TRM Labs

TRM Labs started with a simple, uncomfortable premise: the internet gave criminals reach, crypto gave them speed, and now AI gives them scale, while the systems built to stop them still run at analog pace. Two former Generation.org colleagues, Esteban Castaño and Rahul Raina, met in Mexico City and founded the company in 2018, with Castaño dropping out of Stanford's business school to chase blockchain money launderers full time.

Eight years on, TRM is the blockchain intelligence layer behind more than 600 government agencies and financial institutions across 75 countries. It hit a $1 billion valuation in February 2026 on a $70M Series C, and its pitch to defenders is blunt: criminals scale with AI, so you should too.

TRM maps the criminal crypto economy across 40+ categories of illicit activity, covering 184+ blockchains and billions of tracked assets, then hands investigators the tools to trace, cluster, and freeze illicit funds. The core idea is that every transaction leaves a trail, and TRM's job is to attribute that trail to real actors with evidence that holds up in a courtroom.

What sets it apart from a plain analytics dashboard is the four layers it stacks underneath: proprietary data and attribution, a platform that reasons at machine speed, human experts who ran these missions in government, and disruption networks that freeze money in real time rather than just report on it.

Mixers, cross-chain obfuscation, nation-state actors, pig-butchering scams, ransomware, terror financing: this is the work most tools can't touch. TRM's own crime numbers frame the stakes, tracking $93B in sanctions evasion inflows in 2025 (up more than 400% year over year), $2.9B stolen in hacks, and a 500% rise in AI-enabled scam activity.

The harder problem is proof. An investigation that can't stand up in court is a dead end, so TRM built for the courtroom first: every trace is auditable, every attribution shows its source and a confidence score, and analysts can reconstruct the chain of reasoning for a judge.

TRM sells to two worlds. On the public side, that's law enforcement, national security and defense agencies, regulators, and tax authorities, the people who need a single lead turned into a case they can act on. On the private side, it's banks, crypto exchanges, and fintechs that have to know exactly who they're doing business with before they touch a wallet.

The recurring buyer is someone drowning in volume and short on crypto expertise, which is why TRM pairs the software with training and former-agent support rather than assuming customers already know on-chain tradecraft.

TRM organizes its catalog around missions rather than features: Investigation360 for law enforcement cases, Compliance360 for financial institutions, Supervision360 for regulators, NatSec360 for defense and intelligence, and Seizure360 for asset recovery. Underneath them all sits the same blockchain intelligence, exposed through Forensics for tracing, screening and monitoring products for compliance, and a BLOCKINT API for teams that want the data inside their own systems.

The newest bet is Agent, powered by Orion, an AI investigator built into Forensics and trained by the people who actually work these cases. Pick any node on the graph, ask in plain language, and TRM's pitch is weeks of work compressed into minutes, with a human still making every call.

TRM is enterprise and government SaaS: annual platform licenses sold by mission, layered with professional services, training through TRM Academy, and premium investigative support. Pricing is quote-based rather than published, and third-party comparisons peg a mid-sized customer in the roughly 60,000 to 150,000 euro per year range, positioning TRM as the lower-cost option against Chainalysis.

One clever wedge is Deconflict, a genuinely free product for verified law enforcement that lets officers coordinate on overlapping wallet investigations. It seeds the platform with the exact users TRM most wants inside the tent.

Blockchain intelligence is a tight field, and TRM's main rivals are Chainalysis, the long-time market leader, and Elliptic, which pioneered the category back in 2013. TRM's edge is speed and evidence: real-time, sub-second screening, the broadest raw chain coverage, and glass-box attribution that shows its work for audit and court defense.

The momentum is real. One 2026 industry tracker put TRM's category mindshare at 35.8%, up year over year, while Chainalysis slipped to 34.7%. TRM is also betting hard on the agentic angle with Agent and on public-private disruption networks that competitors don't run.

TRM's strongest evidence is the casework. Its intelligence has supported convictions, asset freezes, and OFAC designations across multiple jurisdictions, including terrorism financing and dark web market prosecutions, and it helped agencies seize $8.6M in the FBI-led Qakbot botnet takedown.

