TRM Labs Partners

"We are pleased to contribute WhoisXML API's Internet intelligence to the data ecosystem supporting TRM Labs' platform. This collaboration reflects the value of bringing together trusted data sources to give users broader context and support more informed investigations."

"Fighting cybercrime is a team sport, and we're excited to join forces with TRM Labs. By bringing together our unique intelligence capabilities and expertise, we can connect the dots across the threat landscape, uncover new opportunities to disrupt bad actors, and make life a little harder for cybercriminals."

"Investigators are most effective when they can connect information quickly and confidently. We are proud to work alongside TRM to help customers strengthen their investigative workflows with trusted publicly available information."

"Following the money is only part of the picture. Investigators also need to understand the people, organizations and risks behind it. We're proud to partner with TRM in providing intelligence that helps teams make those connections and move investigations forward."

"We're proud to see APIVoid's threat intelligence powering TRM's platform. Our goal has always been to make reliable threat data easy to integrate, and this partnership helps more organizations spot and stop online threats before they cause harm."

"Corporate ownership and transaction risk are two halves of the same problem, and until now most institutions have had to solve them with separate vendors and separate workflows. Pairing TRM's transaction intelligence with AsiaVerify's trusted UBO and corporate registry data gives compliance teams a single, defensible view of who they're doing business with and what that business is doing, across every jurisdiction we cover in Asia-Pacific."

"For more than five years, Bitquery has supplied TRM with on-chain data across the major blockchains, including transactions, transfers and balances, both live and historical. Accurate data is the base of every investigation, and we're glad to support TRM as it launches this platform"

"CACI's DarkBlue Intelligence Suite holds more than 4 billion structured records collected first-party by an in-house team (no data is bought from third-party brokers). The records come from dark web sites and markets, Tor, I2P, Hyphanet, and ZeroNet, leaked datasets, and near-real-time communications such as forums, paste sites, and Telegram. Every record is parsed for selectors, including 3.6 million Bitcoin, Ethereum, Monero, Litecoin, Tron, Solana, and Toncoin addresses, and DarkBlue flags addresses that match the OFAC sanctions list. Those addresses sit next to the emails, usernames, phone numbers, PGP keys, and vendor names that appear with them. That gives TRM's customers the off-chain context blockchain tracing alone cannot provide: who advertised a wallet, on which market or channel, what they were selling, and which other identities they used."

"Crypto settles in seconds, and sanctions evaders and criminal networks take advantage of every hour a watchlist is out of date," said Peter Piatetsky, CEO of Castellum.AI. "When risk data updates in real time, compliance teams and law enforcement stop working from yesterday's information. By integrating Castellum.AI's global risk data into Ardence, investigators have what they need to identify crypto-enabled crime and stop it in real time."

"Illicit finance activities rarely start on-chain. It begins in public conversations that promote scams, recruit victims, and coordinate activity across social platforms. By pairing Exorde Labs real-time, multilingual social data with 'Ardence', TRM Labs intelligence platform. Investigators can connect those early signals to on-chain activity and act to protect people and funds before they move."

"To catch sophisticated threat actors, investigators must bridge the gap between blockchain activity and cybercriminal identity. Partnering with TRM arms analysts with real-time visibility into high-profile cybercrime networks, drastically accelerating complex investigations from start to finish"

"Trust in digital asset markets starts with trusted data. Customers need reliable market data and reference prices they can depend on for compliance & reporting, NAV calculation, valuing losses from hacks and exploits for claims and every decision where accuracy matters. Kaiko brings institutional-grade pricing, market data and analytics; TRM Labs brings deep investigative and surveillance intelligence. Together, we give customers the full picture: not just what happened on-chain, but what it's worth and why it matters."

"Every scam and every cyber campaign needs infrastructure before it needs a victim: domains, servers, certificates, delivery paths. Malanta surfaces that staging layer as Pre-Attack Intelligence, so an investigator can start from one lead in Ardence and see the operation taking shape behind it."

"TRM's team was precise from the first call about what our data had to do inside Ardence, which is rarer than it sounds and makes for a far better integration. Good to see it in a live product."

"Phishing and fraud don't stop at a single website or wallet; they move across domains, social platforms, and much more. By combining PhishFort's phishing expertise with TRM Labs' blockchain intelligence, we can follow threats from the first fake login page to the funds they try to steal, and shut them down faster. Together, we're making it harder for scammers to profit and easier for users to trust the ecosystem."

"When it comes to digital investigations, speed and scale are usually a trade-off. Combined with TRM, we got both. Shadow Nexus maintains one of the largest repositories of HBL (hacked, breached, and leaked) data in the world, and TRM was able to embed it directly into their investigative platform — fast enough to enrich reports in real time from our full corpus of data. The result is a materially deeper picture for investigators. What impressed me most is the thoroughness of the output when running a search from nothing more than a single identifier. As organizations continue to adopt this data, I think we're on the cusp of an 'unlocking' — questions that have gone unanswered or gone stale will finally have new data sources to answer them."

