USDT is the most-traded cryptocurrency by volume. It is also the most common currency used in crypto fraud. Before you accept a USDT transfer — from a P2P trade, a freelance payment, or a new business contact — 30 seconds of checking could save your exchange account.
Why USDT is so frequently used in scams
Three things make USDT the currency of choice for scammers. First: it is stable. Victims who are nervous about crypto volatility feel safer seeing "USDT" than seeing "BTC." Second: it is fast on TRON — transactions confirm in under 1 minute for almost zero fee. Third: it looks just like a bank transfer — a round number like 2500.00 USDT feels more legitimate than 0.041 BTC.
Pig-butchering operations — where a scammer builds a fake romantic relationship and then convinces the victim to "invest" — almost universally use USDT TRC-20. The fake investment platform shows profits. When the victim tries to withdraw, the money is gone. Average loss: $75,000 per victim according to 2024 FBI data.
Tether (the company behind USDT) can and does freeze individual wallet balances at the request of law enforcement. If you receive USDT from a wallet that Tether has already flagged, your own balance could be frozen before you can move it. This takes seconds and cannot be reversed.
TRC-20 vs ERC-20 — what is the difference?
USDT runs on multiple blockchains. The two most important are:
-
USDT TRC-20 (TRON network). Addresses start with
Tand are 34 characters long. Transactions cost $0.001–0.002. Settlement takes 1–2 minutes. This is the dominant form of USDT in Asia, P2P markets and over-the-counter trading. It is also the most common USDT variant used in pig-butchering scams, because the low fees make it easy to move money in small repeated transfers. -
USDT ERC-20 (Ethereum network). Addresses start with
0xand are 42 characters long. Gas fees vary from $1 to $50 depending on network congestion. Common in DeFi, institutional settlement and Western P2P markets. Tornado Cash exposure is the main risk on Ethereum USDT — receiving from a wallet that previously used the mixer can trigger exchange flags.
Our checker auto-detects which network you are checking. Paste either format and it works automatically.
Why TRC-20 USDT wallets have higher risk rates
TRON's near-zero transaction fees make it attractive for operations that require rapid movement of funds across many wallets — exactly the pattern used in money laundering and scam payouts. A single pig-butchering operation might route victim funds through 40 TRON wallets in 20 minutes before reaching a cash-out point.
The TRON network also hosts a higher proportion of newly created, single-use wallets. A wallet that was created two days ago, received funds, and immediately forwarded them is a very different risk profile from a wallet that has been active for two years with a consistent exchange interaction pattern.
In 2023, 63% of crypto funds tied to pig-butchering scams were moved via USDT TRC-20, according to Chainalysis data. The average scam lasted 4 months before the victim realized.
What we check for USDT wallets
- Tether blacklist. Tether publishes a list of wallet addresses it has frozen. We check every address against it in real time. A frozen address means your USDT balance there cannot move.
- OFAC SDN and EU sanctions lists. USDT-holding addresses directly named in sanctions. Receiving from them is illegal in 30+ jurisdictions.
- Pig-butchering operation wallets. Addresses reported to Chainabuse, FBI IC3, and our own partner network as part of romance-investment fraud.
- Money mule routing wallets. Addresses that show the pattern of receiving and immediately forwarding — common in layering operations.
- Exchange blacklists. Wallets frozen by Binance, OKX, Huobi and other major platforms following user complaints.
- TRON-specific high-risk patterns. New wallets (less than 30 days old) receiving large transfers, wallets with very high transaction velocity relative to their balance.
How to check a USDT sender safely
- Before confirming any P2P trade or freelance contract: ask for the sender's wallet address.
- Paste it in the checker above. Wait 10 seconds.
- If the score is below 25 — proceed normally.
- If the score is 25–50 — ask the sender to explain the source of funds. Keep the conversation in writing.
- If the score is above 50 — do not accept the transfer. Decline politely and move on.
For transactions above $5,000, use @scorechain_amlbot for a full transaction graph that shows where the funds originated. The first 3 full reports are free.
What happens if you accept risky USDT
Scenario A: The sending wallet is on the Tether blacklist. You receive the USDT — but when you try to send it to an exchange, the transaction is rejected because the balance is effectively frozen.
Scenario B: The sending wallet is linked to a pig-butchering operation. The USDT arrives. Three weeks later, when you deposit to Binance, your account is restricted pending a source-of-funds review. You need to provide documentation proving you did not participate in fraud. This process takes 2–8 weeks.
Scenario C: The sending wallet is OFAC-sanctioned. You received money from a sanctioned entity. In the U.S. and EU this is a civil or criminal violation regardless of whether you knew. Fines start at $50,000.
Full USDT source-of-funds check in Telegram
@scorechain_amlbot shows the complete transaction path — where funds came from, how many hops, risk score per hop. Free for the first 3 checks.
Open @scorechain_amlbotMore about USDT safety on TRON
TRON-based USDT has its own specific risks beyond the standard AML checks. Read our detailed guide: USDT TRC-20 Safety: What to Check Before Every Transfer.