TRON Address Check (TRX) — AML Risk, Balance and Transactions

TRON is an account-based blockchain, like Ethereum: an address has one balance and a single history that accumulates over the years. The mainnet launched in 2018. Consensus is delegated proof-of-stake: blocks are produced by 27 elected representatives, and a new block appears roughly every three seconds, so transfers confirm quickly and cheaply. That is what made the network popular for stablecoin settlement.

TRX is the native coin. It pays for resources, it is staked for voting rights and free resources, and it is burned when resources run out. Tokens such as USDT, USDC and USDD live in TRC-20 smart contracts on the same addresses as TRX. A single T address holds TRX and any tokens, but each asset has its own history.

There is no gas in the usual sense. Every operation spends two resources: bandwidth, charged for the size of the transaction, and energy, charged for executing a contract. A plain TRX transfer normally fits into the free daily bandwidth allowance, while a USDT transfer calls a contract and needs energy. Energy comes from staking TRX or renting it; without energy, the network burns TRX from the balance of the sender. Hence a familiar situation: an address holds USDT but cannot send it until it also holds some TRX.

• Address: 34 characters, always starting with a capital T. The encoding is base58check, the same as Bitcoin, so the characters 0, O, I and l never appear. Letter case matters: the same string with one letter changed is a different address or an invalid one. Copy the whole address and compare more than the first and last characters.
• Hex form of the same address starts with 41 and shows up in technical interfaces and APIs. It is the same account; use the T form for the check.
• Transaction hash: 64 hexadecimal characters with no 0x prefix. This is how the service tells a TRON hash from an Ethereum hash, which has 66 characters including 0x.
• Contract address: looks like any other T address. The USDT contract, an exchange hot wallet and a private wallet are indistinguishable by the string alone; the history and the labels in the report tell them apart.

Low fees and fast confirmations made TRON the main settlement network for USDT: exchangers, P2P platforms and transfers between exchanges often run through it. The same qualities make it convenient for moving stolen funds through chains of addresses. Checking before the transfer shows which history you are about to connect with.

• Exchange freezes. A deposit from an address linked to theft, scam or sanctions can be held by the exchange until the case is reviewed. The freeze lands on the recipient, not the sender.
• Issuer freezes. The USDT contract on TRON has a blacklist: Tether freezes addresses at the request of law enforcement, and frozen tokens can be neither sent nor swapped. This does not apply to TRX, which has no issuer.
• Address poisoning. A scammer sends a tiny transfer from an address whose first and last characters match those of your counterparty, hoping you will copy it from your history. Checking the full address before sending defeats the scheme.
• Scam and phishing. Collector addresses from fraud schemes end up in provider databases with labels, and the funds keep moving through the network, including to unsuspecting sellers on P2P platforms.

How exchanges and exchangers build these checks into their processes is covered in the AML and KYC guide, and deals with private individuals in the article on P2P AML risks.

1. Paste the T address or the transaction hash into the field on the search page. The service detects the TRON network and lists the assets the address has been active in: TRX, USDT, USDC, USDD.
2. Pick the asset. The free overview shows the balance, the number of transactions, the amounts received and sent, and the dates of the first and last activity, separately for TRX and for each token.
3. For the AML score, sign up (the first 5 checks are free) and run the check in your account. For a hash, the account asks which side of the transfer to check.
4. Read the report: a risk score from 0 to 100, detected signals, the structure of the sources and a flow map. Export it as a PDF or open it to a counterparty through a secure view-only link.

The report is the same for every network: a risk score from 0 to 100 (0 to 30 low, 31 to 60 medium, 61 to 100 high), detected signals with a severity, the shares of categories among the sources of funds, a map of incoming and outgoing flows, address data, a PDF and a secure link. Each section is explained on the AML Risk Score page.

What matters on TRON is reading the report with the network in mind. The Exchange label is ordinary here: deposits and withdrawals of trading platforms run through the network, and an active address almost always has an exchange counterparty. That link alone is not a red flag. A high-risk exchange, scam, theft, sanctions or a mixer among the sources is, and so is a large share of the flow coming from a single labelled counterparty.

Check the asset in which you expect the transfer. The USDT history and the TRX history of one address do not match: an address may have shuffled TRX between its own wallets for years and received USDT from a labelled source once, or the other way round.

For a hash, the search page shows the status, the amount, the time, the sender and the recipient. A TRX transfer shows its amount in TRX, a token transfer in the token itself. A failed status is not unusual on TRON: the transaction made it into a block but the contract returned an error, for example because energy ran out. The resources were spent and the tokens stayed with the sender.

The hash is a way to find the parties; the risk belongs to their addresses. In your account you can pick the sender or the recipient of a hash and check them like any other address. If the addresses cannot be extracted from the transaction, the hash itself is checked.

Where to find a hash and how a transaction identifier is built is covered in View Transaction and Check Transaction Hash.

• Versus Ethereum: format and resources. A T address instead of 0x, a hash without 0x, energy and bandwidth instead of gas. The TRON and Ethereum histories of an address are unrelated: these are different networks with different address encodings, not one account across several EVM chains.
• Versus Bitcoin: the accounting model. A Bitcoin wallet scatters funds across unspent outputs and change addresses, so a check of one address sees a fragment. A TRON address is an account with a single history: one address usually is the whole wallet, and its report is more complete. The flip side is that the same address appears in every deal for years, and a link to a labelled counterparty stays in the history for good.
• Tokens outweigh the coin. On TRON most of the value moves in USDT, and for many addresses TRX only pays for resources. When assessing a counterparty, start with the asset the deal is in.
• Dusting and fake tokens. An address may receive a tiny transfer or a token named like USDT but issued by a different contract. The report marks such links as a dusting attack and they do not compromise the recipient; a token from an unknown contract is best ignored, as it has no value.