OFAC Sanctions Xinbi: $52M USDT Frozen as Stablecoin Enforcement Tightens

The US Treasury's Office of Foreign Assets Control (OFAC) has sanctioned Xinbi Guarantee, a Chinese-language online marketplace that processed more than $24 billion in illicit crypto transactions, making it the second-largest illicit marketplace ever identified. Coordinated with the action, the US Secret Service secured a warrant compelling Tether to freeze approximately $52 million in USDT held in Xinbi-linked wallets. For professionals working with stablecoin accounting or digital asset accounting software, this enforcement episode is a clear signal: on-chain transparency is now a primary tool of government action, and the compliance clock is running.

What OFAC Did and Why It Matters for Stablecoin Accounting

OFAC designated Xinbi Guarantee on September 9, 2026, under its sanctions authority targeting transnational criminal organizations. Xinbi operated as a Telegram-based marketplace where vendors sold stolen identity data, communications infrastructure, money-laundering services, and other tools used primarily to support so-called "pig butchering" romance scams across Southeast Asia. All payments on the marketplace ran through USDT on the TRON blockchain.

Scale and blockchain traceability

The $24 billion-plus transaction volume figure is not a theoretical risk estimate. It reflects actual on-chain activity, traced through the public TRON ledger. That traceability is precisely what made the enforcement action possible. Blockchain analytics identified the relevant wallets, the Secret Service obtained the freeze warrant, and Tether executed the freeze, all within a coordinated timeline. For any firm managing stablecoin positions, this sequence illustrates that USDT flows are permanently auditable and that a freeze can be executed without advance notice to the wallet holder.

The USDD pivot and residual exposure

Following the sanctions announcement, Xinbi stated publicly that it intends to compensate affected users and migrate from USDT to USDD, a different TRON-based stablecoin. That pivot does not eliminate the compliance risk for firms with indirect exposure. If a counterparty previously active on Xinbi begins transacting in USDD, the sanctions nexus travels with the designated entity, not with the specific token. Firms relying on digital asset accounting software that tracks token type rather than entity-level sanctions status may fail to catch that exposure.

Coordinated Pressure: The Secret Service, Tether, and the Scam Center Strike Force

The $52 million freeze is notable not just for its scale but for its structure. The US Secret Service, acting as part of the US government's Scam Center Strike Force, obtained a court warrant directed at Tether as the issuer of USDT. Tether then froze the wallets specified in the warrant. This issuer-level freeze mechanism is a feature that USDC and other centrally issued stablecoins also possess, and it is one that accounting teams need to reflect in their risk frameworks.

Issuer freeze risk in financial reporting

When a stablecoin issuer freezes a wallet at the direction of a government, the asset does not disappear from the blockchain but it becomes inaccessible. From a financial reporting perspective, a frozen stablecoin balance raises immediate questions: should it be derecognised, written down, or disclosed as a contingent liability? There is no single IFRS or US GAAP provision that directly addresses a government-compelled freeze of a digital asset, which means preparers and auditors need to reason by analogy to existing impairment and derecognition standards. Firms that have not already documented their accounting policy for this scenario should treat this action as a prompt to do so.

Telegram's response

The UK had already sanctioned Xinbi in March 2026, and the UK's action had reportedly prompted Telegram to leave the marketplace's channels intact. OFAC's designation appears to have changed that calculus. On the same day as the OFAC announcement, Xinbi's Telegram usernames were removed from the platform. The episode illustrates that US sanctions designations carry jurisdictional weight that unilateral national actions may not, a consideration relevant to firms assessing their own sanctions screening obligations across multiple jurisdictions.

Singapore's MAS Consults on a Single Currency Stablecoin Framework

Running in parallel with the US enforcement action, Singapore's Monetary Authority of Singapore (MAS) published a consultation paper on September 1, 2026, seeking feedback on legislative amendments to the Payment Services Act 2019. The proposed changes would implement a Single Currency Stablecoin (SCS) framework, creating a formal licensing tier distinct from the existing Digital Payment Token (DPT) category.

What the SCS framework would introduce

Under the MAS proposals, licensed issuers would be permitted to label their tokens as "MAS-regulated stablecoins" and to market themselves publicly as MAS-approved. Any stablecoin that does not obtain SCS licensing would fall back into the DPT category and would not carry those representations. The consultation covers reserve requirements, par-value redemption obligations, and disclosure standards, all features that mirror frameworks being developed in the EU under MiCA and in the UK under the Financial Services and Markets Act 2023 regime.

MAS is also seeking specific private-sector input on whether stablecoins jointly issued by a Singapore-based entity and a foreign issuer should be eligible for the SCS framework. That question has direct implications for cross-border issuance structures and for how such tokens would be classified, and therefore accounted for, in financial statements prepared under IFRS or Singapore FRS.

Accounting implications for Singapore-domiciled firms

For firms doing stablecoin accounting under Singapore FRS (which is substantially aligned with IFRS), the MAS framework matters because classification drives measurement. A stablecoin that qualifies as an MAS-regulated stablecoin and carries a contractual par-value redemption right has a stronger argument for treatment as a financial asset under FRS 109 than a token that sits in the unregulated DPT bucket. Firms holding stablecoins on balance sheet should track the outcome of this consultation closely, as the eventual legislation will affect disclosure requirements and potentially fair-value measurement choices.

