TFvoK1zJsZ25TCyqrvaE9d27r7AjT9H3Dh

What the issuer action shows

Tether added Tron address TFvoK1zJsZ25TCyqrvaE9d27r7AjT9H3Dh to the USDT blacklist on September 3, 2026. The on-chain event is recorded as AddBlackList on the Tether USD contract at TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t. At that moment the address held 19,742.717348 USDT.

A direct match on Tether's issuer blacklist means the wallet is either already unable to move those USDT or faces imminent freeze risk. Tether does not publish a reason in the freeze event itself, so the full operational intent behind the blacklisting is not confirmed on-chain. What the transaction history does provide is a set of risk signals worth reviewing.

Most likely freeze drivers

The strongest clue is a one-hop relationship with another address already flagged by the same attribution source. Scan data labels TKr4t3PPxdAd4BPxyF9wsxtYf4R9hwdRhu as sanctioned/issuer-blacklisted with 98% attribution confidence. The scan's one-hop exposure finding reports 647,109 USDT moved across 20 transfers between this wallet and that address, roughly 6.17% of tracked volume. That is the clearest risk-bearing link in the dataset.

A second signal is rapid pass-through behavior. The scan logged 160,000 USDT arriving and 200,000 USDT leaving within 45 minutes, a pattern often associated with relay or transit wallets. There is no verified memo or counterparty label explaining the purpose of those transfers. The likely picture is that the freeze came after Tether identified this address as connected to a blacklisted counterparty, but the exact trigger remains unconfirmed.

Funds and counterparties

Tracked inflows to this address are highly fragmented. The largest inbound counterparty is TFkykEv67fLAofVMsbEjvyvZ3KGYFbeunp, with about 1,015,049 USDT in 41 transfers, but the evidence does not attach a verified exchange, brokerage, or personal label to it. The second-largest inbound address is TG3ysZkQe41uE8onbfWBjcyY7AdtJzNvnL, with 512,905 USDT.

On the outbound side, the largest recipient is TBSyp74vtewrYKUVxY3WN8dnpyUzW8RFYX with about 1,027,477 USDT, followed by TM4kipsADPS53dydTgV2axq82QHBXfzpCL with 899,424 USDT. No entity labels are available for these addresses. The scan's primary funding-source field points to TB7P5SDQtshaWyzbxY8CdeuJVC6L6MX53o, also unattributed.

Signals for compliance teams

This wallet scores 100/100 critical risk on the scan. For compliance operations the key flags are:

• Direct Tether blacklist match for USDT on Tron.
• One-hop flow to and from a sanctioned/issuer-blacklisted address with 98% confidence.
• Rapid pass-through of large amounts within a short window.
• No verified owner, jurisdiction, or service attribution, which makes manual review harder.

A frozen or blacklisted Tron address should be treated as high-risk even if its final balance is small. The analytics value is in the link to the blacklisted counterparty and the mid-size transit volumes it moved.

Evidence and limits

The analysis is based on TRC20 transfer data from Trongrid covering 500 transfers and 208 counterparties between July 15 and September 3, 2026. The dataset is truncated at the transfer limit, so it is not a full ledger. Some flows, especially native TRX activity or USDT transfers beyond the 500-transfer window, are not included.

The labels used here, including sanctioned / blacklisted for the counterparty, come from the scan's sanctions-or-issuer-blacklist attribution source. That label may indicate issuer blacklist status rather than an official government sanctions designation. Tether's reason for adding this address is not publicly disclosed in the evidence.