KYT Alert Training Guide

What this tool is

A hands-on workbook for practicing KYT alert triage. Each tab is a realistic alert scenario (sanctions, terrorist financing, CSAM, fraud, gambling) with real, Data-Solutions-verified transaction hashes and addresses. You register the transfer against a live KYT instance, then work through the alert exactly like you would on the job.

Step 1 — Configure your API key

In the KYT API Configuration card (top left), paste your KYT API token. The Base URL defaults to /proxy/api/kyt — a same-origin relay that avoids the browser's CORS block on direct calls to Chainalysis. Click Test Connection to confirm it works.

Step 2 — Pick a scenario

Use the category tabs (Sanctions, Terrorist Finance, CSAM, Fraud, Gambling) to pick a typology, then the sub-tabs (Direct — Sent/Received, Indirect — Fast/Slow) to pick a variant. The Register in KYT card updates automatically to match.

Step 3 — Review the fields, then register

Every field is editable — User ID, Network, Asset, Direction, Address, and Transaction Hash are pre-filled with the scenario's real data. Click Register Transfer in KYT to create the user (if needed), register the transfer, and poll until it's processed. Results appear on the right: the transfer summary, any alerts generated, exposure data, and network identifications (attributed entity names).

Step 4 — Investigate the flow

Below the Setup row, the Flow section tells the story: transaction details, the fund-flow diagram, and a timeline of events. For indirect scenarios, the diagram shows the real 2-hop chain (source entity → intermediary → your platform) with a Time Gap — under a few hours usually means the same actor moving funds fast; weeks or months usually means unrelated intermediaries.

Step 5 — View the live alert

Once an alert comes back, the KYT / Reactor tabs near the bottom load the real alert page and Reactor graph in an embedded frame — click between them to switch views without losing your place. (These may show blank if your browser doesn't have an active KYT login session; use "Open in new tab" as a fallback.)

Timezone picker

Every timestamp in the Flow timeline is shown in UTC. Pick a zone from the Timeline timezone dropdown (top of page) to also see it converted to that local time, side by side.

Troubleshooting

• "No alerts generated" — double-check the network/asset/hash/address match a real on-chain transaction your KYT instance can see.
• "No exposure data" — not every transfer has exposure data; this is expected for many legitimate-looking transfers.
• Network error on Test Connection — the same-origin proxy may not be deployed, or your API key may be invalid. Use "Copy cURL" to test the call directly from a terminal instead.

Training use only

This page is an internal training aid for practicing KYT alert triage workflows. It is not a production compliance tool, is not a substitute for your institution's actual case-management system, and must not be used to make or record real compliance decisions.

No warranty, no liability

This tool is provided "as is," with no warranty of any kind, express or implied, including accuracy, availability, or fitness for a particular purpose. The people who built it accept no responsibility or liability for actions taken, or not taken, based on anything shown here — including alert data, exposure figures, verdicts, or any other content on this page.

Your API key and data

Your KYT API key is entered directly into your browser and sent only to the Chainalysis KYT API (via a same-origin relay used solely to avoid a browser CORS restriction). It is not logged, stored server-side, or shared with any third party by this tool. Treat it as you would any production credential — do not share screenshots or recordings that include it, and rotate it if you suspect exposure.

Live data

Registering a transfer here makes a real call to your organization's KYT instance. While the transaction hashes used in these scenarios are real, verified on-chain data, using this tool may create real user and transfer records in your KYT instance. Use a training/sandbox instance where possible, and follow your organization's own policies for what's appropriate to register.

Not affiliated

This is an internal, unofficial training utility. It is not an official Chainalysis product and is not endorsed by Chainalysis. Use of the Chainalysis KYT API remains subject to your organization's own agreement with Chainalysis.