Sanctuary Research

If "the exchange froze my USDT deposit" is what you just typed into your phone, start with the least dramatic fact: in most cases the coins are in compliance review, not confiscated, and the venue is holding them while it establishes where they came from. What decides the outcome is the order of your moves: work out who is holding the money, gather the trade record before it ages out of the app, then send one ticket instead of ten. Before your next trade, screen the counterparty's address in the Sanctuary Telegram bot: 3 free checks a day, a verdict in about 60 seconds, no signup.
Two different events share the word frozen, and they have different owners. Getting this wrong costs days: the recovery paths never overlap.
The platform case is almost certainly yours. Your transfer confirmed on chain, the coins reached the exchange's deposit address, and the exchange is holding the credit on its own books while compliance looks at where the funds came from. The hold lives inside the venue, and only the venue can lift it.
The issuer case is different in kind. Tether can blacklist an address on the USDT contract itself, and then no transfer from that address confirms anywhere — not to an exchange, not to your own second wallet. The test takes a minute: send a little native coin out of the same wallet — TRX on TRON, ETH on Ethereum. If it moves and USDT does not, the contract is stopping you, not the exchange — a separate path, written up in why USDT gets frozen on TRON.
Everything below is the platform case, where the notification arrives in one of three shapes:
Three wordings, one event, one response.
Because coins carry their history, and you inherited the seller's history the moment the transfer confirmed.
That transfer is one link in a chain that existed long before your order. If the seller's funds passed through a wallet collecting money from scam victims, the proceeds of a hacked exchange, a sanctioned service, or addresses other traders already reported, the venue's screening sees that path arriving with your deposit. It is not reading you. It is reading where the money has been a hop or two back, and it stops the credit to ask.
Which is why the freeze feels arbitrary and is not. P2P concentrates it: this is the one place a retail trader takes funds straight from a stranger, nobody vouching for the source. In Sanctuary's label set as of August 2026 the count reads p2p_exchange 200,005 labels — the venue type sitting behind most of these freezes.
So the compliance officer's real question is never "are you a criminal". It is "where did this transfer come from, and can you show me". Cases resolve when that gets answered with documents, and drag when it gets answered with frustration — frustration does not go in the file.
Not every "exchange froze my USDT deposit" is the same case, and the preparation differs.
| What happened | Who is holding it | What to prepare | Realistic outcome |
|---|---|---|---|
| Deposit credited, then locked after a P2P trade | The exchange's compliance team | Order ID, chat log, counterparty handle, fiat receipt, TX hash | Released once documents match the chain |
| Deposit never credited, shown as pending review | Same exchange, earlier in its flow | Same package, plus where you bought the coins | Credited, or returned to the sender |
| Whole account restricted, not one deposit | The exchange | Trade history, ID documents, fiat source of funds | Reinstated, or closed with the balance withdrawable |
| Withdrawal blocked while the deposit is fine | Withdrawal screening, usually about the destination | The destination address and proof it is yours | Released once you name the destination |
| Coins will not move on chain from any wallet | Tether, at the contract level — not a platform | Nothing you send the exchange changes this | Only the issuer can lift it |
The last row is where people burn a week: if the coins cannot leave your wallet, no exchange ticket will help.
Every case above starts the same way: nobody looked at the address on the other side before the coins moved. That look takes less time than the transfer does.
@sanctuaryapp_bot checks any address free — 3 free checks a day, no registration, buttons instead of commands. Paste the seller's address, read the verdict in about 60 seconds: what the address is attributed to by name, which risk categories sit on it — sanctions designations, darknet and ransomware clusters, reported scam and phishing wallets, exchange and deposit-address attribution — and what the funds around it have touched. That is the same class of record an exchange's screening reads when your deposit lands, except you see it while declining the trade still costs nothing. Ten chains at full AML depth, 20+ intelligence sources. For a TRC-20 result read field by field, how to check a USDT TRC-20 address is the long version.
Traders taking P2P orders daily move to a paid plan for the web workspace: PDF reports you can attach to a support ticket, monitoring on addresses you have already taken money from, bulk checks, an API for deposit flows — $199 a month for 1,000 checks. The free check stays in the bot. Start there.
Hours to weeks, and that range is not evasion. It moves with the venue's queue, the deposit size, the jurisdiction it answers to, and above all whether your source-of-funds package arrived complete the first time. Small deposit, clean paper trail, major venue: quick. Large deposit, no order record, coins a hop from a reported wallet: slow.
Four endings cover nearly all of it.
Released. The most common. Documents match the chain, the file closes, the balance unlocks.
Released with restrictions. The funds come back, but P2P is switched off, limits drop, or you are asked to bank elsewhere.
Account closed, balance returned. The venue exits the relationship and lets you withdraw — sometimes only to a verified bank account or the sending address, not a wallet of your choosing.
Held pending a formal process. Rare, and the only branch where a support ticket is the wrong tool: if a deposit is held under a law-enforcement request rather than an internal review, get a lawyer in your jurisdiction, because nothing written here substitutes for one.
Everything you control points at the first ending: complete documents, delivered once, in a flat tone.
The freeze is not a verdict on you. It is a verdict on a counterparty nobody checked — the cheap part to fix.
Put the check in the deal script rather than in your memory: address in, verdict out, then release. Screen your own receiving addresses too — money that arrived from a bad counterparty months ago still sits in your history when the next venue looks. And keep the order record for every trade, not only the ones that go wrong: the traders whose deposits get released fastest already had the file. The full pre-trade list is here: what to check before a P2P crypto deal.
If the exchange froze your USDT deposit this week, the ticket is work you cannot avoid. The check is the work that stops the next one. Before your next order, paste the seller's address into @sanctuaryapp_bot, read the verdict, and release only after it comes back — 3 free checks a day, about 60 seconds, no signup. Check first, release after.
Anywhere from hours to weeks. It depends on the venue's queue, the deposit size, the jurisdiction it answers to, and mostly on whether your source-of-funds package arrived complete the first time. A small deposit with an order ID, chat log and payment receipt attached moves quickly. A large one with no trade record and no answer to the reviewer's question sits.
In most cases no. The usual endings are released, released with account restrictions, or the account closed with the balance withdrawable to a verified route. Indefinite holds happen where funds are held under a law-enforcement request rather than an internal review, which is a different situation and the one where you want a lawyer rather than another support ticket.
Because the coins carry the seller's history, not yours. If those funds passed through scam collection wallets, stolen-funds proceeds, a sanctioned service or addresses other traders reported, the venue's screening sees that path arriving with your deposit and stops the credit to ask about it. A completed order proves the trade happened; it does not tell the venue where the seller's coins came from.
No. Sudden movement during a review is the worst thing your file can contain, and swaps, bridges and fresh wallets do not detach coins from their history anyway. Keep the account quiet, send the documents once, and put the effort into the record instead. Check the address that paid you free in the Telegram bot so you know what you are actually explaining.