The Black Triangle on Crypto Exchanges: Why a Cryptocurrency Seller May Become a Suspect

The black triangle on crypto exchanges has become one of the most dangerous schemes for participants in peer-to-peer trading: a good-faith seller receives money from one person, transfers digital assets to another, and then risks facing account freezes, lawsuits, and criminal prosecution.

The market for digital assets is growing rapidly, and with it, increasingly sophisticated methods of fraud are emerging. Cryptocurrency has long been a common tool for transactions in private deals, but it is precisely where operations occur directly between individuals that scammers most often seek out vulnerabilities.

Lawyer Narek Petrosyan, who defends participants in the cryptocurrency market, explains: in the "Black Triangle" scheme, not only those who have had their money stolen can suffer, but also sellers of digital assets. They have no criminal intent, yet it is their account that receives the disputed amount, making them the first to come under the scrutiny of banks and law enforcement agencies.

How the "Black Triangle" Scheme Works

The essence of the scheme is that three parties are effectively involved in the transaction: the cryptocurrency seller, the buyer, and the scammer. Two parties become victims, while the third benefits and disappears. The fraud is based on the substitution of the counterparty: the seller believes they are working with a cryptocurrency buyer, while the buyer thinks they are paying for a digital asset or product.

• Role: Cryptocurrency Seller. Actions in the scheme: accepts money into their bank account and then transfers cryptocurrency to the scammer. Risks and consequences: may face account freezing, claims from the victim, and investigation by law enforcement.
• Role: Cryptocurrency or Product Buyer. Actions in the scheme: sends money to the seller, believing they are paying for their purchase. Risks and consequences: ends up without cryptocurrency, product, or money.
• Role: Scammer. Actions in the scheme: connects the two victims, receives the cryptocurrency, and ceases communication. Risks and consequences: they benefit, but claims often come to the seller instead.

A classic scenario looks like this: the scammer opens a transaction to buy cryptocurrency from the seller and obtains their details. At the same time, they find another person to whom they supposedly sell cryptocurrency for a comparable amount. The buyer transfers money to the seller's account, the seller sees the payment and sends the assets to the scammer. After this, the correspondence is deleted, and the intermediary disappears.

There is also a more complex version. The scammer posts an advertisement for selling a product, for example, on a classifieds service or in Telegram, often indicating an attractive price. The buyer is given the details not of the scammer, but of the cryptocurrency seller, who is currently involved in the transaction. As a result, the buyer ends up without the product and money, while the seller receives a problematic bank transaction and becomes an easy target for claims.

Why the Seller Risks Becoming a Suspect

The main problem is that the victim's money comes directly into the cryptocurrency seller's account. For law enforcement, they often appear to be the closest and most understandable link in the chain. Initially, they may be called as a witness, but if there is insufficient evidence of good faith, their procedural status can change.

• Article 159 of the Criminal Code of the Russian Federation. Possible qualification - fraud.
• Articles 174 and 174.1 of the Criminal Code of the Russian Federation. This may involve legalization, i.e., money laundering.

The key question for assessing the seller's actions is whether they knew or should have understood that the money came from a criminal scheme. Defending against this is often complicated by three mistakes.

• Did not verify the counterparty: the name in the profile, payer's data, and details were not checked before the transaction.
• Agreed to payment from a third party: the money came from someone other than the person the seller communicated with on the platform.
• Did not save evidence of the transaction: there is no correspondence, order data, confirmation of the transfer of digital assets, or other documentation of the operation.

Blocking of Accounts and the "Black List" under Federal Law 161-FZ

The most common consequence of participating in such a scheme is the blocking of banking instruments under Federal Law "On the National Payment System" No. 161-FZ dated June 27, 2011. The bank has the right to suspend the use of electronic payment means if the client's data or details have entered the Bank of Russia's database regarding cases and attempts of transfers without the client's voluntary consent.

According to the Deputy Chairman of the Bank of Russia, German Zubarev, more than 200,000 unique details are already in this database. Information comes from banks and the Ministry of Internal Affairs of the Russian Federation. About half of such information is related to participants in the "Triangle" scheme.

For an ordinary person, getting into such a database means serious everyday and financial restrictions. The currency of the transaction can vary, but the consequences are often the same: payments become difficult, accounts are under control, and the client has to explain the origin of the incoming funds.

Civil Claims: When Money is Demanded Back

Criminal risks are not the only problem. The victim can file a civil claim against the person whose account the money went to. The logic of such claims is simple: there was no contract between the sender and the recipient, therefore, there are no legal grounds to retain the amount.

In such disputes, two claims are usually made:

• Unjust enrichment under Article 1102 of the Civil Code of the Russian Federation: the plaintiff requests the return of the amount that went to the seller's account.
• Interest for the use of someone else's monetary funds under Article 395 of the Civil Code of the Russian Federation: they can be claimed in addition to the principal amount.

