No-KYC guide

P2P crypto without KYC Escrow locks the coins. Nothing locks the money.

sections
10
min read
12
primary sources
15
Fig. 00Cash in hand cuts the string
BANKSELLERBUYERESCROWB

Short answer: yes. A person selling you their own coins doesn't have to ask for your ID.

Here's the part most guides skip. The biggest P2P venue that sold itself on skipping ID, one that "did not require know-your-customer (KYC) information", ran 26.7 million trades and ended with a guilty plea in a US court.

The coins were never the weak point. The money was.

In this guide you'll see who doesn't have to ask, the four ways escrow works, which payments can be pulled back on you, the five scams, what still runs, and what to do with the coin once you have it.

Let's dive right in.

01Yes, and here's who doesn't ask

A business that swaps crypto for money has to check who you are; why exchanges ask for ID covers the rules. A person selling their own coins is not that business. When you buy from them, there's no ID file because there's no one obliged to keep one.

Two counters. On the left, a business that exchanges crypto for money: it must check your ID and keeps a file. On the right, a person selling their own coins: no ID check, no file.a businessa personmust check IDno ID filesame coin, different counter
Same coin, different counter.

One trap in the name: the "P2P" desks inside big exchanges aren't this. The exchange checked both traders before either could post an offer. P2P without KYC means a venue that never holds your identity at all.

The line runs the other way too. Selling now and then is personal; selling to strangers for a margin is a business, and where a P2P seller becomes a business explains where that line sits. P2P is also one of five routes in how to buy crypto without KYC.

02How escrow works: four designs, one question

Escrow means the seller's coins are locked where neither side can grab them alone, until the money lands. That's the idea. The design decides who could still walk off with the coins.

Four escrow designs and who can take the coins. A website holds them: the site can. Two of three keys: nobody alone. Two of two keys plus a deposit from both sides: a cheat loses their deposit. A hash lock with a timer: the coins go back to the seller when time runs out.site holds itthe site can take it2 of 3 keysnobody alone2 of 2 + depositsa cheat loses a deposithash + timerback to seller in time
Four designs. Ask each one who can take the coins.

Design 1A website holds the coins

The seller sends the coins to the site, and the site releases them when the seller confirms payment. Simple and fast. But you're trusting the site: it can freeze them, lose them, or be shut down with them inside. You'll see how that ends in the case study.

Design 2Two of three keys

Bitcoin has had this since 2011. BIP 11 describes "Three-party escrow (buyer, seller, and trusted dispute agent)" with "2-of-3 signatures required". Buyer and seller sign together when the trade goes well; if it doesn't, the dispute agent sides with one of them, in a way the Bitcoin wiki likens to "a charge-back". Nobody moves the coins alone.

Design 3Two of two keys, plus a deposit from both sides

No third key at all. Buyer and seller each lock a deposit next to the coins, and the coins move only when both sign. A cheat loses their own deposit, which makes cheating a bad deal.

Design 4A hash lock and a timer

BIP 199 describes a script that pays one side "by disclosing the preimage of a hash", or lets the other side take the coins back "after a timeout is reached". Lightning-based P2P venues use the same idea: if a trade stalls, the coins go home on their own.

03The gap escrow can't close: the money side

Escrow lives on the chain, and the chain can lock coins. The money travels on bank rails, with their own rules. No escrow on earth can lock a bank payment.

Escrow locks the coins on the chain. The money travels on bank rails, and a payment from a bank, card or app can be tied back to the bank that sent it. Cash in hand has no string.coins: lockedmoneybankmoney: on a stringescrow can't hold the stringcash in hand has none
Coins in a lock, money on a string back to a bank.

And the money side is where people lose. The FTC says that in 2024, of the more than $12.5 billion reported lost to fraud, consumers lost more to scams "where they paid with bank transfers or cryptocurrency" than to every other payment method combined. The FBI counts $11.366 billion in crypto-related losses for 2025.