Thailand Finalises Travel Rule Regulations, Effective February 2027

The Thai Securities and Exchange Commission (SEC) published its finalised Travel Rule regulations on September 2, 2026. The rules take effect on February 27, 2027, and apply to digital asset business operators (DA operators), including exchanges and custodians licensed in Thailand.

Core obligations under the Thai Travel Rule

The regulations align Thailand's AML/CFT framework with the Financial Action Task Force (FATF) Travel Rule standard. DA operators must collect and transmit originator and beneficiary information for crypto transfers, conduct due diligence on counterparty virtual asset service providers (VASPs), maintain written policies and procedures for Travel Rule compliance, and retain transfer records for five years.

The self-hosted wallet provision

The most operationally demanding element is the requirement for DA operators to verify ownership and control of self-hosted (unhosted) wallets when their customers send to or receive from one. This goes beyond the baseline FATF standard, which recommends a risk-based approach to collecting identifying information for unhosted wallet holders but does not generally require verification. Thailand's stricter position means that exchanges and custodians operating in the country will need to build or procure technical solutions, such as cryptographic proof-of-ownership checks or liveness verification, to meet the standard before the February 2027 deadline.

For crypto bookkeeping software vendors and compliance teams building data ingestion pipelines, the Thai Travel Rule data fields need to be captured and stored in a format that can be produced on request to the regulator. Firms that already operate Travel Rule solutions in the EU or UK should review whether those systems capture the additional ownership-verification data Thailand now requires.

Understanding how blockchain analytics supports sanctions compliance is increasingly relevant as regulators in multiple jurisdictions move toward mandatory on-chain data requirements. Firms should also revisit stablecoin AML typologies and accounting controls as they update their compliance frameworks to reflect these new obligations.

What Firms and CFOs Should Do Now

Three separate enforcement and regulatory developments, all landing within two weeks of each other, point in the same direction: stablecoin transactions are subject to escalating government scrutiny across the US, UK, Singapore, and Thailand, and the infrastructure to act on that scrutiny, freeze orders, sanctions designations, Travel Rule data requirements, is operational today.

Immediate steps for accounting and compliance teams

Sanctions screening must cover entity-level designations, not just token blacklists. The Xinbi action shows that designated entities can switch tokens, so screening logic tied only to specific contract addresses will miss the exposure. Firms using digital asset accounting software should verify that their wallet-screening integrations pull from the current OFAC SDN list and from equivalent UK and Singapore sanctions lists at the time of each transaction, not in batch overnight runs.

Accounting policy documentation for frozen stablecoins is now urgent. Prepare a written policy covering how the firm would recognise, measure, and disclose a stablecoin balance that becomes subject to a government-directed issuer freeze. Run that policy past your auditor before the next reporting period, not after a freeze event occurs.

For firms with Thai operations or Thai counterparties, the February 2027 Travel Rule deadline is closer than it appears. An eighteen-month implementation window that includes system procurement, testing, and staff training is not comfortable. Begin the gap analysis against the Thai SEC requirements now, paying particular attention to the unhosted-wallet verification provision that exceeds the standard FATF baseline.

Singapore-domiciled firms holding stablecoins on balance sheet should monitor the MAS consultation outcome and be prepared to reclassify holdings once the SCS framework is legislated, updating accounting policies, disclosures, and any hedging documentation accordingly.

Frequently Asked Questions

Can OFAC sanctions on a crypto marketplace affect firms that never knowingly transacted with it?

Yes. If a firm receives funds that passed through a sanctioned entity's wallets, even indirectly, it may have exposure under OFAC's strict-liability framework. This is why real-time transaction screening that traces fund provenance across multiple hops, not just the immediate counterparty, is a compliance baseline rather than an enhancement.

How should a frozen USDT balance be treated in financial statements?

There is no explicit IFRS or US GAAP standard for a government-directed issuer freeze. Preparers typically reason by analogy: if control of the asset is effectively lost, derecognition or full impairment may be appropriate. If the freeze is expected to be temporary and the asset remains recoverable, disclosure as a restricted asset with a contingent-liability note may be more appropriate. The key is having a documented accounting policy in place before a freeze event occurs, not after.

Does Thailand's Travel Rule apply to foreign firms serving Thai customers?

The Thai SEC's regulations apply to licensed DA operators in Thailand. Foreign firms that are not licensed in Thailand but serve Thai customers may not be directly subject to the rules, but counterparty VASPs in Thailand will be required to collect and transmit Travel Rule data on transfers involving those customers. Firms with significant Thai user bases should expect Thai counterparties to impose data-sharing requirements as a condition of continued transaction processing.

What does the MAS SCS framework mean for stablecoins already in circulation in Singapore?

Once the MAS consultation is finalised and the legislation is enacted, issuers will need to apply for SCS licensing if they wish their tokens to carry the MAS-regulated label. Tokens that do not obtain that designation will be regulated as DPTs. Firms already holding these tokens will need to reassess their classification and disclosure treatment once the final regime is published.

Is USDD, the stablecoin Xinbi plans to migrate to, itself sanctioned?

As of the publication date of the Elliptic source article, USDD itself is not subject to OFAC sanctions. However, if Xinbi as a designated entity begins transacting in USDD, any firm that transacts with Xinbi-linked wallets using USDD would still be dealing with a sanctioned party. The sanctions exposure follows the designated entity, not the token it chooses to use.

Source: Elliptic