DEV Community

PublicAML
PublicAML

Posted on Originally published at publicaml.org

How PublicAML publishes criminal crypto addresses and gets them indexed by Google

#crypto #security #blockchain #osint

When someone loses money to a crypto scam, or an investigator traces stolen funds, the first question is always the same: has this address been flagged before? For most people the answer is locked behind enterprise tools that cost five or six figures a year. PublicAML takes the opposite approach — it publishes flagged addresses as public, search-engine-indexable pages, so anyone can find them for a free AML check.

What we publish

PublicAML maintains risk records on roughly 200,000 crypto addresses across Bitcoin, Ethereum, BNB Chain and TRON — sanctioned entities, hacks, scams, mixers, ransomware and labelled services. Every one of them gets its own public page:

https://publicaml.org/address/<chain>/<address>/

Each page shows the AML risk score, sanctions status, how many hops the funds are from a flagged source, the entity category, and the propagation path our engine traced. These pages are server-rendered, carry robots: index, follow, are self-canonical, and hold real content — everything a search engine needs to index them.

How they actually get indexed

Indexable is not the same as indexed. A young domain with 200,000 template pages reachable only from a sitemap gets filed under "Discovered — currently not indexed." The fix is internal linking:

  1. Directory hubs. publicaml.org/directory/ lists every flagged address, split by chain and paginated. Each hub links directly to the individual address pages, so every flagged wallet has a crawlable path in — no orphans.
  2. Cross-links between addresses. Risk-relevant addresses link to the sources that flagged them.
  3. Sitemap + IndexNow. New URLs are pushed to IndexNow, which feeds Bing (and from there ChatGPT, Brave and others) within minutes.

Community and partner reports

Anyone can report a criminal address at publicaml.org/victim-reports/. A submitted report becomes a public, indexable page at https://publicaml.org/reports/VR-XXXXXXXX/. The reported address is tagged "community-reported" and surfaces on that address's page, labelled by review stage. Reports from verified partners are trusted and can be promoted straight into the public index.

The transparency loop: a victim reports a scam wallet → it gets a public page → search engines index it → the next person who searches that address sees the warning before they send.

Why publish criminal addresses at all

Because a warning nobody can find protects nobody. Sanctions lists, scam databases and hack attributions exist, but they are scattered and mostly paywalled. Publishing them as free, indexed pages turns them into something a normal person can reach — from a Google search, a wallet, or a Telegram bot. PublicAML is a non-profit; screening and publication are free because they work best as a public good.

Try it

Top comments (0)