Cryptoeconomics

News, data and analysis on tokenized assets, market design and digital economic systems.

Stablecoins

Tether froze the money fourteen months before the United States went to court for it

A verified complaint in Manhattan seeks forfeiture of 61,192,367.59 USDT across ten Tron addresses as the proceeds of Iranian oil sold to Chinese buyers. Its own table shows the issuer froze every one of them in June and July 2025. The same complaint describes about $508m of the same trade clearing through a New York correspondent account, and charges nobody with it.

What happened

The United States filed a verified complaint for forfeiture in the Southern District of New York on 14 September 2026, docketed as 26 Civ. 8010 and captioned United States v. All USD Tether Held in the Following Cryptocurrency Addresses. The defendants-in-rem are the USDT held in ten addresses on the Tron network, and the action is brought under 18 U.S.C. 981(a)(1)(A), (C) and (G), the last of which reaches all assets of an entity engaged in planning or perpetrating a federal crime of terrorism. It is signed by James M. McDonald, United States Attorney for the district, and by four assistant United States attorneys, and it says a seizure warrant was issued on or about 14 September 2026 by Magistrate Judge Ona T. Wang. No person or company is a defendant. The pleading's own table of freeze dates is the document's most useful fact. Seven addresses were frozen on 15 June 2025 and three on 26 July 2025, holding between 1,007,838.22 and 12,756,824.22 USDT each and totalling 61,192,367.59 USDT. Paragraph 54 reads: 'To date, Tether has frozen all of the Defendants-in-rem, which collectively hold approximately 61,192,367.59 USDT.' The alleged conduct is the sale of Iranian crude oil and petroleum products to buyers in China, with the proceeds funnelled to the Iranian government, the Islamic Revolutionary Guard Corps and the Armed Forces General Staff. Two Hong Kong companies are named as the intermediaries, Hexa Whale Trading Limited and Blessed Trust Limited, and a third Hong Kong company, identified only as Company-1 and said to purport to operate in the international petroleum market, as their client. The complaint says Blessed Trust 'has misrepresented to financial services and cryptocurrency services providers that it provides wealth management or virtual asset custodial services', that Hexa Whale 'similarly has misrepresented that it is engaged in commodities brokering', and that in fact both 'received and transferred the proceeds of sales of Iranian crude oil or petroleum products and provided "on-ramp" services to convert fiat currency into cryptocurrency, including through the use of U.S.-based issuers of cryptocurrency'. Two aggregates sit behind the $61m. At least seven interrelated addresses the complaint terms the 'Entity A' addresses, two of which are among the ten defendants, 'have received and distributed more than approximately $1.5 billion of proceeds of the illicit sale of Iranian oil', a conclusion the complaint says rests on transaction flows and clustering heuristics including address activation history. And the dollar leg ran through New York: Company-1 sent about $37.15m to Hexa Whale in about 11 wire transfers between March and April 2024 and about $443.49m to Blessed Trust in about 32 transactions between 13 November 2024 and 5 March 2025, in both cases through at least one dollar-denominated correspondent account at a bank headquartered in the district, with a further $27.495m of internal Hexa Whale transfers taking the same route. Neither that bank nor Binance, whose accounts the complaint says were used to move the cryptocurrency, is named as a wrongdoer.

