TRM Labs, Inc.

TRM Labs, Inc., a San Francisco-based blockchain intelligence software vendor, operates as a prime contractor delivering cryptocurrency tracing, virtual currency analytics, and blockchain forensics tools to federal law enforcement and financial regulatory agencies. TRM Labs is a self-certified small disadvantaged business competing predominantly in full-and-open procurements without set-aside designation, though it holds a $25 million FBI multiple-award IDV under Total Small Business set-aside and sits on a $500-ceiling FBI OSINT tools IDIQ also reserved for small business.

TRM Labs' concrete federal capability centers on four product categories: standalone blockchain intelligence software licenses (TRM Forensics, TRM Cyber Tool, the Cryptocurrency Network Surveillance and Investigation System); concurrent user licenses for non-fungible token and virtual currency transaction analysis across multiple blockchains; forensic software subscriptions paired with professional services including expert witness testimony, de-mixing analysis, and cryptocurrency transaction attribution; and full-time equivalent personnel deployed to support operational analytical work. The vendor performs this work entirely in-house on comparable service contracts without subcontractor labor. Recent representative prime awards include a $94.7 million sole-source definitive contract with Immigration and Customs Enforcement (July 2026) for analytical support to the DHS Homeland Security Investigations Cyber Disruption Center addressing scam disruption, ransomware recovery, and sextortion investigations; a $30.5 million definitive contract with the Internal Revenue Service (September 2026) for law enforcement web subscriptions and support running through September 2031; and a $3.76 million definitive contract with IRS Criminal Investigation (September 2025) for blockchain analytics, tracing, data, and training solutions. On the IDV side, TRM Labs holds a $25 million FBI multiple-award vehicle (March 2022 through March 2027, Total Small Business set-aside) under which 23 task orders totaling $12.2 million have been issued for virtual currency tracing tools, blockchain analytics software, and related professional services, and an $12.75 million ICE single-award IDV (August 2022 through August 2027, no set-aside) supporting forensic software and blockchain analytics for Homeland Security Investigations, from which nine delivery orders exceeding $6.59 million have been placed.

Customer concentration reflects deep penetration in a narrow set of federal law enforcement and financial crime agencies. Immigration and Customs Enforcement anchors the portfolio with 15 awards worth $118.7 million in combined potential value — by far the largest customer. The FBI Headquarters Division follows with 29 awards totaling $38.2 million. The Internal Revenue Service accounts for 4 awards worth $40 million. These three agencies represent 99% of the portfolio's combined potential value across 48 awards. The Department of Homeland Security U.S. Secret Service, the Department of Justice Criminal Division, the Financial Crimes Enforcement Network, and the Drug Enforcement Administration round out the active customer base. This concentration is decision-relevant: ICE alone carries sufficient dollar magnitude to create material recompete exposure for the vendor.

Activity has accelerated sharply. The vendor received 13 awards in 2022, 11 in 2023, 13 in 2024, then 20 in 2025 and 22 in 2026, reflecting sustained and expanding federal demand for cryptocurrency investigation capabilities. However, 20 awards worth $105 million in combined potential value reach ultimate completion within the next twenty-four months, creating a major recompete cliff. The ICE $94.7 million contract completes August 29, 2027 (within the cliff window); the IRS $30.5 million contract runs through September 2031 (outside the window). The FBI $25 million IDV ceiling extends through March 2027, creating renewal exposure for that vehicle and its 23 task orders.

SCI-reported invoiced revenue across federal service contracts above the $150,000 threshold totaled $21.4 million from FY2022 through FY2025 ($2.6 million in FY2022, $6 million in FY2023, $6.4 million in FY2024, and $6.4 million in FY2025). The FY2023 SCI record reports 45,112 full-time equivalents delivered on contract-level reporting — a statistical anomaly in the data suggesting either a high-volume licensing or subscription delivery model where FTE counts may reflect concurrent user seats or analytical capacity rather than headcount. No FTE figures appear in FY2022, FY2024, or FY2025 SCI records. Across SCI-reportable prime contracts, TRM Labs records zero sub-hours share, consistent with the vendor's observed practice of self-performing work on comparable engagements.

TRM Labs operates as a standalone prime (84% of recent awards) with minimal subcontractor activity (16% of awards). On the sub side, the vendor subcontracts to tier-one systems integrators including HII Mission Technologies Corp (multiple JNEEO task orders for forensics licenses and subscription renewals), PAE Government Services (cryptocurrency tracing support), ManTech Advanced Systems International (software licenses and analytics services), Peraton Enterprise Solutions (DC3 TABO technical analysis), and CACI NSS (special operations forces software-as-a-service). These relationships position TRM Labs as a specialized technology feeder to large primes executing complex operations or special-operations missions rather than as a diversified systems integrator.

TRM Labs holds top-level positions on two GSA-administered multi-agency vehicles — Alliant II (4 task orders) and ASTRO (4 task orders) — through which agencies beyond the core customer set can access its blockchain intelligence platform. Two FBI IDVs (the $25 million Total Small Business multiple-award and the $500 OSINT IDIQ) and the ICE $12.75 million single-award IDV represent the bulk of the vendor's recurring vehicle footprint. The FBI IDVs enable rapid procurement of virtual currency tracing software, blockchain analytics licenses, and related forensic and training services; the ICE vehicle supplies concurrent user licenses, forensic software subscriptions, and analytical support for Homeland Security Investigations' cyber and financial crime operations.

The corporate structure includes a named subsidiary, TRM Labs USG, Inc., suggesting possible segmentation of government-focused business from commercial operations, though the source provides no additional detail on subsidiary scope or strategy.

TRM Labs ('TRM') provides the next generation blockchain analytics software for cryptocurrency transactions. TRM help government agencies, cryptocurrency businesses, and financial institutions trace the source and destination of funds in any digital asset, monitor transactions, and create cross chain profiles for crypto-related entities like exchanges. TRM's groundbreaking approach analyzes the blockchain for patterns (signatures) of behavior indicative of money laundering to assist investigators in tracing illicit financial flows in real time.

TRM is also the most advanced analytics tool for traditional blockchain analytics having created the largest and fastest growing database of high risk addresses, ingesting 10 million web posts scanned daily in 76 languages across 230 countries. Finally, TRM has created the first and only customizable, cross-chain risk engine, providing a comprehensive view of the flow of funds across different cryptocurrencies.