The $52.8 million Xinbi freeze was a Tether feature before it was a police action

The US Secret Service froze $52.8 million across 52 wallets tied to Xinbi Guarantee starting at 8am UTC on September 8, and the Treasury designated the marketplace a transnational criminal organization the next day. Two of the wallets, holding roughly $12 million, were seized outright under a warrant unsealed on September 9.

Every frozen wallet held USDT.

Which is not a detail. Call it the mechanism. A freeze of this kind is not a seizure in the physical sense, because nobody took custody of anything. Tether marked the addresses on its own contract and the balances stopped being spendable. So the Secret Service supplied the addresses, Elliptic supplied the intelligence, and a private issuer supplied the only thing that actually stops a transfer.

"Elliptic has been tracking Xinbi and its wallet infrastructure for several years, and our intelligence directly enabled the freezing action, as well as the sanctions imposed on Xinbi today by the United States," the firm said.

Decrypt@DecryptMedia

Secret Service Freezes $52.8 Million in Crypto Tied to Telegram Bazaar Behind Global Scams
t.co/eOUdHTpwOh

Xinbi appears to understand the mechanism better than most of its coverage did. It called the freeze arbitrary, promised to compensate customers, and moved about $2.8 million of its remaining USDT into USDD, a stablecoin with no central issuer able to freeze a wallet. Which would be clever if USDD's reserves were not partly backed by USDT.

Running from the switch to an asset collateralised by the switch. If you have ever watched someone move house to escape a landlord who owns the next street, that is the shape of it.

Worth putting the scale side by side. Treasury says Xinbi has processed more than $24 billion since 2022, which makes $52.8 million about 0.22 percent of lifetime volume (you would not describe a bank robbery that way, but this is not a bank).

Since its inception around 2022, Xinbi Guarantee's marketplace has processed the equivalent of over $24 billion in digital assets and fiat currency through its marketplace and via its platforms, primarily facilitating transactions in countries located in Southeast Asia.

Elliptic puts Xinbi second only to Huione Guarantee, which moved $31 billion before Telegram shut it down in May 2025. Treasury's own release says the quiet part plainly: after FinCEN listed Huione Pay, cybercriminals "attempted to preserve their operations by transferring their activities to Xinbi Guarantee's marketplace, which has continued offering substantially similar services to an overlapping customer base."

So we have a documented case of a shutdown producing a successor within months, and the government describing it in a press release announcing a shutdown.

Does the freeze still work? Partly, and less well the second time. Blockchain analytics firm Bitrace reported that a fresh Xinbi business address activated on September 8 was frozen again the following day, but that 1.8 million USDT had already moved out and only 37,839 USDT was caught. Roughly 98 percent escaped. A first freeze catches a treasury sitting still. The second one races a treasury that is now watching.

Our read is that this is enforcement leasing capability from a private issuer, and that the lease has an expiry. The Scam Center Strike Force has seized around $938 million since November 2025, which is real money and roughly $94 million a month, and almost all of the crypto half of it rests on a freeze function that a small number of issuers control (Tether and Circle, mostly). We would expect the next Xinbi-scale marketplace to settle primarily in an asset with no issuer freeze — a non-custodial synthetic dollar, monero, or plain bank rails through a friendlier jurisdiction — within twelve months. If the successor to Xinbi shows up next year still quoting prices in USDT, we are wrong, and the deterrent is stronger than we think.

On the same day, Justice sent agents to Madagascar to help take down 13 Chinese-run scam compounds, process nearly 400 arrestees and handle more than 3,200 seized devices. None of that part depends on anyone's smart contract.