On the crypto side, the FBI is plain: crypto "transactions are irrevocable". So the two dangers point in opposite directions:

  • The buyer's danger: paying first, with something final, to someone whose coins were never locked.
  • The seller's danger: accepting a payment the sender's bank can take back after the coins are gone.

That's the whole skill. Never pay before the coins are locked. Never accept money that can walk back.

04Can this payment be pulled back?

The safe payment depends on which side you're on. Here's the short version, from US consumer law:

PaymentCan the payer pull it back?For the seller
Cash in personNoSafest
Credit cardYes, by disputeDon't
Debit cardYes, if reportedDon't
Someone else's accountYes, as unauthorizedDon't
Payment appSometimesName must match
CheckIt can bounce weeks laterDon't
CryptoNoFinal

Pick your side and a payment to see how long the window stays open and what the other side learns about you:

Can this payment be pulled back?

Pick your side and how the money moves. Every line comes from FTC, CFPB or FBI guidance. Nothing you pick leaves this page.

Which side are you on?

How does the money move?

Cash in person, you're paying
Can the payer pull it back?
No. No bank sits behind it to pull it back.
How long
None. It's done when it changes hands.
What the seller learns
Your face, and where you met.

FineOnce the seller's coins are locked in escrow. Never hand cash over first.

US rules from FTC, CFPB and FBI guidance, read 3 November 2026. Other countries differ.

05The five P2P scams, by how they work

Every one of them works the money side. Not one breaks the escrow.

Scam #1The fake receipt

A screenshot, or a message dressed up as your bank, says "paid". It isn't.

a buyer sends a crisp screenshot of a transfer and asks you to release. Your bank app shows nothing yet.

The fix: check your own account, never their proof.

Scam #2The card dispute

The buyer pays by card, gets the coins, then disputes the charge. The law gives them time: the dispute letter must reach the issuer "within 60 days after the first bill" with the charge.

The fix: sellers never take cards for crypto.

Scam #3The triangle

The money comes from a third person. Sometimes it's a victim who thinks they're buying a laptop and was told to pay "my associate". Sometimes it's an account the scammer broke into. Either way, the scammer gets your coins.

The triangle scam. A scammer sells something to a victim and has the victim pay a crypto seller. The seller releases coins to the scammer. When the victim reports it, the victim's bank pulls the money back from the seller.scammera victimpay themyou, sellingmoneycoinstheir bank pulls it backyou lose both
Three people, one payment, and the bank that pulls it back.

When a transfer was made by someone who got the owner's login by fraud, the CFPB says it "is an unauthorized EFT under Regulation E". The real owner gets their money back. The seller who received it loses it, after the coins have left.

The fix: the name on the payment must match the trader. If it doesn't, send the money back where it came from and release nothing.

Scam #4The overpaid check

The FTC explains why this one works: "By law, banks have to make deposited funds available quickly", but "Fake checks can take weeks to be discovered". The money shows up, you release, and later the bank wants it back from you.

The fix: no checks or money orders for crypto.

Scam #5Off the venue, or fake support

"Let's skip the fees, pay me direct." Or a "support agent" who messages you first. Leaving the venue means leaving the only lock you had. And if a "seller" wants you to send crypto first, remember the FTC's line: "Only scammers demand payment in cryptocurrency."

The fix: never leave escrow, and treat any support DM you didn't ask for as a scam.

06If you're buying

The buy guide has the five safety rules for meeting a seller. Here's why each one works:

  1. Escrow before you pay. It turns the seller's promise into a lock. No lock, no payment.
  2. Pay with something final, only after the lock. Cash in person is final for both sides, which is good for you once the coins can't leave.
  3. Start small. A seller who's honest with $50 has shown you their escrow, their speed and their manners for $50.
  4. Receive to a fresh wallet you hold. Not an exchange account, which would put your name right back on the coin.
  5. Check the chain, not their screen. Wait until your own wallet shows the coins with confirmations.
Read the chain, not the screen. A screenshot that says sent proves nothing. Your own wallet showing the payment with confirmations is the only proof.Sent!receivedconfirmationstheir screenyour wallet
A screenshot proves nothing. Your wallet does.
What a P2P trade still shows

Pay by bank or app, and the seller sees your name. Pay cash, and they see your face. Your wallet has its own ways to meet your name; the six ways your name gets attached walks through them.

