Received Dirty USDT: What Happens to Your Wallet
“Someone sends you $200 of dirty money and your wallet gets banned.” Many people believe this, but it works differently. Here is who can block USDT and when, and what to do if you got a suspicious transfer.
Nobody “bans” a whole wallet
Your wallet — Trust Wallet, TronLink, MetaMask or any other — is just an address on the blockchain. No one can switch it off. But there are two places where USDT can get stuck.
Tether: a freeze at the token level
Tether, the company that issues USDT, can freeze USDT on a specific address. It does this selectively — at the request of law enforcement, when an address is linked to fraud, a hack or sanctions. On TRON alone, thousands of addresses have been frozen this way.
Your address won't be frozen because someone sent you a small amount from a “dirty” address. A freeze is a decision on a specific case, not an automatic rule.
An exchange: a check on deposit
The real risk appears when you send this money to an exchange. Every deposit goes through an AML check. If a noticeable share of it comes from risky sources, the exchange may freeze the deposit and ask where the money came from. More on this in why exchanges block USDT after P2P.
The share and the source matter, not the mere fact
An exchange's AML check weighs several things at once:
- The share of dirty money in what came in. $200 on a wallet that has seen tens of thousands is a small share.
- The path of the money: straight from a risky address or through several transfers. A direct transfer weighs more.
- The source. Sanctions and stolen money are the strictest: a direct transfer from a sanctioned address can stop a deposit even for a small amount.
Small traces of risky money through a chain of transfers show up on almost every active wallet. On their own, they are usually not a problem.
What to do if you received a suspicious transfer
- Don't touch this money. Don't send it to an exchange and don't mix it with your main funds.
- Check that the USDT is clean: send the sender's address to @checkmyusdtbot. It shows whether the address is frozen, whether it's on sanctions lists and where its money came from.
- If the risk is high, keep this USDT separate. If an exchange asks, explain that the transfer arrived without your involvement and show the history.
- Don't copy addresses from your transfer history. Tiny transfers from look-alike addresses are a common scam trick called “address poisoning”: the scammer hopes you'll copy their address instead of the right one.
Does the risk depend on the network?
No. Tether can freeze USDT on TRON, Ethereum and Solana alike, and exchanges check the history of money on any network. There are more freezes on TRON simply because most USDT moves there — and so do most scammers.
Frequently asked questions
Will my USDT be frozen if someone sent me $200 from a dirty address?
No. Tether freezes addresses over specific cases, not over incoming transfers. An exchange may ask questions if you send this money there, so keep it separate.
What is “address poisoning”?
A scammer sends you a tiny amount from an address that looks like yours or like your counterparty's. They hope you'll later copy that address from your history and send money to them. Always take the address from a trusted source.
How do I check if USDT is clean?
Send the sender's address — a TRC20, ERC20 or Solana wallet — to @checkmyusdtbot. In a few seconds you'll see any Tether freeze, OFAC sanctions and the risk score from the AML database.
This is general information, not legal or financial advice.
