TFG4wMDudBcja4a6DhEE4BVLVqarBCpmZd

Confirmed facts

This wallet TFG4wMDudBcja4a6DhEE4BVLVqarBCpmZd on the Tron network holds USDT (Tether USD) and was added to Tether's blacklist on 17 August 2026. The freeze event is recorded as AddedBlackList with a transaction hash e52e6d58f4933492a89258eb7e6625a03cfccbfda7c249f00f102016341fb3cc. At the time of the freeze, the wallet held 17,506.75 USDT.

A security scan conducted on 25 August 2026 confirmed a direct issuer blacklist match on-chain for the USDT contract TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t. The overall risk was rated critical. The scan also flagged a rapid pass-through pattern: 299,993 USDT arrived and 300,000 left within 57 minutes, representing 7.03% of tracked inbound volume. Additionally, the wallet exhibited a fan-in/fan-out pattern, aggregating and distributing funds to many counterparties.

Evidence-weighted interpretation

The direct blacklist match is the strongest signal that Tether froze this address for a compliance or security reason. While the specific reason is not public, the on-chain behavior contributes to a high-risk profile. The rapid pass-through of nearly $300,000 in under an hour suggests funds were moved quickly, a pattern often seen in layering or immediate onward transfer. The fan-in/fan-out structure—receiving from many addresses and sending to many others—is consistent with an intermediary or relayer role, which can be used to obfuscate fund origin.

It is possible the wallet was used for a legitimate high-volume service, but the freeze indicates that Tether determined it to be in violation of its policies. Without further labels or sanctions matches, the exact motive remains unconfirmed.

Source-of-funds review

No verified source of funds could be established. The scan identified TRHr6XLviDF7Qx3qiTQCZj6bS8T2GFsy9N as a funding source, but no label or attribution is available for that address. Many inbound transfers came from unlabeled addresses, and the largest inbound counterparty (TTMpfHLXZT5vQ8oZrpjLjfhREeNwcjBmFQ) sent over 1.17 million USDT. The overall pattern suggests the wallet aggregated funds from multiple sources, but the original economic activity remains unknown.

Risk context

Any counterparty that transacted with this address may be exposed to tainted USDT. Because the wallet is on Tether's blacklist, any remaining USDT is frozen and cannot be spent. For compliance teams, this address should be treated as high risk; interactions with it may warrant enhanced due diligence. The rapid movement of funds and the fan-in/out structure also increase the likelihood that this wallet was used as a transit point, potentially linking it to other high-risk entities.

Caveats

The evidence presented here is based on on-chain data and a scan performed on 25 August 2026. It is not a complete history of the wallet's activity. Tether does not publicly disclose the specific reasons for adding an address to its blacklist, so the freeze rationale is inferred from observable patterns. The absence of labels or sanctions matches does not rule out illicit activity, nor does it confirm that all transactions were illegitimate. This analysis is provided for informational purposes and should not be considered legal advice.