Received 'dirty' USDT? Three ways USDT gets frozen

What dirty USDT is, and the three kinds of freeze

Every USDT transfer is public on the blockchain, so where money came from and which addresses it passed through can be traced afterwards. "Dirty" USDT is USDT with a scam victim's money, stolen assets or a sanctioned party somewhere in that trail. It looks exactly like any other USDT, and the problem usually surfaces only later, when someone files a report and investigators start following the funds.

If you get caught up in it, the freeze can land in one of three places. Use the table to work out which; terms such as escrow, release and appeal are explained in the P2P glossary.

Case 1: Tether blacklists your address

Tether issues USDT, and its smart contract keeps a blacklist. Section 8 of Tether's Terms (version of February 26, 2026) says that if Tether determines or suspects a prohibited use, it may report to governments and law enforcement without telling you, freeze or confiscate Tether Tokens, and blacklist any address that holds Tether Tokens. The freeze wording covers tokens in "any Tether Tokens Wallet or other User Wallet", not only Tether's own customers.

The blacklist works on-chain: once an address is on it, the USDT inside cannot be moved. It makes no difference whether the address belongs to an exchange or to a wallet whose private key you hold, because the restriction lives in the USDT contract, not in the wallet app. The law enforcement section of Tether's legal page says requests to freeze addresses should come with appropriate legal process, so the usual path is an investigation that leads an agency to ask Tether.

It happens at scale. In a November 2, 2026 announcement Tether said it works with more than 360 law enforcement agencies in 73 countries and has frozen more than 7 billion USD₮ in secondary-market addresses. Data from the security firm BlockSec, reported by Cointelegraph on May 8, 2026, counted 4,163 blacklisted addresses on Ethereum and Tron in 2025 holding about $1.26 billion in USDT; more than half of that was destroyed through the contract's destroyBlackFunds function, and only 3.6% of blacklisted addresses were later removed. These figures come from Tether and a third party, not an independent audit.

The blacklist targets specific addresses. Receiving USDT from an address that is later blacklisted does not automatically freeze yours, but the trail is public, and if investigators decide your address is involved they can ask Tether to freeze it too. For most people the more likely outcome is that the deposit gets stopped by an exchange's checks, which is case 2.

How to check whether an address is blacklisted

The Tron USDT contract (TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t) has verified source code on Tronscan, including two read-only queries: isBlackListed and getBlackListStatus. Read-only queries need no wallet connection and cost nothing.

1. Open the USDT contract on Tronscan and check that the address is TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t and the token is Tether USD (USDT).
2. Open the Contract tab, then Read Contract. Do not use Write Contract, and there is no need to connect a wallet.
3. Expand isBlackListed (or getBlackListStatus), paste the Tron address and press Call.
4. true means the address is on the blacklist; false means it is not at the moment you checked.

• The Ethereum USDT contract (0xdAC17F958D2ee523a2206206994597C13D831ec7) has the same isBlackListed and getBlackListStatus queries, which you can run the same way on Etherscan.
• Use this to check your own address or one you are about to send to or receive from. A false result does not mean the money is clean, only that the address is not blacklisted right now.
• If your own address comes back true, go to the section on what to do once you are frozen, and send nothing more to it.

Case 2: an exchange holds your deposit or account

Exchanges do not wait for Tether; they run their own anti-money-laundering checks. If USDT you deposit is linked to scam, theft or sanctioned addresses, or you traded with an account under investigation, the exchange may hold the funds, restrict features and ask you to explain where the money came from.

Binance's P2P User Transaction Policy (updated May 12, 2026) says that where fraud or high-risk transfers are suspected, the platform may act on the trading, withdrawal or all P2P features of the accounts involved; that users must help provide risk-control evidence when anti-money-laundering alerts are triggered; and that users who let funds they know, or can reasonably infer, are illegal enter other users' accounts may have features disabled permanently.

If your P2P features are restricted, the Binance help center points you to the Restrictions Removal Center in the P2P User Center. It shows the reason, a case ID and the status; where an appeal is possible there is a Submit appeal button, and otherwise you are sent to Binance support. According to the help center, an appeal can ask for a verification video, a payment-proof video and your latest three months of bank statements showing your name, card number and earlier Binance transactions. For the wider appeal process, see how Binance P2P appeals work.

