Tron, Tether and Chainalysis Launch Digital Crime Task Force

By Tom Whitfield

As of November 2, Tether said it had frozen more than $7 billion in USDT linked to illicit activity, including about $1.2 billion from fraud and theft returned to owners or law enforcement through token reissuance. In a November 12 statement shared with The Block, Tron, Tether and Chainalysis said they had launched the Digital Crime Task Force.

The task force has not announced any new asset freezes or completed enforcement cases. It will focus on suspicious activity involving Tether’s USDT stablecoin on the Tron blockchain.

What is the task force’s mandate?

The partners plan to identify criminal wallets, share intelligence with law enforcement and stop funds from moving before investigators can recover them. Their stated priority is reducing the time between detecting suspicious transactions and acting against wallets connected to criminal activity.

Each company brings a distinct capability to the enforcement process:

• Chainalysis provides blockchain tracking and investigation tools.
• Tron supplies the network on which many USDT transactions take place.
• Tether, as the stablecoin’s issuer, can freeze tokens held at identified addresses when taking enforcement action.

Investigators often must follow stolen cryptocurrency through multiple transfers, exchanges and wallets. During that process, funds can move beyond the reach of the companies initially tracking them.

The planned work covers investment scams, romance fraud, exchange hacks, terrorist financing and cryptocurrency thefts attributed to North Korean hackers. Justin Sun said the partnership would protect people who rely on USDT for payments and other financial activities. “Millions of people rely on USDT on Tron to support their families,” Sun said.

Why does AI increase the enforcement stakes?

Chainalysis’s 2026 Crypto Crime Report estimated that AI-enabled scams generated 4.5 times more revenue per operation during 2025 than scams without identified links to AI vendors. Operations connected to AI providers generated approximately $3.2 million each, compared with $719,000 for other schemes in the study.

Researchers also found criminals using AI to impersonate victims’ contacts and create fraudulent investment offers. Such schemes can involve criminals posing as legitimate businesses, investment advisers or government officials to persuade victims to transfer cryptocurrency.

“Criminals are using AI to move faster than ever,” Tether CEO Paolo Ardoino said. He said AI-assisted attacks require quicker responses from companies and investigators. Tether has frozen more than $7 billion globally while working with over 360 law enforcement agencies in 73 countries.

What do recent freezes show?

Tether’s recent enforcement actions show how issuer-level restrictions can stop token movement after suspicious activity is identified. The cases also illustrate how transaction data supports enforcement.

• September: Tether froze approximately $39.3 million across 10 Tron addresses linked to Xinbi Guarantee, a marketplace associated with suspected cryptocurrency fraud.
• July: Tether blocked USDT in 131 wallets connected to ISIS-K after U.S. authorities added the addresses to sanctions records. Chainalysis helped identify transaction activity involving those wallets, which had received more than $1.4 million since 2023.
• Following the October 29 Binance hack: Tether said it froze more than $1.5 billion in USDT linked to the theft, which U.S. authorities attributed to North Korean hackers. The company said it imposed the restrictions within 30 minutes of the attack.

Why was the task force rebuilt?

Tron and Tether established the T3 Financial Crime Unit with TRM Labs in September 2024. In May, the unit said it had frozen more than $450 million in illicit assets while cooperating with authorities across 23 jurisdictions. Its investigations involved exchange hacks, terrorist financing, drug trafficking, kidnappings and other crimes.

On November 4, Bloomberg reported that the partnership had dissolved following problems involving slow responses and coordination among members. People familiar with the arrangement said T3 ended in late August, and Tron subsequently confirmed that the program had concluded.

A Tether spokesperson said the company would continue cooperating with TRM Labs through other initiatives, including the Beacon Network, which supports information sharing between companies and authorities. The new task force replaces TRM Labs with Chainalysis as the blockchain analytics participant.

Tether and Chainalysis had announced a monitoring service in May 2024 designed to identify potentially suspicious USDT transactions. The task force builds on an existing relationship between the stablecoin issuer and the analytics provider.

No public deadline has been set for the Digital Crime Task Force. Its first disclosed wallet intervention or law-enforcement case will test whether the new operating structure shortens the detection-to-action window that slowed the previous partnership.