FreezeCheck

ENRU

• EnglishEN
• РусскийRU
• TürkçeTR
• EspañolES
• PortuguêsPT
• Tiếng ViệtVI
• 中文ZH
• العربيةAR
• Bahasa IndonesiaID
• УкраїнськаUK

Received dirty USDT on P2P: exchange account blocked, what now

You sold USDT or accepted it in a P2P deal, and now the exchange has locked your deposit or your account. This is usually an exchange risk-control hold, not a Tether freeze, and a hold can often be resolved. Today: do not move anything, collect the evidence, and talk to support only through the official channel.

This guide is for P2P sellers and merchants: people who trade USDT for cash or bank transfers on Binance, Bybit, OKX or HTX, or through exchanger chats in the CIS, Georgia and Dubai. The scenario is common. A buyer pays you, you release, or a counterparty sends USDT to your exchange deposit address. A day later the deposit shows as under review, P2P is switched off, or the whole account is restricted. Somewhere up the chain the money touched a scam, a drainer, a sanctioned address or a wallet Tether had already frozen.

Exchange hold or Tether freeze: which one is it?

These are two different things. Different people decide, the process is different, and so is the likely outcome.

Signs of an exchange risk-control hold

• The deposit is credited but locked, or shows as pending review.
• The app shows a banner: P2P, withdrawals or the whole account are restricted.
• Support or a form asks you to explain where the funds came from (source of funds), or to fill in a questionnaire.
• Your USDT sits on the exchange, not in a private wallet.

Signs of a Tether freeze

• The USDT is in your own TRON wallet (not on an exchange) and any transfer out of it fails.
• The address appears on Tether's blacklist. FreezeCheck marks such addresses: our base holds 8,193 TRON addresses blacklisted by Tether.
• The exchange cannot help here. Under its terms of service, Tether may freeze tokens and blacklist addresses, and the terms do not describe an unfreezing procedure. Read USDT frozen on TRON: what to do.

Why exchanges block deposits from dirty addresses

Exchanges screen incoming deposits. If the sending address, or the addresses behind it, are linked to fraud, laundering or sanctions, the deposit gets flagged. The rules are public:

• Binance. The P2P User Transaction Policy lists "receipt or introduction of digital assets or funds from illegal sources" as a reason to disable some or all account features. It also says accounts can be frozen until the evidence users provide passes risk-control review.
• HTX. Its article on restricted accounts names "the suspicious inflow of assets on the chain", which usually comes from a risky address. The user submits information on a designated page and explains the source of the assets. After that the account can be unfrozen.
• OKX. Its account restrictions page says OKX monitors account activity continuously and may restrict functions after a risk assessment.
• Bybit. The Enhanced Due Diligence FAQ says you may be asked about your source of funds and source of wealth, and calls this a normal compliance measure that does not indicate wrongdoing.

Typical triggers in P2P are proceeds from drainers and phishing, money from fake "investment" platforms, transfers linked to sanctioned services, and wallets that sit one or two hops from an address Tether has already frozen. Often the buyer is not the criminal. The buyer was paid with dirty money too, and the trail runs through them to you.

What to do in the first 24 hours

1. Do not move the rest of your funds. Do not withdraw, open new orders or shuffle money between accounts. Moving funds during a review looks like an attempt to hide them.
2. Stop trading with this counterparty. Do not send anything back on your own. A refund can turn into a second loss if the claim later goes through the exchange.
3. Collect evidence before anything disappears. The list is below. Save the chat as screenshots and export it if the exchange allows.
4. Find out which hop is dirty. Check the address that sent you the USDT. The report shows where the money came from and which address in the chain carries the label. This helps you explain the case calmly and factually.
5. Contact support only through the official channel. Use the in-app chat, the ticket system or the appeal form in your account. Do not reply to people who write to you first.
6. Answer the source-of-funds request in full. Incomplete answers slow things down. OKX states that missing or unclear documents can extend review time.

What evidence to gather

• P2P order details: order number, date, amount, price, payment method.
• Chat with the counterparty inside the exchange, start to finish. If you also talked in Telegram, save that too.
• Payment proof: the bank transfer or receipt showing the buyer's name and amount. A bank statement showing the incoming payment.
• On-chain data: transaction hashes (TXID), the sending address, your deposit address.
• Your own trail: where your USDT came from before the deal (earlier purchases, exchange statements). Bybit's EDD FAQ describes source of funds as "where the money you deposit into your Bybit account comes from".
• A wallet report. The FreezeCheck PDF on the sending address shows the chain and the label. It is a heuristic estimate, not a legal AML opinion, but it helps you describe what happened.

Exchanges set their own formats. For example, Binance's P2P suspension appeal page asks for a KYC video, a payment-proof video filmed on a separate device, a bank statement for the last 3 months, and supporting documents such as chat records. Binance's source of funds FAQ sets document rules: issued in your name, recent and not cropped.

How to write the appeal

Short, factual, no emotions. Do not guess about the buyer's intentions and do not promise anything you cannot back up. A template:

Send it through the form the exchange shows you. Keep the case ID and reply in the same thread.

Notes by exchange

Checked on 8 November 2026. Rules change, so follow the prompts in your own account first.

Binance P2P

Restrictions appear in the Restrictions Removal Center (P2P, then Profile) with the reason and case ID. If self-service appeal is not available, the status shows "Appeal unavailable" and you are sent to Binance Support. The P2P policy says accounts may stay frozen until the evidence you provide passes risk-control review.

Bybit P2P

Disputes about a specific order go through the P2P order appeal. Source-of-funds questions go through the EDD verification. Track your case through a support ticket.

OKX P2P

For P2P risk reviews OKX points to P2P Trading, then Profile, then Account restriction dispute (source). OKX says it does not provide review details or real-time progress. A separate lock, the T+N security protection, covers only the order amount after a P2P purchase. It is not about dirty funds.

HTX

For a suspicious on-chain inflow, HTX asks you to explain the source of assets on a designated page. For anti-money-laundering restrictions it asks you to fill in a security questionnaire, and its 2020 article says the review takes up to 5 working days (source). Judicial freezes are handled with the authority that issued them, not with HTX support.

If your bank card is blocked too

A dirty P2P deal can also hit the bank side: the bank sees payments from strangers and blocks the card. That is the bank's own check, and the exchange cannot lift it. OKX says this directly in its help article. Talk to the bank and show the same P2P order history and chat. Binance has its own guide on preventing bank freezes in P2P.

How to avoid it next time

• Check the sending address before you release. Ask the buyer for the address they will pay from and check it in @freezecheck_bot: 3 free checks a day with the full report, link graph and PDF. You can also check 2 addresses a day right on this site.
• Check inside the deal chat. In any Telegram chat type @freezecheck_bot address. The verdict appears in the chat and the buyer sees it too.
• Read the verdict. 🟢 clean history. 🟡 indirect links: ask where the funds come from. 🔴 direct link to a freeze, sanctions or scam: do not take the deal. ⚪ not enough data: ask for another address or start small.
• Watch for third-party payments. The bank payment comes from a name that does not match the buyer's account. That is a classic sign of a dirty chain.
• Start small with new counterparties. A small first trade costs less if something goes wrong.

FreezeCheck covers TRON USDT (TRC-20) only. Its base holds 65 million labelled TRON addresses. For teams with many clients, read AML check for USDT and how to check a wallet before a trade.

FAQ

See also: USDT frozen on TRON: what to do, how to check a USDT wallet before a trade, AML check for USDT.