07If you're selling

Selling is where the triangle and the card dispute land. Take only money that can't walk back to a stranger's bank:

  • Cash in person. Count it before you release.
  • A transfer from the buyer's own named account, once it has fully landed. Not "pending". Landed.

Why do banks claw back so fast? Because the owner's own loss depends on speed. Report a lost debit card "within 2 business days" and the most they can lose is $50. Every victim reports quickly, and the reversal lands on whoever received the money: you.

And app payments aren't a loophole. The CFPB says "Any P2P payment that meets the definition of EFT is covered by EFTA and Regulation E", the same rules as a bank transfer.

The legal line, once

Selling your own coins now and then is personal. Selling to strangers as a business makes you a money transmitter with an ID duty of your own. Where a buyer becomes the business has the rule in its own words.

08What still runs, and what was shut down

Plenty of guides still list venues that are gone. Here's where things stand on 3 November 2026, from government records, not rumours:

Where P2P venues stand on 3 November 2026. Paxful: pleaded guilty in December 2025 and sentenced in February 2026. LocalBitcoins: fined by Finland's regulator in 2025 over ID checks. Venues that never hold your coins, using shared keys or a hash lock and timer: still running.Paxfulguilty plea, 2025LocalBitcoinsregulator fine, 2025shared keysstill runninghash + timerstill running
The board, dated 3 November 2026.
  • Paxful pleaded guilty in December 2025 and was sentenced in February 2026. Details in the case study below.
  • LocalBitcoins was fined EUR 500,000 by Finland's financial regulator in June 2025 for "failures in identifying and verifying the identities of customers".
  • Still running: venues built on Designs 2 to 4, from desktop apps using two keys and deposits to Lightning venues with a hash lock and timer. We don't name or rank them; check each one's escrow with the question above.

Notice the pattern. The venues that held customers' coins and skipped ID are the ones with enforcement records. The ones that never hold the coins are still trading.

09Case study: Paxful, from "no KYC" to a guilty plea

The DOJ called Paxful an "online peer-to-peer virtual currency platform and money transmitting business". Here's what its record shows, step by step:

Paxful's timeline from DOJ and FinCEN. 2015 to 2019: marketed as not requiring KYC. 2017 to 2019: 26.7 million trades worth nearly 3 billion dollars. July 2024: a co-founder pleaded guilty. December 2025: FinCEN penalty and the company's guilty plea. February 2026: sentenced to a 4 million dollar penalty.2015 to 2019sold as "no KYC"2017 to 201926.7M trades, ~$3BJul 2024co-founder pleadsDec 2025company pleadsFeb 2026$4M penalty
From the DOJ and FinCEN record. Every date from a government release.
  1. The pitch. From July 2015 to June 2019 it marketed itself as a platform that "did not require know-your-customer (KYC) information", while showing third parties AML policies it didn't follow.
  2. The scale. From 2017 to 2019, "26.7 million trades, totaling nearly $3 billion in value".
  3. The plea. A co-founder pleaded guilty in July 2024, and the company in December 2025. FinCEN found it "facilitated more than $500 million" in suspicious activity and fined it $3.5 million.
  4. The sentence. The agreed penalty was $112.5 million, but the court took what the company could pay: a $4 million criminal penalty, in February 2026.

The lesson isn't about anyone's users. It's about design. A venue that holds your coins can only keep its "no ID" promise as long as it exists. Escrow that never holds your coins doesn't depend on that, and coins you've already moved to your own wallet don't either.

