A buyer sends a screenshot showing 2,000 USDT and asks you to release the goods. Your wallet even displays a new token called USDT. Has the payment arrived? Neither detail answers the question. You still need to establish which asset moved, on which network, to whose account, and whether you can actually use it.

“Flash USDT” is not a separate Tether-issued product in Tether’s official asset and protocol directory. Software cannot turn a copied token name or a temporary screen balance into genuine USDT. Treat offers to create spendable USDT cheaply, or to make it “valid” for a limited number of days, as fraud warnings—not payment methods.

Three different tricks can look like an incoming payment

A forged screenshot or counterfeit wallet page may show a transfer that never happened. A lookalike token can genuinely move on a blockchain while having no connection to Tether. A wallet trap goes further: it uses the apparent balance to persuade you to pay an “activation fee,” disclose a recovery phrase or authorize access to your real assets.

The FBI has documented criminals sending tokens that impersonate USDT and using similar-looking addresses to confuse recipients. A blockchain record therefore needs interpretation; its existence alone does not authenticate the asset. See the FBI’s token impersonation warning.

Step 1: Start with the network you agreed to receive

Confirm the exact blockchain before looking up the payment. Ethereum and TRON are different networks; a transfer on one is not evidence of receipt on the other. For an exchange deposit, use the network and address shown in your own deposit instructions. Do not assume that every network carrying a token named USDT is supported.

Open the relevant explorer independently, through a trusted bookmark or the issuer’s official links. Check that it is the mainnet explorer. Testnet balances are for testing and do not establish a real USDT payment, even when a wallet displays a fiat estimate. A sender’s QR code, shortened link or screen recording is not an independent check.

Step 2: Identify the token by its contract, not its logo

Compare the token’s complete contract address or asset identifier with the entry for that network in Tether’s supported protocols directory. Names, tickers and icons can be copied. Adding a custom token to a wallet changes what the wallet displays; it does not authenticate the issuer.

A bridged or wrapped representation requires another check: who issues it, what backs it and whether your receiving platform accepts that exact asset. Such a token is not automatically fraudulent, but “it says USDT” is insufficient. If you cannot establish its identity, do not accept it as the agreed payment.

Step 3: Read the transfer, not just the transaction hash

Paste the transaction hash into the correct explorer yourself. Check the status, timestamp, token contract, amount and complete recipient address. Pending or failed transactions are not completed payments. A successful transaction involving a counterfeit token remains a counterfeit-token transfer.

On Ethereum, the top-level “To” field can be the token contract rather than the person receiving the tokens. Read the token-transfer details to locate the actual recipient and amount. A transaction showing zero ETH can still transfer ERC-20 tokens. Etherscan distinguishes token transfers from native ETH transactions.

For the 2,000-USDT example, a successful transfer of 2 USDT, a payment to a similar address, or an old transfer reused as evidence all fail this check. Compare the whole address with your own trusted receiving address; do not copy one from unsolicited transaction history. Wait for the confirmation or finality requirements of the receiving service.

Step 4: Confirm receipt in an account you control

For a self-custody wallet, check the genuine token balance at your receiving address on the explorer and in your trusted wallet. For an exchange deposit, also check your own account’s deposit record and available balance. An on-chain transfer and an exchange credit are separate events.

If you use KTX, enter through the KTX official website or your installed official app to check your account. A chat message claiming to be customer support cannot substitute for the account record.

Do not accept a wallet supplied by the sender as payment. A watch-only wallet can display funds without giving you spending authority. A stranger’s shared recovery phrase also gives you no exclusive control. MetaMask describes wallet traps that take the funds victims add for network fees.

Step 5: Examine what you are being asked to approve or pay

Receiving an ordinary USDT transfer does not require giving a website permission to spend your existing tokens. Stop if “verification” asks for unlimited spending access, an unclear signature, a recovery phrase, remote access to your device or an unfamiliar software download.

A legitimate outgoing transaction or approval revocation can require a network fee. That is different from sending money to a stranger’s address to “activate,” “convert” or “unlock” an incoming balance. Read the action in the wallet, including the network, asset, spending limit and recipient or authorized contract. KTX’s token approval guide explains why a spending allowance can put existing and future deposits at risk.

If you have already interacted, respond to the actual exposure

Only received an unknown token? Leave it alone and hide or report it through your wallet’s normal tools. Do not follow its embedded links. Merely receiving a token does not itself reveal your private key or grant permission to spend other assets.

Granted a suspicious approval? Review and revoke the relevant permission using tools reached through your wallet provider’s official documentation. Disconnecting the website does not cancel existing approvals, as MetaMask explains. Revocation does not recover funds already transferred.

Exposed a recovery phrase or private key? Treat the wallet as compromised. Create a fresh wallet with a new recovery phrase on a clean device and seek official assistance with securing remaining assets. Changing the app password or revoking approvals does not remove someone else’s key access. Review KTX’s seed phrase security guide. If incoming gas funds are immediately disappearing, stop adding more; a sweeper may be operating.

Keep transaction hashes, addresses, messages and payment records. Contact the affected platform through independently verified channels and report losses to the relevant authorities. Be wary of unsolicited “recovery agents”: the FBI warns that recovery claims can target victims a second time.

Frequently asked questions

Is Flash USDT the same as a flash loan?

No. A flash loan is a DeFi lending mechanism, not a type of USDT. In the standard repayment model, the borrowed funds and required fee must be returned within the same transaction or it reverts. It does not create a balance you can keep for days. See Aave’s flash loan documentation.

Does a successful small test payment prove the next payment is safe?

No. It verifies only that particular transfer. A later payment can use another token, another address or a forged receipt. Apply the checks again before releasing goods or funds.

Does being unable to withdraw mean my USDT is fake?

No. Missing network fees, an unsupported deposit network, confirmation requirements, account restrictions or issuer freezes can also prevent access. Verify the asset first, then establish the specific reason through official channels. Never pay a private “unlock fee.”

Can I recover a payment by revoking an approval?

Revocation removes the specified spending permission; it does not reverse an earlier transfer. If a recovery phrase was exposed, removing permissions alone is insufficient because the attacker can still sign transactions.

Why might an exchange transfer have no public transaction hash?

A transfer between accounts on the same platform may be recorded internally. Confirm it in your own account history. For a claimed on-chain payment, ask for the network and transaction hash; a screenshot is not a replacement.

Risk notice: This article is educational and is not financial, legal or individualized security advice. Digital assets involve issuer, custody, network and fraud risks. Checks can reduce mistakes but cannot guarantee safety or recovery. Transfers may be irreversible; never disclose private keys or recovery phrases, and do not send additional money on the promise that it will release or recover funds.