Can stolen USDT be frozen?

USDT is issued by a company, Tether, and its terms allow it to freeze Tether tokens held at an address where required by law or where it decides it is prudent to do so. USDC works the same way: Circle's terms say it may block addresses and freeze USDC associated with illegal activity, or when it receives a legal order from a valid government authority.

Native coins such as bitcoin, ether and TRX have no issuer that can freeze them. Once stolen USDT has been swapped into one of those, an issuer freeze is no longer possible, and the only remaining pressure point is an exchange or service that holds the funds.

In practice, law enforcement. Tether describes its ability to support law enforcement as following USDT through the blockchain and freezing it following appropriate legal proceedings, and its law-enforcement policy covers requests from agencies accompanied by legal process such as production orders, search warrants and subpoenas.

Large freezes have come out of joint investigations. In November 2023, Tether froze about $225 million in USDT linked to a pig-butchering syndicate after an investigation with OKX, the US Department of Justice, the US Secret Service and Chainalysis.

Tether's terms contain no process for an individual victim to request a freeze, so contacting Tether yourself is unlikely to stop the funds moving. Your time is better spent getting a police report filed with specific transaction details.

Whoever makes the request will need to show exactly which funds are yours and where they are now:

• —the police or crime report reference;
• —every transaction hash (TXID) from your wallet to the address that holds the funds now;
• —the network the USDT is on, for example Tron (TRC-20) or Ethereum (ERC-20), because the same token exists on several blockchains;
• —amounts and timestamps for each hop;
• —a documented trace explaining why that address holds your funds, especially where they were split or passed through several wallets.

That last item is what a forensic report provides: each hop documented, the method named, and confidence stated, so the person reviewing the request doesn't have to take your word for it.

Stolen funds are usually moved on quickly: split across addresses, swapped into other assets, bridged to other chains or deposited at exchanges. Every swap out of USDT removes the issuer-freeze option for that portion. The sooner a report reaches law enforcement with a clear trace, the more of the funds are likely to still be where the trace says they are.

Then the exchange may be able to act. Binance asks victims to report through its support with a description of the incident, the wallet that was compromised, the receiving account and a list of every blockchain transaction involved, plus a police report. It says it cannot freeze a user's assets unilaterally without an official freezing order from law enforcement or a court, and that it is up to the victim to get one, for example by reporting the matter to the police. Our exchange guide covers how other exchanges handle this.

Other exchanges have their own procedures, but the pattern is the same: specific transaction evidence plus law-enforcement or court involvement.

No. A freeze stops the funds moving; it doesn't return them. Getting them back takes a further legal process, such as a court order or a forfeiture, and that can take months or years. Tether has said that some of the USDT it froze has been reissued following legal proceedings, but there is no guaranteed route or timeline.

We trace the funds and write the report that a freeze request relies on. We don't contact Tether, exchanges or the thief for you: requests are most effective coming from counsel or law enforcement with the report attached, and we prepare the exhibit package they need. The intake review is free, and we'll tell you if the trace is unlikely to help.