Bellingcat's Online Investigation Toolkit
  • About
  • Most Used
  • New Tools
  • ⚒️Categories
    • Maps & Satellites
      • Maps
      • Satellite Imagery
      • Street View
    • Geolocation
    • Image/Video
      • Reverse Image Search
      • Facial Recognition
      • Metadata
      • Misc
    • Social Media
      • Discord
      • Facebook
      • Instagram
      • LinkedIn
      • Reddit
      • Telegram
      • Tiktok
      • Twitter/X
      • Vkontakte
      • Youtube
      • Other Networks
      • Multiple Networks
      • International
    • People
    • Websites
    • Companies & Finance
    • Conflict
    • Transport
    • Environment & Wildlife
    • Archiving
    • Data Organization & Analysis
  • 📖Resources
    • Guides & Handbooks
    • Education
    • Newsletters & Toolkits
    • Stay Safe
  • More
    • All Tools
      • 4plebs
      • 527 Explorer
      • About Maps and Satellites
      • ACLED
      • AllTrails
      • Apollo Mapping
      • Apple Maps
      • Archive.today
      • Atlos
      • Auto Archiver
      • AutoStitch
      • Azure AI Video Indexer
      • Baidu Maps
      • Bellingcat OpenStreetMap Search
      • Bing Maps
      • Blackbird
      • Blender
      • Bluesky Insights
      • BskyFollowFinder/Bluesky network analyzer
      • BskyThreadReader
      • Bulletpicker.com
      • CAT UXO
      • China-related resources
      • Chronotrains
      • CITES Trade Database
      • Companies House
      • Convert Geographic Units
      • Datawrapper
      • DeHashed
      • DiscordLeaks
      • Distill.io
      • DomainTools Whois Lookup
      • Earth Explorer
      • Earth Online
      • EDGAR Suite
      • EDGAR
      • Equasis
      • Etherscan
      • EU consolidated corporate registers
      • ExifTool
      • F4Map
      • FaceCheck.ID
      • FlightAware
      • Flightradar24
      • Forensically
      • GeoHints
      • Gephi
      • Ghunt
      • Global Fishing Watch Map
      • Global Forest Watch
      • Global Monitoring System - ECOSOLVE
      • Global Suppliers Online
      • Google Earth Engine
      • Google Earth Pro
      • Google Flood Hub
      • Google Lens
      • Google Maps
      • GovMap
      • GPSJam
      • Have I Been Pwned
      • Hitta.se
      • Hoaxy
      • Hugin
      • Hunchly
      • ICANN Lookup
      • ICIJ Offshore Leaks Database
      • ImportGenius
      • ImportYeti
      • Index Database
      • Instagram Location Search
      • Instant Data Scraper
      • Intelx.io
      • InVID
      • KartaView
      • Leak-Lookup
      • License Plate Maps
      • LittleSis
      • Liveuamap
      • Logseq
      • Lumen
      • Maigret
      • Maltego Graph
      • MapChecking
      • Mapillary
      • MapSwitcher
      • MarineTraffic
      • Meta Content Library
      • MW Geofind
      • Name Variant Search
      • Namechk
      • NASA Firms
      • NASA Worldview
      • NeutrOSINT
      • North Data
      • Obsidian
      • OCCRP Aleph
      • Open Measures
      • Open Ownership
      • Open Source Munitions Portal
      • OpenCorporates
      • OpenSanctions
      • OpenSecrets
      • OrbTrack
      • Osint Tools Map
      • Overpass Turbo
      • PeakVisor
      • Picuki
      • PimEyes
      • Pinpoint
      • PixPlot
      • Planet Labs
      • QGIS
      • Quick geolocation search
      • Radar Interference Tracker
      • RAWGraphs
      • RootAbout
      • RuPEP
      • SanctionsExplorer
      • satellites.pro
      • Search by Image
      • Sentinel Hub Playground
      • ShadeMap
      • Shadow Finder
      • ShadowMap
      • Sherlock
      • Skopenow
      • SkyFi
      • Snap Map
      • Strava
      • Suncalc
      • Telegago
      • Telegram Group Joiner
      • Telegram Phone Number Checker
      • TelegramDB
      • Telemetrio
      • Telemetry
      • Telepathy
      • Tencent Maps
      • TGStat
      • The Information Laundromat
      • TinEye
      • TrueCaller
      • TruffleHog
      • Twitter Advanced Search
      • Twitter Location Search
      • Twitter Video Downloader
      • Umbra Space
      • UN Comtrade Database
      • UNOSAT Analyses
      • Uwazi
      • VesselFinder
      • Wayback Machine
      • Web Archives
      • What CMS
      • WhatsMyName
      • Who posted what?
      • Whoxy
      • Wikimapia
      • Wikipedia list of registers
      • WildEye
      • Wildlife Trade Portal
      • xIFr
      • Yandex Maps
      • Zotero
Powered by GitBook
On this page
  • URL
  • Description
  • Cost
  • Level of difficulty
  • Requirements
  • Limitations
  • Ethical Considerations
  • Guides
  • Tool provider
  • Advertising Trackers