• Order numbers, the order chat and payment screenshots
• Transaction hashes (TxIDs) for the deposit or withdrawal, and the sending address
• Bank statements that match the orders
• A short, truthful note on where the money came from and how you know the other party

Case 3: the bank account you were paid into is frozen

The third kind of freeze happens on the cash side. The classic pattern: a scammer tells a victim to pay a P2P seller directly and keeps the USDT; the victim reports it, investigators follow the money, and the seller's bank account is frozen as well. Binance describes this in its help center, and our guide on what to do when your bank account is frozen after a P2P trade covers the full steps.

In this case your USDT is not frozen, your bank account is, and the exchange cannot release it. Binance's P2P policy says plainly that where a judicial authority freezes an account, the user should contact that authority, not the platform.

The single most important step is to stop using that account for trades straight away. In a case published by China's Supreme People's Procuratorate in 2022, a man supplied his own bank cards to a partner who traded USDT, and scam victims in several regions paid into those cards. Prosecutors found he should have known the money was criminal on two grounds together: the trades were always priced about 1% above the market, and the trading went on after he learned the cards had been judicially frozen. He was convicted of aiding criminal activity on information networks.

Already frozen? Do these things first

Whatever kind of freeze it is, the first steps are much the same. Take them in order rather than looking for a shortcut.

1. Stop sending to or from the affected address or account, and stop using the affected bank account for payments. USDT sent into a blacklisted address is stuck too.
2. Keep the evidence: order records, chat logs, payment screenshots, on-chain transaction hashes (TxIDs) and the sending address. Keep conversations in the platform's order chat and do not delete anything.
3. Use official channels only: the exchange's own support or appeal page for an exchange hold; for a bank freeze, ask the bank why and which authority asked for it, then contact that authority.
4. If you were scammed, report it to your local police quickly and give the case number to the exchange. Tether's law enforcement page is written for agencies and expects legal process with freeze requests, so as an individual you start with a police report.
5. When asked about the source of funds, answer truthfully with real documents. Do not invent a story.

What not to do

The most common mistake after a freeze is rushing to find someone to "fix" it, which tends to make the loss bigger or turns you from a bystander into a participant.

• Do not pay anyone who says they can unfreeze, "clean" or de-list your funds. The US Federal Trade Commission warns never to pay upfront for help getting money back, and says government agencies and legitimate organizations never charge for it.
• Do not buy so-called clean USDT. Sellers who promise coins that "will never be frozen" or sell below market are a well-known scam and can drag you into laundering. See common P2P scams and how to avoid them.
• Do not try to move funds out of a frozen address or account, and do not carry on trading from a new account or a new bank card.
• Do not settle a "refund" privately with the other party outside the platform, and do not delete chats.
• Do not trust direct messages from people claiming to be Binance support, Tether or the police. Contact support only inside the official app or website, and verify any law enforcement request through official channels.

How to lower the risk of receiving dirty USDT

You cannot rule it out, because you cannot see where the other side's money came from. What you can do is cut your exposure to doubtful funds and keep records that show you acted in good faith.

• Trade only through an exchange's P2P market, where the platform holds the seller's USDT in escrow during the order and both sides can appeal. Avoid private deals off the platform.
• Pick counterparties with many completed orders, a high completion rate and verified identity.
• Accept payment only from an account in the buyer's verified name and refuse third-party payments. Binance's P2P policy says buyers must not pay to a third-party account, and a seller who supplied third-party payment details bears the loss in a dispute.
• Be wary of prices far from the market: USDT much cheaper than elsewhere, or a buyer paying well above it, often means the money is bad. Compare with the live price on the rate pages, such as USDT to INR or USDT to KES, and see what the P2P premium is for the normal range.
• Only enter the payment reference the order page asks for, keep order numbers, chats and statements for every trade, and save screenshots of large ones.
• Know the rules where you live. P2P trading is restricted or banned in some places, including mainland China, where the CNY page is a price reference only.

Frequently asked questions