Iranian oil: Tether keeps control of its digital dollars

The most revealing detail in the US case concerning Iranian oil money is a footnote. To carry out the seizure, Tether is to destroy the targeted tokens and issue replacements for transfer into US government custody. The procedure described does not require the holders to hand over their private keys. A public blockchain can carry money whose issuer still controls important parts of its operation. Complaint, page 3, footnote 1.

On September 14, 2026, federal prosecutors in Manhattan sought the forfeiture of approximately $61 million in USDT, Tether’s stablecoin, which they describe as proceeds from sanctioned Iranian oil sales. The case involves Hong Kong intermediaries, Binance accounts, payments through US banks and a network of addresses on the TRON blockchain. The alleged oil proceeds and military beneficiaries remain the US government’s claims, not findings established by a final judgment. The prosecutors’ announcement expressly makes that distinction.

The court will have to decide what happens to the assets. For users of these digital dollars, the case also raises a practical question: how much control does a personal wallet give you when the issuer can block the tokens inside it?

The powers Tether retains

A stablecoin is a token designed to track a reference value. USDT targets one US dollar per token. It is not a dollar issued by the Federal Reserve, nor is it TRX, the native asset of the TRON network. Tether publishes the contract address for its USDT on TRON; the complaint identifies that network as the one involved in this case. Supported protocols; complaint, page 4.

Holding a private key allows a user to sign instructions. Whether those instructions can be executed also depends on the token’s rules. A smart contract is the program that implements those rules, including the transfers it permits and the powers retained by its administrator. In this case, the complaint specifically envisages Tether acting on the tokens without a transfer signed by their holders. Complaint, pages 3–4.

Tether has advertised its ability to freeze tokens for years. On December 9, 2023, it announced that its policy associated with sanctions administered by OFAC, the US financial sanctions authority, would extend to the secondary market. Tokens circulating outside Tether’s own platform could therefore be affected. Its terms, updated on February 26, 2026, also provide for freezes required by applicable law or imposed in the circumstances they specify. Tether’s policy; terms, section 2.

Self-custody and freedom from issuer control are different properties. Keeping a key away from an exchange removes one dependency. It does not cancel the issuer’s powers over its asset. The user may control the safe while someone else still determines important rules governing its contents.

The oil-payment network alleged by prosecutors

The complaint places Blessed Trust Limited and Hexa Whale Trading Limited, both incorporated in Hong Kong, at the centre of the arrangement. Prosecutors say they converted bank money into cryptocurrency and used Binance trading accounts to facilitate payments connected to Iranian oil. Being an exchange’s customer does not automatically make the exchange a participant in that customer’s alleged wrongdoing. Complaint, pages 16–17, paragraphs 42–47.

Investigators group at least seven addresses under the label Entity A, based on indicators of coordinated operation. They attribute more than approximately $1.5 billion received and distributed to that network and connect the funds to Iranian oil sales. They then describe links to the Iranian exchange Nobitex and intermediaries associated, in their account, with the Islamic Revolutionary Guard Corps (IRGC). Those connections are the investigators’ assessment. Complaint, paragraphs 43–47 and 53.

The $1.5 billion figure concerns an alleged volume of funds moving through a network. The $61 million targeted for forfeiture is a token balance at specified addresses. Adding the figures would be meaningless. Dividing one by the other would not establish how much of Iran’s oil revenue has been recovered. Money can appear at several stages of a payment chain; the public filing does not provide a complete reconciliation that removes every potential double count.

Entity A must also be distinguished from the ten target addresses. The complaint expressly identifies two of the ten as members of Entity A and describes the others’ connections to that network. Ten frozen addresses do not imply ten people, ten companies or ten Binance accounts. Complaint, pages 18–19, paragraphs 51–54.

