How to Spot a Stolen Bank Account Used in a P2P Trade
The short answer: you can't always spot a stolen bank account before the trade, but you can dramatically reduce the risk by looking for specific red flags in the payment details, the counterparty's behavior, and the account's identifying information. Because the money you receive from a stolen account can be clawed back by the real owner's bank, your job is not to prove the account is legitimate - it's to make the trade unappealing to someone using one.
Why a Stolen Account Is a P2P Seller's Worst Nightmare
When a buyer sends you money from an account they don't own, the actual account holder will eventually notice and file a fraud claim with their bank. The bank reverses the transfer, and the money leaves your account - often weeks later. The crypto you released is long gone. Unlike a simple chargeback dispute, this is a straight-up criminal act, and the platform's escrow system won't protect you because the trade itself was completed.
The core problem is that P2P platforms match you with a "buyer" who is not the account holder. The platform verifies the buyer's identity, but that verification only proves the person holding the account on the platform is who they say they are. It does nothing to prove the linked bank account belongs to that person. A thief can pass KYC with their own ID, then ask you to pay a different bank account belonging to a victim.
Red Flags in the Payment Details
Before you release crypto, examine the payment information you received. No single detail is conclusive, but multiple red flags together should stop the trade.
Account Name Mismatch
The name on the bank account should match the name on the P2P platform's verified profile. If the buyer's profile says "Ahmed Hassan" and the transfer comes from "Marta Kowalska," stop. Ask for an explanation. A legitimate buyer will have a clean answer - maybe a joint account, a family member paying, or a business account. A thief will either ghost you or offer a long, complicated story.
Unusual Account Type
Personal checking and savings accounts are normal. Be wary of business accounts, especially sole proprietorships or LLCs you've never heard of. Thieves often use small business accounts because they can be opened quickly and have higher transaction limits. If the account name includes "Trading Co," "Holdings," or a generic word like "Solutions," treat it with suspicion.
Recent Account Activity
You can't check the account's transaction history, but the buyer can. Ask them to send a screenshot of the account's last few transactions (with sensitive info blurred). What you're looking for is whether the account has a history of small, regular payments that look like normal spending, or whether it suddenly has large, sporadic deposits and withdrawals. A brand-new account with no history and one large transfer to you is a classic pattern.
Payment reference filled with garbage
Criminals often use the payment reference field to test your alertness. If the reference contains random letters, a photo of a receipt, or a text string that looks like a transaction code, that's a sign the "buyer" is copying details from a victim's statement. A legit buyer will typically write something simple like "crypto trade" or your username.
Behavioral Red Flags
The account details matter, but the person behind the trade matters more. Watch how they act, not just what they send.
Rushing You
A stolen bank account is a ticking clock. The real owner might notice the fraud within hours. The thief wants you to release crypto fast, before the reversal hits. Any pressure to complete the trade quickly - "the bank is holding the payment, please release now," "my friend needs the money urgently" - is a warning sign.
Refusing to answer simple questions
Ask the buyer two or three direct questions about the payment: "Why does the name on the account not match your profile?" or "Can you confirm the last four digits of the account number?" A legitimate buyer answers without drama. A thief gets defensive, accuses you of wasting their time, or repeats the same canned phrase.
Overly Complex Stories
Criminals pre-plan excuses. If the buyer volunteers a detailed story about a "client," a "business partner," or a "relative" who is actually making the payment, that's a scripted narrative. Legitimate buyers don't need to explain themselves before you even ask.
Practical checks before you release
If something feels off, don't release the crypto. Instead, run these checks.
Call your own bank
While the trade is pending, call your bank and ask if they see any holds or warnings on the incoming payment. Banks can sometimes see a "fraud watch" flag on the sender's account. They won't always tell you, but it costs nothing to ask.
Do a Web Search on the Account Name
Search the full account name plus the words "scam," "P2P," or "crypto." If the account holder has a public history of being a victim of account takeover, you might find forum posts or complaints. More often, you'll find nothing - which is neutral.
Verify the buyer's platform reputation
Check the buyer's feedback, but understand its limits. A high rating from many trades is better than a new account with a single perfect score. Look at the content of the feedback, not just the stars. If they have multiple recent trades with identical generic comments ("good buyer, fast payment"), that's often a farmed reputation.
Test the Water With a Small Withdrawal
This isn't always possible mid-trade, but if the platform allows partial releases, release only a tiny amount of crypto (like $5 worth) and ask the buyer to confirm they received it. A thief won't care about $5; they want the full amount. A legitimate buyer will be mildly annoyed but cooperative.
When to walk away
The single most effective protection is the willingness to cancel the trade and eat the small penalty (if any) that the platform charges. If the account name doesn't match, the buyer is rushing, or the story doesn't hold together, cancel. Find another buyer. The cost of walking away is a few minutes and maybe a small fee. The cost of being wrong is the entire trade amount.
Remember: the thief is not the person you're chatting with. The thief is the one who told you to pay a specific account. If the account you're paying is not in the name of the person you're chatting with, you are the middleman in a crime. The buyer on the platform might be the thief, or might be a "money mule" who forwards the crypto elsewhere. Either way, you lose.
The Bottom Line
You will never be 100% certain a bank account is legitimate. But the criminals who use stolen accounts are not sophisticated operators. They rely on speed, confusion, and your reluctance to cancel a trade. By requiring the name on the account to match the verified profile, asking direct questions, and walking away the moment something feels wrong, you make yourself a harder target. The thief will move on to an easier mark.
Not financial advice. convictiononsol.xyz publishes market data and general information about conviction. Crypto assets are volatile and you can lose everything you put in. Nothing here is a recommendation to buy, sell or hold, and we make no price predictions.
Prices are sourced from third parties and may be delayed or wrong. Verify anything you intend to act on against a primary source.