Join the waitlist

Free · Solana only for now

Wallet Health Check

Paste a public Solana wallet address. In a few seconds we check its recent public activity (last 100 transactions) for the warning signs of common scams, and tell you in plain English what we found.

  • Public address only
  • No wallet connect
  • No signing, ever
  • Never your seed phrase
  • We will never DM you first

Never paste a seed phrase or private key.

Your public address is safe to share. It's the one you give people so they can send you money.

Where do I find my address?
  • Phantom: open the app, tap Receive, then tap the copy icon next to your Solana address.
  • Solflare: open the app, tap Receive, then tap Copy.
  • Backpack: open the app, tap Receive, choose Solana, then tap Copy.

A public address is safe to share. It starts with a letter or number and is 32 to 44 characters long. If an app or a person asks for your 12 or 24 secret words or a "private key", stop: that's what controls your money.

3 free Health Checks per day. We never ask you to connect your wallet or sign anything. If a site does, close it.

What we check

  • Is your wallet still a normal wallet? Whether its account was reassigned to another program.
  • Did you give anyone permission to spend your tokens? (token delegates) Approvals that let another address move your tokens without asking you.
  • Can someone else move your tokens? Token accounts handed over to another address in your recent history, a common drainer trick.
  • Was your wallet emptied in one transaction? One transaction sending several different assets to one address, the usual pattern of a drain.
  • Any look-alike addresses sending you transfers? Address poisoning: copies of the first and last characters of someone you've paid. We note when those transfers were tiny or zero-value.
  • Did you pay a look-alike address? Money sent to one of those copies, the usual sign of a copy-paste mistake or a clipboard-swapping app.
  • Any "sign now, send later" setups you didn't make? (durable nonces) A durable nonce lets a transaction you signed earlier be sent later.
  • On the U.S. sanctions list (and public scam reports, where we have them)? Addresses on the U.S. government sanctions list, plus addresses from public scam reports where we have them. Public lists for Solana are small, so a miss here doesn't tell you much.
  • Spam tokens with links? "Claim" and "visit" bait. Leaving them alone is fine; we only count them and never open the links.

What we can't see

  • Whether your seed phrase or private key has been seen, copied or photographed.
  • Malware or a clipboard-swapping app on your phone or computer.
  • Phishing sites you visited, or messages you signed that were never sent to the chain.
  • Other blockchains, exchange accounts, and anything older than the recent activity we read.

We read your latest 100 transactions, the latest 100 incoming and 100 outgoing transfers, your current token accounts and up to 100 tokens and NFTs (if we can't read them all, the result says how many we scanned). We don't save your address. We keep a scrambled code of it (and of your IP) for about a day for rate limits, cache the result for 15 minutes so a reload doesn't use up a check, and look the address up through our blockchain data provider, Helius. Privacy details. WalletTies is not a recovery service and is not affiliated with the FBI. Disclaimer

Lost money? Start with our free IC3 filing guide, and join the waitlist to hear when our deeper tracing tools open.

Join the waitlist