Say you accept a USDT payment and later find you can’t move it. That is a USDT freeze: Tether, the issuer, has added the address to the USDT blacklist, and the token contract now blocks every transfer out of it. You can still see the balance on-chain, but you can’t spend it. Freezes mostly follow hacks, scams, sanctions and requests from law enforcement. This guide explains how the Tether blacklist works, how to check whether an address is blacklisted before you deal with it, and what a freeze means for you in practice.
What the USDT blacklist is
USDT is a centralized stablecoin. Bitcoin has no central party that can stop a transfer, but USDT is issued by a company. On networks where Tether issues USDT directly, such as TRON and Ethereum, its smart contracts hold a list of blocked addresses that only the issuer can change.
Once an address is on that list, the contract refuses any USDT transfer from it. The owner still has the private key and can move other assets, such as TRX or ETH, but the USDT at that address is locked. In some cases the issuer can also destroy the frozen balance and reissue the same amount elsewhere. Circle’s USDC uses the same kind of mechanism, so the risk is not limited to Tether.
The blacklist only applies to tokens the issuer controls. Tether can freeze USDT, but it cannot freeze ETH, TRX or any other asset at the same address.
How Tether freezes USDT on TRON and Ethereum
On these networks, a freeze is an on-chain transaction sent to the USDT contract that adds an address to the blacklist. The address is public as soon as the transaction confirms, and the contract enforces the block on its own. The holder does not need to sign anything, and no exchange or wallet app is involved.
Pending freezes
Tether approves blacklist transactions through a multi-signature wallet. That means a freeze can be submitted but not yet executed on-chain, because it is still waiting for the required approvals. During that window the USDT can still move. Screening tools that watch for these submissions can warn you before the freeze takes effect. SafeON shows this state as a pending freeze.
The gap is not always short. When the Bitget exchange was hacked in September 2026, Decrypt reported that Circle blacklisted one of the attacker’s Ethereum wallets first, and Tether added the same address to the USDT blacklist about seven hours later, after a signer approved the transaction on its multisig.
Why addresses get blacklisted: hacks, scams and sanctions
Tether rarely publishes its reason for an individual freeze, but most cases fall into a few groups:
- Hacks and theft: addresses that receive funds stolen from a platform or a user. In the Bitget case, the frozen wallet held about 218,023 USDT and 99,990 USDC, according to the same Decrypt report. The report says the attacker appears to have swapped freezable stablecoins into ETH before the issuers acted, and no issuer can freeze ETH. Attackers often move fast for exactly this reason.
- Scams and fraud: addresses used for phishing, fake investment platforms and similar schemes.
- Law enforcement requests: Tether may freeze addresses linked to an investigation when official authorities ask it to.
- Sanctions: in December 2023 Tether announced a voluntary policy to freeze wallets of persons on the US OFAC Specially Designated Nationals (SDN) list, including addresses added to the list earlier, as Cointelegraph reported.
How to check if a USDT address is frozen
Check before you send or accept USDT, not afterwards. There are three practical ways:
- Use a blacklist checker. Paste the address into the USDT and USDC blacklist checker. It checks freeze status on TRON and Ethereum and shows whether a freeze is pending.
- Read the contract directly. The USDT contract has a public read function that returns an address’s blacklist status. You can call it through a block explorer for TRON or Ethereum. It is reliable, but it shows only the current state, not pending freezes or the history of the funds.
- Screen the address for risk. An address that is not blacklisted can still be one hop away from stolen or sanctioned funds. A full screening also looks at where the money came from. For TRON addresses specifically, see How to check a TRON (TRC20) address.
| What you check | What it tells you | What it misses |
|---|---|---|
| Blacklist status | Whether the USDT at the address can move right now | Future freezes and the source of funds |
| Pending freeze | A freeze has been submitted but not yet executed | Freezes that have not been submitted yet |
| Source-of-funds tracing | Exposure to hacks, mixers, scams or sanctioned entities over several hops | It cannot predict what the issuer will decide |
Received USDT from a risky address? What it means for you
A freeze applies to the blacklisted address, not to every address that has ever traded with it. If you received USDT from an address that is frozen later, your balance is not frozen automatically. There are still knock-on effects:
- Exchanges and payment services may flag or hold deposits that trace back to a blacklisted or high-risk source, and may ask you where the funds came from.
- If your own address received a large share of stolen or sanctioned funds, it can become a freeze target itself.
- USDT you send to an address that is already frozen is locked there along with the rest of its balance.
If your own address is frozen, any decision to release it rests only with the issuer, and usually goes through legal or law-enforcement channels. No third-party service can promise a release. Treat anyone who offers to unfreeze USDT for a fee as a likely scammer. Keep records of your transactions and the origin of your funds, and talk to a qualified professional before taking any legal step. SafeON is a detection and prevention tool: it cannot release or recover frozen funds. Read more about warning signs on the page on detecting and preventing USDT freezes.
How to avoid accepting frozen or high-risk USDT
No method brings the risk to zero, but this checklist cuts it down considerably:
- Screen the counterparty first: check blacklist status and run a risk screen before every P2P trade or large incoming payment.
- Look beyond the address: trace where the funds came from a few hops back, including mixers, stolen funds and sanctioned entities. Our guide to checking wallet risk before a deposit walks through the steps.
- Be wary of a good deal: an unusually good P2P price from an unknown counterparty is a common sign of dirty funds.
- Separate your wallets: receive from unknown sources into a dedicated address, so one problem does not lock all your holdings.
- Keep monitoring: add the addresses you deal with often to a watchlist, so you learn quickly if one is frozen or its risk rises.
Before your next transaction, check a wallet’s risk on SafeON.
FAQ
Can USDT be frozen in my own wallet?
Yes. A self-custody wallet does not protect you, because the freeze happens in the USDT contract, not in your wallet app. Tether can blacklist any address on networks where it issues USDT directly, such as TRON and Ethereum. Bridged versions of USDT on other chains follow their own issuer’s rules. Other assets at that address are not affected.
How do I check if a USDT address is blacklisted?
Enter the address into a blacklist checker, or read its status from the USDT contract through a block explorer. A checker that also tracks pending freezes and the source of funds gives you a fuller picture than the contract status alone.
Why does Tether freeze USDT?
Mainly to block funds linked to hacks, scams and sanctioned persons, and in response to requests from law enforcement. Tether does not usually publish its reason for each freeze.
Can frozen USDT be unfrozen?
Only the issuer can decide to remove an address from the blacklist, and this usually happens through legal or law-enforcement channels. No other company can guarantee a release, and offers of a paid unfreeze are a common scam.