P2P triangulation: you were paid with stolen money — what to do
The "triangle" scheme is the top cause of freezes hitting bona fide P2P sellers: a scammer matches you with a victim, you receive her payment, release crypto to the scammer — and the complaint lands on you. The bank blocks your card, the exchange freezes the account. Here is the mechanics and the good-faith dossier that resolves such cases.
How the scheme works
The scammer finds a victim
"Investments," "goods payment," "help with a transfer" — the victim is ready to pay, unaware her money will settle someone else's P2P order.
The payment goes to you
The scammer opens a P2P order with you and gives the victim your details. You see the order paid — everything looks normal on your side.
The crypto goes to the scammer
You release the USDT. The scammer disappears with it.
The complaint lands on you
The victim realizes the fraud and reports YOUR account to the bank and police — the money went to you. The bank blocks the card; the exchange freezes the account.
What to do — step by step
- Preserve the deal evidence immediately: P2P order screenshots, the counterparty chat, crypto-release TxID, payment details and exact amounts.
- Do not refund the "victim" directly outside procedure — without documentation it reads as an admission and does not lift the complaint.
- Reply to the bank in writing: you are a bona fide seller under a public platform order — here is the proof.
- Build the exchange dossier: order + chat + your P2P history + an independent AML report on your addresses.
- If a criminal case is opened — engage a lawyer at once: your status (witness, not accomplice) must be fixed procedurally.
An open ready-to-fill template for this situation: P2P evidence checklist →
What NOT to do
- Do not delete the account, orders or chats — your main good-faith evidence.
- Do not strike deals with the victim about "a refund for withdrawing the complaint" without written processing via the bank or platform.
What Onyx does in your case
- Forensic report on your addresses (Chainalysis/TRM class): what exactly triggered the flag and your real distance from the risk cluster.
- Source of Funds dossier — a chronological reconstruction of your capital with documents, in the format compliance actually reads.
- Communication with the platform's compliance or your bank — one verified position instead of ticket chaos.
Frequently asked questions
If I refund the money, will I be unblocked?
Not necessarily. A refund outside procedure does not lift the complaint automatically and is sometimes used as proof of involvement. If refunding — only via the bank/platform with a documented basis.
Can a criminal case be opened against me?
The victim's complaint is often registered as a fraud case. A bona fide seller with a complete dossier usually passes as a witness — but ignoring the process is not an option.
How do I protect myself in advance?
Vet counterparties (rating, account age, volume), refuse third-party payments (payer name ≠ counterparty = stop), record every deal, keep your addresses AML-clean.
Other platforms
Free preliminary case assessment
Describe your situation — we will return an honest assessment: what is realistically possible, how long it takes and what it costs. No "guaranteed unlocks" — they do not exist; compliance decides.