Tether Freeze Hits Casino VIP Hosts’ $42.4M Before a Warrant
Two Bangkok VIP hosts sue Tether after 42.4M USDT was frozen on an informal Homeland Security request, months before any warrant.
Two Bangkok gaming promoters say a U.S.-listed casino operator screened them and their VIP customers under its own know-your-customer program. Tether’s blacklist function did not ask. On October 30, 2025, the stablecoin issuer froze 42.4 million USDT across ten Ethereum addresses on what their lawsuit calls an informal request from a Homeland Security Investigations agent, and the warrant came 112 days later. The Tether freeze on casino VIP hosts is now before a federal judge in Manhattan, and 317 days on, every one of those addresses is still locked.

KEY FACTS AT A GLANCE
- Case: Rukthammachalern v. Tether Holdings, S.D.N.Y. 1:26-cv-07400, filed Aug. 31, 2026; assigned to Judge Lewis J. Liman
- Frozen: 42,417,785.62 USDT across ten Ethereum addresses on Oct. 30, 2025; all ten still blacklisted on Sept. 12, 2026
- Warrant: E.D.N.C. 5:26-MJ-1267-JG, dated Feb. 19, 2026, 112 days after the freeze; the warrant itself is sealed
- Government case: Part of a $61 million pig-butchering seizure announced Feb. 24, 2026; the announcement names no one
- Plaintiffs’ business: “A legitimate authorized gaming promotion business” for an unnamed U.S.-listed casino operator in Asia, per their North Carolina filing as reported by Fintech Business Weekly
- Charges: None public; the complaint says no civil forfeiture complaint has been filed against the addresses
- Tether’s response: The suit is “a baseless attempt to interfere” with its law-enforcement work
- Claims: Declaratory judgment, conversion, trespass to chattels, unjust enrichment, injunction; jury demanded
What happened, on-chain and on paper
The freeze is visible to anyone with a block explorer. At 23:00:35 UTC on October 30, 2025, Tether’s USDT contract logged the first of ten blacklist events; the last landed about two and a half minutes later. The addresses held 42,417,785.62 USDT between them, a figure the complaint states to the cent and the chain confirms. Nine belong to Nutthawat Rukthammachalern and one to Natthawat Kasamvilas. That single address holds 26.1 million USDT, 61.6% of the total.
The owners found out the way anyone does: a transfer failed. According to the complaint, they tried to move USDT on October 31 “in the normal course of business” and could not. Kasamvilas emailed Tether on November 1. Tether’s reply the next day did not say it had frozen anything. It gave him the email address of a Homeland Security Investigations special agent “[f]or more information” on the “deposit addresses,” told him “You may inquire about the funds using the provided address,” and added: “We do not have further information at this time.”
The complaint’s central allegation is about what did not exist at that point. It says Tether acted “at the informal request of a U.S. government agent, without any warrant, order, or legal process of any kind directed to Defendants, and without notice to Plaintiffs.” Elsewhere it describes Tether’s “actual practice of freezing assets solely on the basis of a phone call from a government agent without any order or formal process.” Tether has not given its own account of the October contact. Its only public response to the suit is the one-sentence statement quoted further down.
The legal process arrived on February 19, 2026, when a magistrate judge in the Eastern District of North Carolina issued seizure warrant 5:26-MJ-1267-JG covering the ten addresses and others. The warrant is sealed, but the complaint quotes the HSI affidavit behind it. The agent intended to “work with Tether to seize the funds associated with” the addresses, and once the warrant was transmitted, “Tether would ‘burn’ (i.e. destroy) the USDT associated with” them and “then reissue the equivalent amount of USDT tokens . . . and transfer that equivalent amount of USDT to a government-controlled wallet.” Five days later the U.S. Attorney’s Office in Raleigh announced the seizure of “over $61 million worth of Tether,” traced to addresses “allegedly associated with the laundering of criminally derived proceeds stolen from victims of cryptocurrency investment scams.” The release thanked Tether. It named no one.
“The Department of Justice and HSI acknowledges Tether for its assistance in transferring these assets.”
— U.S. Attorney’s Office, Eastern District of North Carolina, Feb. 24, 2026
As of September 12, the burn has not happened. Every one of the ten addresses still returns a blacklisted flag from the USDT contract, and the balances add up to 42,417,887 USDT, about 101 USDT more than on the day of the freeze. That difference is worth knowing. The blacklist blocks outgoing transfers only, so anyone can still send USDT into a frozen address. It will not come out.
