wallet AML expectations
Turn the FATF’s latest private-sector actions into a risk-based control layer with wallet screening, counterparty intelligence, transaction monitoring, and blockchain analytics from MistTrack.
No credit card required
API from $20/year
ISO certified
Trusted by 500+ institutions
400M+ labeled addresses
19 blockchain networks
Risk results in <500ms
What changed in 2026
Unhosted wallet monitoring is now an explicit private-sector priority
The FATF’s seventh targeted update calls on VASPs to strengthen monitoring of unhosted wallet transactions, apply enhanced due diligence to higher-risk activity, and use transaction monitoring and blockchain analytics to detect suspicious patterns and rapid transfers.
Only 31 of 133 respondents reported measuring P2P activity, underlining the need for better data, visibility, and risk analytics.
Source: FATF, Virtual Assets: 7th Targeted Update on Implementation of the FATF Standards, July 2026 — Private Sector Recommendations 5–6 and paragraphs 37–38.
Read the FATF report ↗
From requirement to control
A practical control layer for higher-risk wallet activity
MistTrack converts public-blockchain visibility into decision-ready risk signals that compliance teams can use before, during, and after a transaction.
ASSESS
Risk-based wallet screening
Score destination and source addresses, identify entity types, and assess direct or indirect exposure before accepting or releasing funds.
INVESTIGATE
Enhanced due diligence signals
Go beyond the immediate address with counterparty network, hop, volume, activity, and behavioral context for higher-risk self-custody interactions.
MONITOR
Continuous transaction monitoring
Configure risk thresholds and alert rules for sanctioned address interactions, rapid transfers, and suspicious on-chain patterns.
ACT
Actionable decision intelligence
Feed risk results into your own permit, reject, hold, whitelist, blacklist, freeze, or manual-review workflows through lightweight APIs.
Control mapping
Map FATF actions to your operating workflow
A clear evidence trail helps compliance, product, and engineering teams turn risk policy into consistent transaction decisions.
| FATF private-sector action | MistTrack capability | Operational outcome |
|---|---|---|
| Understand institutional and emerging unhosted-wallet risk | Supported Risk Score API, address labels, activity overview, and counterparty intelligence |
Risk-tier wallets consistently and document the factors behind a decision. |
| Apply enhanced due diligence to higher-risk wallet activity | Supported Multi-hop exposure, transaction context, entity attribution, and asynchronous portfolio screening |
Escalate higher-risk activity with evidence for verification, manual review, or case handling. |
| Identify suspicious patterns and rapid virtual-asset transfers | Supported KYT monitoring, custom rules, behavioral signals, and email/webhook alerts |
Trigger timely investigation and maintain an auditable monitoring process. |
| Use wallet screening, blacklist/whitelist, and block/freeze controls | Enables decisioning Sanctions matches, 500K+ threat intelligence entries, risk classifications, and API responses |
Supply the intelligence your internal policy engine needs to allow, hold, reject, or block a transaction. |
Scope matters: MistTrack provides wallet intelligence and monitoring. Customer identity collection, proof-of-wallet-control, Travel Rule data exchange, STR filing, and execution of freezes or blocks remain within the VASP’s own compliance stack and procedures.
Implementation workflow
Screen once. Investigate deeper. Monitor continuously.
Add MistTrack at the points where an unhosted wallet enters, moves through, or exits your customer journey.
Pre-screen the wallet
Check source or destination risk before deposit crediting, withdrawal approval, or wallet connection.
GET /v3/risk_scoreAdd attribution
Identify entity type, sanctions exposure, counterparty network, and indirect risk across hops.
Enumerate risk_detailApply EDD policy
Route higher-risk activity to wallet-control checks, source-of-funds review, or manual investigation.
policy_thresholdMonitor & evidence
Watch active wallets, receive alerts, and retain the inputs that support decisions and reporting.
KYT + webhook
Developer ready
One risk call in your transaction flow
Integrate synchronous screening in the confirmation path, or use asynchronous tasks for periodic portfolio and batch reviews.
Explore Risk Score API# Screen before processing an unhosted-wallet transfer GET https://openapi.misttrack.io/v3/risk_score { "score": 67, "risk_level": "Moderate", "risk_detail.risk_type": "sanctioned_entity", "risk_detail.exposure_type": "indirect", "risk_detail.hop_num": 2, "risk_report_url": "https://files.misttrack.io/riskReport/..." }
Built for the risk perimeter
Protect every business flow that touches self-custody
Use the same intelligence layer across customer-facing products and compliance operations.
Crypto exchanges
Screen deposits and withdrawals, monitor customer activity, and flag higher-risk destinations.
Wallets & custodians
Add recipient risk checks to send flows and monitor custodied portfolios across chains.
Payment platforms
Assess payer, merchant, and settlement wallet exposure before releasing funds.
Financial institutions
Understand client crypto exposure and support risk-based onboarding and review.
Frequently asked questions
Unhosted wallet compliance, clarified
What does the FATF mean by an unhosted wallet?
An unhosted wallet is controlled by its user rather than a regulated intermediary. The FATF highlights elevated P2P risk because direct transfers can fall outside AML/CFT/CPF obligations even though public-blockchain transactions remain technically visible.
Does MistTrack make a VASP “FATF compliant” by itself?
No single tool creates compliance. MistTrack supports the wallet screening, blockchain analytics, risk assessment, and monitoring components highlighted by the FATF. Each VASP remains responsible for its risk assessment, policies, customer due diligence, reporting, governance, and jurisdiction-specific obligations.
How does MistTrack complement a Travel Rule solution?
Travel Rule systems exchange required originator and beneficiary information between obliged entities. MistTrack adds on-chain address attribution, counterparty risk, sanctions screening, and exposure analysis. For transfers involving self-custody, customers should combine this intelligence with their identity and proof-of-control procedures where required.
Can MistTrack execute a freeze or block?
MistTrack provides the risk data and alerts that can feed your decision engine. Execution of a hold, rejection, freeze, or block is performed by your platform, custodian, stablecoin issuer, or other authorized party according to applicable law and internal policy.
Build your unhosted wallet control layer with MistTrack
Start with free screening, then integrate real-time risk scoring and continuous monitoring into your compliance workflow.
