USDT blacklist: How Tether freezes a single address and self-checks in two minutes

stablecoin issuers freezes addresses: Technical principles, case studies and investor self-examination guide

When a stablecoin issuer freezes an address, your balance will not disappear. It is still recorded on the blockchain, and every wallet displays the balance, but no transfer can transfer it out. This is exactly what happened to the 20 addresses on Ethereum on August 24, 2026 (in 84 seconds) and the two new addresses on September 2. We established this fact by reading the data on the chain ourselves.

This matter originated from a lawsuit filed in the U.S. District Court for the Southern District of New York on August 31, 2026, case number 1:26-cv-07400, which is publicly available. Two Thai businessmen have accused USDT issuer Tether of freezing approximately 42.4 million USDTs distributed across ten Ethereum addresses on October 30, 2025, at the informal request of an investigator. According to the content of the complaint, the corresponding seizure order was not issued until February 19, 2026, 112 days have passed since the freezing. This is the statement of one party and has not yet been confirmed by the court: the case has not yet been decided. The matter is pending and this article will not make a ruling on it. This article aims to answer the question behind your concerns as an investor: Which stablecoins have switches that can turn off a single address? How often is it used? And how to check your own address without relying on others?

Technical implications of USDT address freeze

Address freeze is an entry in a stablecoin contract that prohibits any transfer operations at a specific address.

The issuer writes this address to a list in the contract store. From that moment on, the contract will refuse all transfers made from that address. The blockchain itself does not participate in this process: Ethereum processes the attempt, but the token contract refuses to execute it.

This is a huge difference from the "freeze" that investors usually understand. Exchange account freezing involves accounts held by the company in your name, where the balance is already being kept by others. Address freezing goes deep into the wallet you own alone and only you know the private key. The private key is still valid, the signature is legal, and the network accepts transactions. Only the token contract said "no."

This was a design intention. A stablecoin is a claim on a company that is bound by regulatory laws, anti-money laundering rules, and official orders. Without such a switch, the issuer would not be able to comply with the seizure order. As a result, anyone holding a stablecoin always bears the issuer's counterparty risk, and the freezing function is its most visible form.

Freezing, destruction and reissuance: Three phases are summarized in one sentence

Although the consequences are different, these three terms are often confused.

Freeze

Freeze the blacklist of addresses on contracts and immediately block all outgoing transfers. The balance remains at that address and remains publicly visible. The freeze is reversible: the same issuer can remove the entry again.

Destruction (Burn)

Destruction permanently removes the frozen balance from circulation, and the contract sets the number of tokens at that address to zero. In the USDT, the second phase is based on the premise that a freeze already exists. After destruction, these tokens no longer exist.

Reissue

Reissue creates quantities that are destroyed elsewhere, thereby keeping overall support for stablecoins unchanged. This process allows the amount seized to be transferred to the investigating authority or the aggrieved party.

For holders, the most important thing is the order in which events occur. There is a time interval between freezing and destruction, during which the balance is immobilized (locked/stopped flowing) but still exists. Our subsequent measurements showed that in practice this gap could persist for weeks.

New York case: Two plaintiffs, 42.4 million USDT and Sequential Question

complaints were filed on August 31, 2026;CoinDesk and Cointelegraph and other media reported on the case on September 2, 2026, each providing different narratives. Two plaintiffs stated that 42.4 million USDTs spread across ten Ethereum addresses were frozen on October 30, 2025. Their allegations are directed at order: The freeze allegedly followed an informal request from the U.S. investigative agency, while the court order was issued months later. They argued that such orders could not retroactively legitimize earlier freezes.

Based on existing reports, Tether dismissed the lawsuit as groundless. Therefore, one statement confronts another, no court has established any facts, and everything beyond this is speculation. The case is interesting to German investors for another reason: the plaintiff had no contractual relationship with Tether. They get tokens on the secondary market, just like you do when you buy USDT on an exchange. As a result, the case touched on the extent to which the issuer's powers extend to people who have never opened accounts with it.

