Fake FBI Token on Tron: What the Chain Shows

In March 2026, hundreds of Tron wallets received a token named after the FBI, together with a message saying their account was flagged and asking them to visit a website. The FBI New York Field Office warned about it publicly. We looked at the token and at the wallet that created and sent it. The short version: the on-chain side is small and cheap, the money is not in this wallet, and the danger is the website, not the token.

Read this first: everything below about the blockchain can be checked yourself on a Tron explorer, and our data was read from the public Tron network on 7 October 2026. The description of the warning comes from media reports (Techloy, Bitcoinist); we did not read the FBI's own post. The chain shows wallets, never people, and we do not name or accuse anyone.

The token

The token contract is TKYWf5q5dzdeuCg38P8fU3wsGkHo6QL8aF. Read directly from the contract, its name is "Federal Bureau of Investigation" and its symbol is "FBI". It was created on 11 March 2026 at 17:06 UTC, which matches the media reports of a token made about a week before the FBI's warning of 19 March. One billion tokens were created and credited to the wallet that deployed it.

The wallet that created and sent it

The deploying wallet is TQbcDcTcwYx6vekj8APti8aaJ2QCcKptJs (view in Hopchain, Tronscan). Hopchain's quick view stops at 200 transactions, so for this page we read the full history directly from the Tron network.

Timeline (UTC)

When	What happened
11 Mar, 16:28	The wallet is created. Three seconds later it is activated with 4,003.24 TRX sent from `TXe31JpKEjb9Jr1sqNnSssD6gTZd9RHUtJ`.
11 Mar, 17:06	The FBI token contract is created and 1,000,000,000 tokens are credited to the wallet.
11 Mar, 18:00	A second contract is created. The wallet gives it permission to spend up to 999,999,999 FBI, and 27 seconds later permission to spend up to 999,999,999 USDT.
11 Mar, 18:08 – 18:46	101 transfers of 0.10 USDT to different wallets.
11 Mar, 18:08 – 12 Mar, 19:39	The airdrop: 724 FBI transfers to 723 different wallets over about 25 hours.
12 Mar, 15:35 – 16:04	A third and a fourth contract are created, each given permission to spend up to 999,999,999 FBI.
12 Mar, 16:28	An unlimited USDT approval to `TTJxU3P8rHycAyFY4kVtGNfmnMH4ezcuM9`, then 166.20 USDT sent on to `TSUUVjysXV8YqHytSNjfkNXnnB49QDvZpx`.
19–20 Mar	The FBI's public warning, as reported by the media.
2 Apr	The last outgoing transaction from the wallet. Its balance today is 0.88 TRX.

The airdrop

722 wallets received exactly one FBI token each. The rest went to one other wallet, TU7hYRunAnLd9thTgZDFM9MABMoNMy1sAY, which received two large amounts (500 and 499,999,399 tokens) and sent 499,999,894 back on 12 March. The media reports mention at least 728 wallets holding the token; our count from this one wallet is 723 recipients, so the two are close. The reports note that sending tokens on Tron costs almost nothing, which makes it practical to flood many wallets at once.

Where the funds went

The amounts are small. Of the 4,003 TRX the wallet received, 32 outgoing TRX transfers totalling about 3,093 TRX went to three addresses: 2,219.6 TRX in 25 transfers to TEMkRxLtCCdL4BCwbPXbbNWe4a9gtJ7kq7, 865.1 TRX in 6 transfers to TU7hYRunAnLd9thTgZDFM9MABMoNMy1sAY, and 8 TRX to a third address. We did not check what happened to the remainder; Tron charges fees in TRX, so some of it was probably used up that way.

USDT is similarly small: 174.43 USDT came in from TSJEtPuqHpvSaVnSwvCsngaeBxrGUzp95Q on 11 March, and about 164 to 166 USDT moved to and from TU7hYRun… on 12 March before 166.20 USDT left to TSUUVjys…. In total the wallet handled around 340 USDT.

The wallet TU7hYRun… stands out: it received about half the token supply and returned almost all of it, took part in the USDT round trip and received 865 TRX. It is closely linked to the deploying wallet on-chain. That tells us the two are connected, not who is behind either.

What the permissions mean

The deploying wallet gave each of the three extra contracts permission to spend up to 999,999,999 FBI, and gave the first one a similar permission for USDT. This is the same kind of permission a malicious contract asks a victim for before it can move their tokens (see unlimited token approvals). Here the permissions were given by the wallet itself. Whether any of these contracts was used against another person's wallet is not visible in this wallet's data, and we make no claim about it.

What we cannot see

Who controls these wallets. The chain shows addresses, not identities. Hopchain has no Tron labels, and we did not check explorer tags for the other wallets.
Where victims' money went, if there was any. According to the reports, recipients were asked to enter personal data on a website. Any loss from that happens off-chain and does not pass through this wallet.
What the three other contracts do. They have no token name or symbol; we did not analyse their code.
The website itself. We did not open or analyse it.

If you received this token

Do not open the link or message that came with it, do not connect your wallet and do not sign anything.
Hide the token in your wallet. The token itself cannot freeze your wallet or your USDT; the threat is bait.
Never enter personal data or a seed phrase on a site that a token or message sent you to.
If you already signed something, check your approvals and revoke any you do not recognise.
If you are in the United States, scams can be reported at ic3.gov. Elsewhere, use your local fraud authority.

You can check any Tron address, including the ones above, in Hopchain. See also fake airdrops and spam NFTs and how to track a Tron wallet for free.

Frequently asked questions

What is the fake FBI token on Tron?
It is a Tron token named Federal Bureau of Investigation with the symbol FBI. It was created on 11 March 2026 and sent to hundreds of wallets along with a message warning recipients that their accounts were flagged and asking them to visit a website. The FBI New York Field Office publicly warned about it, according to media reports.

I received the FBI token. What should I do?
Do nothing with it. Do not visit the website in the message, do not connect your wallet and do not sign anything. Hide the token in your wallet if you can. An unsolicited token cannot freeze your wallet or your USDT, the threat is bait. If you already signed something, check and revoke any token approval.

Did the wallet behind the fake FBI token take money from victims?
Not visibly. The wallet that created and sent the token handled only small amounts: about 340 USDT in total and a few thousand TRX. According to the reports, recipients were asked to enter personal data on a website, so any loss would happen outside this wallet.

Who is behind the fake FBI token?
The blockchain does not show identities, and we do not name anyone. We can show which wallets were involved and how they are linked on-chain, not who controls them.

Found a mistake or have new information? Write to info@hopchain.io and we will correct this page. This is general information, not financial, legal or security advice.

More case files

Keep reading

Got an address you are unsure about? Paste it on the home page. It's free and needs no signup.

The fake FBI token on Tron: what the chain shows