The disruption networks put hard numbers on the table too: the T3 Financial Crime Unit it runs with Tether and TRON has frozen more than $450M across 23 jurisdictions, and TRM reports a Net Promoter Score above 80, roughly double the B2B SaaS average. CB Insights named it the highest-rated on-chain intelligence platform in its 2026 fraud-prevention market map.

In head-to-head reviews, TRM tends to win on the same three points: speed, breadth of chain coverage, and glass-box attribution that names its sources and confidence, which matters when an examiner or a defense attorney asks how you know. Buyers also flag it as the more affordable option in the category, and a survey of its own users reported that 91% of law enforcement respondents felt TRM had the breadth and depth they needed.

The flip side of a government-grade product is friction. Deconflict and other tools gate access behind agency verification, and reviewers still treat Chainalysis as the default for the deepest cross-chain investigations and courtroom track record. TRM is closing that gap, not erasing it.

TRM crossed the $1 billion mark in February 2026 with a $70M Series C led by Blockchain Capital, which also led its 2018 pre-seed. Total funding sits around $220M, and the backer list reads like a bridge between crypto and traditional finance: Goldman Sachs, Citi Ventures, Bessemer, Thoma Bravo, Y Combinator, Brevan Howard Digital, Galaxy Ventures, and DRW.

The money is earmarked for the obvious places for a company selling into governments during an AI arms race: more hiring, more AI compliance tooling, and deeper AI-powered investigative capabilities.

TRM is positioned exactly where the market is heading: crypto crime is growing, AI is accelerating both the attacks and the defenses, and governments are the ones writing checks. Fresh unicorn funding, a strong strategic investor base, and rising category mindshare give it room to press its advantage in AI investigations and real-time freeze networks.

The catch is the one every government-heavy vendor lives with. Long procurement cycles, a still-formidable Chainalysis, and a business tied to policy and enforcement priorities mean TRM's growth depends as much on regulation and public-private will as on the quality of its graph.

TRM's differentiator isn't only software, it's a bench of former federal agents, prosecutors, and compliance leaders who worked these cases before they built tools for them. It runs distributed-first out of San Francisco with hubs in Los Angeles, New York, Washington D.C., London, and Singapore, plus a global footprint reaching Bangalore, Cairo, Buenos Aires, and Paris, and leans heavily on async work through Slack and Notion.

The culture is built around three named values, Impact-Oriented Trailblazer, Master Craftsperson, and Inspiring Colleague, and a house obsession with "TRM speed": time-boxed spikes, the 80/20 rule, and shipping a working slice in weeks. Feedback is frequent and, per the company, comes with no surprises.

Disclosed US bands cluster in the low-to-mid six figures, with senior and AI engineering roles reaching into the $200,000 to $275,000 range and go-to-market and G&A roles running lower. TRM states pay is set by skills, experience, and location, and adjusts for the cost of geographies outside the US.

Almost every posting notes eligibility for TRM's equity plan, so the base numbers are only part of the package. Comp is benchmarked against high-growth peers and reviewed annually.

Security is the product here, not a footnote, and TRM's certifications reflect a customer base of agencies and banks: SOC 2 Type II, ISO 27001 and 27701, GDPR and CCPA compliance, and FedRAMP High authorization for the US public sector. It also commits to a 99.95% uptime SLA on a highly available public-cloud architecture.

The legal entity is TRM Labs, Inc., headquartered in San Francisco; its privacy policy lives at trmlabs.com/policies/privacy-policy. Note the crawler's guesses at standard /privacy and /terms paths returned 404s, so the registered address below is the marketing HQ rather than a confirmed legal address.

The headlines cluster around two beats: the disruption networks and the money. In 2024, TRM launched the T3 Financial Crime Unit with Tether and TRON, a first-of-its-kind private-sector crime unit that has since frozen hundreds of millions and added Binance as its first T3+ collaborator.

The other big story is the February 2026 Series C that made TRM a unicorn, covered by Fortune and others. Its annual Crypto Crime Report has also become a widely cited industry benchmark for the scale of illicit activity on-chain.