Systems and methods for monitoring and analyzing financial transactions on public distributed ledgers for suspicious and/or criminal activity

A system configured for monitoring and analyzing financial transactions on public distributed ledgers for suspicious and/or criminal activity, the system comprising:

• one or more hardware processors configured by machine-readable instructions to:
• obtain information regarding a set of financial transactions that are recorded on a public distributed ledger, wherein the public distributed ledger is a blockchain including linked blocks that store a registry of assets and transactions, wherein individual financial transactions in the set of financial transactions include transfers of amounts of cryptocurrencies, wherein the set of financial transactions includes a first set of addresses, wherein individual addresses in the first set of addresses identify individual user accounts on the blockchain, wherein a first individual recorded transaction includes a first transfer from a first sender address to a first receiver address, wherein the first sender address identifies a first sender account on the blockchain, wherein the first receiver address identifies a first receiver account on the blockchain, wherein a second individual recorded transaction includes a second transfer from a second sender address to a second receiver address, wherein the second sender address identifies a second sender account on the blockchain, and wherein the second receiver address identifies a second receiver account on the blockchain;
• create a transaction graph that represents the individual financial transactions and store the transaction graph in a database, wherein nodes represent the individual addresses, and wherein edges between nodes represent the individual financial transactions;
• access, through a network connection, public third-party information for a second set of addresses that includes one or both of the first sender address and/or the first receiver address, wherein the public third-party information originates from one or more public online sources that are external to the public distributed ledger;
• determine a correlation between a first portion of the public third-party information that pertains to one or both of the first sender address and the first sender address, wherein the first portion of the public third-party information originates from a first public online source that is external to the public distributed ledger, wherein the first portion of the public third-party information includes textual comments, and wherein labeling with the first label includes natural language processing of the textual comments;
• modify the transaction graph to represent the correlation;
• label one or more of the addresses in the first set of addresses with labels representing characteristics of the one or more financial transactions and/or the addresses, such that individual ones of the addresses in the first set of addresses either have been labeled or are unlabeled, and further such that the first sender address is labeled with a first label, wherein the first label represents a first characteristic of the first individual recorded transaction, wherein labeling with the first label is based on one or more of an entity, an activity, a platform, a correlation, and/or a product related to the first individual recorded transaction, and wherein one or both of the second sender address and/or the second receiver address are unlabeled so far;
• cluster one or more of the financial transactions and/or the addresses into a set of clusters that includes a first cluster, wherein clustering is based on associations of different addresses, wherein one or more addresses labeled with the first label are clustered into the first cluster with one or both of
• (i) the second sender address that is unlabeled, and/or
• (ii) the second receiver address that is unlabeled,
• wherein clustering into the first cluster is based on an association between one or more addresses labeled with the first label and one or both of the second sender address and/or the second receiver address, wherein the association is based on one or more of a financial transaction from the set of financial transactions and/or based on the public third-party information;
• assign levels of risk for suspicious and/or criminal activity to the first set of addresses that have been labeled with the first label, and to the second sender address and the second receiver address;
• assign levels of risk for suspicious and/or criminal activity to the financial transactions from the set of financial transactions, wherein assignment is based at least in part on a graph analysis of the transaction graph, wherein a first level of risk is assigned to the first individual recorded transaction and a second level of risk is assigned to the second individual recorded transaction, wherein assignment of the first level of risk is based on at least the first label, wherein assignment of the second level of risk is based on at least the assigned levels of risk of the second sender address and the second receiver address;
• and
• responsive to comparisons of the first level of risk and the second level of risk with a risk threshold level, report one or both of the first and/or second individual recorded transactions for suspicious and/or criminal activity.