T3 Financial Crime Unit: Tether, TRON and TRM Labs froze US$300 million in USDT; what changes for those who receive it

A good part of the world's USDT circulates on the TRON network, where transfers are fast and cheap. The same feature attracts criminals, and the industry's response was to create its own enforcement unit. The T3 Financial Crime Unit (T3 FCU) is a partnership between Tether, the issuer of USDT, TRON and TRM Labs, a blockchain analytics firm. In its October 2025 update, the unit reported having frozen about US$300 million in illicit assets in its first year of operation.

For anyone working with international payments in USDT, the unit matters for a practical reason: the money from a legitimate payment can end up blocked if it passes through an address flagged as illicit. Understanding how the machinery works helps avoid the problem. To learn about the network itself, see What the TRON network and the TRC-20 standard are.

Total frozen by the T3 FCU in its first year (Oct 2025 announcement)

US$300M

Milestone announced in January 2025, including US$3 million linked to North Korean networks

US$100M

Law enforcement agencies Tether says it works with (Paolo Ardoino, Oct 2025)

280+

Continents with investigations supported by the unit

5

What the T3 FCU is and who is part of it

The T3 FCU began operating in August 2024, according to TRM Labs, and was presented publicly on September 10, weeks after it started. That is why part of the press dates the launch to September. Each party plays a different role:

The unit monitors transactions and supports authorities in large-scale seizures, such as the proceeds of investment fraud (so-called "pig butchering") and European organized crime networks. In August 2025, it passed US$250 million and created T3+, a program that brings exchanges and other players into real-time coordination with law enforcement. Binance was the first participant.

What has been frozen so far

1. Aug. 2024Tether, TRON and TRM Labs launch the T3 FCU to act on USDT on the TRON network. The public announcement comes on September 10, with more than US$12 million already frozen.
2. Jan. 2025The unit announces more than US$100 million in frozen assets, across five continents, and more than US$3 billion in monitored volume.
3. Aug. 2025Passes US$250 million and launches the T3+ program of collaborators.
4. Sept. 2025Brazil's Federal Police launch Operation Lusocoin, against a money laundering network; it is the sixth Brazilian investigation to use T3, according to TRM Labs.
5. Oct. 2025The unit reaches about US$300 million frozen.

The figures are released by the partnership itself and should therefore be read as self-reported numbers. TRM Labs describes Lusocoin as a Federal Police investigation in Rio Grande do Sul into a network suspected of moving more than R$50 billion, with court-ordered freezes above R$3 billion. The case shows that cooperation with the unit already reaches investigations in Brazil.

How a USDT freeze works

USDT is a token issued by a company, and the smart contract that defines it gives Tether the power to put an address on a blocklist. While the address is listed, it can neither send nor receive USDT, and the balance stays frozen. The block is recorded on the blockchain, and anyone can see the event on an explorer such as Tronscan. In seizure cases, Tether can also destroy the blocked balance and reissue the amount to authorities or victims.

1. An authority or transaction monitoring flags an address linked to a scam, money laundering or sanctions.
2. TRM Labs traces the origin and destination of the funds and supports the documentation of the case.
3. Tether evaluates the request and, if it agrees, blocks the address in the USDT contract.
4. The balance stays frozen until there is a court or administrative decision on its fate.

The same logic explains why USDT is different from a cryptocurrency without an issuer, such as bitcoin: the asset is traceable and, to some extent, controllable. That is why USDT, although it operates outside the banking system, is not anonymous. The traceability of transactions applies to authorities and also to the recipient.

What this means for anyone receiving a payment

A freeze hits criminals first, but it can reach people who receive funds from a tainted source without knowing it. A supplier who receives USDT from an address that passed through a sanctioned wallet may have the balance blocked, even with no connection to the crime. In the sources consulted, there is no standardized public appeal process.

It is also worth remembering the other side of the topic: the scams that move USDT, such as address poisoning (see how it works), take advantage precisely of the speed of the TRON network. The unit helps recover part of the value, but a freeze is the exception, and prevention remains the main control.

• TRON
• Tether
• USDT
• TRC-20
• Compliance
• Cybersecurity
• AML