How P2P works and where the risk lives

Over the years I have looked at hundreds of frozen P2P accounts, and the cause is almost always the same. The person understood which buttons to press on the exchange, but did not understand what happens under the hood of the trade. This lesson closes exactly that gap. Once you can see the mechanics, you stop being afraid and start controlling the risk. The catalogue of specific warning signs lives in the red flags lesson, and the full trade routine lives in the workflow lesson. Here we build the foundation both of them stand on: how the machine is built and where it can catch your hand.

The anatomy of a trade, step by step

P2P is not a "transfer from one person to another". It is a deal with an intermediary, and the intermediary is the exchange acting through an escrow mechanism. Walk through a standard sale of USDT and watch who controls what at each step.

1. You publish a listing: amount, rate, accepted payment methods.
2. A buyer opens a trade. At this moment the exchange locks your USDT in escrow. You cannot move it, and neither can the buyer.
3. The buyer sends fiat directly to your card or bank account. The exchange is not in this payment. It passes entirely outside the platform.
4. You check your own bank and confirm that the money actually arrived.
5. You press release. Only now does the escrow hand the USDT to the buyer.
6. The trade closes and both sides leave feedback.

Here is the key point, and it is worth rereading. The exchange controls the crypto at every moment, but it never sees your bank transfer. It takes your word, backed by your confirmation, that the money arrived. Every fraud scheme in P2P is built inside that gap between what the platform controls and what it can only be told about.

Where the risk is born

The crypto side of the trade is the safe side. It sits in escrow, it is visible on-chain, and nobody can fake a USDT transfer. The risk comes from the fiat side. You do not know where the buyer got the money he is paying you with, and no interface on the exchange will tell you. If that money is stolen, you become the last visible link in the chain, the one the bank, the police and the exchange compliance team can all reach. They cannot find the fraudster quickly, but your card number is right there in the victim's statement.

Triangulation: the scheme that catches honest people

This is the most common trap I see, and it is insidious because you do nothing illegal. The mechanics go like this. A fraudster finds a victim on some other platform, say he lists a phone for sale at an attractive price. At the same time he opens a P2P trade with you to buy, for example, 1,000 USDT. Instead of paying you himself, he gives the victim your bank details as "payment details for the phone". The victim sends the money to you, believing she is paying for a phone. You see a credit for the right amount land in your bank, and you calmly release the USDT to the fraudster. The phone never arrives. The victim files a police report and a complaint with her bank, and your card is named as the recipient in both documents. The bank freezes the card. The exchange, acting on the complaint or on a law-enforcement request, freezes the account.

Now look at the same trade through three pairs of eyes, because this table is the whole lesson in miniature.

Notice what happened. You sold crypto, received payment, delivered the goods in the form of USDT. From your side everything was honest. But from the outside, on paper, it looks as if you received the victim's stolen funds. That is why triangulation is so dangerous specifically for conscientious traders: the scheme needs an honest, reachable person exactly where you are standing.

Other typical vectors

• Chargeback. The buyer pays by card, you release the crypto, and then he reverses the payment through his bank. You are left with no crypto and no money. We break this down in the dispute lesson.
• Fake payment receipt. The buyer sends a forged screenshot of a transfer and pressures you to release. Never act on a screenshot. Act only on a real credit visible in your own bank.
• Dirty USDT on the way in. As a buyer you receive USDT that earlier passed through a mixer, a sanctioned address or a scam cluster. Formally you did nothing, but the exchange risk engine will see it when you try to move the funds. From our own checker statistics: of the addresses people brought to us to verify, 57 percent turned out to be in the Tether blacklist. People come to check exactly the problem addresses, and they usually come late.

Mistakes that decide the case before it starts

Three habits I see over and over in the frozen accounts that reach me.

• Trading on your salary card. When a complaint lands, the bank freezes the card, and your everyday money is trapped together with the trading float. Keep the flows separated.
• Deleting chats after the trade. The chat is the only place where the buyer's behavior is recorded. Six months later it is the difference between a documented defense and your word against a police report.
• Screening nothing because "the exchange checks them". The exchange runs KYC on the account, not an AML check on the money the buyer sends you. That part of the risk was always yours.

The core takeaway

Your safety in P2P rests on two things that are fully inside your control. First, check the counterparty before the trade, not after the problem. Second, capture evidence of every trade as if tomorrow you will have to prove your own honesty. The next lessons walk through both, and you can start right now by running any counterparty address through our free checker.

Check yourself

• Task. Take your last completed P2P trade and write down, from memory, the six steps of its anatomy: who controlled the crypto and who controlled the fiat at each step. Then mark the step where a triangulation fraudster would insert the victim.
• How to know you got it right. The insertion point is step three, the fiat payment: the money arrives from a third person who is not your counterparty. If you also noted that the exchange cannot see this substitution, you have understood the core of the lesson.
• Task. Explain in two sentences why the crypto side of a P2P trade is the safe side and the fiat side is the risky side.
• How to know you got it right. Your answer should mention escrow and on-chain visibility for crypto, and the exchange's blindness to bank transfers for fiat.