This issue makes it valuable to study the freeze function, regardless of the outcome of the lawsuit. The switch exists, it is used, and its conditions of use are difficult to check by outsiders. What is not difficult to check is the chain itself.

Our September 3 investigation: 32 freezes, once unfreezing, twice destroyed

The private key is still valid, the signature is accepted: the freeze is in the stablecoin contract, at the back level of the lock.

cryptoticker.io compiled this analysis on September 3, 2026. We read the event log of the USDT contract on Ethereum through a public access point, and the time window is from 02:49 UTC on August 20, 2026 to 03:59 UTC on September 3, 2026. This corresponds to blocks 25,793,449 to 25,894,249, or fourteen days. We evaluated three incidents of freezing, reversal and destruction reported by the contract to the outside world.

Why did 20 of the 32 freezes occur in 84 seconds?

The results of these fourteen days are as follows:

• 32 addresses were frozen
• 1 address unfrozen
• 2 addresses cleared

What is striking is the distribution of these numbers over time. On August 24, 2026 at 20:47:47 UTC, nine addresses were frozen in one block. 84 seconds later, at 20:49:11, eleven more addresses were frozen in another block. As a result, 20 of the 32 freezes during this period occurred in just over a minute. The rest were scattered among twelve separate events over nine days, the most recent being two freezes at 13:49 UTC on September 2, 2026.

One practical observation can be made from this model, and we will not make further claims here: freezes usually arrive in batches and rarely occur individually throughout the day. whoever works through a bulk action enters all the addresses concerned in one go. For you, this means that the freeze is usually a consequence of your address being listed for some reason, rather than an individual decision made against you personally. The chain will not explain the reason, so we will not explain it either.

The second ratio in our measurements is equally clear: 32 freezes correspond to one reversal. The only reversal occurred at 16:41 UTC on August 20, 2026. Therefore, the freezing can be lifted and did occur, but it remains the exception during the measurement period. People who expect states to resolve themselves are violating the observed frequency.

174,055 USDT destroyed: What happens after freezing

During the same window period, we found two demolitions. At 17:03 UTC on August 24, 2026, 10,002.73 USDT was deleted from an address; at 14:58 UTC on September 2, 2026, another 164,052.30 USDT was deleted. The total is 174,055.03 USDT.

reveals lies in a detail that only appears when comparing two lists: Neither of the two cleared addresses was frozen within our 14-day window. Therefore, these two freezes must occur earlier. The span between blacklisting and deleting balances exceeds two weeks. Destruction is a separate, subsequent decision and does not automatically follow freezing.

Of the two numbers, the latter is more important for assessing your own risk. During the measurement period, the freezing affected far more addresses than the addresses that were subsequently cleared. Over a longer period of time, the affected balances remain locked, and only a small portion is eventually deleted.

Which stablecoins have a searchable freeze feature and which do not

The second part of our investigation asked whether this switch is a special case of the USDT. To do this, we directly queried the twelve stablecoin contracts on Ethereum: first for their ticker symbols to ensure we hit the right contract address, and then twelve common named variants of address checking. If the contract answers one of the queries with a boolean value, the feature exists; if it does not answer at all, the feature does not exist under the name.

Seven of the twelve stablecoins examined have publicly searchable address checks:

• USDT, named isBlackListed
• USDC and EURC, Names are isBlacklisted
• PYUSD, USDP and EURCV(Euro stablecoin issued by a subsidiary of Bank of France), named isFrozen
• FDUSD, named frozen

Five contracts did not answer any of the twelve signatures: DAI, USDS, EURS, USDe and RLUSD. In RLUSD and FDUSD, we also found a feature that could suspend an entire contract, which is different from a single address.

Caution is needed here, so we clearly state the limitations: Just because there is no query check function does not mean that it cannot be frozen. Contracts may hold frozen functionality under names we do not test, stored in structures that are not publicly readable, or added later through alternative implementations. Our measurements only answer one question, whether the status of the address can be checked externally. For seven of the twelve, the answer is yes, which is crucial for the next part of the review.

