The $52.8 million Xinbi freeze was a Tether feature before it was a police action
Fifty-two wallets went cold at 8am UTC on 8 September, every one of them holding USDT, and the marketplace's escape route runs through a stablecoin partly backed by USDT.
Nobody took custody of anything. The money simply stopped working.
The US Secret Service froze $52.8 million across 52 wallets tied to Xinbi Guarantee, starting at 8am UTC on 8 September 2026, and the Treasury designated the marketplace a transnational criminal organisation the next day. Two of the wallets, holding roughly $12 million, were seized outright under a warrant unsealed on the 9th.
Every frozen wallet held USDT.
Which is the mechanism, not a detail. A freeze of this kind is not a seizure in the physical sense. Tether marked the addresses on its own contract and the balances stopped being spendable. So the Secret Service supplied the addresses, Elliptic supplied the intelligence, and a private issuer supplied the only thing that actually stops a transfer.
"Elliptic has been tracking Xinbi and its wallet infrastructure for several years, and our intelligence directly enabled the freezing action, as well as the sanctions imposed on Xinbi today by the United States," the firm said. Britain's crime agency depends on the same arrangement, as we noted in Britain ranks crypto its third economic crime priority.
Xinbi understands the mechanism better than most of the coverage did
It called the freeze arbitrary, promised to compensate its customers, and moved about $2.8 million of its remaining USDT into USDD, a stablecoin with no central issuer able to freeze a wallet.
Which would be clever, if part of USDD's reserves were not backed by USDT.
Running from the switch to an asset collateralised by the switch. If you have ever watched somebody move house to escape a landlord who owns the next street, that is the shape of it.
Put the sum frozen next to the sum moved
Since its inception around 2022, Xinbi Guarantee's marketplace has processed the equivalent of over $24 billion in digital assets and fiat currency through its marketplace and via its platforms, primarily facilitating transactions in countries located in Southeast Asia.
Fifty-two million against twenty-four billion is about a fifth of one percent of lifetime volume. You would not describe a bank robbery that way. But this is not a bank, and lifetime volume is the only denominator anyone has.
Elliptic ranks Xinbi second only to Huione Guarantee, which moved $31 billion before Telegram shut it down in May 2025. And the Treasury's own release says the quiet part plainly. After FinCEN listed Huione Pay, cybercriminals "attempted to preserve their operations by transferring their activities to Xinbi Guarantee's marketplace, which has continued offering substantially similar services to an overlapping customer base."
So here is a documented case of a shutdown producing a successor within months, described by the government in a press release announcing a shutdown.
Does the freeze still work? Less well the second time.
Does it still work at all? Bitrace reported that a fresh Xinbi business address activated on 8 September was frozen again the following day, but that 1.8 million USDT had already moved out and only 37,839 USDT was caught. Roughly 98 percent escaped.
A first freeze catches a treasury sitting still. The second races a treasury that is now watching.
Our read is that this is enforcement leasing a capability from a private issuer, and that the lease has an expiry date on it. The Scam Center Strike Force has seized around $938 million since November 2025, which is real money (and more than most people assume), and nearly all of the crypto half of it rests on a freeze function that a very small number of issuers control.
We would expect the next marketplace of this size to settle primarily in something with no issuer freeze, whether a non-custodial synthetic dollar, monero, or plain bank rails through a friendlier jurisdiction, within twelve months. If Xinbi's successor turns up next year still quoting prices in USDT, we are wrong and the deterrent is stronger than we think.
On the same day, the Justice Department sent agents to Madagascar to help take down 13 Chinese-run scam compounds, process nearly 400 arrestees and handle more than 3,200 seized devices.
None of that part depended on anybody's smart contract.
