AML Checks and “Dirty” USDT: Why an Exchange May Freeze Your Coins

15 июля 2026 · 11 min read · MW Exchange
AML Checks and “Dirty” USDT: Why an Exchange May Freeze Your Coins

An exchange service may pause a transaction if AML scoring identifies a high-risk origin for USDT. The check assesses the history of the coins, not the customer’s identity. “Dirty” USDT refers to tokens linked to high-risk sources. Such a signal does not prove that the owner has done anything wrong. A responsible service will notify you about the suspension, explain the reason, and outline the next steps.

What Is a Cryptocurrency AML Check?

A cryptocurrency AML check is an analysis of fund movements on the blockchain used to assess the risk of their origin. It does not indicate that the owner is guilty; it identifies links between a transaction and addresses or services with an elevated risk status.

Seeing only the latest transfer is not enough for this type of analysis. Scoring systems trace the transaction chain and examine where the funds came from. They also look for connections to known address clusters. A cluster is a group of addresses that an analytics system associates with a particular service, wallet, or fund-flow pattern.

The result of the check is a risk assessment, not a verdict on the recipient. An address may become part of a high-risk transaction chain even if its owner honestly bought USDT, accepted payment, or received a transfer from someone they know.

AML is often confused with KYC, although these procedures answer different questions:

  • AML concerns the coins: where they came from and which addresses they interacted with.
  • KYC concerns the person: who the customer is and what identification data they provide.

One procedure does not replace the other. Identity information does not automatically make coins clean. Likewise, a risk-related blockchain connection does not prove that the current owner was involved in suspicious activity.

Before making an exchange, read the MW Exchange AML/KYC Policy. The current policy text—not summaries in chats or forums—defines the verification terms.

Where “Dirty” USDT Comes From—and How You Can Receive It Without Breaking Any Rules

“Dirty” USDT can appear in your wallet when a transfer you receive is linked to high-risk addresses or services. You may know nothing about that connection because the blockchain retains the previous path of the funds regardless of changes in ownership.

A common scenario is a P2P deal with an unfamiliar counterparty. You select an offer, receive USDT, and consider the transaction complete. However, the seller may have received those funds from an unverified source. Your lack of knowledge does not erase the transaction history.

P2P does not mean fraud or problematic fund origins. The risk lies elsewhere: you do not always know who is on the other side of the deal or where their assets came from. The differences between the main purchasing methods are explained in P2P, exchange service, or crypto exchange.

You can also receive a risk-related transaction trail in other situations:

  • you accepted a prize, bonus, or payout from a questionable service;
  • a client paid you in USDT that they received from an unverified third party;
  • you bought cryptocurrency through a service that did not analyze the origin of its reserves;
  • someone you know transferred coins without knowing about their high-risk links;
  • you combined incoming funds from several unrelated sources in one wallet.

A particularly difficult situation arises when USDT was payment for real work, goods, or services. The recipient fulfilled their obligations but discovered the problematic history of the funds during a subsequent exchange. This does not automatically make them involved in earlier transactions.

The recipient is often not at fault, but they still face the consequences. They are the one dealing with a suspended order and a request to explain the source of funds. They may need to find information about the payer, the sender’s address, and the reason for the payment.

That is why it is better to check the origin of USDT before accepting a payment. This is especially important when dealing with new counterparties, unfamiliar services, and offers with suspiciously favorable terms.

Risk Categories: Table

A risk category indicates how much additional review a transaction history may require. It does not establish the owner’s guilt and is not universal across all services.

Risk levelWhat it meansTypical sourceWhat an exchange service usually does
CleanThe available history contains no significant links to known high-risk sources.A clear source of funds and a transparent transfer path.Continues processing the order as usual.
Low riskThere are indirect or old links that do not appear critical.Intermediate transfers and interactions with common services.May conduct an additional review or continue the exchange.
Elevated riskThe history includes links that require manual clarification.P2P chains with unclear origins, mixed sources, questionable payouts.May pause the order and ask for an explanation of the source of funds.
High riskSignificant links to high-risk addresses or services have been identified.Transaction paths associated with high-risk activity.Does not process the transaction automatically and reviews the case separately.

Different scoring systems may assess the same history differently. The conclusion depends on data sources, the depth of analysis, address clustering, and the rules of the specific service. Therefore, a preliminary check in one tool does not guarantee the same result in another.

The term “clean” also does not mean that the assessment can never change. New transactions are added to the blockchain, and analytics systems refine links between addresses. At the same time, elevated risk does not prove that funds originated illegally.

There is no universal threshold that guarantees an exchange will be completed or stopped. The decision depends on the transaction context and the rules of the service receiving the funds.

What an Exchange Service Does When Scoring Identifies Risk: The Actual Procedure

Схема скорингу ланцюжка транзакцій криптовалюти

When scoring identifies risk, an exchange service pauses further processing of the order and reviews the source of funds. The blockchain transfer may already have been completed, but the payout for the order is not processed automatically until the review is finished.

The typical sequence is as follows:

  1. The customer sends USDT to the address specified in the order.
  2. The service sees the incoming transfer and analyzes the transaction history.
  3. If the check finds no significant risk, the order proceeds.
  4. If elevated or high risk is detected, processing may be paused.
  5. The customer is notified about the review and may be asked to provide information about the source of funds.
  6. After review, the order may be continued, rejected, or the possibility of returning USDT to the sender may be considered.

