Xinbi Guarantee’s OFAC TCO Designation Puts Tron USDT Wallet Screening Under Pressure

On September 9, 2026, OFAC designated Xinbi Guarantee (新币担保) as a significant transnational criminal organization under E.O. 13581, listed dozens of associated TRON (TRX) digital-currency addresses, and designated enablers SafeW Technology and Anwen Technology (XinbiPay / NewPay). The same day, DOJ’s Scam Center Strike Force said it restrained about $52 million in crypto tied to Xinbi’s vendor network and thanked Tether for assistance. For wallet, OTC, and exchange teams, that is not “just another SDN headline”—it is a live example of how sanctions listings, issuer freezes, and seizure restraints stack on the same Tron USDT rails.

This article is informational only. It is not legal advice and does not help anyone evade sanctions or freezes.

What Xinbi Guarantee actually is

Treasury’s press release (sb0624) describes Xinbi Guarantee as a Chinese-language illicit online marketplace that connects scam-center operators with merchants selling financial, technology, and other support services—including escrow-style settlement. OFAC says the marketplace has processed the equivalent of over $24 billion in digital assets and fiat since around 2022, mostly facilitating Southeast Asia activity, and that cybercriminals migrated toward Xinbi after FinCEN’s Huione-related actions.

The Secret Service / Scam Center Strike Force release adds operational texture: Xinbi ran primarily on Telegram, vendors advertised money-laundering and scam-site services, and Xinbi held funds until vendors completed work. On September 7, 2026, the U.S. District Court for the District of Columbia authorized seizure of those Telegram channels. The Strike Force also seized two Xinbi vendor-payment wallets holding about $12 million, and sought restraint of 47 additional wallets believed tied to laundering and vendors—driving the ~$52 million one-day restraint figure (cumulative Strike Force restraints cited at ~$938 million).

OFAC separately designated Singapore-based SafeW Technology (SafeW encrypted messaging app) and Cambodia-based Anwen Technology (XinbiPay / NewPay wallet) for materially assisting Xinbi. That matters for product risk reviews: screening only “Xinbi” name hits will miss the app/wallet stack that moved when law-enforcement pressure rose.

Why the TRON address list is necessary—but not enough

OFAC’s September 9 recent-actions notice lists Xinbi Guarantee with a large set of Digital Currency Address – TRX identifiers (for example TW5tokvhEfrb77z98Rc8HqbkzQJ6sxYtGX and TBKpozurdWLrbKkxtDqkveeq1dSB8Axj3V, among many others). Exact-match address screening against current SDN data remains a baseline control.

It is still incomplete by design. OFAC FAQ 562 states digital-currency address listings on the SDN List are not likely to be exhaustive. Parties who identify additional addresses associated with an SDN are expected to treat related property accordingly and report to OFAC. FreezeRadar’s earlier analysis of that FAQ is here: Why SDN Address Hits Are Necessary but Not Sufficient.

Practical takeaway for Tron USDT desks:

1. Ingest the September 9 Xinbi TRX set (and SafeW / Anwen entity names) into sanctions screening with exact-match rules.
2. Do not treat a clean SDN hash check as a freeze-risk all-clear—issuer blocklists, court restraints, and one-/two-hop exposure can still immobilize funds.
3. Refresh from primary SDN data files, not a one-off blog scrape. Address sets move when OFAC updates the list.

Issuer freezes vs OFAC blocking vs DOJ restraint

Three different mechanisms showed up in the same news cycle:

Secondary reporting alleged Tether froze on the order of ~$39M USDT across Tron addresses linked to the Xinbi network ahead of or around the crackdown. Treat that figure as secondary unless and until Tether or a primary filing confirms it; the primary public facts you can stand on are Treasury sb0624, OFAC’s September 9 list additions, and the Strike Force’s restraint/seizure narrative (including the explicit thanks to Tether).

That stack is why FreezeRadar models wallet freeze risk as more than SDN matching—see also USDT Tron sanctions risk and two-hop exposure analysis.

What wallet, OTC, and exchange teams should change this week

1. Entity + address screening refresh. Add Xinbi Guarantee / 新币担保 / Xinbi aliases, SafeW Technology, Anwen Technology, XinbiPay, and NewPay. Load the TRX addresses from OFAC’s September 9 notice into production screening. Confirm your vendor’s SDN feed actually included the TCO update (some delayed feeds lag recent-actions by hours to a day).

2. Separate “sanctions hit” from “issuer freeze” in ops runbooks. A customer wallet can be clean on SDN yet already blacklisted by Tether, or restrained under a warrant without appearing on the public SDN address set. Ticket templates should ask which layer fired.

3. Counterparty and hop review for Tron USDT. Scam-marketplace escrow patterns often involve short-lived vendor wallets. One-hop and two-hop graph checks against newly listed Xinbi addresses reduce “we only screened the deposit address” blind spots.

4. App / wallet product risk. SafeW and XinbiPay show how TCO marketplaces spin up private messaging and payment apps when Telegram and legacy rails get pressure. Compliance questionnaires for OTC counterparties should ask which messaging and payment apps they use for settlement coordination—not only which CEX they withdraw from.

5. Do not invent workarounds. If you hold property of a blocked person, the lawful path is OFAC reporting and licensing—not creative routing. This post does not describe evasion techniques.

How this differs from the Iran digital-asset sector determination

FreezeRadar’s E.O. 13902 Iran digital-asset sector post covered sectoral secondary-sanctions risk. Xinbi is different: a TCO marketplace designation with a concrete Tron address dump, coordinated DOJ restraints, and issuer cooperation on USDT rails. Both matter for screening, but the operational checklist above is closer to day-to-day freeze handling for OTC and wallet teams.

Short takeaway

Xinbi Guarantee’s September 9, 2026 OFAC TCO designation plus DOJ’s ~$52M restraint day is a primary-source stress test for Tron USDT controls: exact SDN address hits are mandatory, FAQ 562 says they are incomplete, and issuer freezes can move before or beside public listings. Update entity/address feeds, keep sanctions hits and issuer freezes as separate ops states, and re-score counterparties that settle on Tron USDT through informal escrow apps.

Scan a wallet for freeze and sanctions adjacency signals: /scan.

Sources

1. U.S. Department of the Treasury — Treasury Cracks Down on Transnational Criminal Organization Behind Cyber Scam Operations Targeting Americans (September 9, 2026, sb0624).
2. OFAC — Transnational Criminal Organizations Designations… (September 9, 2026 recent actions; Xinbi / SafeW / Anwen SDN additions and TRX addresses).
3. U.S. Secret Service / Scam Center Strike Force — Seizures of Chinese-Run Illicit Scammer Marketplace, and Restrains $52 Million… (September 9, 2026).
4. OFAC FAQ 562 — How will OFAC identify digital currency-related information on the SDN List?.
5. OFAC FAQ topic / SDN data guidance — Digital currency FAQs (screen current SDN data files; listings may not be exhaustive).