P2P triangulation: you were paid with stolen money. What to do
The "triangle" scheme is the top cause of freezes hitting bona fide P2P sellers: a scammer matches you with a victim, you receive the victim's payment, release crypto to the scammer, and the complaint lands on you. The bank blocks your card; the exchange freezes the account. Here is how the scheme works and what a good-faith dossier that resolves such cases looks like.
How the scheme works
The scammer finds a victim
"Investments," "payment for goods," "help with a transfer": the victim is ready to pay, unaware that the money will settle someone else's P2P order.
The payment goes to you
The scammer opens a P2P order with you and gives the victim your details. You see the order marked as paid, and everything looks normal on your side.
The crypto goes to the scammer
You release the USDT. The scammer disappears with it.
The complaint lands on you
The victim realizes it was fraud and reports YOUR account to the bank and the police, because the money went to you. The bank blocks the card; the exchange freezes the account.
What to do, step by step
- Preserve the deal evidence immediately: P2P order screenshots, the counterparty chat, the crypto-release TxID, the payment details and the exact amounts.
- Do not refund the "victim" directly, outside the procedure: an undocumented refund reads as an admission and does not lift the complaint.
- Reply to the bank in writing. State that you are a bona fide seller acting on a public platform order, and attach the proof.
- Build the exchange dossier: the order, the chat, your P2P history and an independent AML report on your addresses.
- If a criminal case is opened, engage a lawyer at once: your status (witness, not accomplice) has to be fixed procedurally.
An open ready-to-fill template for this situation: P2P evidence checklist →
What NOT to do
- Do not delete the account, the orders or the chats. They are your main good-faith evidence.
- Do not strike deals with the victim about "a refund for withdrawing the complaint" without a documented arrangement via the bank or platform.
What Onyx does in your case
- Forensic report on your addresses: what exactly triggered the flag, how far your funds really are from the risk cluster, and what the counterparties show.
- Source of Funds dossier: a chronological reconstruction of your capital with documents, in the format compliance actually reads.
- Communication with the platform's compliance or your bank: one consistent, verified position instead of a pile of scattered tickets.
Frequently asked questions
If I refund the money, will I be unblocked?
Not necessarily. A refund made outside the procedure does not lift the complaint automatically and is sometimes used as proof of involvement. If you do refund, do it only through the bank or the platform, on a documented basis.
Can a criminal case be opened against me?
The victim's complaint is often registered as a fraud case. A bona fide seller with a complete dossier usually passes as a witness, but ignoring the process is not an option.
How do I protect myself in advance?
Vet counterparties (rating, account age, volume), refuse third-party payments (payer name ≠ counterparty = stop), record every deal, keep your addresses AML-clean.
Other platforms
Free preliminary case assessment
Describe your situation and we will give you an honest assessment: what is realistically possible, how long it takes and what it costs. No "guaranteed unlocks": they do not exist, because the decision sits with compliance.