Why it matters

The dates are the story. The money was immobilised by its issuer in June and July 2025 and the United States asked a court for it in September 2026, fourteen to fifteen months later. For that whole period the funds were neither spendable by their holders nor forfeited to anyone, because a private company had switched them off under its own terms of service. An in-rem action against assets somebody else has already stopped is a claim on a freeze, and it makes explicit what the architecture of a centrally administered dollar token implies: the effective enforcement point is the issuer's contract, and the legal process arrives afterwards to allocate what the contract has already secured. That is a different kind of asset from the one the reporting describes. A seizure of bearer property requires finding and taking it; a seizure of USDT requires an issuer willing to blacklist an address and a court willing to direct the balance somewhere. The first is why the complaint can name ten specific addresses and a figure to the cent more than a year after the fact, and the second is why the practical question for a holder of a permissioned stablecoin is not whether the government can reach it but whether the issuer will act before the government asks. Nothing in the complaint says who asked Tether to freeze these addresses or when, and nothing obliged it to wait. The proportions cut against the framing as well. About $508m of the same trade cleared through a correspondent account at a New York bank, against $61m of frozen tokens, and the complaint's own account has the two Hong Kong companies running a fiat-to-crypto on-ramp rather than a crypto-native operation. The dollar banking system carried roughly eight times as much of this as the token leg the case is about, and it is the token leg that is recoverable, because that is the leg where somebody can press a button. That is worth holding beside the tax bill filed in Washington the same day, which would give par treatment only to dollar tokens whose issuers hold a United States licence: one arm of the government is pricing the licensed token as money, and another is demonstrating that the unlicensed one is the seizable kind. Venue is the quiet mechanism. The complaint puts jurisdiction in Manhattan because acts giving rise to forfeiture took place there and because the defendants-in-rem sit outside any judicial district, and the acts in question are dollar wires clearing through a bank headquartered in the district. Every counterparty named is in Hong Kong, Iran or China. The route into a United States court is the dollar, not the chain.

What is not settled

Nothing here is proved. A verified complaint is the government's allegation, pleaded on information and belief, and the clustering conclusion that seven addresses are one controller is expressly based on heuristics rather than on records. No claimant has appeared, and a civil forfeiture is contested by whoever comes forward to assert an interest, which in this case would mean identifying oneself as the owner of proceeds the United States says financed a designated terrorist organisation. That is why cases of this shape often go undefended, and an undefended forfeiture settles the title without testing the theory. Who the bank is, and what it did, is not in the document. The complaint calls it 'the U.S. Bank', a defined term for a financial institution headquartered in the district, and says it processed about $508m for parties without an OFAC licence. It is not a defendant and no allegation is made against it. Whether it filed suspicious activity reports, when, and whether anything followed is outside the pleading, and so is the question of why the correspondent leg is described but not pursued. Tether's own part is described in one sentence and not explained anywhere. The complaint records that the issuer froze all ten addresses and gives the dates; it does not say at whose request, under what authority, or on what basis, and it does not say what happens to the balances if a court orders forfeiture, which for a token means the issuer reissuing to a government-controlled address rather than a transfer. The company has published nothing on this case that could be read. And the office's own account of the filing was not read. justice.gov serves a bot-verification page to curl on every press release route tried, so the complaint was found through CourtListener's RECAP search and read from storage.courtlistener.com. Bloomberg filed on 14 September, before the docket entry was public, which suggests a press release exists; if it does, it will carry the framing and any quotation from the United States Attorney, and none of that is here.

Institutions in this story

  • United States Attorney's Office for the Southern District of New York Regulator

    Filed the complaint on 14 September, signed by the United States Attorney and four assistants, with a seizure warrant issued the same day. Venue rests on dollar wires clearing through a bank headquartered in the district, not on anything onchain.

  • Tether Issuer

    Froze all ten addresses in June and July 2025, fourteen to fifteen months before the United States asked a court for them, and is named in one sentence of the complaint with no account of who asked or on what basis. It has published nothing on the case.

  • Binance Exchange

    The exchange whose accounts the complaint says were used to move the proceeds. It is not a defendant, no wrongdoing by it is alleged, and the pleading's description of its know-your-customer records is what lets the government name the parties.

  • TRON Network

    The network all ten addresses sit on, and the reason the complaint can identify the money to the cent. The clustering that ties seven addresses to one controller rests on activation history and USDT and TRX flows.

On the record

Manhattan prosecutors seek forfeiture of $61m of USDT frozen by Tether in 2025

The verified complaint in 26 Civ. 8010 names ten Tron addresses holding 61,192,367.59 USDT as the proceeds of Iranian oil sold to Chinese buyers. Its own table dates the issuer's freezes to 15 June and 26 July 2025, and it describes about $508m of the same trade clearing through a New York correspondent account.

The weekly read on onchain market economics

What issued, what settled, what the supervisors changed, with the numbers behind it and a note on what the numbers do not show. One email, Thursday mornings.

Unsubscribe in one click.