AML check for USDT: TRC-20 vs ERC-20 and why the network matters
Tether is the most screened asset in crypto. How USDT AML checks work on Tron and Ethereum, what freezing means, and how to keep your balance spendable.
8 min read

Why USDT gets screened harder than anything else
Tether settles more value per day than most national payment systems, and it does it on public rails with near-zero fees. That combination makes USDT the default currency for P2P trading, freelance payouts, cross-border settlement — and, inevitably, for fraud proceeds, unlicensed exchangers and sanctions evasion. Compliance teams know this, so a USDT deposit is examined with a stricter threshold than the same value in bitcoin. Many payment processors reject a Tether transfer at a risk score where they would still accept BTC.
There is a second reason, and it is technical rather than reputational. USDT is not a native coin: it is a token issued by a company that retains an administrative function on the contract. Bitcoin cannot be confiscated by its protocol. USDT can be frozen at the contract level, permanently, without your key ever being compromised. That single property changes the risk calculus of accepting Tether from a stranger.
Blacklisting at the contract level
The Tether contract contains a blacklist function. When an address is added — usually following a request from law enforcement or a court order in a supported jurisdiction — every token on it becomes non-transferable. No exchange, no bridge, no mixer can move it. The balance stays visible in your wallet forever as a number you can never spend.
Blacklisting is applied to addresses, not to individual coins, and it is applied after the fact. If tokens that later get traced to a hack pass through your wallet, you are not automatically blacklisted, but you can end up in the investigative chain. Screening the sender before you accept is the only moment where you still have a choice.
TRC-20 and ERC-20: what actually differs
The same Tether exists on many networks, and analysts treat them as separate universes because the transaction behaviour is different.
- TRC-20 (Tron) — cents-level fees, so it dominates retail P2P, small payouts and, correspondingly, high-volume scam operations. Address reuse is heavy and clusters are large, which makes attribution good but also means one bad counterparty pollutes a wide graph.
- ERC-20 (Ethereum) — higher fees, more institutional and DeFi flow. Exposure often comes through smart contracts, bridges and DEX routers rather than direct transfers, so indirect exposure analysis matters more.
- Bridges — moving USDT between networks does not launder it. Modern analytics reconstruct cross-chain hops, and a bridge transaction is itself a mild risk marker in some scoring models.
- Fee wallets — on Tron, the address that pays energy or bandwidth is a strong clustering hint that links otherwise unrelated deposit addresses.
How to screen a USDT transfer correctly
Always screen the specific network. Pasting a Tron address into an Ethereum explorer, or comparing a report from the wrong chain, produces a meaningless result. Then check two things separately: the counterparty address, which shows the aggregate history of the wallet you are dealing with, and the transaction hash after the payment arrives, which shows the risk of that one inflow.
Pay attention to the source-of-funds breakdown, not only to the headline number. A score of 30 built entirely from exchange withdrawals is genuinely calm. A score of 30 where four percent came directly from a darknet cluster is not — small direct exposure to a severe category is worse than large exposure to a mild one such as gambling.
Practical hygiene for people who take Tether daily
- Use a separate receiving address per counterparty so one bad payment cannot contaminate your whole history.
- Screen before confirming a P2P trade, not after releasing the goods or fiat.
- Keep the report: exchange support desks accept a timestamped screening as part of a source-of-funds file.
- Re-screen recurring partners monthly — labels are added retroactively when investigations conclude.
- Never accept a discount as compensation for skipping a check. The discount is smaller than the frozen balance.
Frequently asked questions
Yes. Tether can blacklist an address at contract level, usually after a law-enforcement request. The tokens stay visible in the wallet but can never be transferred again.
Neither network is inherently dirty. Tron carries far more low-value retail and scam traffic because fees are negligible, while Ethereum exposure tends to arrive through contracts, bridges and DEX routers.
No. Cross-chain analytics reconstruct bridge hops, and in some scoring models the bridge transaction itself is treated as a mild risk marker.
Always the network the payment was actually sent on. A Tron address checked as an Ethereum address returns a meaningless result.