TQhfhJS3p4jyFFEyQcSN2QtbYWZNQGRqWA

Case Overview

This wallet on the Tron network, identified as TQhfhJS3p4jyFFEyQcSN2QtbYWZNQGRqWA, holds USDT and has been directly blacklisted by Tether. The on-chain event AddedBlackList was recorded on September 10, 2026, freezing the wallet's USDT balance of 87.41. The wallet's risk profile is critical, driven by the issuer blacklist match and a one-hop connection to another blacklisted address.

Freeze Event Timeline

The freeze event occurred on September 10, 2026, at 18:27:12 UTC. Tether's blacklist mechanism added this address to its on-chain deny list, effectively freezing any USDT held. The transaction hash 0f7440700f524e6edf6ccef610feaf992afa5ad6f7858624e51a5c4e3832688c records the event. At that moment, the wallet held 87.41 USDT, a relatively small amount compared to its historical activity.

Possible Reasons

The direct blacklist match is the primary reason for the freeze, but the underlying trigger is not publicly documented. The wallet's interaction with TFHfaRVXpnacLB6JCXY1WMYGFYXyJ5vfju—an address itself flagged as sanctioned or blacklisted—is a notable risk factor. The wallet sent 1,704.04 USDT to that address across 7 transfers about 13 days before the freeze. Additionally, a rapid pass-through pattern was observed: 953 USDT arrived and 944.68 left within 20 minutes, which can be indicative of money movement or layering, though it may also be routine operational behavior. These factors, combined with the issuer's blacklist decision, suggest the freeze may be tied to the wallet's association with the blacklisted counterparty or other undisclosed compliance concerns.

Funds, Labels, and Counterparties

The wallet's funding sources are numerous, with the largest inflow from TJqwA7SoZnERE4zW5uDEiPkbz4B66h9TFj (16,827.71 USDT across 39 transactions). No labels or sanctions matches were found for the wallet itself, and no entity attribution is available. The only labeled counterparty is the blacklisted address TFHfaRVXpnacLB6JCXY1WMYGFYXyJ5vfju, which is categorized as "Sanctioned / blacklisted" with high confidence. This connection is a key risk indicator, but the exact nature of the relationship—whether it is a direct business link or a one-time transfer—is not established.

Reader Caveats

Blockchain analysis provides a partial view. The issuer's decision to freeze a wallet is often based on internal compliance reviews that are not publicly disclosed. The label on the counterparty may reflect either an issuer blacklist or a sanctions designation, and the distinction matters for legal interpretation. The wallet's high-throughput activity is not itself proof of wrongdoing, and the observed balance at freeze time is small. This report is based solely on the evidence provided and should not be used as a definitive legal or compliance conclusion.