The 2026 Field Guide to P2P Crypto Scams

Peer-to-peer crypto trading puts two strangers in one deal: one side pays by bank or app transfer, and the other sends crypto. Scammers work in the gap between those two payments.

Most P2P scams target the seller, because the seller controls the moment the crypto changes hands. This guide covers the tricks you are most likely to meet, the red flags for each, and the single rule that defeats most of them.

The rule that stops most scams

Release crypto only after the money is in your account and the sender's name matches the buyer's verified name.

"In your account" means you opened your banking or payment app yourself and saw the credit. A screenshot, email, text message or link from the buyer does not count.

"Matches the buyer's name" means the account that paid you belongs to the person on the other side of the order, not a relative, a company or a stranger. Every scam below is a way of getting you to skip one of those two checks.

1. Fake payment proofs

The buyer marks the order as paid and sends a screenshot, a PDF receipt or a "transaction successful" page. The image is edited, or it shows a transfer that was started and then cancelled.

Image editors, including AI tools, make a convincing fake receipt a two-minute job. Treat every screenshot as a claim, not as evidence.

Red flags: urgency ("I need it in five minutes"), a buyer who keeps resending the same image, or a reference number your bank has no record of.

Defense: Check your own balance and transaction history. If the money is not there, it has not arrived, whatever the image says.

2. SMS and email spoofing

A text arrives that looks exactly like your bank's credit alert, or an email appears to come from a payment app. Some claim the payment is "on hold" until you release the crypto, which is your cue to stop.

Sender names can be faked, so a message that looks official proves nothing. The FTC's advice on recognizing phishing applies directly: contact the company using a phone number or website you know is real, not the details in the message.

Defense: Never tap links in payment alerts during a trade. Open the app or website yourself.

3. Triangle scams

This one is harder to spot because the payment is real. The scammer runs two deals at once: they open an order to buy your crypto, and separately they "sell" something to a third person, such as a phone, a rental deposit or a loan.

The scammer gives that third person your bank details. The victim pays you, believing they are paying for goods, and you release crypto to the scammer.

When the goods never arrive, the victim reports fraud and the trail leads to your account. You can lose the money, face a bank freeze and end up explaining yourself to the police.

Red flags: a payer name that differs from the buyer's name, payment notes that mention products or rent, or a buyer who asks you not to contact the payer.

Defense: This is what name matching is for. If the names differ, refund to the source account, cancel through the platform and do not release.

4. Chargebacks and reversals

Some fiat payments can be pulled back after the fact, such as card-funded payments, some app transfers and bank payments reported as unauthorized. Crypto cannot. As the FTC puts it, "Cryptocurrency payments typically are not reversible."

A chargeback scammer pays through a reversible method, receives the crypto, then files a dispute claiming the payment was unauthorized or the goods never arrived. The seller loses both the crypto and the fiat.

Red flags: buyers pushing for a payment method your offer did not list, brand-new accounts asking for large trades, and buyers who insist on methods known for easy disputes.

Defense: Accept only the methods in your offer, learn the dispute rules of each method you accept, and be more careful with first-time buyers on large amounts.

5. Impersonation in chat

Mid-trade, a message appears from "support", a "moderator" or a "compliance officer". It says the trade is flagged and you must release the crypto, move the chat to Telegram or WhatsApp, or share a verification code to "restore access" to your account.

Defense: Platform staff act through the official dispute process, not private messages. Never share passwords, two-factor codes, private keys or seed phrases, and never leave the platform's chat mid-trade.

6. Overpayment and refund requests

The buyer "accidentally" sends more than the order amount and asks you to refund the difference to another account. The original payment later turns out to be stolen or reversed, and your refund is gone.

Defense: Refund only to the account that paid you, or settle it through the platform's dispute process.

Quick reference

How escrow and dispute evidence help

On a platform with escrow, the seller's crypto is locked for the order before the buyer pays. Buyers know the coins exist before they pay, and sellers never have to send crypto straight to a stranger and hope the money follows.

Escrow does not verify a bank transfer, though. If you release to a scammer, escrow has done its job and you have not.

Its real value for sellers is time. If something looks wrong, the crypto stays locked while you open a dispute, instead of being argued over in chat.

Disputes are decided on evidence, so collect it as you go:

• Keep all communication in the order chat, where the platform can review it.
• Download a statement from your bank or app showing what did or did not arrive.
• Note the order ID, timestamps and any payment reference numbers.
• With on-chain escrow, save the transaction hashes for the deposit and any release or refund.

Most P2P platforms publish their own safety guidance, and it is worth reading before your first trade. Senpero, a P2P marketplace that uses non-custodial smart-contract escrow, keeps this P2P safety checklist, which pairs well with the rules of whatever platform you use.

If you have already been scammed

1. Stop. Do not release anything else or pay "fees" to fix the problem.
2. Open a dispute on the platform right away and submit your evidence.
3. Contact your bank or payment app through its official channels.
4. Report it. In the US, the FTC takes reports at ReportFraud.ftc.gov. In India, use cybercrime.gov.in.
5. Ignore anyone who contacts you offering to recover lost crypto for an upfront fee.

The habit that matters

Scam scripts change every year, but they nearly always need the same thing from you: a release before the money is verified, or a release against money from the wrong person.

Check your own account, check the name, and let escrow hold the coins while you do.