Diagram of P2P fund tracing and account layers: money flowing from a victim's account through a first-layer account to a seller's receiving account
Bank money leaves a full trail. Fund tracing simply follows that record down, layer by layer.

Many people frozen after a P2P USDT sale cannot make sense of one thing: I did nothing wrong, so how did the police land on my account? The answer hides in one idea: fund tracing. Every rupee, peso, or baht that moves through a bank account leaves a record, and investigators follow that record down until they see exactly whose account the dirty money entered. This piece explains how the tracing works, so you understand how money leads to a person, and, more importantly, how to never touch it at the source.

This is written for people selling USDT for cash across South and Southeast Asia, where a P2P payment lands as a UPI, IMPS, bank transfer, or e-wallet credit, and any one of those credits can sit on a fraud trail without you knowing. Let me set the stance plainly: this explains how money gets traced so you can see the risk and avoid it, never to teach you “how to make it untraceable.” Studying how to dodge a trace or wash dirty money is not staying safe; it is crime, and this site will not teach a word of it. I had my own account frozen, and I know the smartest move for an ordinary person is not figuring out how to hide, but figuring out how to never catch that dirty money in the first place. For the full picture of a freeze, pair this with chapter one, why cashing out USDT can freeze your account.

Why bank money can't hide

To understand tracing, start with a plain fact: inside the banking system, every movement of money leaves a mark. Who, at what time, from which account, how much, into which account, the bank's systems hold a complete record. This is not high technology; it is the basic design of finance. Traceability exists precisely to guard against money laundering and fraud.

So when fraud proceeds flow out of a victim's account, they do not vanish into thin air. They just change accounts a few times and loop around, but every hop is recorded. What investigators do is take that record and follow the thread. Wherever the dirty money jumps, the owner of that account comes into view, whether an accomplice or someone like you who caught the money without knowing.

Grasp this and two things become clear: one, “switch a few accounts and they can't trace it” is a total fantasy, the trail is there, and switching accounts only makes you look more suspicious; two, your move is not to “hide the record” but to “keep the dirty money out of your record.”

Fund tracing: following the trail

“Fund tracing” in plain words is this: start from the source of the tainted funds, follow the transfer records, and go down layer by layer to see which accounts the money finally reached.

Use a simplified chain. Say a fraud ring scams a victim out of a sum:

  • Hop one: the victim transfers the money into an account the ring controls (or the ring poses as a buyer and uses that money to buy USDT in the P2P market).
  • Hop two: that money moves from that account to the next, which may be your unsuspecting receiving account for a USDT sale.
  • Hop three, hop four, and on: the money keeps flowing and splitting, trying to make the chain look complex.

The moment the victim files a complaint, investigators start from the victim's account and trace through hop one, hop two, downward. When they reach your receiving account, they see that the tainted funds did pass into it, so they place a hold on your account and contact you to verify. You were found not because someone “reported” you, but because the record of the money led the investigators to you. That is why so many innocent people feel blindsided. You did nothing actively wrong, but your account really did sit on that record chain.

Editorial review · 2026-05-31

I pulled out the common threads from a few people I came across who were frozen after a P2P sale (all personal accounts, only to illustrate the mechanism). They nearly all shared one trait: chasing a better price, they went through an unverified low-price merchant or a private channel, with a payment source they could not control at all. Only when the freeze notice arrived did they first realise that their “normal USDT sale” was a key hop in someone else's money chain. The shared conclusion: the risk is not in doing something bad; it is in catching money whose source you cannot control.

First-layer and second-layer accounts

In fund tracing, people often use “layers” to describe how close an account sits to the source of the dirty money. This is an informal frame to help you understand (the actual classification is for the authorities and the law to decide):

Informal labelRough meaningDistance from sourceUsual attention
First-layer accountReceived the victim's funds directlyClosestHigher
Second-layer accountReceived from a first-layer account, one step removedOne step outNext
Third layer and beyondFurther down the flow, further from the sourceFurtherDepends on the case

Generally, the closer to the front and to the source, the more focus an account tends to draw. A USDT seller's receiving account often lands in the first or second layer, because the ring frequently uses dirty money to buy your USDT directly, putting your receiving account very close to the source.

