T3 Crime Unit Freezes $450M in Illicit Crypto Funds Tied to Hacks and Terror Financing

This figure covers cases involving money laundering, exchange hacks, North Korea-linked cyber operations, terrorist financing, drug trafficking, and violent crimes such as kidnappings and extortion.

Rapid Response and Growing Impact

The unit has worked with law enforcement agencies across 23 jurisdictions on five continents. Countries including the United States, Spain, Germany, the Netherlands, and Bulgaria account for the highest volumes of frozen assets.

T3 FCU reports a 43.9% increase in intercepted illicit proceeds in 2025 compared to the prior year. It can freeze assets within 24 hours of a law enforcement request, a speed that stands out against traditional financial systems.

Key Operations Supported by T3 FCU

• Support for Operation Lusocoin by Brazilian Federal Police, contributing to the freeze of over 3 billion Brazilian reals in assets, including $4.3 million in USDT.
• Freezing of approximately $26.4 million linked to a European money-laundering ring dismantled with Spain’s Guardia Civil.
• Actions targeting wallets connected to North Korean cyber activity and nearly $9 million traced to the Bybit hack.
• A $344 million USDT freeze on the TRON network in April 2026 following intelligence sharing with U.S. and international authorities.

International Recognition and Broader Context

The Financial Action Task Force (FATF) recognized T3 FCU earlier this year as an “invaluable resource for law enforcement agencies worldwide.” The unit was highlighted alongside TRM Labs’ Beacon Network as a strong example of public-private partnership in combating digital asset crime.

This development occurs as TRM Labs estimates total illicit cryptocurrency activity reached a record $158 billion in 2025. Despite the rise in absolute terms, illicit actors’ share of overall crypto liquidity slightly decreased from 2.9% to 2.7%.

Debate Over Centralization and Control

The scale of freezes has prompted discussion about the balance between enforcement and the decentralized principles of blockchain technology. Tether maintains issuer-level controls that enable blacklisting of specific addresses, extending beyond T3 FCU actions. Separate data from BlockSec indicates over $500 million in USDT frozen in a recent 30-day period across chains.

TRON describes itself as an agnostic technology provider, placing responsibility for identifying illicit activity on partners including Tether, TRM Labs, and law enforcement.

Chris Janczewski, TRM Labs’ Head of Global Investigations and former IRS Criminal Investigation Special Agent, emphasized the value of real-time intelligence combined with coordinated public-private action.

Justin Sun, Founder of TRON, noted that the collaboration strengthens network integrity while preserving openness and efficiency.