01Yes, and here's who doesn't ask
A business that swaps crypto for money has to check who you are; why exchanges ask for ID covers the rules. A person selling their own coins is not that business. When you buy from them, there's no ID file because there's no one obliged to keep one.
One trap in the name: the "P2P" desks inside big exchanges aren't this. The exchange checked both traders before either could post an offer. P2P without KYC means a venue that never holds your identity at all.
The line runs the other way too. Selling now and then is personal; selling to strangers for a margin is a business, and where a P2P seller becomes a business explains where that line sits. P2P is also one of five routes in how to buy crypto without KYC.
02How escrow works: four designs, one question
Escrow means the seller's coins are locked where neither side can grab them alone, until the money lands. That's the idea. The design decides who could still walk off with the coins.
Design 1A website holds the coins
The seller sends the coins to the site, and the site releases them when the seller confirms payment. Simple and fast. But you're trusting the site: it can freeze them, lose them, or be shut down with them inside. You'll see how that ends in the case study.
Design 2Two of three keys
Bitcoin has had this since 2011. BIP 11 describes "Three-party escrow (buyer, seller, and trusted dispute agent)" with "2-of-3 signatures required". Buyer and seller sign together when the trade goes well; if it doesn't, the dispute agent sides with one of them, in a way the Bitcoin wiki likens to "a charge-back". Nobody moves the coins alone.
Design 3Two of two keys, plus a deposit from both sides
No third key at all. Buyer and seller each lock a deposit next to the coins, and the coins move only when both sign. A cheat loses their own deposit, which makes cheating a bad deal.
Design 4A hash lock and a timer
BIP 199 describes a script that pays one side "by disclosing the preimage of a hash", or lets the other side take the coins back "after a timeout is reached". Lightning-based P2P venues use the same idea: if a trade stalls, the coins go home on their own.
03The gap escrow can't close: the money side
Escrow lives on the chain, and the chain can lock coins. The money travels on bank rails, with their own rules. No escrow on earth can lock a bank payment.
And the money side is where people lose. The FTC says that in 2024, of the more than $12.5 billion reported lost to fraud, consumers lost more to scams "where they paid with bank transfers or cryptocurrency" than to every other payment method combined. The FBI counts $11.366 billion in crypto-related losses for 2025.
On the crypto side, the FBI is plain: crypto "transactions are irrevocable". So the two dangers point in opposite directions:
- The buyer's danger: paying first, with something final, to someone whose coins were never locked.
- The seller's danger: accepting a payment the sender's bank can take back after the coins are gone.
That's the whole skill. Never pay before the coins are locked. Never accept money that can walk back.
04Can this payment be pulled back?
The safe payment depends on which side you're on. Here's the short version, from US consumer law:
| Payment | Can the payer pull it back? | For the seller |
|---|---|---|
| Cash in person | No | Safest |
| Credit card | Yes, by dispute | Don't |
| Debit card | Yes, if reported | Don't |
| Someone else's account | Yes, as unauthorized | Don't |
| Payment app | Sometimes | Name must match |
| Check | It can bounce weeks later | Don't |
| Crypto | No | Final |
Pick your side and a payment to see how long the window stays open and what the other side learns about you:
Can this payment be pulled back?
Pick your side and how the money moves. Every line comes from FTC, CFPB or FBI guidance. Nothing you pick leaves this page.
Which side are you on?
How does the money move?
- Can the payer pull it back?
- No. No bank sits behind it to pull it back.
- How long
- None. It's done when it changes hands.
- What the seller learns
- Your face, and where you met.
FineOnce the seller's coins are locked in escrow. Never hand cash over first.
US rules from FTC, CFPB and FBI guidance, read 3 November 2026. Other countries differ.
05The five P2P scams, by how they work
Every one of them works the money side. Not one breaks the escrow.
Scam #1The fake receipt
A screenshot, or a message dressed up as your bank, says "paid". It isn't.
a buyer sends a crisp screenshot of a transfer and asks you to release. Your bank app shows nothing yet.
The fix: check your own account, never their proof.
Scam #2The card dispute
The buyer pays by card, gets the coins, then disputes the charge. The law gives them time: the dispute letter must reach the issuer "within 60 days after the first bill" with the charge.
The fix: sellers never take cards for crypto.
Scam #3The triangle
The money comes from a third person. Sometimes it's a victim who thinks they're buying a laptop and was told to pay "my associate". Sometimes it's an account the scammer broke into. Either way, the scammer gets your coins.
When a transfer was made by someone who got the owner's login by fraud, the CFPB says it "is an unauthorized EFT under Regulation E". The real owner gets their money back. The seller who received it loses it, after the coins have left.
The fix: the name on the payment must match the trader. If it doesn't, send the money back where it came from and release nothing.
Scam #4The overpaid check
The FTC explains why this one works: "By law, banks have to make deposited funds available quickly", but "Fake checks can take weeks to be discovered". The money shows up, you release, and later the bank wants it back from you.
The fix: no checks or money orders for crypto.
Scam #5Off the venue, or fake support
"Let's skip the fees, pay me direct." Or a "support agent" who messages you first. Leaving the venue means leaving the only lock you had. And if a "seller" wants you to send crypto first, remember the FTC's line: "Only scammers demand payment in cryptocurrency."