The route through US banks

Pages 17 and 18 bring the story back to bank transfers. An anonymised company, Company-1, allegedly sent approximately $37.15 million to Hexa Whale in around eleven wires during March and April 2024. It allegedly transferred a further $443.49 million to Blessed Trust in around thirty-two transactions between November 13, 2024 and March 5, 2025. According to prosecutors, these payments passed through at least one US correspondent account held at a bank headquartered in the Southern District of New York, which includes Manhattan. Complaint, paragraph 49.

A correspondent account enables one bank to have another settle transactions on its behalf. In the alleged arrangement, that creates a connection to the US financial system even when customers and their business activities are located elsewhere. The bank is not named. Processing a payment does not establish that it knew of a potentially unlawful purpose.

The two amounts sum to $480.64 million, across approximately forty-three transactions. That is our calculation from the complaint’s figures, covering different periods, not a reported annual total. Additional transfers between Hexa Whale accounts appear in paragraph 50. They are excluded here because adding them could count funds that had already entered the network a second time.

In the prosecution’s account, bank money feeds the token conversions, then exchanges and self-custodied addresses handle further stages. The infrastructures overlap. At each step, a different intermediary has access to different information and different ways to intervene.

Frozen in 2025, brought to court in 2026

The table on page 19 lists seven addresses frozen on June 15, 2025, and three frozen on July 26, 2025. It records an aggregate balance of approximately 61,192,367.59 USDT in the complaint filed on September 14, 2026. The decimal precision comes from the table, which itself describes the amounts as approximate. These are balances reported at filing, not necessarily those on the freeze dates. Complaint, paragraph 52.

September’s development is the public proceeding and the request for forfeiture. Prosecutors also report a seizure warrant issued on or about September 14, 2026. A freeze prevents the affected tokens from being used. A seizure places assets under the authorities’ control. Final forfeiture is the legal outcome being sought from the court. Complaint, page 20, paragraph 55; the prosecutors’ qualification concerning judgment.

The prosecutors’ announcement says they are seizing the assets. The footnote on page 3 describes execution in the future tense: Tether is to destroy the targeted tokens and issue replacements of the same value, which will then enter US government custody. We describe the mechanism envisaged in the complaint here; we have not independently checked its execution on TRON.

In this fictional example of 100 USDT, destroying 100 and subsequently issuing 100 leaves the total quantity unchanged once both operations are complete. The transaction history remains; what changes is which tokens can be used and who controls them. Transferring tokens to a new custodian is a separate operation from redeeming them for bank dollars.

The court does not become TRON’s administrator. The procedure relies on Tether’s powers and cooperation, as described in the complaint. Treating it as evidence that US authorities possess a universal administrative key to all cryptocurrencies would be another mistake.

Binance disputes the scope of the Iran-linked funds

Binance’s response deserves consideration without being treated as an independent audit. In its March 6, 2026 letter, the company said law enforcement contacted it about Hexa Whale in April 2025, that it supplied information in June, and that it removed the accounts on August 13, 2025. It dated the requests concerning Blessed Trust to summer 2025 and its removal to January 2026. It also said it knew of no Binance account transacting directly with an Iran-based entity. Official response, sections II.A and II.B.

On March 10, Binance further disputed the amounts involved. In the network its teams examined, it said at most $126.1 million eventually reached wallets linked to Iranian wallets after multiple transfers, of which at most $24.1 million reached IRGC-related wallets. It defended its investigation and rejected claims that it had punished staff for raising compliance concerns. Binance’s statement.

Those amounts are not directly comparable with the complaint’s $1.5 billion: the source, coverage and attribution criteria differ. Ignoring Binance’s figures would be as misleading as subtracting $24.1 million from $1.5 billion and presenting the difference as a measured prosecutorial error.

An absence of direct transactions does not fully answer an allegation concerning intermediary routes. Equally, a sequence of transfers does not establish what an exchange knew when a payment occurred. The timing of alerts, the information available and the actions taken matter more than the number of links in the chain alone.

