# Surveillance

> Monitor tracked wallets, token movements, and surveillance event logs.

- URL: https://docs.sumo.trade/reporting/surveillance
- Markdown: https://docs.sumo.trade/reporting/surveillance.md
- Docs index: https://docs.sumo.trade/llms.txt

> **Video: Surveillance Deep Dive**
>
> A walkthrough of tracked wallets, linked-wallet discovery, event logs, filters, and surveillance workflows.
>
> https://www.youtube.com/watch?v=5cna696-Wdk

![Surveillance table with tracked wallet groups, balances, linked wallets, and deltas](/images/wallet-tracking.png)

Surveillance monitors external project-related wallets such as founder, partner, or community wallets. It tracks token balances, follows token outflows into newly discovered wallets, and records the movements that matter for your profile.

## Surveillance Tab

The **Surveillance** tab shows the live tracking state for every configured wallet group:

| Column                   | Description                                                                          |
| ------------------------ | ------------------------------------------------------------------------------------ |
| **Group**                | The wallet group being monitored, such as founders, partners, or market participants |
| **Label**                | Optional label for the specific tracked wallet                                       |
| **Wallet**               | Truncated wallet address with copy button                                            |
| **Snapshot**             | Baseline snapshot time for the tracked wallet                                        |
| **Original**             | Token balance when tracking began (baseline)                                         |
| **Current**              | Live token balance                                                                   |
| **Counter Asset Amount** | Current value in the profile's counter asset when available                          |
| **Linked Wallets**       | Number of child wallets discovered via outflow follows                               |
| **Delta**                | Change from original balance (negative = tokens left the wallet)                     |

The total row summarizes the original balance, current balance, and net delta across all tracked wallets.

### Tracking Toggle

The **Tracking On/Off** toggle enables or disables surveillance for the profile. When enabled, Sumo refreshes balances and activity automatically.

### Reconcile

Click **Reconcile** to manually trigger a balance refresh and replay recent wallet activity. Use this when you want an immediate update without waiting for the next automatic refresh.

### Edit

Click **Edit** to add, remove, or rename tracked wallet groups and root wallet addresses. Changes take effect on the next poll or reconcile.

### CSV Export

The Wallet Tracking tab has its own **CSV** button that downloads the tracking table - group, label, wallet, snapshot, original and current balances, counter-asset gained, linked wallet count, and delta - using your browser's timezone for timestamps. This is separate from the Event Logs CSV export below.

## Event Logs Tab

![Surveillance Event Logs table with event types, wallet groups, token amounts, and transaction links](/images/surveillance-event-logs.png)

The **Event Logs** tab shows a chronological history of detected surveillance events:

| Column                   | Description                                                                                |
| ------------------------ | ------------------------------------------------------------------------------------------ |
| **Date**                 | When the event was detected                                                                |
| **Event**                | Type of movement, such as Inflow, Outflow, Buy, Sell, Internal, Sold Out, or Outflowed Out |
| **Group**                | Wallet group associated with the event                                                     |
| **Label**                | Optional wallet label                                                                      |
| **Wallet**               | Wallet address involved in the event                                                       |
| **Tokens**               | Number of tokens moved                                                                     |
| **Counter Asset Amount** | Counter asset value when available                                                         |
| **Tx**                   | Link to the transaction on the block explorer                                              |

### Event Types

| Event             | Meaning                                                               |
| ----------------- | --------------------------------------------------------------------- |
| **Inflow**        | Tokens received from an external wallet                               |
| **Outflow**       | Tokens sent to another wallet (which is then auto-followed)           |
| **Internal**      | Movement between wallets that are already part of the tracked tree    |
| **Buy**           | Tokens purchased via a DEX (detected by contract/program interaction) |
| **Sell**          | Tokens sold via a DEX                                                 |
| **Outflowed Out** | Wallet fully emptied via outflow — tracking stops for that wallet     |
| **Sold Out**      | Wallet fully emptied via sell — tracking stops for that wallet        |

### Filtering & Sorting

* **Event type filter** — Filter by specific event types (All, Inflow, Outflow, Buy, Sell, etc.)
* **Search** — Search by transaction signature
* **Sort** — Toggle between Recent (newest first) and Oldest (oldest first)

### CSV Export

Click the **CSV** button to download your event logs as a CSV file for external analysis or record keeping.

## How Tracking Works

1. **Add root wallets** — Configure wallet groups with one or more root addresses to watch
2. **Automatic follow** — When a tracked wallet sends tokens to a new address, that address is automatically added to the tracking tree
3. **Custodial detection** — Known exchange and custodial addresses are detected and excluded from follow chains to avoid noise
4. **Terminal states** — Wallets that fully sell or outflow their tokens are marked as Sold Out or Outflowed Out and stop being actively tracked

## Supported Chains

| Chain               | Network |
| ------------------- | ------- |
| **Solana**          | Mainnet |
| **Ethereum**        | Mainnet |
| **Base**            | Mainnet |
| **BNB Chain**       | Mainnet |
| **Stable**          | Mainnet |
| **Robinhood Chain** | Mainnet |

Wallet tracking is not available for Tron profiles.

## Notifications

Surveillance events, except internal movements, generate in-app notifications and best-effort Telegram alerts to linked project groups. See [Profile Notifications](/reporting/profile-notifications) for notification settings.

## Telegram Commands

In a linked Telegram group, `/surveillance` sends a rendered overview image with total wallets tracked, total counter-asset gained, net supply sold, and the top tracked wallets ranked by supply sold. Use `/surveillance details` for the full per-wallet table. See [Telegram Bot](/integrations/telegram-bot) for setup.

- [Live Trading](/reporting/live-trading): Monitor trades in real-time as they happen on-chain.

- [Trade Logs](/reporting/trade-logs): Browse the full history of executed trades.