Funder risk

Check whether the address that funded a wallet carries a risk signal, which helps spot fresh wallets topped up from flagged sources.

POSThttps://triport.io/v1/intelligence/funder-risk

Network: Ethereum
Scope: intelligence:read
Auth: x-token: $TRIPORT_API_KEY header (or Authorization: Bearer)
Rate limit: Business — 30 rps (intelligence, burst ×2); Enterprise — 150 rps

Request

cURLJavaScriptPython

curl -X POST "https://triport.io/v1/intelligence/funder-risk" \
  -H "x-token: $TRIPORT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"chain":"eth","address":"0x28c6c06298d514db089934071355e5743bf21d60"}'

const res = await fetch("https://triport.io/v1/intelligence/funder-risk", {
  method: "POST",
  headers: {
    "x-token": process.env.TRIPORT_API_KEY,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "chain": "eth",
    "address": "0x28c6c06298d514db089934071355e5743bf21d60"
  }),
});
const data = await res.json();
console.log(data);

import os


import requests


resp = requests.post(
    "https://triport.io/v1/intelligence/funder-risk",
    headers={
        "x-token": os.environ["TRIPORT_API_KEY"],
        "Content-Type": "application/json",
    },
    json={
        "chain": "eth",
        "address": "0x28c6c06298d514db089934071355e5743bf21d60",
    },
)
data = resp.json()
print(data)

Response

JSON

Example

{
  "state": "partial",
  "meta": {
    "observedAt": "2026-11-06T09:20:46.268437258Z",
    "expiresAt": "2026-11-07T09:20:46.268437258Z",
    "cached": true,
    "complete": false
  },
  "data": {
    "hint": {
      "address": "",
      "risky": false
    }
  }
}

Check whether the address that funded a wallet carries a risk signal, which helps spot fresh wallets topped up from flagged sources.

risky: false means no risk signal was found for the funding source. It does not identify the first historical funding transaction and is not a safety guarantee. Incomplete answers come back as partial.

Released on Ethereum. Any other chain value answers 422 with state unsupported. More chains are coming; see the changelog.

Every answer is an envelope with state, meta, optional data and optional error. Read state first: ok, empty, partial, stale, unsupported or unavailable (see response states). meta.cached tells you whether the answer came from cache.

Parameters

addressstringrequired

Address to look up: 0x + 40 hex characters, any letter case.

chainstringrequired

Chain id, see Network above (eth, and for labels also solana and avalanche). Aliases: ethereum → eth, sol → solana, avax → avalanche.

freshbooleanoptional

Optional. true skips the cache and asks for a new lookup (GET routes: ?fresh=1).

Response

Response recorded on 2026-11-06 through https://triport.io (long lists shortened). Values change over time.

Errors

HTTP	`error.code`	When
400	`invalid_request`	Malformed address, unknown field, `null` value or invalid JSON.
401	`unauthorized`	Missing or invalid API key.
403	`scope_missing` / `tier_insufficient`	The key lacks `intelligence:read`, or the plan is below Business.
405	`method_not_allowed`	Wrong HTTP method; the `Allow` header names `POST`.
422	`unsupported`	The chain (or the contract) is not supported by this method.
429	`rate_limited`	Over the `intelligence` per-second limit; wait `Retry-After` seconds.
503	`unavailable`	The lookup could not be completed right now; retry later.
504	`timeout`	The lookup took too long; retry, or retry later with the same input.

See errors, limits and states for the full rules and the code examples.