Home Services About Blog Tools Contacts
Start an engagement Emergency call
Englishen Españoles Magyarhu العربيةar Русскийru Українськаuk Deutschde Slovenčinask ไทยth 中文zh-CN 日本語ja 한국어ko Românăro Françaisfr हिन्दीhi বাংলাbn Bahasa Indonesiaid Portuguêspt Italianoit Tagalogtl Tiếng Việtvi فارسیfa Kiswahilisw မြန်မာmy Türkçetr اردوur Basa Jawajv Polskipl Češtinacs Afrikaansaf తెలుగుte

Follow the
Bitcoin.

Paste a transaction id, pick the amount, and we trace it both ways — back to its attributed inputs and forward to later spends — using FIFO or proportional haircut taint on a UTXO graph. We screen structural CoinJoin patterns, address-poisoning bait, selected public exchange and illicit labels, and OFAC-listed Bitcoin addresses, then explain a heuristic risk score.

  • Bidirectional FIFO or haircut taint trace, fully in-browser
  • CoinJoin / mixer + address-poisoning detection
  • OFAC Bitcoin data + selected public labels, heuristic risk score

How tracing works

1
Pick the amount

We load the transaction's outputs so you choose exactly which output (amount) to follow, and how many hops to trace each way.

2
Trace with the selected model

Backward we attribute provenance to funding inputs; forward we follow later spends. FIFO preserves exact ordered satoshi ranges, while haircut apportions value proportionally with exact integer conservation.

3
Flag mixing & bait

Every hop is screened for conservative CoinJoin structure heuristics (Wasabi, Whirlpool and generic equal-output patterns), where input/output attribution is unreliable, and for low-value address-poisoning look-alikes. Known labeled endpoints stop that branch.

4
Score the risk

A heuristic risk score is computed from the sanctions, mixer, CoinJoin, poisoning and structural signals found in the bounded graph — both directions.

Disclaimer. This tool is for informational and educational triage only — it is not legal, financial, compliance or investigative advice. Tracing relies on heuristics and third-party data (mempool.space, public labels) that may be incomplete, outdated or wrong; the AML score is an indicator, not a verdict. Absence of a flag is not proof that funds are clean, and a flag is not proof of wrongdoing. PWN-ALL is not affiliated with OFAC or any exchange, makes no warranty as to accuracy, and accepts no liability for decisions made from these results. Nothing here is an accusation against any address or person. Verify independently and consult a qualified professional before acting.

Need more than a free tool?

PWN-ALL runs 24/7 incident response: containment, digital forensics and ransomware recovery, handled by a specialist — not a ticket queue.

Talk to incident response