THEeWVayXf5GEMAvwTaqCtvuY3uP1BYcbH

Confirmed facts

This wallet (THEeWVayXf5GEMAvwTaqCtvuY3uP1BYcbH) on the Tron network holds USDT and was placed on Tether's blacklist on 2026-08-11, according to an on-chain event. The freeze was recorded in transaction 954a52dfd709a96c27a841e1711251b140a3ff23a66e16a43da9f84779d39fd8. At the time, the wallet held 22,991.281441 USDT, worth approximately $22,991.

Scan data confirms a direct match with Tether's issuer blacklist (contract TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t). Additionally, the wallet sent 25,048.5 USDT in two transfers to address TD1MNTDrKb1EdieAyUYriwzrxKfLWqHsNf, which is itself blacklisted by Tether.

Evidence-weighted interpretation

The blacklist action appears to be linked to the wallet's interaction with a known blacklisted address. The 1-hop flow to TD1MNTDrKb1EdieAyUYriwzrxKfLWqHsNf occurred 17 days before the freeze, and that address is labeled "Sanctioned / blacklisted" with high confidence.

The wallet also shows rapid pass-through behavior: 25,019 USDT arrived and left within 16 minutes, which can indicate fund funneling or layering. Outbound concentration is extreme — over 100% of outbound volume goes to a single counterparty (likely the blacklisted address), which may indicate a deliberate transfer pattern.

These patterns, combined with the issuer freeze, point to probable links to sanctioned activity, though the exact reason for the blacklist remains undisclosed.

Source-of-funds review

Inbound transfers came from multiple unlabeled addresses. The largest funding source was THjuN657ZDFLJzwg2mLWT6h2hdC2gLE9hW with 68,953.57 USDT in three transfers. Other inflows include 70,796 USDT from TTx61Um4hTaMBVWXBnNi4dbC5dvUBNS2eP and 64,640 USDT from TRqiNf9ntNEYDHeVbesX1gtCqZzuyURMZZ. No verified origin, fiat on-ramp, or beneficial owner could be established from the data.

Risk context

This wallet is high-risk due to the issuer blacklist and proximity to a sanctioned/blacklisted address. Any interaction with it carries elevated compliance risk. The pattern of rapid pass-through and concentration suggests it may be an intermediary in a larger transfer chain. There is also fan-in/fan-out behavior, meaning it aggregates from many addresses and distributes to many, which is typical of higher-risk flows.

Caveats

The evidence is based on a limited on-chain window (February to August 2026) and does not capture all historical activity. Tether's blacklist decisions are not public in terms of rationale, so the precise reason could be a court order, sanctions compliance, or other regulatory action. No identity or jurisdiction could be attributed to this address, and the label "Sanctioned / blacklisted" on the counterparty is derived from issuer blacklist matching, not necessarily an official sanctions list. This analysis should not be used as a standalone legal determination.