Escrow Wallet
Definition
A cryptocurrency address controlled by the marketplace that holds a buyer's payment until the buyer confirms receipt. Escrow wallets create an auditable on-chain record of every transaction on the platform, which becomes a primary evidence source when wallets are seized or traced through blockchain analytics.
- Controlled by
- The marketplace platform
- Function
- Holds buyer payment until receipt is confirmed
- Forensic value
- Auditable on-chain transaction record
- Access route
- Wallet seizure, blockchain analytics tracing
Common questions
Why is an escrow wallet a useful evidence source compared with a direct buyer-to-seller payment?+
Every payment routes through the platform's escrow address, so investigators can trace a single wallet's transaction history to reconstruct many buyer-seller transactions on that marketplace, rather than locating each pair of wallets separately.
Does seizing an escrow wallet's private key give investigators the full transaction history automatically?+
The on-chain ledger already records every transaction publicly. Seizing the private key gives control of remaining funds, while linking those transactions to real identities still requires blockchain analytics, exchange records or other corroborating evidence.
Related terms
- Blockchain Analytics
- The use of tools such as Chainalysis, Elliptic, or CipherTrace to trace cryptocurrency fund flows across a public ledger. Because most public...
- Bulletproof Hosting
- Hosting providers, typically in jurisdictions with weak law enforcement cooperation, that explicitly or implicitly ignore takedown requests and abuse complaints. Dark web...
- Mutual Legal Assistance Treaty (MLAT)
- A bilateral or multilateral treaty under which signatory states agree to assist each other in gathering evidence for criminal investigations. MLATs define...
- Onion Service
- A Tor-based server reachable only through the Tor network via a .onion address derived from the service's public key. The routing protocol...
- Operational Security (OPSEC)
- The set of practices a threat actor uses to prevent adversaries from identifying them or their infrastructure. In dark web investigations, OPSEC...