Who the plaintiffs say they are, and what the wallets look like
The Manhattan complaint describes the two men only as “businessmen who are subjects of the Kingdom of Thailand” who “accepted and made payment with USDT in the course of their business just as Defendants have encouraged users of USDT in the secondary market to do.” The casino connection comes from their other filing. According to Fintech Business Weekly, which reviewed the return-of-property motion the pair filed in North Carolina on July 31, they describe “a legitimate authorized gaming promotion business” that works with an unnamed U.S.-listed company operating licensed casinos in Asia. The frozen funds relate to “VIP gaming experiences,” meaning transport, food and lodging for high-value customers, and the casino company “conducts KYC/AML screening on authorizing gaming promoters, including Rukthammachalern and Kasamvilas, and on the VIP customers,” per the same report.
In the trade, that job has a name. A gaming promoter, or junket, brings players to a licensed casino, arranges their stay and often settles their play. In Macau the role is licensed and capped; elsewhere it runs on the operator’s own vetting. The plaintiffs’ point is that the vetting happened. The operator’s compliance program looked at the promoters and at their customers, and none of it reached the wallets.
The government’s side of the record points the other way, though not at them by name. The February announcement traced the $61 million to laundering of pig-butchering proceeds, the investigation began with a single victim’s report to the HSI Tip Line, and according to Fintech Business Weekly the North Carolina victim, identified in the filings as “GM,” lost about $30,000 that investigators followed to “a known scam consolidation wallet.” The FBI’s Internet Crime Complaint Center logged $8.6 billion in investment-fraud losses for 2025, most of it in cryptocurrency, which is the pressure behind fast freezes. Separately, the analytics firm BitOK published a write-up on November 14, 2025, of what it called the largest Tether freeze of that year: more than 15 Ethereum addresses and over $45 million frozen at the end of October, with the 26.1 million USDT address as the largest. BitOK described the group as consolidation and transit addresses for “pseudo-investment fraud,” with cash-out routes through Binance, Kraken, HTX, KuCoin, OKX and WhiteBIT. It named no owners, and it did not say which addresses belong to the plaintiffs.
Two sets of facts sit next to each other without resolving. Three of Rukthammachalern’s addresses hold exactly 2,000,000.02 USDT each and a fourth holds 5,000,000.02, round figures that can describe a promoter’s settlement float or a launderer’s layering pattern, and nobody with authority has said which. No indictment of either man has surfaced, the government has not filed a civil forfeiture complaint against the addresses, and the complaint says the pair have told prosecutors the warrant “fails to establish probable cause.” According to Fintech Business Weekly, they met HSI officials in person on May 21, 2026, and came away, in the words of their filing, with “no substantive answers and no path” to challenge the freeze. Their lawyer, Mark Beckett, told Cointelegraph that his clients received the USDT as payment in legitimate commercial transactions.
WHAT THE RECORD DOES NOT SHOW
No charge against either plaintiff. No forfeiture complaint naming the addresses. No public copy of the warrant or the affidavit behind it. No name for the casino operator. Every description of the wallets as scam infrastructure comes from the government’s announcement, which names no one, and from BitOK’s analysis, which names no owners.
The legal fight over an informal request
The suit is against Tether, not the government, and it says so: it is “an action against Defendants as private parties for their own voluntary and wrongful conduct.” The four Tether entities named are all incorporated in El Salvador. Counsel for the plaintiffs are Mark Beckett of Beckett Law in New York and Victoria Bruno and Veronica Renzi of Womble Bond Dickinson. The complaint runs 38 pages and pleads five things: a declaration that the seizure process gives Tether no authority over the tokens, conversion, trespass to chattels, unjust enrichment, and an injunction against the burn. A jury is demanded.
“An informal request from a law enforcement agent is not legal process. It is not issued by a court; it is not issued pursuant to any statutory authority; it is directed to no one; it commands nothing; it affords the property owner no notice, no hearing, and no opportunity to be heard.”
— Complaint, Rukthammachalern v. Tether Holdings, paragraph 65
Four arguments do most of the work. The first is contract. The plaintiffs bought their USDT on the secondary market and never had a Tether account. Tether’s Token Terms of Sale and Service, updated February 26, 2026, reserve the right to “freeze any Tether Tokens held by you,” but by their own wording they apply to users of the tether.io site, and the complaint says they “are not applicable to Plaintiffs.” The second is timing: a warrant issued on February 19 “could not, and did not, authorize conduct that preceded it.” The third is the burn. In a civil forfeiture, the complaint argues, the government’s job before judgment is to “secure and preserve” property, and replacing the tokens with new ones minted into a government wallet “is the destruction of that property and its replacement with different property.” The fourth is money. Tether invests the dollars behind USDT, mostly in U.S. Treasury securities custodied in New York, and the complaint says a freeze “costs Defendants nothing, and preserves for Defendants the interest generated from the investments they make.” The unjust-enrichment count asks for that income back. Tether has not addressed the point.
