What is P2P crypto trading? How peer-to-peer trades, escrow and the risks work

P2P (peer-to-peer) crypto trading means buying or selling crypto directly with another person rather than with an exchange's order book. A marketplace lists offers, the seller's crypto is locked in escrow, the buyer pays the seller directly by bank transfer, mobile payment or another agreed method, and the crypto is released once the seller confirms the money has arrived. The platform holds the coins and settles disputes, but it never touches the payment. That split is where most of the risk sits: a payment that is faked or later reversed, a counterparty who is not who they claim to be, and money that turns out to come from a fraud victim.

How a peer-to-peer trade works

Researchers at Carnegie Mellon University, who studied two P2P crypto marketplaces for 12 months (June 2022 to June 2023), describe them as two-sided marketplaces: vendors post advertisements to buy or sell crypto, and customers browse the ads and start a trade. Each ad states:

• the crypto and the price offered;
• the payment method, such as bank transfer, mobile payment or gift cards;
• the fiat currency, such as USD, EUR or KES;
• any identity checks the vendor requires.

The trade itself runs in four steps, per the same study:

1. Escrow. The seller sends or locks the crypto in an escrow account, from a wallet on the platform or one the seller controls.
2. Payment. The buyer pays the seller directly, outside the platform, using the method in the ad.
3. Confirmation. The seller checks that the money has arrived and tells the platform.
4. Release. The platform releases the crypto to the buyer.

Custodial and non-custodial marketplaces

The study separates two models. On a custodial marketplace, users first deposit crypto into the platform's wallet. On a non-custodial one, users keep control of their funds and coins move directly between their own wallets. In both models the platform acts as the escrow agent and moderates disputes.

What escrow does and does not cover

Escrow protects the buyer against a seller who takes the money and never sends the coins, because the coins are locked before the buyer pays. It does nothing to verify the buyer's payment. That check falls on the seller, at step 3. Once the seller confirms and the crypto is released, it is gone.

Ratings and feedback

Most marketplaces let users rate each other after a trade, and many traders pick a counterparty by score. The Carnegie Mellon study found that those scores carry less information than they appear to:

• On the larger marketplace studied, 96.43% of users had a feedback score above 0.95 (on a 0-to-1 scale), and only 0.27% of all feedback was negative. Almost everyone looks excellent.
• Accounts later suspended by the platform received feedback on far more of their trades than ordinary accounts: among accounts with 10 trades, 50.4% of suspended accounts had a review for every trade, against 8.4% of others. The authors read this as evidence of fake, self-promoting reviews.
• 46% of vendors who posted ads on that marketplace had been suspended by March 1, 2023.
• In a month-long test, picking the accounts with the worst feedback predicted future suspensions no better than picking accounts at random.

A high rating and a long trade count are a starting point, not proof that a counterparty is safe.

The real risks

Payment reversals and fake payment proof

The Carnegie Mellon researchers list the main tactics they found on P2P marketplaces: reversing payments, sending fake or edited gift card receipts, pressuring the seller to release the crypto, and blocking the release of crypto.

Reversals work because the two halves of the trade have different rules. A crypto transfer is final. The Federal Trade Commission (FTC) says "cryptocurrency payments typically are not reversible", and that once you pay with crypto, you can usually get the money back only if the person you paid sends it back. Many bank and card payments, by contrast, can be disputed. In the United States, Regulation E gives a consumer 60 days from the statement to report an unauthorized electronic fund transfer. A buyer who pays from a stolen or hijacked account, or who later claims the payment was unauthorized, can leave a seller with the crypto gone and the payment pulled back.

Scams around the trade

Fraud involving crypto is large and growing. The FBI's Internet Crime Complaint Center (IC3) received 181,565 complaints involving cryptocurrency in 2025, with reported losses of $11.366 billion, up 22% from 2024. These figures cover all crypto-related complaints in the US, not P2P trades alone.

The FTC lists warning signs that apply directly to P2P chats: "Only scammers demand payment in cryptocurrency", "Only scammers will guarantee profits or big returns", and do not pay anyone who contacts you unexpectedly demanding crypto. A counterparty who asks to move the conversation or the trade off the platform also removes the escrow, which is the one protection the marketplace provides.

Legal exposure

Two kinds of legal risk follow from P2P trading.

Trading as a business without a licence. In the US, the Financial Crimes Enforcement Network (FinCEN) treats a person who buys and sells crypto as a business, a "P2P exchanger", as a money transmitter. Such a person must register with FinCEN as a money services business and run an anti-money laundering program, keep records and file suspicious activity and currency transaction reports. FinCEN's 2019 guidance exempts a person who trades only on an infrequent basis and not for profit or gain. In April 2019 FinCEN fined an individual P2P bitcoin trader $35,000 and barred him from money transmission, its first enforcement action against a peer-to-peer virtual currency exchanger. Other countries set their own rules, and they differ.

Receiving money from fraud victims. Scammers can pay a P2P seller with money taken from a victim, which turns the seller into a link in the chain. The US Department of Justice defines money mules as people who, at someone else's direction, "receive and move money obtained from victims of fraud", and says that knowingly doing so can lead to criminal charges. Unknowing sellers face practical damage too. In India, crypto traders whose bank accounts were frozen after a police cyber cell flagged suspected fraud have had to petition the courts; in June 2026 the Madhya Pradesh High Court ordered one such account unfrozen while the disputed amount stayed on fixed deposit until a magistrate ruled.

Safety steps before and during a P2P trade

These steps do not depend on any particular marketplace.

1. Check the law where you live. Confirm whether P2P crypto trading is allowed, whether regular trading needs a licence or registration, and how gains are taxed.
2. Keep the whole trade on the platform. Use its chat and its escrow. Decline any request to pay, release or talk elsewhere.
3. Release only after the money is in your account. Log in to your bank or payment app yourself and check the balance. Do not rely on screenshots, PDF receipts, emails or text messages sent by the buyer.
4. Check the name on the payment. The payment should come from an account in the name of the verified counterparty. A payment from a third party is a common sign of stolen funds.
5. Prefer payment methods that are hard to reverse. Avoid gift cards, cheques and other methods your bank or provider can pull back after the fact.
6. Do not be rushed. Pressure to release before payment clears, or urgent messages from "support", are warning signs.
7. Treat ratings as one signal. Look at account age, trade history and how reviews read, not only the score.
8. Keep records. Save the trade ID, chat, payment reference and bank statements. If something goes wrong, open a dispute on the platform at once, contact your bank, and report fraud to the police; in the US, also to the FTC at ReportFraud.ftc.gov or to the FBI at ic3.gov.

Limitations

The marketplace data come from one academic study of two platforms between 2022 and 2023, and the legal examples are mostly from the United States; rules and fraud patterns in your country may differ.