Agent Payment Sanctions Exposure Leaderboard

By agentmail team · Reviewed against each platform’s public docs · Updated 2026-07-19 · Rankings re-evaluated quarterly (next review: October 2026)

TL;DR: Most platforms that let AI agents move money do not document a programmable OFAC sanctions check. Of the 11 platforms we reviewed, only three expose screening inside the agent’s payment path at all, and only one — agentmail — covers wallets, names, AND countries in a single API call. The rest either screen at the custody layer (good, but not callable by your agent) or do not document any screening. The table below is the data; the methodology section explains how we scored it.

The leaderboard

Ranked by OFAC risk level (Low → Medium → High), then by breadth of screening coverage. Tap any platform name’s evidence link to read the source documentation yourself.

Last updated 2026-07-19. Rankings are re-evaluated quarterly. To submit a correction or request a new row, contact us with a citation to your platform’s public documentation.

Methodology

Each platform is scored on six observable, publicly-verifiable dimensions:

1. Sanctions Screening (Yes / Partial / No) — Does the platform itself screen agent-initiated transactions against a sanctions list, as documented in its own public docs? Yes = wallet + (name or country) screening documented; Partial = screening exists at custody/platform level but is not callable as a per-transaction check; No = not documented.
2. Coverage — Breadth of the screening: OFAC crypto wallets, SDN names, and embargoed jurisdictions. Wider coverage ranks higher.
3. Latency — Documented response time for a single screening call.
4. Cost — Documented per-check price or pricing tier.
5. OFAC Risk Level — Our composite assessment: Low (programmatic wallet + name or country screening exposed to agents), Medium (screening exists at custody / platform level, not as a callable API), High (no sanctions screening documented for agent payments).
6. Last Verified — The date we last re-checked the platform’s public documentation. Rankings are re-evaluated quarterly.

What we do not score: SOC 2 / ISO 27001 status, internal policies we cannot see, marketing claims without documentation, or features behind private beta gates. If a capability is not documented in the platform’s own public docs, it is marked Not documented rather than guessed.

agentmail, the product publishing this leaderboard, is scored by the identical bar. Its evidence link points at the same docs every other row uses.

Evidence & sources

Every row is backed by a citation to the platform’s public documentation. The verified claim is summarised after each link.

• Coinbase x402 Facilitator (CDP) — https://docs.cdp.coinbase.com/x402/core-concepts/facilitator. Facilitator-level KYT declines payments involving sanctioned or high-risk addresses. Name and country screening not documented at the facilitator layer.
• Coinbase CDP Wallets / AgentKit — https://docs.cdp.coinbase.com/wallets/security-and-policies/security-overview. "All transfers are automatically screened against the OFAC sanctions list" before onchain submission. Operates inside Coinbase custody, not as a standalone agent API.
• agentmail — https://sanctionsai.dev/docs. agentmail is the product publishing this leaderboard. Its own ranking is held to the same verification bar as every other entry.
• WalletConnect Pay — https://docs.reown.com/appkit/payments/overview. Documents 3 pre-execution checks: wallet screening, location check, identity screening. Explicitly states these "do not replace your own regulatory obligations."
• Coinbase Agentic Wallet CLI — https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome. Documents "Built-in OFAC compliance" for all transfers. Inherits Coinbase custody controls. Screen name / country scope not documented.
• Nevermined — https://nevermined.ai/blog/nevermined-unlocks-autonomous-agent-card-payments-with-x402-opening-a-new-market-for-publishers-digital-merchants. Routes agent card payments via Visa Intelligent Commerce + VGS. Compliance inherited from the card rail, not documented as a programmable sanctions API.
• Stripe Agent Toolkit — https://docs.stripe.com/connect/risk-management/best-practices. Stripe screens all accounts (merchants + connected accounts) against sanctions lists, but the Agent Toolkit itself exposes no per-call sanctions check for an agent's autonomous transaction. Built for fiat, not crypto-wallet OFAC.
• PayPal Agent Toolkit — https://developer.paypal.com/community/blog/enabling-agentic-payments/. PayPal's risk and compliance protocols run server-side. The Agent Toolkit (LangChain, OpenAI Agents SDK) does not document a programmable OFAC check for an agent's counterparty.
• Skyfire — https://skyfire.xyz/product/. Documents KYA (Know-Your-Agent) identity verification, but no public OFAC sanctions screening API for agent-paid wallets or names.
• Reown AppKit Payments — https://docs.reown.com/appkit/payments/overview. Reown's own feature matrix marks "KYC / AML / Sanction screening" as ❌ for the Reown SDK. Compliance is delegated to the integrator.
• Solana Agent Kit (SendAI) — https://github.com/sendaifun/solana-agent-kit. Open-source agent toolkit (60+ Solana actions). No sanctions / OFAC screening documented in the repository or README.

Frequently asked questions

Compare agentmail head-to-head

Want a deeper comparison than the leaderboard? These pages break down agentmail against the major enterprise sanctions providers feature-by-feature:

• agentmail vs Chainalysis
• agentmail vs Elliptic
• agentmail vs ComplyAdvantage
• agentmail vs Sumsub
• agentmail vs World-Check