Tron, Tether and Chainalysis have set up a Digital Crime Task Force to hunt for illicit USDT activity on the Tron blockchain and pass leads to police before stolen or laundered funds move on. The group was announced on Thursday, about a week after Bloomberg reported that Tron and Tether’s previous crime unit, built with TRM Labs, had quietly been shut down in late August.
What the task force will do
According to the announcement published by TRON DAO, the task force, known as DCTF, will identify suspected illicit activity involving USDT on Tron, turn it into intelligence that investigators can act on, and coordinate with law enforcement on investigations and asset freezes. Chainalysis supplies the analysts, blockchain data and AI-based investigation tools. Tether brings the ability to freeze USDT at the issuer level, and Tron the network.
The founders describe it as a private-sector initiative that will work proactively rather than waiting for victims to report crimes. It will also take tips and freeze requests from law enforcement. The target list is broad: investment and romance scams, stolen funds and hacks, terrorist financing, North Korean cyber operations, cartel money laundering, drug trafficking and activity linked to child sexual abuse material.
“Criminals are using AI to move faster than ever, and waiting for a victim to report a crime is no longer good enough,” Tether chief executive Paolo Ardoino said in the release. He said Tether has already frozen more than $7 billion linked to illicit activity, working with more than 360 law enforcement agencies in 73 countries. The announcement also cites Chainalysis research finding that AI-enabled scam operations were 4.5 times more profitable than traditional ones in 2025, and that impersonation scams grew by more than 1,400% year on year.
Why Tron is the focus
TRON DAO says the network hosts the largest circulating supply of USDT of any blockchain, above $94 billion. Cheap transfers made it the default rail for a lot of everyday dollar payments, and the same traits draw criminal money. TRM Labs found that USDT on Tron made up 99.9% of the $1.07 billion that 34 casinos in Cambodia’s Sihanoukville received between Jan. 1 and Sept. 7, Cointelegraph reported. That double role is why issuer freezes on Tron get so much attention.
It came up again after last month’s Binance hack. Tether said it froze more than $1.5 billion in USDT within 30 minutes of the Oct. 29 theft, which the FBI has blamed on North Korea. Part of the loot that was not frozen ended up being routed through Tron, as we covered when the hacker’s Tron hub was emptied of 684 million TRX.
What happened to T3
This is the second try. Tron, Tether and TRM Labs launched the T3 Financial Crime Unit in September 2024 with a similar pitch. A year later Binance joined, and the group said it had frozen $250 million in illicit assets with law enforcement.
On Nov. 4, Bloomberg reported that T3 had been terminated in late August, citing people familiar with the matter, one of whom said slow response times and a lack of coordination had held it back. The shutdown had not been announced. A Tron DAO spokesperson told Bloomberg the program had “concluded” and that more on a new initiative would be “coming soon.” Tether said it would keep working with TRM, including through TRM’s Beacon Network for sharing intelligence.
DCTF is that new initiative, with Chainalysis in TRM’s seat. Binance is not named as a member, and the announcement does not mention T3. Cointelegraph reported that it asked Tether, Tron and TRM for comment and did not get replies.
The Chainalysis question
The timing puts Chainalysis’s own security under a spotlight. The firm is still dealing with a breach it first disclosed on Oct. 30, which it later said exposed names, usernames, password hashes and live tokens for every user of its platform. It took several products offline while it hardened its systems, as we reported in our story on the Chainalysis breach. Chainalysis has said it has no evidence that investigation content was accessed or that its attribution data was manipulated. The DCTF announcement does not mention the incident.
What to watch
The release gives no budget, headcount, governance structure or reporting schedule. T3 announced freeze totals as it went, which gave outsiders a way to judge it. Whether DCTF does the same will be the clearest test of whether it moves faster than the unit it replaces. Another is whether other issuers or exchanges join, or whether it stays a three-company effort centred on one chain and one stablecoin.
FAQ
What is the Digital Crime Task Force?
A private-sector group founded by Tron, Tether and Chainalysis on Nov. 12 to find illicit USDT activity on Tron and help law enforcement trace and freeze funds.
Does it replace the T3 Financial Crime Unit?
Effectively, yes. Bloomberg reported T3 was disbanded in late August, and Tron said a new initiative was coming. TRM Labs, a T3 founder, is not part of DCTF.
Can the task force freeze USDT itself?
Freezes are carried out by Tether as the issuer. DCTF says it will develop leads and coordinate with law enforcement to support investigations and asset freezes.
Disclaimer: This article is for informational purposes only and does not constitute financial advice.