However, the outcome of the case is not always predetermined. Narek Petrosyan notes that if there is no objective data on the seller's illegal actions and the connection between their behavior and the result of the fraud is not proven, the court may refuse the claim. Evidence of good faith is particularly important: correspondence, transaction data, confirmation of the transfer of digital assets, and other materials.

What Relaxations are Discussed by the Bank of Russia

The regulator acknowledges that people without criminal intent can fall into the scheme. Therefore, mechanisms are being discussed for honest sellers that would reduce the consequences of mistakenly or forcibly entering the "black list."

• Limiting the duration of being in the database. Starting from February 2026, the Bank of Russia proposed to limit the accounting of details in the database of fraudulent operations to one year instead of the currently indefinite period.
• Rehabilitation mechanism. If a cryptocurrency seller did not want to assist criminals and is willing to return the stolen money to the rightful owner, their details may be excluded from the Bank of Russia's database.

At the same time, experts point to another trend: parallel regulation of the cryptocurrency market may be strengthened, especially for transactions that occur outside the legal segment.

How Cryptocurrency Sellers Can Reduce Risks

Narek Petrosyan advises participants in peer-to-peer transactions to act as cautiously as possible. The better the circumstances of the operation are documented, the easier it will be to prove later that the seller was not part of a criminal scheme.

Verifying the counterparty and preserving transaction details helps show who paid, what they paid for, and to whom the cryptocurrency went.

• Recommendation: Verify the counterparty. What to do: The name in the profile should match the name of the bank account owner. Goal: To notice in time that a third party has entered the transaction.
• Recommendation: Do not accept payments from third parties. What to do: Stop the transaction if you are asked to accept money <>, <>, or <>. Goal: To avoid receiving a disputed transfer from an outsider.
• Recommendation: Request payment confirmation. What to do: Check if the confirmation includes the transaction number on the platform. Goal: To link the bank transfer to a specific order.
• Recommendation: Keep evidence. What to do: Retain screenshots of the order, correspondence, counterparty data, and transaction ID. Goal: To confirm that the seller acted openly and in good faith.
• Recommendation: Do not delay seeking legal help. What to do: If your account is blocked or you are summoned by law enforcement, contact a specialist immediately. Goal: To avoid wasting time and to build a proper defense.

Signs of a Dangerous Transaction and Common Mistakes

• The counterparty asks to accept payment from another person or to send cryptocurrency faster than usual.
• The payer's name does not match the name in the profile, and explanations sound vague or change during the transaction.
• The buyer pressures for speed, asks not to wait for confirmations, or moves the conversation to a third-party messenger.
• The payment confirmation lacks a transaction number, purpose of the transfer, or other data linking the payment to the order.
• The seller rushes to complete the transaction, does not check the details, and does not keep the correspondence.

If the Scheme Has Already Occurred

• Gather evidence: screenshots of the order, correspondence, payment receipt, counterparty profile data, and cryptocurrency transaction ID.
• Immediately contact the bank and inform them that the transfer may be related to a fraudulent scheme.
• Do not delete correspondence or change account details through which the transaction took place.
• Consult a lawyer, especially if the account is already blocked or you have received a summons from law enforcement.
• Notify law enforcement and provide them with the collected materials.

How to Choose a P2P Platform or Exchange Service

• Check the reputation: reviews, work history, public data about the service, and user complaints.
• Evaluate protective mechanisms: participant verification, arbitration, order recording, and rules for handling disputed payments.
• Look at support: a reliable service should have clear communication channels and the ability to quickly resolve disputes.
• Study the terms: fees, timelines, cancellation procedures, and requirements for supporting documents should be transparent.
• Verify legal data and licenses where applicable to the service's operations.

Such caution is especially important when dealing with popular assets. For example, Bitcoin is often used in transactions, and the high speed of transfers makes it extremely difficult to recover funds after the operation is completed.

Other Common Cryptocurrency Fraud Schemes

The <> scheme is not the only risk in the crypto market. Users also face other types of fraud:

• Phishing: scammers trick users into giving access to accounts, wallets, or confirmation codes.
• Scam projects: money is collected under promises of quick returns, and then the project disappears.
• Fake exchanges: the service mimics cryptocurrency exchange but does not fulfill the order after the funds are transferred.
• Financial pyramids: participants are promised payouts funded by attracting new people.

The Main Danger - Legal Uncertainty

The <> scheme has become a serious challenge for practices in the field of digital assets. It is dangerous because it strikes at two categories of people: those who lose money and cryptocurrency sellers who unwittingly find themselves associated with stolen funds.

Until the market receives clear and detailed regulation, the risks for participants in transactions remain high. In such a situation, not only new rules are important, but also basic legal literacy: it is necessary to understand how fraudsters operate, what signs indicate a dangerous transaction, and what evidence should be preserved from the very beginning.