TD2v5dCoxoqN6uTZDLi31RW9vRV45zWUMq

Confirmed facts

• Chain: Tron (TRC-20)
• Address: TD2v5dCoxoqN6uTZDLi31RW9vRV45zWUMq
• Asset: USDT (Tether USD)
• Issuer blacklist event: Tether added this address to its blacklist on 2026-08-13 (transaction ebe64f4a...). The observed USDT balance at that time was 159,117.357461 USDT.
• The on-chain status is confirmed by the issuer's transparency page and TronScan transaction data.

A security scan performed on 2026-08-25 rated the wallet CRITICAL (risk score 100). The scan identified:

• A direct match on the issuer blacklist (Tether's USDT contract on Tron).
• A rapid pass-through: 21,554.378461 USDT arrived and left within 8 minutes, representing 7.18% of tracked inbound volume.

Evidence-weighted interpretation

The freeze event is the most significant fact. Tether's AddedBlackList action is a definitive confirmation that the issuer considers this address ineligible to hold or transact USDT. Such blacklists are typically applied in response to suspected illicit activity, sanctions exposure, or compliance failures, but the specific trigger here is not public.

A notable pattern is the rapid pass-through of ~21.5k USDT, which suggests a possible role as a temporary relay or mixing point. The address also received and sent funds to multiple counterparties, but none are labelled or sanctioned in the available data. The flow to and from TDQRB2Mteiq1XxA21zfRo6uzD5Dmw2E2fA is recurring, with ~70k out and ~60k in over time.

Source-of-funds review

The tracked inbound transfers (USDT) came from several addresses, the largest being:

• TMjQVSaA7pRx6EwqAd1Mcb3BmvXNYW75F5 – 140,461 USDT (6 transactions)
• TDQRB2Mteiq1XxA21zfRo6uzD5Dmw2E2fA – 136,580 USDT (6 transactions)
• TJtEySoVuAkk3xwXghLgrUFVKSMq9JkE18 – 21,554.378461 USDT (1 transaction)
• Small amounts from a few other addresses.

None of these counterparties carry any public label or sanctions match, so the ultimate origin of the funds is unknown. The pattern is consistent with a wallet that received substantial USDT and then distributed most of it, retaining a large balance at freeze time. No evidence points to a specific exchange, broker, or jurisdiction.

Risk context

• Issuer blacklist is the dominant risk: assets in this wallet are effectively frozen; they cannot be moved or used through normal channels.
• Critical scan score is driven by the direct blacklist match.
• The rapid pass-through raises suspicion of transient fund routing, which is often seen in laundering or fraud chains.
• Lack of attribution means the wallet could be linked to a variety of risk profiles—no conclusion on the nature of the underlying activity is possible from the available evidence.

Caveats

• The freeze reason is not disclosed by Tether; the evidence suggests but does not prove any specific violation.
• The transaction history reviewed is limited to USDT transfers from 2026-01-04 to 2026-08-01; other tokens or native TRX movements were not analyzed.
• Counterparty addresses are not verified; they could be related to the same entity or to legitimate businesses.
• The source of funds summary is a description of observed flows, not a verified attribution of ownership or origin.