"Sigma7 is excited to partner with TRM Labs to continue delivering the threat intelligence data companies rely on for their risk management efforts. By combining TRM Labs' industry-leading blockchain intelligence with Sigma7's robust incident data, we can provide clients with deeper, more actionable insights to help them understand and navigate an evolving physical threat landscape."

"Infostealer logs are one of the most powerful and underused sources in modern investigations. When a suspect's device is compromised, the log can expose saved logins, autofill details and search history, exactly the evidence that connects an anonymous online identity to a real person. For investigators working the most serious cases, a single record can be the breakthrough that leads to an arrest, an asset seizure or the dismantling of an entire criminal network."

"The mission is bigger than any single technology or data set. Partnering with TRM Labs brings together complementary capabilities that help turn complexity into clarity and intelligence into action. Ultimately, it's about giving our customers better context, faster insight, and greater confidence in the decisions they make."

"Crime that shows up on-chain almost always starts somewhere in the open, in communities and conversations most tools cannot see. Working with TRM means investigators can follow that thread in one place, from the activity on-chain to the networks behind it. We surface the signal; they turn it into action that protects people."

"Criminal IP was built to give security and investigative teams clear visibility into the internet infrastructure behind threats. By making this data available through TRM's Ardence platform, we will help more organizations act on it within the workflows they already rely on. We are pleased to partner with TRM Labs and look forward to supporting Ardence's customers."

"Compliance teams can't afford blind spots. By bringing AML Ranger's sanctions, PEP and adverse media data into TRM's platform, we're helping compliance specialists see the full picture of their clients faster and with more confidence."

"Bitsight brings deep, continuously updated intelligence on threat actors, vulnerabilities and compromised infrastructure into the investigative workflow. By integrating that intelligence with TRM Labs, investigators can build a more complete picture of a risk, uncover critical connections and accelerate investigations."

"Investigators can only act on intelligence they trust. We build our sanctions, PEP and adverse media data directly from source and update that data often within minutes, which means TRM's users can see financial crime risk as it emerges rather than many days later. In today's highly connected, fast changing reality, criminals move money in seconds, and the teams chasing them need risk intelligence that keeps pace."

"Criminal operations depend on the connections investigators and defenders cannot see. TRM’s mission is one shared by Constella Intelligence: expose those connections and empower those who protect us to act. Constella Intelligence is proud to contribute identity intelligence to this launch, helping bring the people behind digital threats into focus."

"We’re delighted to be working with TRM Labs and to contribute CYJAX intelligence to its data ecosystem. Combining trusted cyber intelligence with TRM’s capabilities can help organisations build a more complete picture of risk across the digital asset landscape. We see significant potential in this collaboration and look forward to deepening the relationship."

"DarkOwl is delighted to participate in the launch of TRM’s Ardence platform. As a leading provider of blockchain intelligence and crypto compliance, TRM’s new all-source data platform will provide users with a very wide variety of signals and intelligence for their specific use case. DarkOwl’s darknet data perfectly complements this all-source data platform and provides deep insights into darknet activity."

"Many of the attacks that end in stolen or extorted crypto begin long before any funds move, with someone scanning and exploiting internet-facing systems. By integrating GreyNoise's internet scan and attack data into TRM's platform, investigators can connect that early infrastructure activity to the on-chain activity TRM traces, giving them a fuller picture of how an attack unfolded and who was behind it. We're proud to support TRM's mission of building a safer financial system by helping defenders see threats sooner and act on them with confidence."

"Risk rarely lives in a single dataset, and impactful financial investigations are collaborative by nature. That's why we're proud to partner with TRM Labs. OpenSanctions provides the data on sanctioned entities, their networks, and identifiers; TRM adds leading blockchain intelligence. Combined, they give compliance teams and investigators a more detailed picture."

"Every digital asset risk decision comes down to one question: who actually owns this business, and where's the proof? We power TRM’s platform with official registry source data, giving compliance teams data backed with provenance and lineage."

"Criminals exploit the gaps between data sources. Investigators need the ability to connect those dots. By bringing OSINT Industries’ data into TRM’s investigations platform, we can help teams move from a wallet or alias to meaningful leads on the people and networks behind it."

"Investigations live and die on fresh, verifiable information. Parallel's best-in-class deep web research now runs inside TRM's Ardence platform, so investigators can scour the open web and pull cited evidence intelligently within each case. We're working with TRM to help dramatically accelerate and strengthen cybercrime investigations in order to meet the scale of an AI-first web."

"Pipl's identity intelligence helps investigators answer who is really behind an account or transaction with confidence. We're proud to bring that intelligence to Ardence and support TRM Labs' mission of building a safer world for billions of people."