It is worth noting that the dividing line does not follow the origin. Among the seven with inspection functions, there are both U.S. issuers and European euro stablecoins; among the five without, there are both the most famous decentralization representatives and young products from large providers.

How to check an address in two minutes with a contract

Checks require no registration, no tools, and no need for you to believe anyone's story. You ask for the contract directly, and the contract answers true or false. For USDT on Ethereum, this runs through the contract page of a blockchain browser such as Etherscan, which lists the reading functions for the contract.

In the read function list, look for the isBlackListed entry, enter the address you want to check, and then read the result. false means that the address is not on the blacklist at the time of the query. true is the opposite. For USDC and EURC, the function name is isBlacklisted; for PYUSD and USDP, it is isFrozen. The procedure is the same in each case.

We additionally cross-verified these explanations to ensure they are not based on assumptions. The query returned true for six addresses that were apparently frozen during our measurement window. For a known, ordinary address, it returns false. Therefore, the check does show what it should show.

It has two limitations. First of all, the answer applies only to the moment of the query and not to anything else. Secondly, it refers to the exact one token being on the exact one blockchain: USDT exists on multiple networks, and each version has its own list. People holding USDTs on Tron or Layer 2 networks must check contracts on those networks.

When is it worth checking

For the completely ordinary case where you buy a stablecoin on a regulated exchange and leave it there, the check benefits are small because the address belongs to the exchange. It becomes interesting when you hold a balance yourself at an address, when you receive a large amount from an unfamiliar counterparty, or when a transfer fails for no obvious reason. The last situation is usually the way affected users learn about the freeze.

What a freeze means for an exchange balance

If your stablecoin balance is in an exchange account, it is on an aggregated address belonging to the provider. The freezing of the address would be an event that affects the entire trading venue, which is not a daily risk in reality at regulated European providers. The risk lies elsewhere: withdrawals go through a screening step that could capture receiving addresses that appear on sanctions lists or blacklists.

This mechanism is an address frozen neighbor, and it takes effect at an earlier level. We are discussing EU sanctions on crypto platforms It is described in a separate article in. The second more common situation in practice is freezing accounts for lack of information; how it arises and what helps combat it, see our article on Self-Certification of Cryptocurrency Exchanges.

The latch is located inside the chute, not at the entrance: a single address is frozen and payment traffic to the network continues to run unchecked.

Self-hosting protects from account freezes, not address freezes

For most risks in the crypto space, holding your own key is the right answer. It prevents provider bankruptcy, account freezing and trading venues from clearing. But for the address freeze of stablecoin contracts, it clearly does not help, because the blacklist does not know the wallet, only the address. Whether your key is on a device in a drawer or in the provider's data center, it makes no difference to the items in the contract.

This creates a distinction that is often lost in daily use. Bitcoin and Ethereum do not have such a switch because there is no issuer behind them who can operate it. People who hold these assets in any hardware wallet are truly free of counterparty risk. For stablecoins, it still exists and exists fully because the support and freezing functions are located in the same company. So, with stablecoins, self-custody changes the types of risks you take; it does not eliminate them.

In practice, this means that anyone using a stablecoin as a parking space between purchases will take this risk for hours or days without requiring much thought. Anyone who permanently deposits a large portion of their wealth in stablecoins should know that they hold claims on a company that can stop operating balances on its address. Splitting across two issuers can reduce this concentration risk, but it cannot eliminate it.

The question of MiCA, authorities and who can trigger the freeze

Since the full application of European crypto asset market regulations, issuers of asset reference tokens and e-currency tokens within the EU require authorization, and trading venues can only provide authorized stablecoins. However, when it comes to freezing, the regulation is not a security commitment. It regulates authorization, support and redemption. When an issuer closes a single address depends, in addition to the factors mentioned above, on the Anti-Money Laundering Act, sanctions laws, and orders from authorities in its jurisdiction.