The case is the third of its kind pending in the same courthouse, and none has been decided.
| Case | Court and filing date | USDT frozen | Freeze requested by | Status |
|---|---|---|---|---|
| Rukthammachalern v. Tether Holdings | S.D.N.Y. 1:26-cv-07400, Aug. 31, 2026 | 42.4M | HSI agent, informally, per the complaint | Summonses issued; no answer yet |
| Riverstone Consultancy v. Tether Holdings | S.D.N.Y. 1:25-cv-08454, Oct. 13, 2025 | 44.7M | Bulgarian police, per DL News | Pending before Judge Victor Marrero |
| Judgment creditors’ claim to IRGC-linked USDT | S.D.N.Y., May 2026 | 344.1M | OFAC designation | Pending; no ruling reported |
Riverstone, a Houston firm, sued in October 2025 after Tether froze 44.72 million USDT across eight wallets on April 4, 2025, at the request of Bulgarian police, according to DL News. In May, attorney Charles Gerstein asked the same court to make Tether hand 344 million frozen USDT to holders of terrorism judgments against Iran, according to Cryptonews. No court has yet ruled on whether an issuer may freeze a stranger’s tokens on a police request, which is why both sides are treating this case as the test. The fiat side of the industry knows the shape of the problem: when BetMGM froze a $3.3 million account, the player at least had a regulator to complain to and a contract to point at. The plaintiffs here argue that no contract exists.
Tether’s position and the freeze machine
“The new lawsuit against Tether is a baseless attempt to interfere with Tether’s important work with global law enforcement, including the Department of Justice, to prevent the unlawful use of USDT.”
— Tether, statement to reporters, Sept. 2, 2026
That one sentence is Tether’s only public comment on the case. Neither its newsroom nor its chief executive, Paolo Ardoino, has posted about it. The company’s broader position is on the record. In April, announcing a $344 million freeze of addresses designated as linked to Iran’s Islamic Revolutionary Guard Corps, Tether said that freezing on request “has become a routine part of the company’s response to lawful requests from authorities in the U.S. and abroad.” Ardoino added: “USD₮ is not a safe haven for illicit activity.” The word carrying the weight in the first sentence is “lawful.” The complaint’s whole case is that the October request was not process at all.
The scale is the context an operator needs. By Tether’s own count, its cooperation with more than 340 agencies in 67 countries has helped freeze more than $5 billion across 2,800-plus cases, including $2.5 billion with U.S. authorities. Independent data from BlockSec, which tracks the blacklist on-chain, counted 9,597 blacklisted addresses holding $5.69 billion in USDT as of July 26, 2026, with 2025 a record year at 4,163 addresses and $1.26 billion. According to the same BlockSec data, 55.6% of the value frozen in 2025 was later destroyed, 3.6% of the addresses were released, and for those that were, the median wait was 18.2 days.
Gambling money is a regular passenger. Tether froze $544 million in February at the request of Istanbul prosecutors investigating an illegal betting network they allege was run by Veysel Şahin, a case dyutam covered when Turkey began pressing its banks into the crackdown. It supported the Justice Department’s $225 million civil forfeiture in June 2025 tied to a Manila scam compound, and its September 11 newsroom post lists the $61 million North Carolina seizure alongside both. The USDT rails that carried Iran’s illegal gambling network through Dubai run on the same contract, with the same switch.
Washington’s answer: GENIUS versus CLARITY
The law that governs stablecoin issuers today, the GENIUS Act signed in July 2025, requires a permitted issuer to be able to comply with any “lawful order,” defined as a final and valid writ or order from a court or an authorized federal agency that identifies the stablecoins or accounts “with reasonable particularity.” It says nothing about an agent’s email. That silence is the gap the plaintiffs are standing in. It is also the gap Senator Cynthia Lummis wants closed the other way.
“This lawsuit highlights a dangerous gap in the fight against illicit finance in crypto. Right now, exchanges and issuers can’t freeze stablecoins if they suspect illicit activity without fear of a lawsuit.”
