Home / Spot Scams / Spot dirty-money merchants
How to Spot Dirty-Money, Laundering and Pig-Butchering Merchants on P2P
Buying crypto is supposed to be ordinary: you want some USDT, you find a seller, you pay, you get the coins. The catch is that P2P mixes in money whose origin you can't see. Some people take funds from fraud or gambling, dress them up as an ordinary trade, and wash them through legitimate transactions; the middle-people who move that money for them are the "runners." The moment your bank account touches that kind of money, even if you only innocently bought some USDT, your account can be frozen, limited or closed — and then you spend real effort proving where the money came from. So spotting dirty-money merchants is, at heart, protecting your own account and your own good name.
This guide is the cornerstone for the whole "spot scams" section. Read it once properly and keep it to hand: run through it before you commit to a trade.
What "running" is, and why it reaches you
Take the term apart first. "Running" — money-muling, in plain English — originally meant using your own bank account or payment handle to pass money through for an upstream operation in exchange for a small cut. In the crypto context, it's often tied to a chain that converts implicated funds into USDT and moves them on. Fraud, gambling and online-crime operations upstream hold what is, in the banking system, dirty money — recorded and traceable. To make it "clean," they push it through as many accounts as possible, ideally converting it into an asset that's harder to trace — and USDT is one of the intermediaries they lean on.
Here's the key problem: that chain needs a large supply of real, normal-looking bank accounts to pass money through. So some people rent out their accounts to run money, and some rings pose as P2P sellers and use dirty money to close trades with ordinary buyers like you. You pay with local fiat, they hand you USDT, and to you it looks like the most ordinary purchase in the world. But the money you received may be exactly what a victim was defrauded of moments earlier. When the victim reports it and the bank and investigators trace the money flow backwards, your receiving account shows up in the chain.
Once you understand that cause and effect, the checklist below makes sense. You don't have to become a detective. To wash money fast and keep your guard down, dirty-money merchants tend to behave in similar ways. Learn those common patterns and you screen out most of the risk before you ever click pay.
One line to draw clearly first: this guide only teaches you to recognise and stay away from this kind of money, and to keep evidence and cooperate with an investigation to protect yourself. It teaches nothing about moving dirty money or evading a trace. Spotting dirty money is for protecting yourself, not for taking part.
The danger-signal checklist
Any one of these on its own isn't proof of dirty money — but the more of them show up, and the clearer they are, the faster you should turn around. Treat it as a running tally of red flags: the more flags, the more decisively you drop the order and switch merchants.
1. A price well off the market
You're buying USDT and the seller's price is far below the going rate; or you're selling and the buyer bids absurdly high. There's no free lunch. That gap is usually there to get you to close quickly and pin down your caution. A merchant running a real business won't keep handing you money at a loss — an abnormal "good price" usually has an abnormal purpose behind it. When you see a wild price, ask yourself: what's in it for them?
2. Repeatedly rushing you to release
The escrow mechanic is simple: you confirm you've received the money, then you release; the other side confirms they've received the coins, and the trade ends. What dirty-money merchants fear most is that confirmation being done properly, so they try every angle to hurry your release — "I'm in a rush," "the system's slow, just release first," "I need this one urgently." Any reason to release before you've verified the money arrived, skipping normal confirmation, gets a question mark.
3. Small first, then a push for big
Some merchants close a small trade or two with you first, smoothly, to relax you — then steer you toward a large amount. The small orders are bait: build trust, then push a lot of dirty money through your account. If a stranger merchant turns suddenly enthusiastic about a big order after a couple of small ones, or nudges you to lift your limits and raise your per-trade size, be especially careful.
4. Working hard to pull you into private chat or off-platform payment
They ask you to add them on WhatsApp, Telegram or similar "to make it easier," or suggest paying privately, outside the platform. This is a very clear danger signal. The moment you leave the platform, you lose escrow protection and the recorded trail; money sent off-platform is almost impossible to recover, and the platform can't easily step in. A proper P2P trade's chat, payment and release all belong inside the platform. The more urgently someone wants you off-site, the more wary you should be.