This is where the real issue lies in the New York litigation. The right to freeze itself is not the focus of controversy. The controversy is the form of order the issuer relies on and the order in which the two occur. For now, German investors can only draw one conclusion from this: your stablecoin issuer brings the legal order it operates, and at the largest providers, that order is not European.

People who take this seriously will check the source of stablecoins and the authorizations they carry when making their next purchase. Overview of regulated trading venues It shows which providers work under European supervision and which stablecoins can still be traded there.

Tax Treatment: What does freezing positions mean in your return

In tax terms, private crypto transactions in Germany are processed based on private disposal transactions under Section 23 of the German Income Tax Act. What matters there is the disposal within one year after acquisition, and the tax exemption threshold of € 1,000 per year for the total proceeds from such transactions.

A simple freeze is neither a sale nor an exchange. The balance is still attributable to you, it is still at your address and there is no flow whatsoever. The freeze does not result in disposal transactions and the one-year period continues in any case. If the frozen balance is subsequently destroyed, the classification is much more blurred, since the asset disappears without consideration. Whether and how to claim tax for such losses depends on the case and falls within the purview of the tax adviser. This section outlines the legal position and does not replace the recommendations in individual cases.

In practice, what is more important than classification is documentation. Anyone affected by the freeze should record the status quo while the situation can still be verified: the date of discovery, the relevant address, the balance at that time, and the acquisition data of the position. If the provider is no longer reachable or the account no longer exists, these details will be difficult to rebuild later.

How do we collect data and what cannot be checked

The investigation consists of two parts. In the first part, we retrieve the event log of the USDT contract on Ethereum in segments, each segment of 2,000 blocks, and calculate three freeze, reverse, and destroy events; whenever it fails, each segment is repeated through the second access point until there is no gap in the window period covering 100,800 blocks. In the second part, we queried twelve stablecoin contracts using twelve possible address check designations, for a total of 144 separate inquiries, each of which was additionally protected by the ticker code reported by the contract.

There are four things that we cannot check, and they belong to this article like the results:

1. Reason. The blockchain shows the address was frozen and when. It did not say why this happened, who initiated it, or whether there was an official order. Therefore, we attribute any cause to any relevant address or subsequent person.
2. Other networks. Our count only involves Ethereum. USDT and other stablecoins we examined also exist on Tron, Solana, and several tier 2 networks, with each version having its own list. As a result, the total number of freezes on all networks is higher than 32, and our measurements don't say how high.
3. Integrity of functional names. We tested twelve common designations. A contract that does not contain any of them may still have freezing capabilities named with a different name or may not be externally readable. The only conclusion drawn from missing hits is that the status of the address cannot be queried there through this route.
4. A history of two destruction. By comparison, we know that the relevant freeze is earlier than our window period. It would have been necessary to conduct an evaluation of the entire contract history earlier, but we did not conduct this evaluation for this article.

We didn't do anything beyond the measurement: there was no extrapolation to annual figures, no estimate of how many investors were affected, and no statements about the stablecoins market share we examined. Price data does not appear in this article because contract queries do not produce price data.

Check the stablecoin freeze: What you take away

See which stablecoin you actually hold and where. Seven of the twelve contracts we examined had searchable address checks, and the issuer's legal order has the right to decide who can initiate a freeze. When you choose between two products on your next purchase, checking our Cryptocurrency Exchange Comparison can help you understand which stablecoins are listed there and what kind of supervision the trading venue operates under.

Separating what can be separated. Self-custody is not helpful for address freezing of stablecoins; it is very useful for provider bankruptcy and account freezing. If you want to own a portion of your portfolio that does not require an issuer, you will find the right device in our Hardware Wallet Comparison .

Record your acquisition data before you need it. The date, quantity and acquisition cost of the position are the parts that cannot be rebuilt when it matters and are the basis of each subsequent tax filing. Continuous tracking is handled for you by Tax and Portfolio Tool .

(As of September 3, 2026. This article does not constitute investment advice. Price and fee structures are subject to change; please check terms with your provider before purchasing.)