— Sen. Cynthia Lummis, on X, Sept. 10, 2026
Section 305 of the CLARITY Act, in the version the Senate Banking Committee passed on May 12, would let a stablecoin issuer or digital-asset service provider hold a transaction for 30 days on its own “reason to believe” it involves illicit activity, extend the hold by 150 days on a qualified written request from law enforcement, and, if it acted in good faith, take a safe harbor from private civil suits. Participation is voluntary. The Senate has a cloture vote on the bill scheduled for September 15, and it needs 60 votes. Jason Mikula, the Fintech Business Weekly author who reported the casino detail, replied to the senator on X that the provision reads as if Tether had sponsored it. Dyutam’s earlier coverage of the CLARITY Act’s stablecoin fight explains how the bill got here.
For the reader keeping score: under current practice a freeze needs no process and carries no shield; under GENIUS an issuer must obey an order but is told nothing about a request; under Section 305 the request becomes enough and the shield arrives with it. If the bill passes, the question this lawsuit asks, whether an informal request can justify a freeze, gets answered by statute for future cases. It does not answer it for October 30, 2025.
What it means for VIP hosts, junkets and crypto-casino treasuries
Strip the litigation away and the operational facts are these. A licensed operator’s screening of a promoter, and of the promoter’s customers, does not travel with the tokens. Tether’s blacklist looks at addresses, not at compliance files. The request that triggered this freeze did not need a judge, and the freeze took minutes. Once frozen, the money’s odds of release are the odds in BlockSec’s data: 3.6% in 2025. Four practices follow.
STEP 1: KEEP USDT AT REST SMALL
A balance that sits in one address for weeks is what a consolidation label describes. Sweep settlement float to fiat, or to an exchange account that has its own legal process, on a schedule.
STEP 2: SPLIT THE RAILS
The plaintiffs held everything on one issuer’s contract. USDC has its own blacklist and bank wires have their own delays, so concentration on any single rail is the exposure. Most crypto casinos already take several coins; see how crypto casino deposits and bonuses differ from fiat before choosing which to hold.
STEP 3: SCREEN THE COINS, NOT JUST THE COUNTERPARTY
The addresses in this case were frozen for what the government says flowed through them, not for who owned them. Checking a customer’s identity does not check where the USDT they hand over has been. Both checks are needed, and only one of them is KYC.
STEP 4: DOCUMENT THE TRAIL ON DAY ONE
The complaint’s strongest evidence is a dated email and an on-chain timestamp. A host who cannot show who sent what, when, and for which customer has no return-of-property motion to file.
Operators will recognize the incentive on Tether’s side of the table. Casino fines connected to the Mathew Bowyer illegal bookmaking case have reached $34 million, and a money services business that ignores a federal agent’s request about suspected scam proceeds is the one that gets fined. Freezing first and asking later is the cheap decision for the issuer. What this case will decide is whether “later” has a deadline, and who pays for the wait.
KEY TAKEAWAYS
- Freeze first, warrant later — Tether blacklisted ten addresses holding 42.4 million USDT on Oct. 30, 2025; the seizure warrant the complaint cites is dated Feb. 19, 2026, 112 days later.
- Still frozen — All ten addresses remain blacklisted on-chain as of Sept. 12, 2026, 317 days on, and the tokens have not been burned.
- The KYC did not reach the wallets — The plaintiffs say a U.S.-listed casino operator screened them and their VIP customers, per Fintech Business Weekly’s account of their North Carolina filing.
- The government’s case is a $61 million seizure — Announced Feb. 24, 2026, as pig-butchering proceeds; the announcement names no one, and no charge or forfeiture complaint against the plaintiffs or the addresses is public.
- Tether calls the suit baseless — It says freezing on lawful requests is routine and, by its own count, has helped freeze more than $5 billion.
- Congress may write the rule — CLARITY Act Section 305 would give issuers a civil-liability safe harbor for 30-day holds; the Senate’s cloture vote is scheduled for Sept. 15.
FAQs
Yes. The USDT smart contract has a blacklist function that the issuer controls, and it works on any address regardless of who holds the keys. According to BlockSec, 9,597 addresses on Ethereum and Tron were blacklisted as of July 26, 2026, holding $5.69 billion in USDT.
No law requires one today. The complaint in this case says Tether froze the ten addresses on an informal request from a Homeland Security Investigations agent, 112 days before a warrant existed. Tether’s terms reserve the right to freeze tokens held by its own users, and the lawsuit tests whether that reaches holders who never had a Tether account.
Yes. The blacklist blocks outgoing transfers only. The ten addresses in this case have gained about 101 USDT since the freeze, and none of it can be moved out.