10After the trade: you hold a coin, now pick the one you want

P2P markets are deepest in Bitcoin, so most people walk away holding BTC. If you wanted Monero or USDT, that second step needs no person and no ID.

After the trade. Step one: a person sells you a first coin, with escrow. Step two: swap it into the coin you want with no account, no email and one address. The order is deleted 90 days after it closes.step 1: a personyour first coinstep 2: the swapno account, one addressafter 90 daysorder deleted
Step one needs a person. Step two doesn't.

Now it's your turn. Start with BTC to XMR, or BTC to USDT, on our swap with no ID.

Keep reading

How we checked this

Written by the team that runs the SilentMule swap desk. Every rule about payments is quoted from FTC, CFPB or FBI guidance, every escrow design from the Bitcoin proposal that defines it, and every venue fact from a DOJ, FinCEN or Finnish regulator release, each linked where it appears. Last checked . Spotted something wrong? Tell us and we fix it.

Sources

  1. BIP 11: M-of-N standard transactions
  2. BIP 199: hashed time-locked contract transactions
  3. bitcoin.it: Contract, escrow and dispute mediation
  4. FTC: reported fraud losses in 2024, 10 March 2025
  5. FTC: what to know about cryptocurrency and scams
  6. FTC: using credit cards and disputing charges
  7. FTC: lost or stolen credit, ATM and debit cards
  8. FTC: how to spot, avoid and report fake check scams
  9. CFPB: Electronic Fund Transfers FAQs
  10. FBI IC3: cryptocurrency
  11. FBI IC3: 2025 Internet Crime Report
  12. DOJ: virtual asset trading platform pleads guilty, 10 December 2025
  13. DOJ: virtual asset trading platform sentenced, 11 February 2026
  14. FinCEN: $3.5 million penalty against Paxful, 9 December 2025
  15. FIN-FSA: penalty payment to LocalBitcoins Oy, 3 June 2025

Got a coin from a person? Step two needs no one.

Swap the coin you bought into the one you wanted, paid to a wallet you hold. No account, no email, no ID, and we ask for one address: the one you're paid at.

  • No account, no email, no ID
  • What lands is shown before you send
  • Orders deleted 90 days after they close
Lands at your new wallet
Arrives in

Questions, answered.

Can you buy crypto P2P without KYC?

Yes. A person selling their own coins doesn't have to check your ID. Use a venue that locks the seller's coins in escrow before you pay.

Is P2P crypto safe?

With escrow and a payment that can't be pulled back, most of the risk goes away. The losses come from the payment side: fake receipts, card disputes and money from someone else's account.

How does P2P escrow work?

The seller's coins are locked where neither side can grab them alone until the money lands. The safest designs never hand the coins to the venue at all: shared keys, or a hash lock with a timer.

Which payment methods are safest for P2P?

Buying: cash in person, once the coins are locked. Selling: cash, or a transfer from the buyer's own named account that has fully landed. Never cards or checks.

Can a P2P buyer reverse a payment?

Card charges can be disputed in writing within 60 days after the first bill, and a transfer made from an account someone took over by fraud counts as unauthorized. Cash can't be reversed.

What is a triangle scam in P2P crypto?

A scammer has a third person pay you, takes the coins, and when that person reports it, their bank pulls the money back from you. Check that the name on the payment matches the trader.

What happened to Paxful?

It pleaded guilty in December 2025 and was sentenced in February 2026 to a $4 million penalty. FinCEN also fined it $3.5 million.

What happened to LocalBitcoins?

Finland's financial regulator fined it EUR 500,000 in June 2025 over failures to identify and verify customers.

Is P2P crypto trading without ID legal?

Buying for yourself is generally fine in the US and UK texts. Selling to strangers as a business is different: that seller needs registration.

I bought Bitcoin P2P. Can I swap it for Monero without ID?

Yes. No account, no email, no ID, and one address: the one you're paid at.

Coins locked, money final

and step two needs nobody. The mule knows the way.