TRM Labs

At eleven in the morning on a Tuesday, somewhere in a federal field office, an agent is staring at a wallet address. The wallet is moving money that should not be moving. Somewhere in San Francisco, a piece of software made by a company called TRM Labs is staring back. This is the kind of moment TRM was built for, and it happens, by the company's own estimate, hundreds of times a day across 75 countries.

TRM Labs is not a household name. That is by design. Its customers - the FBI, the IRS Criminal Investigation division, the Department of Justice, the Drug Enforcement Administration, plus a long list of banks and crypto exchanges - prefer to keep their tools out of the press. But in February 2026, the company hit a milestone hard to ignore: a $70 million Series C, a $1 billion valuation, and unicorn status. After that, the press came calling.

01 /The problem they saw

In 2018, two friends in San Francisco shared a strange combination of obsessions: national security and digital assets. Esteban Castaño and Rahul Raina believed - correctly, as it turned out - that billions of people would soon use crypto to move money. They also believed - also correctly - that some portion of that money would belong to people you don't want moving money.

At the time, the conventional wisdom was that crypto was anonymous. The conventional wisdom was wrong. Every transaction on a public blockchain is, by definition, a permanent public record. The problem wasn't visibility. The problem was making sense of what you were looking at.

02 /The founders' bet

Castaño and Raina took the bet that the right combination of data engineering, machine learning, and old-fashioned investigative tradecraft could turn raw blockchain data into evidence. Not signal. Not hints. Evidence - the kind a prosecutor could carry into a courtroom. They went through Y Combinator in 2019, raised a pre-seed from Blockchain Capital, and got to work.

For a few years, they were a small company doing very specific work for a very small number of customers. Blockchain Capital led the first check. Seven years later, Blockchain Capital led the most recent one. In between, the company picked up Goldman Sachs, Tiger Global, Bessemer, Thoma Bravo, PayPal Ventures, Citi Ventures, JPMorgan, and a roster of investors who do not normally invest in things they do not believe will become important.

03 /The product, briefly

What TRM actually sells is a platform - a few platforms, really - that ingest blockchain data from hundreds of networks and serve it back to investigators in a form they can act on. TRM Forensics is the flagship: a tracing and case-management tool with AI agents grafted on top, designed to follow a transaction from origin to off-ramp and produce a record clean enough for court. Wallet and entity screening APIs feed the compliance teams at banks, exchanges, and virtual asset service providers. Threat intelligence feeds catalog ransomware crews, scam clusters, sanctioned entities, and dark-web markets.

Then there is Beacon Network, which is harder to explain and, arguably, the more interesting product. Beacon connects law enforcement with a coalition of 70-plus financial institutions covering roughly three-quarters of global crypto volume. When a verified investigator flags a suspicious address, that signal propagates - in something close to real time - across every participating exchange and service. The result, when it works, is that the money gets frozen before it cashes out.

04 /Milestones, briefly

05 /The proof

A startup's customer logos are usually marketing. TRM's customer logos are, in a few cases, classified. The publicly known list still does most of the work: the FBI is a long-term client. The IRS-CI uses TRM in tax and money-laundering cases. The DEA, the DOJ, and dozens of foreign counterparts use it for everything from sanctions enforcement to narcotics-trafficking investigations. On the private side, roughly forty percent of TRM's customer base now sits in banks and crypto businesses - a share that is growing as tokenized deposits and tokenized equities move from slide deck to balance sheet.

The growth itself is the other proof point. Revenue has averaged better than 150 percent annually for five years. Few categories of software grow like that, and almost none of them sell into both crypto exchanges and three-letter agencies.

06 /The mission

The line on the wall reads: build a safer financial system for billions of people. It sounds like the sort of thing every fintech says. Coming from TRM, the line is unusually specific. The "safer" is not abstract. It refers to ransomware groups that can't cash out. To pig-butchering scams that get flagged in time. To sanctioned wallets that get screened before a bank wires against them. To stolen funds that wind up in a courtroom exhibit instead of a Bahamian off-ramp.

The team is roughly 360 people, remote-first, drawn from AI research, data science, software engineering, and the alumni networks of the FBI, intelligence community, and major financial-crime prosecution offices. The Series C dollars, the company has said, will go mostly toward more of them. The bottleneck is talent, not capital.

07 /Why it matters tomorrow

Stablecoins are starting to behave like money. Banks are starting to behave like crypto companies. Crypto companies are starting to behave like banks. The line between regulated finance and on-chain finance is dissolving fast, and the institutions tasked with keeping money clean are watching the floor move under them. They need a translator that works at the speed of the chain, not at the speed of a subpoena. That is the niche TRM has spent eight years filling.

There are competitors. There always are in a category that good. But the company's combination of public-sector relationships, private-sector coverage, and a real-time coalition like Beacon is hard to replicate from a standing start. The moat is paperwork - the years of agency procurements, security reviews, and trust built one investigation at a time.

08 /Back to the wallet

Eleven in the morning, the agent at the field office, the suspicious wallet. The difference in 2026 is that the agent isn't alone. The screening signal she fires from her terminal hits seventy exchanges in something like real time. The wallet's history - hops, mixers, off-ramps, prior associations - is already mapped. The money she's chasing is unlikely to leave the chain alive.

A few years ago, that was science fiction. Now it is a Tuesday. That is what TRM Labs sells, and that is why the people who quietly buy it keep coming back.