Check a TRON address
TRON carried the largest share of illicit crypto volume in 2024 (58%, according to TRM Labs), and cheap, fast USDT transfers on it are a reason scammers like it. That says how crimes are run, not that any address is bad. Paste an address starting with T. We show its TRX and token balances, recent transfers in UTC, the address that first funded it, and whether Tether has blocklisted it. Facts with confidence grades, never a verdict.
- TRX and TRC-20 tokens
- USDT-TRC20 freeze status
- Shows the address that activated it
- Free, no sign-up
I sent money to a scammer
Paste the address you sent to (your wallet or exchange shows it in the transaction details) or the transaction ID. You will see where the money is now, whether it can be frozen, and what to tell the police.
I am an investigator
Check addresses and transactions, trace a few hops forward or backward, and export a hop table, a report with a request manifest, and the freeze and disclosure letters from the handbook.
I have a message or a screenshot's text
Paste the whole chat, e-mail or statement. We list every wallet address and transaction ID in it with its position, flag any that fail their checksum (a typo), and you pick which to check.
The first hour: six questions, in order
- 1Is the money still sitting in an address you can see?
Note the balance and the time (UTC) and watch the address. Prepare freeze requests before you finish tracing. - 2Is any of it in a token its issuer controls (USDT, USDC, PYUSD, USDP, PAXG, XAUt, RLUSD, EURC)?
Send a freeze request to the issuer with the exact chain, token contract, address and your legal basis. Issuers can block a token even in a self-held wallet. - 3Did it reach a deposit address at a crypto exchange?
Send preservation, freeze and disclosure requests to that exchange through its law-enforcement channel. Not through customer support. - 4In India: is money still in the banking system?
Call 1930 and file at cybercrime.gov.in at once so banks can be alerted before the money moves on. - 5Is there a phone, a seed phrase, a hardware wallet or an exchange app within reach?
Follow the first-response rules: isolate, do not switch off, do not guess codes, and move assets only into a wallet the agency controls, under authority. - 6Is someone now contacting the victim as a 'recovery agent' or an 'official' asking for a fee?
Warn them. Real police and regulators never charge a fee to recover money, and 'recovery' contacts are a second scam.
How we grade what we tell you
- C1Confirmed. A fact recorded on-chain or in an official record: a transaction, a block, an issuer freeze event, a record produced under legal process.
- C2Strong. Several independent methods agree, for example common-input plus timing plus amount match, or two analytics tools plus exchange confirmation.
- C3Moderate. One reliable heuristic or one reputable label, such as a change-address guess alone.
- C4Lead. An unverified signal: a community report, a risk score, a pattern flag. Never present it as fact.
What a TRON (TRX) address looks like
Knowing the network matters: the same coin name can sit on different blockchains, and money sent on the wrong one may be lost.
| Network | How to recognise it |
|---|---|
| TRON | Starts with T, 34 characters. TRC-20 tokens such as USDT use the same address as TRX. |
How scammers use TRON (TRX)
Patterns seen in scam and fraud cases. A pattern describes how crimes are run, not any one address: busy, legitimate wallets can look similar.
- Scammers often ask for USDT-TRC20 because fees are low and confirmation is fast.
- A victim's payment is often followed within hours by transfers to many other addresses.
- Fake tokens are sent to wallets to simulate a deposit; only the issuer's real contract is genuine.
- Because TRON charges resources for transfers, some addresses are funded in small amounts just to move tokens, which can link wallets together.
Can TRON (TRX) be frozen or recovered?
Depends on the token
TRX cannot be frozen by anyone else on-chain (TRON's own "freeze" setting means an owner staking their own TRX). USDT on TRON can be blocklisted by Tether in its own contract, for law-enforcement requests, court orders and under Tether's sanctions policy, and that stops the address moving USDT. It only works while the USDT is still in that address.
Nobody on this site can recover money, and anyone who offers to recover it for a fee is running a second scam. Report to the police first; the investigator workspace prepares the request letters and evidence file an investigator needs.
What we check
Every result is a fact with a confidence grade, from C1 (confirmed on the chain) to C4 (a lead).
- TRX balance and TRC-20 token balances, with the explorer used.
- Recent transfers in UTC, and the address that activated the account, as a linking clue.
- Whether Tether's contract lists the address as blocklisted, at a stated block.
- Whether a token calling itself USDT is the real Tether contract on TRON.
- OFAC and law-enforcement list matches, and pattern flags shown as leads.
For investigators
- On TRON an account is activated when it first receives TRX or a TRC-10 token, or when another account creates it; receiving USDT alone does not activate it. The activating address is worth recording.
- Public TRON services rate-limit heavily; results here can be slow without a dedicated key, so confirm key figures on Tronscan.
- A freeze applies to USDT on TRON only; funds on another network need a separate request.
We do not say who owns an address, and we do not call an address a scam or safe: a blockchain shows value moving, not identity. Confirm any figure you rely on on a second source before it goes in a complaint. Public explorers for this network: Tronscan (TRON addresses, tokens and transactions).
Questions people ask
What does a TRON address look like?
It starts with the letter T and has 34 characters. USDT-TRC20 uses the same kind of address as TRX.
Can Tether freeze USDT on TRON?
Yes, Tether can blocklist an address in its TRON contract, for law-enforcement requests, court orders and under its own sanctions policy, and only while the USDT is still there. A victim cannot request it directly.
Why do scams so often use TRON?
TRM Labs reported that TRON carried 58% of illicit crypto volume in 2024. Low fees and fast transfers suit anyone who splits and moves funds quickly, but most TRON activity is ordinary. A pattern is a reason for caution, not proof that a given address is a scam.
Can this show who owns the address?
No. We show movement and facts, not identity. Only an exchange's records, produced under legal process, can name a customer.