On April 1, 2026, Democratic Senator Richard Blumenthal challenged aspects of Binance’s account and requested further documentation as part of congressional oversight. The September 14 proceeding, meanwhile, is directed against the assets: the complaint’s first page identifies them as the defendants. Blumenthal’s letter; complaint, page 1.

Connecting transactions to oil sales

A blockchain can record a sending address, a recipient, a quantity and a timestamp. It does not necessarily record the oil invoice, a company’s beneficial owner or the legal intention behind the transaction. To connect the addresses, investigators cite coordinated activations and transfers of TRX and USDT, among other indicators. They combine these with other evidence, including bank movements. Complaint, pages 16–19.

A token transfer tells us about a payment. Identifying who directed it requires combining other information; establishing money laundering requires showing where the funds came from and the circumstances of the transaction. That is the work of the investigation. Our guide to reading on-chain data explores these attribution problems.

Portable dollars still have an issuer

In the alleged network, participants changed payment infrastructure while continuing to use an instrument referenced to the dollar. Payments moved beyond bank accounts while retaining the same monetary reference and the issuer’s private controls. Tether’s terms also state that its tokens are not legal tender and that direct redemption is subject to eligibility and verification requirements. Terms, section 4.1.

The strongest argument for retaining issuer controls is practical: they can help immobilise criminal proceeds and recover assets. On March 3, 2026, the Financial Action Task Force, the international anti-money-laundering body, listed freezing, burning and withdrawing stablecoins among possible secondary-market controls. It called for proportionate, risk-based measures and recognised the instruments’ legitimate uses. These are policy recommendations, not a globally self-executing law governing every wallet. FATF publication.

That leaves questions about the criteria for blocking funds, how their holders are identified and how mistakes can be corrected. The ability to challenge a decision matters as much as the technical ability to implement it.

The case makes the issuer’s retained powers tangible. Even in a personal wallet, USDT remains subject to Tether’s rules. Understanding the money you hold means asking who can block it, under what circumstances and with what avenues of appeal. Our guide to stablecoins extends that discussion to reserves and regulation.

Sources

The following documents were consulted on September 15, 2026. Page references use the court PDF’s pagination.

1. U.S. District Court, Southern District of New York / DOJ. Civil forfeiture complaint, September 14, 2026. Case 1:26-cv-08010, document 1. Technical footnote: p. 3; network and wires: pp. 16–18; balances and freezes: p. 19; warrant: p. 20.

2. DOJ / USAO SDNY. Manhattan prosecutors’ announcement, September 14, 2026. Filing announcement and express qualification that allegations have not been adjudicated.

3. Tether. Tether freezing policy, published December 9, 2023, decision dated December 1. Extension to the secondary market.

4. Tether. Tether terms, updated February 26, 2026. Sections 2 and 4.1: freezing, token characteristics and direct redemption.

5. Tether. Tether supported protocols. TRON/TRC20 section identifies the official USDT contract; undated page.

6. Binance. Binance’s congressional response, March 6, 2026. Sections II.A and II.B: law-enforcement requests and account removals.

7. Binance. Binance’s further response, March 10, 2026. Its asserted scope of Iran-linked funds and defence of its investigation.

8. Office of Senator Richard Blumenthal. Richard Blumenthal’s published letter, April 1, 2026. Challenges and document requests; political oversight source.

9. Financial Action Task Force (FATF). FATF, March 3, 2026. Institutional summary of the stablecoin and unhosted-wallet report, particularly “Mitigating Risks”.

Limitations

This documentary investigation is neither an exhaustive reconstruction of TRON flows nor a finding about the culpability of the parties mentioned. Balances, address connections and the asserted origin of funds come from the US complaint; alternative amounts and account-removal dates come from Binance’s statements. Both are interested sources and are identified accordingly.

We have not independently checked current blockchain balances or execution of the burn-and-reissue sequence. The September 14 complaint and announcement present a request for forfeiture for the court to determine; they do not publish a final judgment. USDT amounts are not contemporaneous dollar market quotations. This article does not audit Tether’s reserves or Binance’s overall compliance.