Wallet reports
Reading a report
A wallet report, section by section: what each part shows, how to read it, and what to check before you trust it.
Opening a report
Every wallet has its report at iriscan.app/{address}. Paste an address in the header search, follow a link from another report, or click Full report on a card in the Explorer. Reports need an account.
While it runs, the page shows the steps: fetching the latest transactions, sizing the history, checking every counterparty, running the behavior rules. Most reports are ready in a few seconds; a 10,000-transaction analysis can take up to about 20.
Analysis depth
The bar at the top says how many transactions were read and lets you read more: 1k, 2k, 5k, 10k or Custom. Sizes beyond the wallet's whole history are disabled, with “The whole history is already analyzed”. See Depth.
The verdict
The panel at the top answers the question in one look:
- Title
- Who the wallet is: the known entity (“Kraken hot wallet”), else the behavior that defines it (“MEV arbitrage bot”), else its most serious label (“Sanctioned”).
- Risk badge
- Low, medium or high risk, and the score out of 100 with its confidence.
- Activity
- Active when it made a transaction in the last 30 days, inactive otherwise.
- Summary
- The takeaways in a line: its behaviors, then who it sends to, receives from and swaps on, then how many flagged wallets it dealt with.
- Labels
- Pills for what is known about the address, each with its source. Click one to open the source.
- Explorer
- Opens the wallet on an investigation board with its counterparties.
Overview
The wallet's vital signs: its balance in dollars, SOL and tokens, its age, its transactions (all time, and how many were analyzed), how many counterparties it has and the data completeness: how much of what Iris wanted to read it could. Only what is known is shown.
Behavior
The patterns found, strongest first. Each has its title, a description with the measured numbers, a confidence, and up to three example transactions linked to Solscan.
For Sent to a look-alike address, the report also pairs each fake with the real address it copies, and how much went to the fake. See Behaviors.
Evidence
A numbered list of the findings behind the verdict that are not behaviors: each label with its source and confidence, and the wallet's exposure to flagged counterparties.
Flagged and known counterparties
Two tables of the labeled wallets it dealt with. Flagged counterparties are known bad addresses: sanctioned, frozen, drainers, scams, mixers. Known counterparties are exchanges, protocols and DEXes.
| Column | Shows |
|---|---|
| Address | The counterparty, with a copy button. Click to open its own report. |
| Label | What it is, and how many times money was sent to it and received from it. Programs show “Program”. |
| Source | Who labeled it. |
| Interactions | Transactions between the two. |
| Last seen | The latest of them. |
Activity
What the analyzed transactions were, as a split bar: transfers (money to or from someone), swaps (trading one asset for another) and program calls (everything else: staking, lending, minting, votes).
Money flow
Transfers only: swaps are left out, since trading is not paying someone. Received and Sent give the SOL, the stablecoins, how many wallets and transactions; Net is the difference.
Top senders and Top recipients rank counterparties by the value moved; wallets that only moved dust are left out. A Look-alike badge marks an address made to imitate another one this wallet dealt with.
Never copy a look-alike
Poisoners send dust from addresses that share the first and last characters of one you use, hoping you copy it from your history. Always check the whole address.SOL balance
The wallet's SOL since it was created, with Now, the Change over the period and the Peak.
- The solid line is exact: every transaction analyzed, with the balance after each.
- The dashed line covers the history before that, from points sampled across the wallet's life. It shows the shape of its past; between two points, the balance may have moved.
Switch between Lifetime and Last N to zoom on the exact part.
Before you trust it
- Check the footer. “Based on known labels and the last N transactions” is a full analysis. “Live analysis unavailable, showing known labels only” means only the knowledge base answered; that report is not charged.
- Check the confidence of the identity and the risk, and the data completeness.
- Open the examples. Every behavior links transactions; a minute on Solscan confirms what Iris saw.
- Go deeper when the verdict matters. See When to go deeper.