A P2P trader can receive a genuine bank transfer and still fall for a scam. In a triangle scam, a fraudster uses an unsuspecting third party to pay for a cryptocurrency trade. The trader receives the money and releases the crypto, unaware the payment came from someone who was promised something else.
This type of P2P fraud puts both the original payer and the trader at risk. The payer may lose their money, while the trader could face a disputed transaction, a frozen bank account or further investigation.
Understanding how triangle scams work is the first step towards preventing them. Verifying counterparties, checking payment sources, and following platform procedures can help traders spot suspicious transactions before releasing funds.
Expert commentary by Tatjana Meluskane, Chief Commercial Officer at SPAYZ.io.
P2P trading risks and the rise of payment scams
Peer-to-peer (P2P) trading allows people to buy and sell assets directly, often using local bank transfers or digital wallets. In cryptocurrency trading, P2P platforms typically match buyers and sellers, verify users, and hold crypto in escrow until payment is confirmed.
But receiving a payment doesn't always mean a transaction is legitimate. Fraudsters can use stolen funds or payments from unsuspecting third parties to buy cryptocurrency, leaving traders exposed to disputes and investigations.
One particularly difficult risk is that a trader may receive the correct amount of money without realising the sender isn't the person they're trading with.
According to the J.D. Power 2023 U.S. Direct Banking Satisfaction, 8% of all banking customers say they’ve been victimised by a P2P scam in the last 12 months.
What is a triangle fraud in P2P?
A triangle scam is a P2P fraud in which a criminal links separate transactions to deceive one or more participants. In the third-party payment version, the fraudster arranges for someone outside the crypto trade to send money directly to the trader.
How a triangle scam works
Consider a fraudster advertising an iPhone online at a price well below its market value.
A buyer responds to the advert and agrees to purchase the phone. Instead of providing their own bank details, the fraudster opens a separate trade with a legitimate cryptocurrency seller on a P2P platform.
The fraudster then gives the phone buyer the crypto seller's bank details.
The buyer transfers the money, believing they're paying for the iPhone. The crypto seller sees the funds arrive and assumes the payment came from the person buying the cryptocurrency.
If the seller releases the crypto without checking the payer's identity, the fraudster receives the assets and disappears.
The phone buyer never receives the product. The crypto seller receives a third-party payment linked to a fraudulent transaction and may face a dispute, account restrictions, or an investigation.
For traders and payment providers, the risk extends beyond the immediate transaction. A disputed third-party payment can trigger account restrictions, compliance checks, and extra costs, even if the trader didn't knowingly participate in the fraud.
What are the warning signs of a P2P triangle scam?
One of the clearest warning signs is a payment from an account that doesn't match the verified buyer's name. Traders should also watch for pressure to release crypto quickly, unusual payment amounts, reused payment screenshots, and requests to communicate outside the trading platform.
How to prevent triangle scams in P2P trading
Preventing third-party payment fraud starts with checking who is involved in a trade and where the money comes from. Traders and platforms have different responsibilities, but both need clear verification and reporting procedures.
Step 1. Verify your counterparty
Before accepting a trade, check the other party's verified identity, transaction history and available platform feedback. Be cautious of unusual requests or attempts to move the conversation outside the platform.
When payment arrives, check that the sender's details match those of the verified trading counterparty. A completed bank transfer isn't enough to confirm that the transaction is legitimate.
If the details don't match, pause the trade and contact platform support before releasing any crypto.
Step 2. Reject unauthorised third-party payments
A payment from an account belonging to someone other than the verified buyer is a warning sign. Traders should follow the platform's rules on third-party transfers and avoid releasing crypto when the payer's identity doesn't match the order.
P2P platforms can support this process through identity checks, transaction monitoring and controls that flag mismatched payment details where the relevant data is available.
If a suspicious transfer has already arrived, traders should follow the platform's dispute process.
Step 3. Follow platform procedures
Keep trade-related communication within the P2P platform and use its official support channels if something seems wrong.
Never release cryptocurrency based only on a payment screenshot or confirmation message. Check the funds in the receiving account, verify the payer's details, and confirm that the payment matches the relevant order.
If you suspect fraud, preserve the transaction records and report the issue through the platform's dispute process. Contact your bank if you believe the payment itself may be fraudulent.
Clear guidance helps traders recognise suspicious payments. Platforms also need procedures to check payer details, review unusual transactions, and handle disputes when a payment doesn't match the order.
Preventing P2P triangle scams starts with payment verification
Triangle scams show why receiving money isn't always enough to confirm a legitimate P2P trade. A payment may come from someone who has no connection to the cryptocurrency transaction, leaving both the original payer and the trader exposed to fraud.
The most useful safeguards are straightforward. Verify the counterparty, confirm the payment details and don't release funds when the payer's identity doesn't match the order. If something looks suspicious, follow the platform's dispute procedures instead of completing the trade under pressure.
Want to discuss P2P payment management for your business? Contact the SPAYZ.io team.
