TRM Labs integration overview

Overview

TRM Labs helps teams screen blockchain wallets and transactions for risks such as sanctions exposure and money laundering. Persona’s integration with TRM Labs brings on‑chain risk signals directly into your identity workflows so you can screen wallet addresses, submit transfers for monitoring, and manage alerts without switching tools.

By automating screening and syncing context between Persona and TRM Labs, fraud and compliance teams can reduce manual work, prioritize investigations based on risk, and accelerate decisioning.

Benefits

Unified Screening Workflows: Trigger wallet and transfer screening from Persona workflows and surface TRM results in context.

Real-Time Risk Signals: Leverage risk scores and indicators (e.g., Low, Medium, High, Severe) to route reviews and take action faster.

Streamlined Alert Management: List, retrieve, and update alerts so your teams can triage and resolve directly from Persona.

Reduced Manual Effort: Eliminate copy-paste and tool switching by orchestrating TRM Labs actions within Persona.

Integration Features

Key capabilities include:

• Wallet and Entity Screening: Screen blockchain addresses or entities to retrieve risk scores, indicators, and quick links to TRM Labs for deeper analysis.
• Transfer Monitoring: Submit transfers for screening and retrieve status, risk scores, and related alerts to inform case handling.
• Alert Lifecycle Updates: List alerts, review details, and update status or ownership to keep systems in sync.

Setting up the TRM Labs integration

Prerequisites

To set up the TRM Labs integration, ensure you have:

• Admin access to your TRM Labs account
• Necessary API permissions to access TRM Labs credentials

Setting up the TRM Labs Credentials

1. In the TRM Labs dashboard, navigate to your profile in the upper righthand corner > Configure Environment.
2. Click on API Tokens in the side navigation.
3. Create a new Client API token and copy the API key. Store the API key somewhere secure.
4. In the Persona dashboard, navigate to Integrations > Marketplace and click on TRM Labs.
5. Click Add Credential at the top of the page.
6. Enter a Nickname for Credential and click Continue.
7. Paste your TRM Labs API key when prompted, then save.
8. Test the credential (optional) to confirm connectivity.

Using the TRM Labs integration in a workflow

1. Create a new workflow, or open an existing workflow you’d like to update.
2. Add a new Action step > Integrations.
3. Select the TRM Labs integration and choose your TRM Labs credential.
4. Choose the desired operation (e.g. Submit addresses to be screened) and configure input fields.
5. Save and publish the workflow.

TRM Labs Operations Overview

In addition to syncing field values, Persona can submit screenings, retrieve transfer data, and manage alerts using TRM Labs’s API. These actions support seamless two-way workflows, letting teams manage investigations without switching platforms. See below for a comprehensive list of available Workflow Action steps and possible configurations for the TRM Labs integration:

Submit an entity to be screened

Screen a TRM Labs “entity” to get a consolidated view of risk across associated wallets or clusters. Results include a numerical risk score, a human-readable risk level (e.g., Low, Medium, High, Severe), risk indicators, and a direct link to view the entity in TRM Labs.

Configuration Steps:

• Provide values for required fields:
  • TRM URN (identifier of the entity to screen)

Submit addresses to be screened

Screen one or more blockchain addresses to retrieve risk scores, indicators, and activity metrics per address. Use this to automatically evaluate newly provided wallet addresses or to rescreen known addresses on a cadence. The output for this endpoint includes highest risk score/level, risk indicators, transaction counts/volumes, associated entities with category and risk level, chain, TRM app URL, Graph Visualizer URL, and timestamps.

Configuration Steps:

• Provide values for required fields (per address item):
  • Address (the wallet address to screen)
  • Chain (the blockchain network, e.g. Bitcoin, Ethereum)
• Optionally add:
  • External ID (your identifier to correlate screening requests)

Submit a transfer to be screened

Submit a cryptocurrency transfer for monitoring to assess risk before or after it’s processed. Route high-risk transfers for manual review using the risk level and indicators. This can automatically generate alerts when risk exceeds your thresholds and provides continuous status as the screening progresses. The output includes transfer UUID, screen status (Pending/Processing/Succeeded/Failed), risk score/level (populated when available), links to view in TRM Labs, and associated alerts when present.

Configuration Steps:

• Provide values for required fields:
  • Account External ID
  • Asset (e.g. BTC, ETH)
  • Asset Amount
  • Chain (e.g. bitcoin, ethereum)
  • Destination Address
  • External ID (your identifier for the transfer)
  • Fiat Value (fiat equivalent amount)
  • Onchain Reference (e.g. transaction hash)
  • Timestamp (transfer time)
  • Transfer Type (e.g. CRYPTO_WITHDRAWAL, CRYPTO_DEPOSIT)

Retrieve an existing transfer

Fetch full details for a previously submitted transfer to check current screening status, risk levels, and any associated alerts. This is useful for post-submit checks or to refresh context during an investigation.

Configuration Steps:

• Provide values for required fields:
  • Transfer UUID

Count transfers by processing status

Get a summary count of transfers grouped by their current processing status (e.g., Pending, Processing, Succeeded, Failed). Use this to monitor workload, SLA adherence, or backlog at a glance.

Configuration Steps:

• Optionally add:
  • Submitted At (Greater Than or Equal)
  • Submitted At (Less Than or Equal)

List alerts

Retrieve a list of alerts generated by transaction monitoring. Filter by status, validity, closed reason, or risk score to support triage queues and reporting.

Configuration Steps:

• Optionally add:
  • Closed Reason (Flagged, Dismissed)
  • Is Valid (true/false)
  • Status (Open, Closed)
  • Risk Score Level (1–15)
  • Limit and Offset (pagination)

Retrieve an alert

Fetch details for a specific alert to see the triggering rule, current status, ownership, and linked transfer context. Use this for audit trails, reviewer handoffs, or automated follow-ups.

Configuration Steps:

• Provide values for required fields:
  • Alert UUID

Update an alert

Update an alert’s status, ownership, or closure details to reflect investigation outcomes. This keeps TRM Labs aligned with your internal process and reduces manual back-and-forth.

Configuration Steps:

• Provide values for required fields:
  • Updated By User Email
• Optionally add:
  • Status (Open, Closed)
  • Closed Reason (e.g., flagged or dismissed)
  • Closed Justification (explanation)
  • Owner Email

FAQs

What can I screen with this integration?

You can screen individual addresses, entities (e.g., clusters), and cryptocurrency transfers. Results include risk scores/levels and risk indicators, plus links to view details in TRM Labs.

How do I view results in TRM Labs?

Most responses include a TRM app URL. Use that link to open the corresponding entity, address, transfer, or alert in TRM Labs for deeper analysis.

Can I route cases based on risk level?

Yes. Use the returned risk score/level and indicators in Workflow conditions to escalate, assign reviewers, or request more information.

What blockchain networks and assets are supported?

TRM Labs supports a wide breadth of assets as well. For the most up-to-date information, see TRM Labs’ API documentation for supported blockchains and supported assets. Additionally, you can refer to your TRM Labs environment for the full set of supported chains and assets.