You paste a counterparty address from P2P chat. You follow a SunSwap-looking link. You deposit USDT to an exchange that later flags your graph. The transaction confirms — and only then you ask whether the address was clean.

TRONSEC is built for that moment: a read-only TRON security layer — browser terminal + a new Telegram bot — that screens wallets, links, and counterparties without connecting your wallet or asking for a seed phrase.

What changed recently

Two releases worth knowing if you move USDT on TRON regularly:

1. @tronsec_bot — paste a T… address or https:// URL in DM → CLEAR / REVIEW / RISK verdict in about 3 seconds, plus portfolio, approvals, and phishing signals.
2. AML Check v2 in the web app — sanctions lists (OFAC SDN, UK OFSI, EU where synced), indirect exposure hints, fund-flow graph, top counterparties, PDF export, and a permission auditor.

Same philosophy everywhere: paste-only screening. No WalletConnect. No “sign this message.” No custody.

Telegram bot — when you live in chats

P2P, OTC, and group deals rarely happen inside a browser tab. That is why we shipped the bot as a companion, not a replacement for the full terminal.

Open: t.me/tronsec_bot

Free in DM:

• Paste any TRON address or URL → risk verdict + scan card
• Watchlist — alerts when balances, approvals, or security flags change (free tier: 1 address)
• Report scam — submit suspicious addresses/URLs to our review queue
• Guest mode — type @tronsec_bot in any chat for a cached TRX price ticker
• UI in 8 languages (EN, RU, ZH, ES, PT, VI, TR, ID)

Typical workflow:

1. Counterparty sends a TRON address in Telegram.
2. Forward or paste it to @tronsec_bot.
3. If the card says REVIEW or RISK, stop — open the full report in the app before you send.
4. Optional: add the address to Watchlist if you expect ongoing payments.

Full AML graph, TX decode, contract deep-dive, and revoke flows still live in the browser app — the bot is the fast gate at the chat layer.

Web app — AML v2 milestone (high level)

If the bot gives you a yellow or red flag, the AML Check tab is where the story gets detailed.

Sanctions & labels

• OFAC SDN (~254 TRON addresses) and UK OFSI TRON lists via our API
• EU sanctions where synced
• Hard flags separated from TronScan public tags and USDT/USDC issuer blacklist hits
• Indirect sanctions exposure — soft risk when a sampled counterparty recently transacted with a listed address (no hard flag on your address itself)
• TRONSEC AML labels — curated drainer/IOC registry alongside public signals

Graph & peers

• Fund-flow graph with category-colored nodes and All / Risk-only presets
• Top counterparties with USD volume bars and TronScan security pills
• Behavioral score from recent native + TRC-20 activity, first-funder intel, DEX/CEX peer allowlist

Also shipped: permission auditor (owner/active/witness keys), AML PDF export, and accuracy fixes (USDT volume math, dust/spam classification).

Open AML: tronsec.io/app/#aml-check

When to run a check (real scenarios)

• P2P / OTC — before the first USDT transfer to a stranger’s T… address
• CEX deposit — screen your sending wallet if you had mixed inbound paths (AML before exchange deposit)
• Freelancer invoice — verify the payee address, not just the amount
• “New support agent” links — paste the URL into the bot or phish scanner before you connect anything
• After a scare — approvals tab + permission auditor if you suspect a bad signature

TRONSEC does not freeze funds or call exchanges. It gives you signal early so you can pause, verify on-chain, or walk away.

CLEAR / REVIEW / RISK — how to read it

• CLEAR — no major flags in our heuristics. Still verify the full Base58 address and amount manually.
• REVIEW — unusual patterns (approvals, peer mix, age, flags). Read the card before trusting.
• RISK — strong danger signals. Do not send until you understand what triggered the score.

This is informational screening, not a compliance certificate or legal advice. Lists and heuristics can lag or miss novel scams. Always DYOR on-chain.

Free vs Pro (optional)

Core wallet, URL, and approval checks stay free in the browser. The bot free tier includes 20 scans/day and 1 watch.

Pro (Stars / TRX / promo codes in the bot) adds higher limits, in-bot AML, faster watch alerts, daily digest, CSV export, and webhook — useful if you monitor many addresses or run OTC desks.

Community promo for readers of TRON ecosystem posts: code TRONDAO → 14 days Pro (limited redemptions) via @tronsec_bot → ⭐ Pro → Promo code.

Quick links

• Telegram bot: t.me/tronsec_bot
• Web app: tronsec.io/app
• AML check: tronsec.io/app/#aml-check
• Approvals: tronsec.io/app/#approvals
• Academy guides: tronsec.io/academy
• Open source: github.com/jamejons/tronsec

Bottom line

On TRON, speed is the scammer’s friend. A three-second paste check in Telegram — or a deeper AML graph in the browser — is cheaper than explaining a wrong transfer in a support ticket.

No wallet connect. No seed phrase. Paste, read the verdict, then decide.

Questions or scam reports: @tronsec_james on Telegram.