Terms of Service
Effective 29 July 2026
onchainwho is operated by Hongkong Hongzhao Technology Limited (香港弘昭科技有限公司), a company registered in Hong Kong. Business Registration No. 77605835-000. Registered address: Rm 03, 24/F, Ho King Commercial Centre, 2–16 Fa Yuen Street, Mong Kok, Hong Kong. By using the service you agree to these terms.
1. What the service does
onchainwho reads transaction history on Ethereum, Base, Arbitrum, Optimism, Polygon, Avalanche, Hyperliquid, Solana, Tron and TON — ten chains. Which chains were read is printed on every result, and it is not decoration: an absence we did not check is not an absence, so the page states the scope of what it looked at alongside what it found.
BSC (chain 56) is a partial exception. No free source exists for its transaction history, so we cannot date activity there. We do check whether an address has ever been used on BSC — a nonce, a native balance, and stablecoin balances, all read from public nodes — and say so when it has. That check yields no timestamp of any kind, so a wallet active on BSC may be considerably older than the date shown.
For the same reason, the figure we print is labelled “oldest record found”and never “wallet age”. It is the earliest transaction we located on the chains we can read, which is a floor: the true history can be longer than the figure and can never be shorter.
You submit a public blockchain address, an ENS name or a Farcaster username. We query public sources and show you two things about that address: what its transaction history shows — when it first transacted, which address first sent it funds, and which addresses it transacts with most — and whatever identity its owner has published, such as an ENS name, a verified Farcaster account, the social links typed into those records, and the DAO governance spaces it has voted in.
2. What the screening lists cover
Every lookup compares the address, whoever funded it first, and its top counterparties against two lists. Both are shown whether or not they match, because a page that only speaks up on a match teaches its readers that silence means safe, and that is not something we can tell you.
Sanctions.Digital currency addresses designated by the US Treasury’s Office of Foreign Assets Control. A match is a government designation with a date, not an allegation of fraud — designated addresses include central banks under embargo. We read the list from a mirror that publishes it per chain, because OFAC’s own endpoints redirect to a host our servers cannot reach; the data is OFAC’s and the date shown is that mirror’s last update.
Phishing reports.ScamSniffer’s open blacklist of addresses observed collecting funds from phishing sites. This is a community report rather than a determination, and two limits matter: the free feed is published roughly a week behind its live counterpart, so it covers past campaigns well and current ones poorly, and it holds Ethereum-family addresses only — a Tron or TON address is never compared against it.
Between them these lists hold a few thousand addresses out of hundreds of millions in existence, so the overwhelmingly likely outcome is no match. A clean screen means those specific lists do not name this address. It is not a judgement about the address.
3. Where the data comes from
Every result comes from one of these public sources:
- ENS text records — fields the address owner set themselves on a public registry
- Farcaster — accounts cryptographically verified against the address, and the profile fields their owner typed. A Farcaster username and an X handle are unrelated namespaces that anyone can register independently, so we resolve Farcaster usernames and never treat an X handle as one.
- Snapshot — DAO governance votes, signed by the address owner
- Public transaction history, read from block explorers and public node gateways
- Public JSON-RPC nodes — used only to ask whether an address has ever been used on a chain whose history we cannot read. A nonce, a native balance and stablecoin balances; no timestamps.
- GitHub’s public API— when an address has published a GitHub handle, we fetch that account’s public profile so the page can say how long it has existed instead of only printing the handle. The handle is sent to GitHub; the address is not.
- Two community X / Twitter profile mirrors — X has no free API, so a published X handle is looked up through independent public mirrors for the same reason as above. The handle is sent to them; the address is not. They are not operated by us and may stop answering at any time, in which case the page shows the handle without the extra detail rather than guessing at it.
- A hand-curated list of well-known contracts and exchange wallets
We do not buy data from brokers, use leaked or breached datasets, access private accounts, or process biometric information of any kind.
We do read transaction patterns, and an earlier version of these terms said otherwise. First funder and frequent counterparties are exactly that. They are shown as transactions, never as an identity, and no result here asserts that two addresses belong to the same person.
4. Accuracy — read this before relying on anything
Results are probabilistic and unverified. Every result is labelled by how it was established: cryptographically verified, self-declared by the address owner, or observed onchain. A self-declared link means someone typed it into their own record — it is not proof of identity, and anyone can type anything.
We do not confirm identity and we do not guarantee accuracy or completeness. Verify independently before acting on anything you see here.
5. Acceptable use
You may not use onchainwho to:
- harass, stalk, threaten, intimidate or dox any person
- make decisions about employment, credit, housing, insurance or any other purpose regulated by consumer-reporting law. This is not a consumer report and we are not a consumer reporting agency
- discriminate against any person, or build a profile of a person for any of the purposes above
- scrape, resell or redistribute results in bulk
We may suspend access for any use that breaches this section.
6. Paid products
Three things are on sale, and they are not the same kind of work.
- Written conclusion ($19) — delivered in two parts. The funding trail is followed back through several wallets and drawn on the order page immediately, compiled programmatically and containing no human judgement. A written conclusion from a person follows by email, normally within 12 hours.
- Batch wallet check ($29 per month) — the same lookup this site performs for free, run over up to 100 addresses in a file and assembled into a spreadsheet on the order page as it runs, which you download there. Up to 5,000 addresses a month and up to 500 in any 24 hours. It is compiled programmatically and contains no human judgement. Addresses with nothing published are reported as such, which is a result and not a shortfall.
- Full due diligence report ($199) — the same immediate on-page trail, followed twice as far, and then a report researched and written by a person covering off-chain public records as well as the chain, normally within three business days. If the research needs longer you are told on the first day and may cancel for a full refund at that point.
Both compile publicly available information and carry the same accuracy limits as section 3.
What you are buying is the conclusion of a search, not a guarantee of a match. A report has three possible outcomes and all three are delivered work:
- public records support the claim
- public records contradict the claim
- no public record connects the address to the claim — often the most useful outcome, and never a reason to think the search failed
Because every outcome is a delivered result, neither product is refundable on the basis that the answer was not the one you hoped for. If we fail to deliver at all, you are refunded in full.
Payment is taken through Stripe. For both products Stripe is the merchant of record and the order is sold through Link, so your statement will show LINK.COM* HONGZHAO TECH rather than onchainwho.
7. Removal
If information shown about you is wrong, or you want an address de-listed, email privacy@onchainwho.com. We action valid requests within 30 days. Note that we do not control the underlying public sources — removing an ENS text record at the source removes it here too.
8. Liability
The service is provided as-is. To the extent permitted by law we are not liable for decisions made in reliance on results, or for any indirect or consequential loss.
9. Changes
We will update the effective date above when these terms change. If the service starts processing a materially different kind of data, we will say so here before it does.
Questions or removal requests: privacy@onchainwho.com