Tracevoy
English
Get started

How to trace stolen USDT

Tracevoy doesn’t recover funds. It follows the record of where a transfer went and writes that down. Every USDT transfer is public, so anyone can follow one for free until it reaches an exchange, a bridge, a mixer or a wallet where it stopped. That won’t tell you who holds the wallet, and it won’t bring the money back.

What to do first

  1. Stop sending money. That includes a fee or tax you’re told to pay before you can withdraw.
  2. Save the record. The transaction hash, both addresses, the amount, the token, the network, the date and time, your messages with the other person, and the site or app they sent you to.
  3. If you sent from an exchange, tell it now. Report fraud to its support team and give them the hash and the receiving address.
  4. Report it to the police. In the US, file with the FBI’s IC3, which asks you to report even if you’re missing transaction details. In Korea, use the police’s ECRM system or call 182. Elsewhere, go to your local police.
  5. Never give anyone your recovery phrase or private key. Tracing doesn’t need them.

Be careful who you pay next

Victims get targeted again. The FBI’s guidance for scam victims says “Be wary of anyone claiming they can recover your funds”, because that may be another scam. Don’t trust anyone who contacts you first, guarantees recovery, wants a fee up front to release funds, or asks for your recovery phrase.

Tracevoy takes payment in advance too, in USDT, so hold us to the same test. The price is published at ₩300,000. It buys a report, not your money back. We never ask for keys, and you can look up your transfer for free before paying anything. An investigation that ends with no report gives its credit back, as our Refund Policy describes.

How to follow USDT yourself

  1. Find the network. USDT runs on several networks, and a transfer happens on one of them. An address starting with T is Tron. One starting with 0x is Ethereum or a network compatible with it. An exchange’s withdrawal record usually names the network.
  2. Tell an address from a hash. An address names a wallet. A hash names one transfer. On Ethereum, an address has 42 characters and a hash 66. On Tron, an address has 34 and a hash 64.
  3. Open the transfer. Paste the hash into Tronscan or Etherscan. Any token can call itself USDT, so check the contract. Real USDT is TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t on Tron and 0xdAC17F958D2ee523a2206206994597C13D831ec7 on Ethereum.
  4. Open the wallet that received it. In its token transfers, look for what left after your money arrived.
  5. Repeat, and write each step down. Note the hash, both addresses, the amount and the time. If the money splits, follow the largest part first and note the others.

Where a trail stops, and what that means

  • An exchange address. Often the most useful end, because exchanges hold customer records. Only the exchange can say whose account it is, so give that address and hash to the police.
  • A bridge or swap. The money changed network or token. The next step is on the other side, and one explorer may not show it.
  • A mixer. A service built to break the link between what goes in and what comes out. Tracevoy’s trace ends here too, and says so.
  • A wallet still holding the money. Tell the police quickly. Tether has frozen USDT working with law enforcement, though that normally runs through the police and not a victim’s own request.

What a trace can’t tell you

  • Who owns a wallet. A wallet on the path isn’t necessarily the scammer’s. It could be a service, or another victim.
  • That it’s the same money. Funds mix inside a wallet, so what left may not be what you sent.
  • Whether a tag is true. A name on an explorer is someone’s claim, and can be wrong.
  • Whether you’ll get it back. Knowing the path doesn’t return the money.

When a written report helps

If the path is short, an explorer is enough and costs nothing. Tracevoy is for when the money splits across too many wallets to follow, or when you need one document to give the police, a lawyer or an exchange. One investigation is ₩300,000, and you get:

  • A written analysis of where one deposit went, with every amount, address and date taken from the chain.
  • The path drawn as a map, every transfer in a table, and the full addresses and hashes to copy.
  • What the trace could not establish, said plainly, so you don't hand anyone a false certainty.
  • A page you can save as PDF and give to the police or an exchange.

Ethereum, Tron, OP Mainnet, Arbitrum One, Scroll, Gnosis and Unichain. Finding the transfer to investigate is free, so you can look before you spend anything.

Top up credits by sending USDT (Tron, TRC-20) to a deposit address that belongs to your account. It is detected and credited automatically. Each investigation takes its price from your credits, and if a run ends with no report, the credits go back.

Bitcoin isn’t covered. The report is an analytical estimate written by AI, so check it against the records in its tables, and make legal decisions with a professional.

Look up your transfer for free

Comparing tools? See the Chainalysis alternative page.