DOJ’s Complaint to Forfeit $61.1M in USDT

On September 14, 2026, the U.S. Attorney’s Office for the Southern District of New York (SDNY) filed a verified civil in rem forfeiture complaint seeking more than $61.1 million in USD Tether (USDT) across ten target addresses on the TRON blockchain (United States v. All USD Tether Held in Ten Cryptocurrency Addresses, Case No. 1:26-cv-08010).

The action illustrates how the federal government combines traditional international sanctions enforcement with advanced on-chain forensics to seize digital assets held in unhosted, non-custodial wallets.

For a comprehensive overview of how stablecoin seizures work nationwide, read our primary guide on USDT Cryptocurrency Asset Forfeiture and Defense.

The Allegations: Shadow Fleets, Teapot Refineries, and Stablecoins

According to the federal complaint, the targeted USDT represents proceeds from black-market sales of Iranian crude oil and petroleum products to independent Chinese “teapot” refineries.

Prosecutors allege that these illicit sales were arranged through front companies—including Hong Kong-based entities Hexa Whale Trading Limited and Blessed Trust Limited—acting on behalf of Sepehr Energy Jahan Nama Pars Company, a sanctioned front organization operating for Iran’s Armed Forces General Staff (AFGS) and the Islamic Revolutionary Guard Corps (IRGC).

Because the international maritime oil trade typically operates in U.S. dollars, Iranian actors historically relied on traditional shell companies and correspondent banking channels.

As secondary sanctions and Anti-Money Laundering (AML) controls tightened around foreign financial institutions, these networks shifted large volumes of capital into stablecoins like USDT on the TRON network, leveraging their high liquidity, rapid settlement times, and predictable dollar-pegged value.

Forensic Tracing on the TRON Blockchain: The “Entity A” Cluster

The government’s complaint reveals the key blockchain analytics methodologies federal investigators rely on to establish probable cause in civil forfeiture proceedings.

On the TRON blockchain, a newly generated wallet address must receive native TRX tokens to be activated on the public ledger before it can broadcast USDT transfers. The FBI traced how multiple target addresses were funded and activated by the exact same parent wallet.

Investigators tracked external wallets that covered transaction gas fees for addresses executing large transfers. Under federal tracing principles, third-party fee payments are treated as strong circumstantial evidence of common control or coordinated operation.

The complaint identifies an interrelated cluster dubbed “Entity A,” which processed more than $1.5 billion in illicit oil proceeds. Seven of the ten target addresses were activated on the exact same date and subsequently received tens of millions in USDT routed from an Entity A funding wallet through high-speed pass-through wallets.

The government tied on-chain movements to centralized exchange infrastructure (specifically Binance), obtaining Know Your Customer (KYC) onboarding documents, IP logs, and internal transfer records to link pseudonymous TRON addresses to corporate front entities.

How the Government Seizes USDT: The “Token Burn” Mechanism

A critical legal and technical question in cryptocurrency forfeiture is: How does the government physically take custody of tokens in an unhosted wallet without the private keys Unlike native, decentralized blockchain coins such as Bitcoin or Ethereum, USDT is a centralized smart-contract token managed by Tether Limited.

When the U.S. District Court issued a federal seizure warrant under 18 U.S.C. § 981(b), Tether invokes the administrative freeze function embedded in the TRON USDT smart contract, preventing the private key holders from executing outgoing transactions.

To effectuate physical transfer to the government, Tether executes a programmatic “burn” of the tokens in the target addresses, nullifying them on-chain. Tether simultaneously mints replacement tokens of equal value and transfers them directly into a designated hardware wallet controlled by the Federal Bureau of Investigation (FBI) or the U.S. Marshals Service (USMS).

This dual process—court-ordered freezing followed by issuer burning and reissuing—enables federal law enforcement to seize non-custodial stablecoin balances anywhere in the world without requiring the cooperation of the wallet owner.

The United States filed its complaint under three primary provisions of the federal civil asset forfeiture statute (18 U.S.C. § 981):

• 18 U.S.C. § 981(a)(1)(C):
  • Forfeiture of property constituting or derived from proceeds traceable to violations of the International Emergency Economic Powers Act (IEEPA, 50 U.S.C. § 1705), which serves as a “specified unlawful activity” under federal money laundering statutes.
• 18 U.S.C. § 981(a)(1)(A):
  • Forfeiture of property “involved in” transactions designed to promote unlawful activity or conceal the nature, source, and control of illicit proceeds in violation of 18 U.S.C. § 1956 (Money Laundering).
• 18 U.S.C. § 981(a)(1)(G):
  • Forfeiture of all assets, foreign or domestic, belonging to any entity or individual engaged in planning or perpetrating a federal crime of terrorism, predicated on providing material support to a designated Foreign Terrorist Organization (18 U.S.C. § 2339B).

Protecting Legitimate Property in Cryptocurrency Forfeiture Actions

While massive enforcement actions capture global headlines, federal cryptocurrency tracing is not infallible. Clustering heuristics frequently sweep up intermediate liquidity providers, secondary market OTC desks, and innocent counterparties whose wallets accepted funds that passed through intermediary addresses days or weeks prior.

Under the Civil Asset Forfeiture Reform Act (CAFRA), any individual or business with a legitimate ownership interest in seized cryptocurrency must file a verified claim in federal district court within strict statutory deadlines (typically 35 days from direct notice or 60 days from publication).

Civil asset forfeiture attorneys can assert various defenses including exposing errors where government analysts conflated unrelated commercial transactions with target wallet clusters. The Claimant’s attorney might show the claimant is an innocent owner who acquired the digital assets as a bona fide purchaser for value without knowledge or cause to believe the funds were linked to sanctioned conduct.

An attorney can also show there is no substantial connection or “nexus” between the crime and targeted USDT. At trial, the prosecutors are forced to meet their burden of proving, by a preponderance of the evidence, that the specific tokens seized represent forfeitable proceeds rather than untainted capital.

If your cryptocurrency wallet, exchange account, or digital assets have been frozen or seized pursuant to a federal seizure warrant or civil forfeiture complaint, early intervention by experienced forfeiture defense counsel is critical to preserving your property rights.