"PolySwarm are excited to partner with TRM on the launch of their new platform, Ardence by being part of the Ardence Data Network. Through Ardence, investigators can use PolySwarm’s intelligence to assess suspicious files and infrastructure, identify and classify malware, and uncover associated threat activity. PolySwarm’s technical, targeting and attribution intelligence can then be combined with other investigative data to connect individual indicators and activities to broader threats and potential actors, helping investigators and law enforcement better understand relationships, identify threats and determine the next steps for an investigation."

"Scamalytics helps investigators understand who is really behind an IP address: whether it's a genuine connection, a VPN or datacenter proxy, or a residential proxy, and whether its location matches the identity being presented. Our risk scores are built on confirmed fraud attempts reported in real time by a network of online services, so investigators work from evidence of actual fraud rather than assumptions. Placing that intelligence alongside the other signals they already rely on means they can connect the dots faster and reach confident conclusions."

"TRM is world-class at investigating suspicious activity and helping uncover bad actors. It’s been a privilege working alongside the TRM team to bring Sixtyfour’s research agents into Ardence, making our capabilities accessible directly within the investigative workflow. We’re excited to see investigators use Ardence to bring together research, intelligence and analysis as part of their daily work."

"Cyber investigations rarely rely on a single source of evidence. By combining SOCRadar’s visibility into threat actors, ransomware operations, dark web activity, and exposed infrastructure with TRM Labs’ blockchain intelligence, investigators can establish connections faster and build a more complete picture of malicious activity."

"Joining TRM’s Ardence platform is an exciting milestone for ThreatFabric. As fraud and financial crime continue to converge, organizations need access to actionable intelligence that bridges cyber threats and fraud prevention. We are excited to bring our unique expertise in mobile threats, scams, and fraud intelligence to the Ardence ecosystem and help organizations stay ahead of rapidly evolving threats."

"On-chain, money leaves a trail. Off-chain, infrastructure leaves one too. Every scam needs a domain, a server and a certificate, and Whisper maps all of it as one live graph of the internet. Inside TRM, an investigator can start from a single scam site and see the whole operation behind it: the hosting, the sister domains, the operator."

"TRM Labs’ customers can already follow the money through crypto wallets and transactions. Xapien adds the insight for the people and companies behind them, researched in minutes with every finding linked to its source. We’re excited to be part of this launch and to help TRM’s customers see the whole picture, from the money to the people moving it."

"Investigators need to understand the banks and payment networks at the other end of the trail. By bringing BankCheck's bank, payment and ownership data into TRM's Ardence platform, we help investigators connect illicit activity to the traditional financial system and see the institutions, relationships and sanctions exposure behind a payment."

"At Diligencia, we believe that access to reliable corporate information is essential to understanding the relationships behind business activity and making better-informed decisions. Our partnership with TRM Labs brings our specialist corporate intelligence and ownership data from across the Middle East, Africa and frontier markets into Ardence, helping investigators and financial institutions uncover corporate connections, navigate complex ownership structures and make more informed decisions in the fight against financial crime."

"Blockchain intelligence shows you where the money went. Identity intelligence tells you who moved it. Our partnership with TRM gives investigators a direct line from illicit transactions to the aliases and online accounts tied to them, and ultimately to the real people behind them, closing the attribution gap that has long held back crypto investigations."

"Partnering with TRM Labs bridges the gap between traditional threat intelligence and on-chain analytics. By integrating Flashpoint’s actionable insights into TRM’s industry-leading blockchain intelligence, we’re empowering our clients to trace threat actors seamlessly across both physical and digital ecosystems—enabling faster, more decisive action against complex cyber and financial crime."

"At Magnet, we believe investigators should be able to connect the dots across different sources of evidence and intelligence without unnecessary complexity. Working with TRM Labs as part of the Ardence ecosystem is an exciting opportunity to bring digital forensic capabilities into broader investigative workflows, helping teams uncover connections, accelerate investigations and make more informed decisions. We’re excited to be part of what TRM is building with Ardence."

"Our partnership with TRM Labs gives investigators a fuller picture of risk by combining on-chain intelligence with real-time sanctions, PEP, and watchlist screening. Investigators can link wallet activity to the people and entities behind it, quickly see when a counterparty appears on a global sanctions list, and move from alert to action faster. As illicit finance moves across both crypto and traditional rails, this combined view helps teams find exposure earlier and build stronger, defensible cases."

"We’re excited to partner with TRM Labs and integrate Smooth with Ardence as part of supporting a more connected investigative workflow. Bringing our technologies together helps investigators work seamlessly across the information they need, and we’re excited to continue building on the partnership as Ardence evolves."

"We are delighted for Webamon to partner with TRM Labs and to share our intelligence data with the broader community of TRM Labs customers and partners. This partnership enables Webamon to provide brand abuse, phishing and malicious campaign data directly to TRM’s users. Along with our Copilot autonomous hunting capability. This will help get real intelligence into the hands of investigators as they need it."