Tron, Tether, Chainalysis form DCTF, succeeding the dissolved T3 FCU

Tron, Tether and Chainalysis announced on Nov 12, 2026 a new Digital Crime Task Force (DCTF) focused on illicit USDT activity on the Tron network. Decrypt and Bitcoin.com News confirmed the three-way lineup, which swaps Chainalysis in as analytics partner where TRM Labs previously sat.

What the new task force does

The DCTF structures the three parties around four operational items:

• Identify suspicious wallets and transfers in near-real time using Chainalysis intelligence and internal analytics.
• Share freeze-target lists with law enforcement contacts and with Tether's issuer-side controls.
• Accept tips and freeze requests from police forces under a standardized intake.
• Target romance and investment scams, stolen funds, terrorist financing, DPRK-linked cyber operations, cartel laundering and child-exploitation material.

The scope sits specifically on the Tron blockchain and on USDT-TRC20 flows. Chainalysis estimates — cited in the announcement — that AI-driven scams in 2025 generated roughly 4.5x the revenue per operation of non-AI-assisted methods, and the DCTF frames its mandate around that acceleration.

Tether CEO Paolo Ardoino:

Criminals are using AI to move faster than ever, and waiting for a victim to report a crime is no longer good enough.

Tron founder Justin Sun on the lineup:

By combining our strengths, organizations across the industry can confront financial crime more effectively and help build a financial system people can depend on.

What replaces what

The T3 Financial Crime Unit — Tron + Tether + TRM Labs — launched in September 2024. Binance joined later as the first "T3+" partner (our Chainalysis coverage and the October T3 asset freeze summary both touched on the T3 cooperation model in their respective incidents). Bloomberg reported on Nov 4 that T3 had been quietly wound down in late August 2026, roughly two months before the $6.34 billion Binance hack on Oct 29 (our coverage). Bloomberg attributed the break-up to slow response times and poor coordination among members. T3 had publicly reported freezing more than $450 million in illicit USDT across 23 jurisdictions during its two years.

TRM Labs is not disappearing from the Tether-Tron orbit: TRM has continued cooperating with Tether through the Beacon Network since the T3 wind-down, and Ardoino separately unveiled a related project — the FASE Foundation — on Oct 31. The DCTF is the Tron-blockchain-specific replacement, not the entirety of Tether's law-enforcement partnerships.

What to watch

1. Whether the DCTF publishes freeze-count and jurisdiction metrics on the T3 cadence — T3's $450M figure was a benchmark for public accountability, and the new unit's willingness to replicate it will signal its operational scope.
2. Chainalysis-specific attribution outputs appearing in Tether freeze announcements, versus the generic "Tether froze" framing used during the T3 period.
3. How the DCTF handles AI-agent-initiated transactions: the announcement flags "autonomous AI agents transacting onchain" as a specific category, which points to flagging behavioural clusters rather than pure address attribution.
4. Any public clarification of Binance's status after the T3+ breakup — Binance remains the largest USDT issuer/burn counterparty off-chain, and its absence from the DCTF lineup is a stance, not an omission.

Context

The DCTF is the second private-sector crypto-crime task force on the Tron rail in two years, after the first one collapsed without public notice. It reconstitutes two of T3's three founding parties (Tron + Tether) with a new analytics partner, in the same month that Chainalysis itself disclosed an "offensive agentic" security breach exposing user roles and names — a reminder that the new analytics vendor is itself an active target. Tether says its broader cooperation now covers 360 law-enforcement agencies in 73 countries — an issuer figure, not independently verified in the announcement.