The fix: never leave escrow, and treat any support DM you didn't ask for as a scam.
06If you're buying
The buy guide has the five safety rules for meeting a seller. Here's why each one works:
- Escrow before you pay. It turns the seller's promise into a lock. No lock, no payment.
- Pay with something final, only after the lock. Cash in person is final for both sides, which is good for you once the coins can't leave.
- Start small. A seller who's honest with $50 has shown you their escrow, their speed and their manners for $50.
- Receive to a fresh wallet you hold. Not an exchange account, which would put your name right back on the coin.
- Check the chain, not their screen. Wait until your own wallet shows the coins with confirmations.
Pay by bank or app, and the seller sees your name. Pay cash, and they see your face. Your wallet has its own ways to meet your name; the six ways your name gets attached walks through them.
07If you're selling
Selling is where the triangle and the card dispute land. Take only money that can't walk back to a stranger's bank:
- Cash in person. Count it before you release.
- A transfer from the buyer's own named account, once it has fully landed. Not "pending". Landed.
Why do banks claw back so fast? Because the owner's own loss depends on speed. Report a lost debit card "within 2 business days" and the most they can lose is $50. Every victim reports quickly, and the reversal lands on whoever received the money: you.
And app payments aren't a loophole. The CFPB says "Any P2P payment that meets the definition of EFT is covered by EFTA and Regulation E", the same rules as a bank transfer.
Selling your own coins now and then is personal. Selling to strangers as a business makes you a money transmitter with an ID duty of your own. Where a buyer becomes the business has the rule in its own words.
08What still runs, and what was shut down
Plenty of guides still list venues that are gone. Here's where things stand on 3 November 2026, from government records, not rumours:
- Paxful pleaded guilty in December 2025 and was sentenced in February 2026. Details in the case study below.
- LocalBitcoins was fined EUR 500,000 by Finland's financial regulator in June 2025 for "failures in identifying and verifying the identities of customers".
- Still running: venues built on Designs 2 to 4, from desktop apps using two keys and deposits to Lightning venues with a hash lock and timer. We don't name or rank them; check each one's escrow with the question above.
Notice the pattern. The venues that held customers' coins and skipped ID are the ones with enforcement records. The ones that never hold the coins are still trading.
09Case study: Paxful, from "no KYC" to a guilty plea
The DOJ called Paxful an "online peer-to-peer virtual currency platform and money transmitting business". Here's what its record shows, step by step:
- The pitch. From July 2015 to June 2019 it marketed itself as a platform that "did not require know-your-customer (KYC) information", while showing third parties AML policies it didn't follow.
- The scale. From 2017 to 2019, "26.7 million trades, totaling nearly $3 billion in value".
- The plea. A co-founder pleaded guilty in July 2024, and the company in December 2025. FinCEN found it "facilitated more than $500 million" in suspicious activity and fined it $3.5 million.
- The sentence. The agreed penalty was $112.5 million, but the court took what the company could pay: a $4 million criminal penalty, in February 2026.
The lesson isn't about anyone's users. It's about design. A venue that holds your coins can only keep its "no ID" promise as long as it exists. Escrow that never holds your coins doesn't depend on that, and coins you've already moved to your own wallet don't either.
10After the trade: you hold a coin, now pick the one you want
P2P markets are deepest in Bitcoin, so most people walk away holding BTC. If you wanted Monero or USDT, that second step needs no person and no ID.
Now it's your turn. Start with BTC to XMR, or BTC to USDT, on our swap with no ID.
Keep reading
- How to buy crypto without KYCEvery route that still works, what each one costs and leaks, and the rules that apply.
- Is buying crypto without KYC legal?Who the law binds, where a buyer becomes a business, and who has been charged.
- Bitcoin ATM without IDWhat kiosks ask, the limits and fees, and the scam the FBI warns about.
How we checked this
Written by the team that runs the SilentMule swap desk. Every rule about payments is quoted from FTC, CFPB or FBI guidance, every escrow design from the Bitcoin proposal that defines it, and every venue fact from a DOJ, FinCEN or Finnish regulator release, each linked where it appears. Last checked . Spotted something wrong? Tell us and we fix it.
Sources
- BIP 11: M-of-N standard transactions
- BIP 199: hashed time-locked contract transactions
- bitcoin.it: Contract, escrow and dispute mediation
- FTC: reported fraud losses in 2024, 10 March 2025
- FTC: what to know about cryptocurrency and scams
- FTC: using credit cards and disputing charges
- FTC: lost or stolen credit, ATM and debit cards
- FTC: how to spot, avoid and report fake check scams
- CFPB: Electronic Fund Transfers FAQs
- FBI IC3: cryptocurrency
- FBI IC3: 2025 Internet Crime Report
- DOJ: virtual asset trading platform pleads guilty, 10 December 2025
- DOJ: virtual asset trading platform sentenced, 11 February 2026
- FinCEN: $3.5 million penalty against Paxful, 9 December 2025
- FIN-FSA: penalty payment to LocalBitcoins Oy, 3 June 2025