If you approved a shady site once, your USDT can leave later — without another “Send” popup.

The fix is not “change PIN.” The fix is to revoke the TRC-20 approval: set that spender’s allowance back to zero on the USDT contract.

This is the practical guide. Exact steps in TronLink and TronScan, what “revoke” actually does on-chain, and how to spot a fake revoke website that steals your seed while pretending to help.

When you need this

• You clicked Approve / Enable trading on a site you no longer trust.
• USDT disappeared and TronScan shows a transferFrom from a spender you don’t recognize.
• You want a monthly hygiene check before a large balance sits idle.

Revoking does not reverse past drains. It stops future pulls from that spender.

What “revoke” means on TRON

USDT TRC-20 lives at the official Tether contract:

TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t

An approval stores: spender X may move up to N of my USDT.

Revoke = a new signed transaction that sets N to 0 for that spender (approve(spender, 0)). After confirmation, that contract cannot call transferFrom on your USDT anymore.

• Needs a little energy / TRX for the fee.
• Must be signed in your wallet — never by typing a seed into a website.
• Closing the dApp tab does nothing. Only a zero-allowance tx cleans it.

Step 0 — List approvals before you touch anything

Do not start on a random “revoke.xxx” Google ad. First see which spenders still have allowance.

1. Open a read-only checker (paste address only): tronsec.io/app/#approvals
2. Paste your TRON address (starts with T).
3. Note every row with unlimited or a large remaining allowance — especially unknown / unverified spenders.

Write down the spender addresses you want to kill. You will need them if TronLink’s UI is unclear.

Method A — Revoke inside TronLink (fastest)

Wording varies slightly by TronLink version (extension vs mobile), but the path is the same idea:

1. Open TronLink → your wallet.
2. Find Approval Management / Token Approvals (often under wallet details / management).
3. Open USDT (confirm contract is the official one above).
4. Find the spender you don’t trust → Cancel / Revoke.
5. Confirm the transaction. Wait for success on-chain.

Then re-check the same address in the approvals scanner. Remaining allowance for that spender should be 0.

If TronLink shows nothing but a scanner still lists a spender, use Method B — UI lag or a different token contract can hide rows.

Method B — Revoke via TronScan

1. Open TronScan → your address → look for Approvals / allowance-related tabs (labels change; search the help for “approval” if needed).
2. Or open the USDT token page, then use your wallet’s approval tools linked from the explorer.
3. Connect only official TronLink to TronScan — check the URL is the real explorer you bookmarked.
4. Revoke the exact spender hex / Base58 you flagged earlier.
5. Confirm in wallet. Save the TXID.

Verify on TronScan that the tx called approve with amount 0 (or the equivalent clear-allowance path your wallet used).

Fake “revoke” sites (do not use these)

Scammers know people panic-search “revoke USDT TRON.” Cloned pages ask you to:

• enter a seed phrase / private key to “sync approvals,” or
• sign a new approve to a different malicious spender while the UI says “Revoke.”

Rules:

• Real revoke never needs your seed.
• Decode before you sign: tronsec.io/app/#tx-decoder
• If the popup is approve with a huge number, that is not a revoke.

After revoke — still check these

• AML / address risk if funds already moved: tronsec.io/app/#aml-check
• Other tokens — scammers often take USDT first; check TRX / other TRC-20 allowances too.
• Permissions — rare, but account permission changes are a different attack class than allowances.

If USDT already left via transferFrom, revoke is still worth doing so the same spender cannot take the next refill.

Quick checklist

1. List spenders (read-only scan).
2. Revoke unknowns + any unlimited grant you don’t actively use.
3. Confirm TXID shows allowance → 0.
4. Never paste seed into a “revoke helper.”
5. Re-scan monthly if you use DeFi.

Bottom line

On TRON, “I didn’t click Send” is not enough. Approvals are standing permission. Revoke is a normal wallet hygiene step — like closing an open door.

Free read-only approval list (no connect required to inspect): https://tronsec.io/app/#approvals

TRONSEC does not ask for seed phrases. Sign revokes only inside your own wallet.