A return is not an automatic guarantee. It depends on the sender’s address, the network, the circumstances of the transfer, and the review result. Do not send another payment or attempt to split the amount to bypass scoring. This will only create new transactions and make the review more complicated.

A suspended order is inconvenient for the customer. They have already transferred cryptocurrency, are waiting for the exchange result, and may need the funds without delay. However, completely avoiding checks creates another risk: problematic USDT enters the service’s reserves and is then passed on to the next customer.

Clear communication is no less important than scoring itself. The customer should understand what happened to the order, what information is expected from them, and what the next step may be. Silence or unexplained requests do not help resolve the issue.

If support asks you to explain the origin of USDT, provide only factual information. This may include the sender’s address, transaction hash, platform name, or an explanation of what you received the payment for. Do not invent circumstances or send random screenshots unrelated to the transfer.

How to Check Coins Before Sending Them: 5 Steps

You can check USDT before sending it by reviewing its source, transaction path, and preliminary AML scoring result. No method provides an absolute guarantee, but a consistent review reduces risk.

  1. Identify the source of the coins.

Record who sent you the USDT, what it was for, and which address it came from. If it was a payment from a client, save the agreement and transaction hash. If it was a purchase, save information about the platform or counterparty. This information does not change the scoring result, but it helps explain the source of funds.

  1. Avoid P2P deals with unverified counterparties.

An attractive exchange rate does not offset the risk of receiving tokens with an opaque history. Assess the seller’s reputation and whether the transaction makes sense. Do not agree to receive a transfer from a third party who is not part of your arrangement.

  1. Review the address or transaction in a blockchain explorer.

An explorer shows the transfer status, amount, addresses of the parties, and previous fund movements. A step-by-step guide is available in how to check a transaction in a blockchain explorer. This review can help you see the transaction path, but it does not replace AML analysis.

  1. Use a public AML scoring service.

Such a tool can check an address or transaction and provide an indicative risk assessment. Treat it as an early signal, not permission for any exchange. Methodologies differ, so another service may reach a different conclusion.

  1. Do not mix funds from different sources.

Keep P2P purchases, client payments, and other incoming transfers separate. If a particular transfer raises questions, it will be easier to isolate it from the rest of your funds and explain its origin.

Common AML Myths

Призупинена угода на етапі перевірки походження монет

Myth: “An exchange without verification is safer.” What actually happens: the absence of clear checks does not protect the customer. You do not know how the service handles high-risk incoming funds or whether it may pass them on to another user. Before making a deal, go through the exchange service verification checklist.

Myth: “AML is an excuse not to return money.” What actually happens: a risky transaction history may be a genuine reason for suspension. A responsible service notifies you about the review, requests only the necessary information, and explains possible next steps. Vague statements without a clear review procedure are a reason to ask for a specific explanation.

Myth: “If coins passed a check on a crypto exchange, they are definitely clean.” What actually happens: services use different data sources, risk models, and internal rules. A positive result in one place is not a universal certificate for every other platform.

Myth: “Once USDT reaches my wallet, its previous history no longer matters.” What actually happens: the blockchain retains the transaction path after ownership changes. Keeping funds at a new address for a long time does not erase earlier links either. During the next exchange, scoring may identify them again.

FAQ

What are “dirty” USDT in simple terms?

These are USDT received through a transfer linked to elevated-risk sources. “Dirty” is an informal term, not a technical token status or proof that the owner is guilty. Questions during an AML check arise because of the previous path of the funds and interactions between addresses and high-risk services.

Can my coins be frozen without an explanation?

An exchange service may pause an order if a check identifies risk-related links. A responsible service will notify you about the review and explain the available course of action. The level of detail depends on the specific situation, but silence should not be considered normal communication. Contact support and ask them to clarify the status of your order.

Can USDT that fails an AML check be returned?

A return may be one possible outcome, but it cannot be guaranteed in advance. The decision depends on the sender’s address, the network, technical circumstances, and the review result. Do not send a new transaction to bypass the check. First, wait for the service’s response regarding the order already created.

Do exchange services check all transactions or only large ones?

The transfer amount does not determine whether funds are clean. A small incoming transfer may also have a risky history, while a large one may have a transparent origin. Which transactions a service checks and how it responds to scoring signals depends on its rules. Review them before sending funds instead of assuming that a small amount does not require verification.

How can I check USDT for cleanliness myself?

First, record who sent you the USDT and what the payment was for. Then review the address and transaction in a blockchain explorer. If needed, use a public AML scoring service. Do not mix an unverified incoming transfer with other funds. A personal check provides guidance, but it does not guarantee the same conclusion at every exchange service.

Conclusion

An AML check helps prevent high-risk USDT from entering reserves from which other customers receive funds. Because of it, an order may be paused even if the current owner was not involved in earlier transactions. This is inconvenient, but an exchange without checks simply passes the problem on to the next recipient.

Before sending funds, identify the origin of the USDT, check the transaction, and do not mix incoming transfers from different sources. Keep transaction hashes and counterparty details. Before your first transaction, read the MW Exchange AML/KYC Policy so you know the review process and possible scenarios in advance.