Policy · Analysis
Fifteen Months From Tether's Freeze to a Forfeiture Filing
Manhattan prosecutors say $61.2 million in USDT came from black-market Iranian oil and moved through two Hong Kong firms trading on Binance. The table on page 19 of their complaint shows Tether locked every one of the ten wallets in June and July 2025. The public case arrived on Monday.
The press release reads like a seizure that just happened. "Today we are seizing and seeking to forfeit more than $61 million of the Government of Iran's money," Deputy US Attorney Sean S. Buckley said in the Southern District of New York's announcement on Monday, September 14.
The money hasn't moved in more than a year. Paragraph 52 of the verified complaint filed the same day lists the ten TRON addresses the government wants, with a freeze date and a balance for each. Seven were frozen on June 15, 2025. The other three were frozen on July 26, 2025. Paragraph 54 says who did it: "Tether has frozen all of the Defendants-in-rem." Together they hold 61,192,367.59 USDT.
So the filing isn't the moment the funds were stopped. It's the moment the government went to court for money a private stablecoin issuer had locked 14 to 15 months earlier. The complaint doesn't explain the gap. It doesn't say who asked Tether to freeze the addresses, or whether anyone did.
What the government alleges
Everything below is an allegation. The release says so directly: a civil forfeiture complaint "is merely an allegation," not proven until a court rules for the government. Nobody has been charged in this case. It's an action in rem, against the property itself.
According to the complaint, two companies incorporated in Hong Kong, Blessed Trust Limited and Hexa Whale Trading Limited, used trading accounts at Binance to move the proceeds of black-market Iranian crude and petroleum sales to buyers in China. Blessed Trust allegedly presented itself as a wealth manager or virtual-asset custodian, and Hexa Whale as a commodities broker. Prosecutors say both actually received and transferred oil proceeds and offered fiat-to-crypto on-ramps, "including through the use of U.S.-based issuers of cryptocurrency." The complaint doesn't name those issuers. A third Hong Kong company, called only Company-1, is described as their client in the petroleum trade.
At the center is a cluster the government calls Entity A: at least seven TRON addresses that allegedly "received and distributed more than approximately $1.5 billion" of Iranian oil proceeds. The FBI tied them together with the usual on-chain heuristics: which address activated which, and how USDT and TRX moved among them. The complaint says Entity A sent large sums to Nobitex, which The Block describes as Iran's largest exchange, and "upon information and belief" to Middle East money transmitters known to be IRGC fronts. It also says one Entity A address, beginning TU6Vd, "is reported to have been used by" infrastructure controlled by Sepehr Energy, a front company Treasury sanctioned in November 2023 for moving oil money on behalf of Iran's Armed Forces General Staff. The complaint doesn't say who reported that.
Two of the ten frozen addresses, TGuqb and TBJT9, are Entity A addresses. The other eight were funded from a third, TWzSi. The complaint says seven of those eight were activated on May 14, 2025, by a single address, then filled with USDT from TWzSi through pass-through wallets. They were frozen 32 days later. The eighth, TTc6T, was activated on June 14, 2025, and got about 2 million USDT from TWzSi that same day. It was frozen 42 days later.
What sits in the ten frozen addresses (USDT, millions)
The dollar leg ran through New York
The part of the complaint that gives a Manhattan court jurisdiction isn't on-chain. Prosecutors say Company-1 sent Hexa Whale about $37.15 million in 11 wire transfers between March and April 2024. From November 13, 2024, to March 5, 2025, it sent Blessed Trust about $443.49 million in 32 transactions. Both sets of payments cleared through a correspondent account at a bank headquartered in the Southern District of New York. The complaint calls it only "the U.S. Bank." Hexa Whale's transfers between its own accounts, about $22.2 million in mid-2024 and $5.3 million more that autumn, allegedly used the same channel. None of it was licensed by OFAC, the complaint says.
The seizure mechanics are specific to stablecoins. A footnote on page 3 says Tether "will 'burn'" the tokens in the target addresses and issue replacement tokens of equal value to the government. Under a seizure warrant that Magistrate Judge Ona T. Wang signed on September 14, those tokens go to an FBI-controlled hardware wallet in the district. No private key belonging to anyone in the alleged network is needed. The issuer rewrites its own ledger.
Binance, again, and what it says
Binance isn't a defendant, and the complaint doesn't accuse the exchange of wrongdoing. It describes Binance's KYC collection and record-keeping, which is presumably where some of the account detail came from. Binance told CoinDesk it has "zero tolerance for sanctions violations" and "did not permit any transactions with sanctioned individuals." The company added that it would keep cooperating with law enforcement. Neither Blessed Trust nor Hexa Whale appears in the complaint as an OFAC-designated entity.
The context is hard to leave out. In November 2023, Binance pleaded guilty and agreed to pay more than $4 billion to resolve Bank Secrecy Act, money-transmitting and IEEPA sanctions violations. The Justice Department said then that the exchange had caused illegal transactions between US users and users in sanctioned jurisdictions including Iran. The earliest transactions this complaint describes date to March 2024, about four months after that plea. The complaint doesn't say when Binance learned of the accounts or what it did about them. Several outlets have reported offboarding dates attributed to Binance. This desk couldn't trace them to a Binance statement it could read, so we aren't repeating them.
Four percent of the flow
Set against the government's own figure, $61.2 million is about 4 percent of the more than $1.5 billion the complaint says Entity A moved. That's this desk's arithmetic, not a prosecutor's claim. The complaint doesn't say how much of the rest reached Iran, how much was spent, or how much is still somewhere a freeze could reach. It also cites an estimate that Iran's crypto market was worth about $7.8 billion in 2025, which gives a sense of how large a pool these flows sit inside.
What the complaint does show is which lever worked. The bank wires that cleared in New York left a record. The Binance accounts left KYC files. The money that's actually recoverable is the money that stayed in a token whose issuer could freeze it. Tether froze them within six weeks of the newest wallets being activated, long before any court filing.
The Take
This case shows what compliance at the stablecoin layer looks like in practice: fast, effective, and conducted almost entirely out of public view. Tether locked $61 million in mid-2025, and for 14 to 15 months the only public sign was ten addresses on a block explorer that couldn't send. That may be the right sequence for a counterintelligence investigation. But the public record now opens with a US Attorney saying "today we are seizing," when the decisive act was a private company's freeze more than a year earlier. Issuers already exercise this power, and forfeiture complaints like this one lean on it openly. The honest accounting is to say, in the release and not just in a footnote and a table, when the funds were frozen and by whom. Anyone holding USDT should also read that footnote on page 3 closely: the issuer can burn the tokens and reissue them to the government. That isn't a flaw. It's what a centrally issued dollar is.