Behaviour Prediction API
>-
Behaviour Prediction API¶
POST /fraud/audit¶
Profiles a wallet's complete on-chain history and predicts what it is likely to do next. Returns wallet categorisation, experience level, intent probabilities, personalisation recommendations, protocol history, and risk profiling.
Use this endpoint to personalise a user's onboarding journey, route wallets to the right product flow, or conduct targeted segmentation.
Base URL: https://enterprise.api.chainaware.ai
Authentication: x-api-key header required.
Subscription: Business or Enterprise.
Supported networks: ETH, BNB, BASE, HAQQ, SOLANA
Request¶
Headers¶
| Header | Type | Required | Description |
|---|---|---|---|
x-api-key |
string | Yes | Your ChainAware API key |
Content-Type |
string | Yes | application/json |
Body¶
| Field | Type | Required | Description |
|---|---|---|---|
network |
string | Yes | Blockchain network - ETH, BNB, BASE, HAQQ, or SOLANA |
walletAddress |
string | Yes | The wallet address to profile |
calculate |
boolean | No | true to force a full real-time recalculation; omit or false to return cached result |
Example request¶
curl -X POST https://enterprise.api.chainaware.ai/fraud/audit \
-H "x-api-key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"network": "ETH",
"walletAddress": "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045"
}'
Response¶
Top-level fields¶
| Field | Type | Description |
|---|---|---|
message |
string | Result status - "Success" |
walletAddress |
string | The queried wallet address |
chain |
string | Blockchain network identifier |
status |
string | Fraud classification - "Not Fraud", "Fraud", or "New Address" |
probabilityFraud |
string | Fraud probability 0.00-1.00 (returned as string for precision) |
riskCapability |
integer | Wallet risk capability score |
lastChecked |
datetime | Last analysis execution timestamp |
checked_times |
integer | Number of times this wallet has been analysed |
createdAt |
datetime | Record creation timestamp |
updatedAt |
datetime | Most recent update timestamp |
token |
string | null | Optional token context associated with the analysis |
userDetails - Core wallet metrics¶
| Field | Type | Description |
|---|---|---|
wallet_age_days |
integer | Age of the wallet in days |
total_balance_usd |
float | Current total balance in USD |
transaction_count |
integer | Lifetime transaction count |
wallet_rank |
integer | ChainAware Wallet Rank |
experience - Expertise score¶
Integer 0-100 representing on-chain maturity derived from protocol diversity and activity longevity.
| Range | Interpretation |
|---|---|
| 0-25 | Beginner - new to DeFi |
| 26-50 | Intermediate |
| 51-75 | Experienced |
| 76-100 | Expert / Power User |
"experience": { "Type": "Experience", "Value": 87 }
intention - 14 predicted next-action signals¶
Probability of the wallet's next on-chain action in the near term. Each value is "High", "Medium", or "Low".
| Field | Use For |
|---|---|
Prob_Trade |
Surface trading features, fee comparisons |
Prob_Lend |
Highlight yield from lending deposits |
Prob_Borrow |
Present lending protocols and credit products |
Prob_Stake |
Promote staking products and yield |
Prob_Stake_ETH |
ETH-specific staking protocols |
Prob_Yield_Farm |
Yield aggregators, auto-compound opportunities |
Prob_NFT |
NFT marketplace or collection features |
Prob_Game |
GameFi, play-to-earn products |
Prob_Gamble |
Prediction markets, high-risk speculative products |
Prob_Leveraged_Stake |
Restaking and liquid staking with leverage |
Prob_Leveraged_Stake_ETH |
ETH-specific leveraged staking protocols |
Prob_Leveraged_Lend |
Leveraged DeFi credit and margin products |
Prob_Leverage_Long_ETH |
Perpetual DEXes, long ETH derivatives |
Prob_Leverage_Long |
GameFi or speculative leveraged positions |
"intention": {
"Type": "Intentions",
"Value": {
"Prob_Lend": "High",
"Prob_Trade": "High",
"Prob_Game": "Medium",
"Prob_NFT": "Medium",
"Prob_Stake_ETH": "Medium",