5. A payer or payment details that don't add up
The name paying you doesn't match the merchant's handle or verified identity; you're told to send to a "third party" or "a friend collecting for them"; the receiving details keep changing; or you're asked to add odd notes to the transfer. In a normal trade the payer should be clear, consistent and matching the person you're dealing with. A third-party payer — where the person who actually paid you is not the merchant on the order — is a high-risk signal on its own. When the payer is a mess, the money's origin usually is too. Give those orders a miss.
6. Being told to add a specific transfer reference, or to skip the platform order
Some will have you write a dictated line in the transfer note, or simply have you pay outside the platform order altogether. An odd reference can be part of "papering over" a dirty-money transfer; leaving the platform order strips your protection entirely. Refuse both outright.
7. A new account, low completion rate, or "frozen / scammed" in the reviews
An account that's newly registered, low-volume, or shows a low completion rate carries more risk to begin with. More telling is to read its reviews: if the negatives repeatedly mention "account frozen," "got frozen after I received the money," or "suspected dirty funds," you can usually walk away right there. No need to step in a hole others already fell into. For how to read a merchant's trustworthiness systematically, see how to vet a P2P merchant.
The signals at a glance
A quick reference for the same signals — what you see, why it matters, and the move. Keep it near you before you commit.
| Signal | Why it matters | The move |
|---|---|---|
| Price well off the market | Bait to rush you and drop your guard; abnormal price, abnormal purpose | Ask what's in it for them; don't buy on cheapness alone |
| Rushing you to release | They fear a proper confirmation; wants coins out before money's verified | Never release until your own account shows the money in |
| Small trades, then a big push | Small orders build trust so a lot of dirty money can pass through | Be wary of a sudden big order or a nudge to raise limits |
| Pulling you off-platform | You lose escrow and the recorded trail; money is near-unrecoverable | Keep chat, payment and release inside the platform |
| Mismatched / third-party payer | Payer differs from the merchant; origin of funds is likely messy | Ask them to pay from their own account, or cancel |
| Dictated transfer reference | Can be "papering over" a dirty transfer; leaving the order strips protection | Refuse; write it truthfully or leave it blank |
| New / low-completion account, bad reviews | Higher base risk; "frozen" in reviews is others' warning to you | Read the reviews; walk away if freezes recur |
How pig-butchering uses P2P to reach you
Pig-butchering is different from the "stranger with dirty money" above. Its core isn't the trade screen — it's emotion and trust. The scammer takes time to fatten you up: maybe an online love interest, maybe a "mentor" who'll "teach you to make money," maybe someone claiming an "insider, sure-win channel." Once you believe them, they guide you step by step into putting money in. P2P is often used in that chain as the on-ramp from local fiat into USDT: they have you buy USDT on an exchange, then send it to a wallet address or so-called "platform" they gave you — and the money never comes out.
So spotting pig-butchering isn't about "is this batch of USDT clean" — it's about "who is telling me to buy this, and why." The following sources of a buy are far more dangerous than deciding to buy crypto yourself for a genuine need:
- An online romance or someone newly met who, as you chat, starts "teaching" you to invest and has you buy USDT and send it to some platform or wallet;
- A "teacher," "analyst" or "signal caller" in a group or DMs, claiming inside information or a sure-win project, wanting you to buy USDT to top up first;
- Someone claiming to be an exchange's "support" or "security team," citing an account problem or a needed verification, asking you to transfer USDT to cooperate;
- Any "opportunity" promising high, fixed, guaranteed or capital-protected returns — legitimate markets have no such thing.
In a pig-butchering case, the USDT you buy may itself be clean — but once you send it to the scammer, the money is gone for good. That's a different harm from being caught up in a dirty-money freeze, yet they often happen at the same doorway, P2P. There's only one defence: before you move money, question "why is this person telling me to buy, telling me to send." Our frozen-account guide also lays out how dirty money reaches your account step by step — worth reading alongside this.
If you're already in one: stop, keep evidence, appeal
If you're mid-trade, or you've just closed and something feels off, don't panic. Work through it in order. Three words: stop, keep, report.
- Stop. Halt any further steps immediately. Haven't released? Don't — no matter how hard they push. Haven't paid? Cancel the order outright. Don't cling to "maybe one more step is fine" just because you've chatted a while or paid part of it — every further step puts you in a weaker spot.
