What is address clustering?¶

Address clustering groups blockchain addresses that analysis suggests may share a wallet, service or controller. It is usually an inference, not proof that every address belongs to one named person.

Heuristics have network-specific limits¶

Shared inputs, change behaviour, timing, service labels and transaction patterns can support grouping. Wallet software, exchanges, processors and collaborative transactions can also produce misleading common-control signals. A service cluster may contain unrelated customers.

Make the method auditable¶

Preserve addresses and transactions, tool and version, method, analysis date, confidence and the reason each address entered the cluster. Later data may strengthen, narrow or overturn the grouping.

Corroborate through provider records, seized-wallet data, endpoint artefacts, communications or known behaviour. Report confirmed common control separately from probable or possible association and do not attach a person's name without independent support.