"Prob_Stake": "Low",
"Prob_Borrow": "Low",
"Prob_Gamble": "Low",
"Prob_Yield_Farm": "Low",
"Prob_Leveraged_Stake": "Low",
"Prob_Leveraged_Stake_ETH": "Low",
"Prob_Leveraged_Lend": "Low",
"Prob_Leverage_Long_ETH": "Low",
"Prob_Leverage_Long": "Low"
}
}
categories - Behavioural activity segments¶
Array of activity domains and interaction counts:
"categories": [
{ "Category": "DeFi", "Count": 126 },
{ "Category": "Bridge User", "Count": 38 }
]
riskProfile - Risk exposure weighting¶
Balance-age weighted exposure by risk category:
"riskProfile": [
{ "Category": "Risk_Profile", "Balance_age": 3 }
]
protocols - Protocol usage history¶
Ordered list of protocols the wallet has interacted with, by frequency:
"protocols": [
{ "Protocol": "uniswap", "Count": 25 },
{ "Protocol": "aave", "Count": 14 }
]
recommendation - Personalisation suggestions¶
Array of product fit or engagement recommendations ready to use directly in agent context or UI:
"recommendation": {
"Type": "Recommendation",
"Value": [
"WBTC holding",
"ETH holding",
"Stablecoin lending"
]
}
segmentInfo - Protocol engagement flags¶
Serialised JSON string of per-protocol engagement flags used internally for segment classification:
"segmentInfo": "{\"Maker\":0,\"Aave_borrow\":0,\"Aave_lend\":1,\"Lido\":0,\"Uniswap\":1}"
forensic_details - Fraud indicators¶
Binary flags (0/1) for each forensic dimension contributing to the fraud probability score:
| Flag | Description |
|---|---|
cybercrime |
Cybercrime association |
money_laundering |
Money laundering patterns |
number_of_malicious_contracts_created |
Malicious contract deployments |
gas_abuse |
Gas price manipulation |
financial_crime |
Financial crime indicators |
darkweb_transactions |
Darknet market exposure |
reinit |
Re-initialisation attack patterns |
phishing_activities |
Phishing campaign involvement |
fake_kyc |
Fake KYC activity |
blacklist_doubt |
Blacklist proximity signals |
fake_standard_interface |
Fake ERC standard impersonation |
stealing_attack |
Theft attack patterns |
blackmail_activities |
Blackmail or extortion activity |
sanctioned |
Sanctions list match |
malicious_mining_activities |
Malicious mining involvement |
mixer |
Mixer / tumbler usage |
fake_token |
Fake token deployment |
honeypot_related_address |
Honeypot contract association |
sanctionData - Sanctions intelligence¶
Array of sanctions records associated with the wallet. isSanctioned: false with null category/name/description indicates no sanctions match.
"sanctionData": [
{
"category": null,
"name": null,
"description": null,
"url": null,
"isSanctioned": false,
"createdAt": "2026-03-12T16:01:18.000Z",
"updatedAt": "2026-03-12T16:01:18.000Z"
}
]
Error codes¶
| Code | Meaning |
|---|---|
400 |
Bad request - missing or invalid fields |
401 |
Unauthorised - API key missing or invalid |
404 |
Wallet not found |
429 |
Rate limit exceeded |
500 |
Internal server error |
Common use cases¶
- Personalised onboarding - route Expert wallets directly to advanced features; guide Beginners through simplified flows
- Intent-matched CTAs - surface staking products to
Prob_Stake Highwallets; show trading features toProb_Trade Highwallets - Airdrop quality filtering - exclude low-experience or suspicious wallets from reward programmes
- DeFi lending - assess borrower experience and risk tolerance before setting loan terms
- GameFi personalisation - adapt in-game economies based on
Prob_GameandProb_Gamblesignals - Marketing segmentation - allocate campaign budget toward wallets with high
experienceand genuine protocol engagement - Combined screening - pair with
/fraud/checkat wallet-connect to gate risk and personalise simultaneously
Further Reading¶
- Web3 Behavioral User Analytics Guide - using
/fraud/auditfor analytics and segmentation - Web3 User Segmentation & Behavioral Analytics for DApp Growth - segmentation strategies for DApp retention and growth
See also: Fraud Detection API | Credit Scoring API | Enterprise API Overview