- Keep evidence. Screenshot and save, item by item, the order page, the payment receipt, the bank statement, and the whole chat with the other side — ideally with timestamps and their account details. This is your basis later for getting an account released, explaining the source of the money, and showing you traded normally. Not sure what to keep? The dispute evidence checklist builds one by scenario.
- Go through the platform's proper channel. When a trade goes wrong, raise it through the exchange's order dispute and support channels, and submit your evidence. For exactly how that flows, what to file and roughly how long, read the P2P dispute and appeal process.
- If the account is already frozen, follow the freeze process first. For what to do in the first hours, who to contact and how to explain, see first steps when frozen and the fuller causes, response and prevention. Cooperate with the bank and the authorities under your local rules.
Avoiding it from the first step
Recognising and repairing both matter, but the least stressful path is always lowering the risk at the source. A few habits, once built, block the great majority of trouble:
- Trade only inside the platform, never off-site. Chat, payment and release all through the platform — use the escrow protection and the recorded trail in full.
- Pick clean merchants. Favour sellers with high volume, a long history, a high completion rate, a normal price and no "frozen" flags in reviews; score one first with the P2P merchant trust score.
- Dedicated account, sized trades. Open one account for P2P only, kept apart from your salary, mortgage and shared accounts; keep single trades from being too large and days from being too busy — spread the risk, cut the knock-on. For how to size, see sizing your cash-outs.
- Never release until the money's truly in. Judge by your own account genuinely receiving it, not by their screenshot.
- Keep an instinctive suspicion of "great price," "sure win," "insider channel." The more tempting, the more you ask why.
- Run a self-check before you commit. Use the scam quiz and the freeze-risk self-check to build the reflex and gauge the risk.
In the end, spotting dirty-money merchants doesn't require you to be an expert. It requires not minding a little hassle, not chasing a small gain, and not waving a red flag through. Do those and your account and your good name are far steadier. Save this checklist and walk through it, step by step, before you commit.
FAQ
Is a merchant priced well below the market always a laundering runner?
Not always, but an order priced well off the market does carry more risk. A price far below market is often bait to get you to close fast and drop your guard; a normal merchant won't keep losing money to hand it to you. Treat an absurd price as a question that needs answering, then judge it alongside other signals — a rushed release, a mismatched payer — rather than buying just because it's cheap.
The merchant is pushing me to release fast — is that a problem?
Repeatedly pushing you, with any excuse, to release before you've confirmed the money truly arrived is a signal to be wary of. Escrow exists to protect both sides: release only once funds have really cleared. Any reason to skip normal confirmation and speed the release deserves a question mark. Don't release until your own account shows the money in — never on a screenshot they send — and open a dispute rather than rushing.
I bought crypto, and days later my account was frozen — did I break the law?
A frozen account doesn't mean you've been found guilty. A common cause is that someone upstream used implicated funds, the money flowed through your account, and that tripped a bank's or investigator's controls. Keep all your evidence — order, payment, chat — and cooperate under the bank's or authorities' guidance to explain the source and the trade, showing you were an ordinary buyer, not a knowing participant. It follows your local rules and the authorities; this isn't legal advice, and consult a lawyer if it's serious.
What does pig-butchering have to do with buying crypto P2P?
A pig-butchering scam builds trust with romance or a money-making pitch, then steers you into moving funds into crypto and sending it to a wallet or platform they control. P2P is often the on-ramp from local fiat into USDT in that chain. The tell isn't the trade but who is telling you to buy and why: an online love interest, a "mentor," or a so-called insider channel pushing you is far more dangerous than buying yourself for a genuine need.
They want me to add them on WhatsApp or Telegram and pay off-platform — is that okay?
Not advisable. Going off-platform means giving up escrow protection and the recorded trail. Once you've paid off-platform, the money is very hard to recover and the platform can't easily step in. In a proper P2P trade the chat, payment and release all happen inside the platform. The more eager someone is to pull you off-site, the more cautious you should be.
Sources: Binance Help Center · P2P safety and appeals (per Binance's current official page). Anything judicial follows your local rules and the authorities. This is general information — not legal or investment advice; consult a qualified lawyer where it's serious.
Related: Binance P2P disputes and appeals · How to vet a P2P merchant · P2P scam quiz · Account frozen: causes, response, prevention