Was this helpful?

Edit on GitHub
Export as PDF
  1. More
  2. All Tools

Etherscan

An explorer that allows researchers to track wallets, transactions and more on the Ethereum blockchain.

Last updated 4 months ago

Was this helpful?

URL

Description

Ethereum is a blockchain-based network. Its native cryptocurrency Ether (ETH) is currently the second-largest cryptocurrency in terms of value. Open source researchers can use Etherscan to look up data on the Ethereum blockchain, for instance addresses, transactions, and more.

Addresses

By typing any Ether address in the search bar, researchers get an overview of the current balance of the wallet’s assets in Ether and USD, the dates when the first and the last transactions were sent and an overview of all transactions.

Ethereum usernames

Search Etherscan via Google

However, our own tests in July 2024 showed that this does not always work. Sometimes the result comes back with an empty info box:

Transactions

Each transaction has its own transaction hash. Searching for this hash on Etherscan brings up an overview of transaction details:

Analytics

Etherscan also provides various types of analytics. Open source researchers can use those analytics to gain in-depth insights into what is happening with specific addresses over time.

Each address site has an “analytics” button. Clicking on it, opens a list of options including an overview of the Ether balance of an address. The following address has had its highest Ether balance in August 2016 but it had its highest value in USD in November 2021:

The “transactions” tab shows a time series of transactions over time (the exact time frame can be chosen by adapting the date on the right hand side or by moving the slider).

Cost

Level of difficulty

The tool is easy to use but beginners might need some time to learn how to interpret the information it provides.

Requirements

No requirements.

Open source researchers who sign up with an e-mail address can use some additional features like creating a watchlist of addresses and receiving e-mail notifications if transactions from or to those addresses occur.

Limitations

While some users share their Ether addresses on social media or other online platforms, it is important to note that most Ether addresses can not be easily linked to a specific person or organization.

Ethical Considerations

Guides

Tool provider

Block Solutions, Malaysia

Advertising Trackers

Page maintainer

Johanna Wild - Bellingcat

Since Ether addresses are long and not very user-friendly, services like allow users to buy a username that ends with .eth. If open source researchers find such a username online, they do not necessarily need to know the associated Ether address but can simply search for this username.

Some Ethereum fans use their .eth username on social media platforms which can be helpful in terms of tracing digital footprints during open source investigations. Ethereum co-founder Vitalik Buterin, for instance, uses vitalik.eth for his . A search for this name on Etherscan brings up the associated Ether address:

displays the ETH balance (via Etherscan) directly on top of the search results if someone searches for an Ether address:

It is also possible to search for a but this method currently seems to be even less reliable.

Transactions are publicly visible via the blockchain but people who are involved in illicit activities might use to obscure the original sender and recipients of payments making it more challenging for open source investigators to deanynomyize transactions. Trying to track down the person behind a crypto transaction can often lead to dead ends.

Etherscan has become the target of scams and phishing attempts. In 2023, were set up to trick users into providing access to their wallets. In 2024, were found on Etherscan. Those scams are aimed at gaining access to users' wallets and therefore their Ether assets. Open source researchers should be aware of the prevalence of such incidents in the crypto world.

Etherscan Information Center: .

Ethereum name service
X account
Google
username
mixer services
Tutorials
phishing ads
cloned Etherscan sites
https://etherscan.io/
smart contracts
This transaction was successful and took place in block number 20393430 on July 26, 2024. It was sent from an address ending with 003 to vitalik.eth.
An overview of vitalik.eth’s transactions between January 2020 and July 2024. Outgoing and incoming addresses have different colours (black and green).
Registered users can set up watch lists for up to 50 addresses.
The of Ethereum co-founder Vitalik Buterin according to .
Ethereum address
Forbes