Low fees and huge USDT volume have made TRON the go-to network for high-risk transfers.
A large share of scam- and laundering-linked USDT moves on TRC20 — and Tether carries out most of its freezes right here too.
Vanity addresses are generated to look like yours so they can trick you when you copy and paste. SafeON detects vanity clusters and fake tokens.
Most of Iran's Tether market flows over TRON; the SafeON report shows exposure to Iranian exchanges separately and transparently.
On TRON, USDT moves fast and cheaply, which is why it is the default for P2P trades, OTC deals and freelance payments. The same speed has a downside: once a transfer lands, it cannot be reversed. If the coins you receive are linked to a sanctioned address, a scam or stolen funds, the problem becomes yours. An exchange may hold your deposit, and Tether can freeze the address that holds the tokens.
An AML check on the sender's TRC20 address gives you a view of where the money comes from before you release goods, cash or a P2P order. You only paste a public address. You never share a private key or seed phrase, and you do not connect a wallet.
For a manual walkthrough, including what to look at on a block explorer, see our guide on how to check a TRON address.
Tether can blacklist a TRC20 address. After that, the USDT on it cannot be moved, and only Tether decides whether it is ever released. Two situations matter when you are about to get paid:
For a quick freeze-only lookup, use the USDT blacklist checker, and read what a USDT freeze is to understand how freezing works. SafeON shows the status; it cannot unfreeze or recover funds.
OFAC publishes some crypto addresses directly on its sanctions (SDN) list, and TRON addresses are among them. For example, the OFAC action of 14 August 2025 added the crypto exchange Grinex to the list with a TRX digital currency address among its identifiers.
A direct match is the clearest signal, but indirect exposure is easier to miss: your counterparty may have received funds from a sanctioned address one, two or more hops earlier. The check reports this exposure so you can see how close the link is. A small transfer several hops away is not the same as a wallet funded mostly from sanctioned sources, so always read the reasons, not only the number.
| Result | What it usually means | Practical next step |
|---|---|---|
| Low | No freeze, no sanctions exposure and no meaningful link to illicit sources found | Proceed with normal care and keep the report |
| Medium | Some exposure to risky sources, often indirect, or unusual behaviour patterns | Read the reasons, ask the counterparty about the source of funds, or start with a smaller amount |
| High | Frozen status, direct or close sanctions exposure, or strong links to scams, stolen funds or mixers | Do not accept payment from this address |
No check is a 100% guarantee. A low score means nothing risky was found at the time of the check, so re-check repeat counterparties before larger trades. Paid plans let you add addresses to a watchlist with alerts, including Telegram.
SafeON gives no legal advice and cannot release frozen USDT. Only Tether decides on freezing and unfreezing.
Both. TRX flows and every TRC20 token with a legitimate contract are analyzed; fake and spam tokens are deliberately ignored so they don't skew the result.
Up to 8 hops back, stopping at exchanges and applying a materiality threshold — so a minor, distant ancestor doesn't cause a false positive.
It doesn't change anything, but TRON addresses are case-sensitive, so enter yours exactly as it is. If you see an address that looks very similar but isn't identical, you may have been targeted by address poisoning — check both.
Sign in to SafeON with a verified phone number or email and paste the public TRC20 address. You get a 0-100 risk score with reasons covering freeze status, sanctions exposure and source of funds; no check is a 100% guarantee, so treat it as one input to your decision.
Tether can blacklist a TRON address so the USDT held on it can no longer be moved. The freeze applies to USDT on that address, and only Tether decides whether it is lifted.
Yes. The Free plan includes one check with a detailed PDF report after you sign in with a verified phone number or email; paid plans add more checks and wallet monitoring.
Your address then has exposure to sanctioned funds, and exchanges may hold or review deposits that come from it. SafeON shows this exposure but gives no legal advice and cannot clean or recover funds.
No. SafeON cannot unfreeze, release or recover funds; only Tether decides on freezing and unfreezing.