The routes are a petition to Tether’s compliance team, a withdrawal of the request by the agency that made it, or a court: a return-of-property motion, a claim in the forfeiture case, or a suit against the issuer. According to BlockSec, 3.6% of addresses blacklisted in 2025 were released, with a median wait of 18.2 days for those that were.
Tether zeroes the frozen address with a destroy function and mints the same amount of USDT into a wallet the government controls. The HSI affidavit quoted in the complaint describes exactly that plan. The plaintiffs argue it is destruction of their property rather than a seizure, and that no court has authorized it.
The complaint alleges that it does, because the dollars backing the tokens stay invested in Treasury securities whether or not the tokens can move, and it asks for that income as unjust enrichment. Tether has not addressed the point publicly.
It would let issuers and digital-asset service providers hold a transaction for 30 days on a reasonable belief of illicit activity, extend the hold by 150 days on a written law-enforcement request, and take a safe harbor from private civil suits for holds made in good faith. Participation is voluntary. The Senate’s cloture vote is scheduled for Sept. 15, 2026.
Not publicly. The Justice Department’s announcement of the $61 million seizure names no one, no indictment has surfaced, and the complaint says no civil forfeiture complaint has been filed against the addresses. The government’s position is that the addresses are associated with laundering of scam proceeds; the plaintiffs say the funds were payment for legitimate gaming-promotion business.
Not yet. Riverstone Consultancy’s suit over 44.72 million USDT frozen for Bulgarian police has been pending in the Southern District of New York since October 2025, and a May 2026 claim to 344 million frozen IRGC-linked USDT is also undecided. This case is the third, and no court has ruled on the underlying question.
Sources
- Complaint, Rukthammachalern et al. v. Tether Holdings S.A. de C.V. et al., No. 1:26-cv-07400 (S.D.N.Y. Aug. 31, 2026) — U.S. District Court, via CourtListener
- Docket, Rukthammachalern v. Tether Holdings, S.A. de C.V., 1:26-cv-07400 — CourtListener
- U.S. Attorney’s Office EDNC Announces Seizure of $61 Million Dollars’ Worth of Cryptocurrency — U.S. Department of Justice, Feb. 24, 2026
- Tether Acknowledged by DOJ for Support in $61 Million Seizure Linked to Pig Butchering Fraud — Tether, Feb. 25, 2026
- Tether Supports Freeze of More Than $344 Million in USD₮ in Coordination with OFAC and U.S. Law Enforcement — Tether, Apr. 23, 2026
- DOJ Credits Tether’s Assistance in $52 Million Enforcement Action Against Global Scam Network — Tether, Sept. 11, 2026
- Tether Token Terms of Sale and Service — Tether
- Blacklist transaction for address 0xf3bF…A3eB, Oct. 30, 2025 — Ethereum blockchain, via Etherscan
- GENIUS Act, Public Law 119-27 — U.S. Congress
- Post on the Tether lawsuit and the CLARITY Act, Sept. 10, 2026 — Sen. Cynthia Lummis
- 2025 Internet Crime Report — FBI Internet Crime Complaint Center
- Homeland Security, Tether Illegally Seized Stablecoins, Two Legal Filings Allege — Fintech Business Weekly, Sept. 6, 2026
- Tether Froze $42.4 Million Three Months Before A Seizure Warrant, Lawsuit Says — The Defiant
- Two Thai Businessmen Sue Tether Over $42.4M USDT Freeze as Issuer Calls Case ‘Baseless’ — CryptoPotato
- Thai Businessmen Sue Tether for Freezing $42M in $61M Pig Butchering Case — Cointelegraph, Sept. 2, 2026
- The Largest Tether Freeze of 2025 — BitOK, Nov. 14, 2025
- USDT Blacklist 2026: Who’s On It, How Tether Decides — BlockSec, July 26, 2026
- What’s Actually in CLARITY: A Section-by-Section Look at the AML and Law Enforcement Provisions — TRM Labs, May 14, 2026
- Senate Adjourns Without Clarity Act Vote, But September Vote Now on the Calendar — Troutman Pepper Locke
- Tether froze $44m in crypto for the Bulgarian police. A Texas firm is suing to get it back — DL News, Oct. 17, 2025
- A Lawsuit Just Demanded Tether Hand Over $344 Million in Frozen Iranian Funds — Cryptonews via Yahoo Finance, May 17, 2026
- Tether Freezes $544M in Crypto Tied to Turkish Illegal Betting Probe — Cointelegraph, Feb. 2026
- DOJ seizes record $225 million in crypto tied to global ‘pig butchering’ scams — CNBC, June 18, 2025