But to be clear: layers are just a frame to understand the chain, and they do not equal “guilty or innocent.” Whether an account is treated as connected to a case, whether any liability attaches, and how it is handled, all turn on the facts the authorities and courts find under law, with the core question being whether you were unknowing, whether the trade was normal, and whether you can clear yourself. Understanding the layers is meant to show you why a USDT receiving account carries high risk, not to slap a label on yourself and stoke fear.

What gets weighed when you receive it

The thing most people dread is: money entered my account, am I finished? Do not crush yourself first. Between “tainted funds passed through my account” and “you are guilty” sits one decisive question: were you unknowing, and was the trade normal.

When investigators verify, they broadly look at facts like these (general knowledge, not legal advice):

  • Was the trade real. Did you genuinely make a trade for value (selling USDT, receiving payment), or were you merely “passing money through” and moving funds for someone.
  • Were you unknowing. Did you have reason to know, or should you have known, that the money might be tainted. Trading despite obvious red flags (a wildly off price, a counterparty repeatedly pushing to leave the platform) weakens “unknowing.”
  • Was the value fair. Did you deliver USDT at a normal market rate for equal value, or did you take in some inexplicable sum that did not match any goods.
  • Are the records complete. Can you produce a complete, self-consistent trade chain to back all the above.

So the conclusion is: an unknowing seller who traded normally with complete records, and a person who traded while aware of a problem or simply “passed money through” for others, are in completely different positions. The first has a chance to clear their name; the second may genuinely face criminal exposure. This is why the site relentlessly tells you to use verified channels only and keep your records, that is not a formality, it is your entire footing for proving innocence if you ever get pulled in. For how to clear yourself and cooperate after a freeze, see what to do after a freeze, the legal way.

The most practical way to always stand on the “unknowing, normal trade, complete records” side is to trade only in a verified P2P market with verified high-volume merchants. Binance P2P's verification system leaves every trade documented and checkable.

Register with BNB1916 →

Mule accounts: the cost of lending a card

You cannot talk about money chains without a high-search term: the money mule. A “mule account” is a bank account (and often a paired SIM) handed to someone else to receive and pass on funds. In recent years there are dedicated penalties for buying, selling, renting, or lending these accounts and SIM cards, because handed-off accounts are the very tools dirty money and online scams flow through.

The impact these penalties can bring, in plain terms, includes limits on the account's functions and trouble opening or using accounts later (the exact measures follow current rules). In other words, lending, renting, or selling your account can cost you your own ability to use and open accounts normally afterward.

This leads to one hard rule on this site: never lend, rent, or sell your bank account or SIM to anyone, even for a tempting bit of “easy money.” That money looks free, but it turns your account into a channel for someone else's crime. Once that account catches dirty money, you may not only face mule-account penalties but be treated as aiding and abetting cyber fraud, sliding straight from “chasing a little gain” into criminal exposure. There is no free lunch falling from the sky, only a trap.

“Rent your account for extra income” is a trap, not an opportunity

Anything that offers you money to “just lend your account” or “receive a payment for a cut” is, at heart, recruiting you as a tool for moving dirty money. You take the small money and carry someone else's criminal consequences. This site's position is plain: never lend, rent, or sell any of your accounts, and stay far from this kind of “side income.” This is not over-caution; it is keeping your own life from going off the rails.

What good faith requires

Plenty of people pulled in unknowingly ask: I acted in good faith, does the law recognise that? Here is a plain-language explainer (not legal advice; the specifics rest with the law and the authorities and courts).

“Good faith acquisition,” in plain terms, means: you obtained the property through a real, normal trade, for fair value, and you genuinely did not know and had no reason to know the funds were tainted. Applied to selling USDT, that means: you made a real sale, delivered USDT at a normal market rate for equal value, received the matching payment, and nothing in the process should obviously have put you on alert.

But good faith is not established just because you say so; it needs records to support it: a real platform order, a clear counterparty, a normal chat log, an equal asset delivery, and a matching credit record. The more complete these are, the stronger your claim to being a good-faith, unknowing party. Conversely, if you went through a private back-alley deal with no trail, then even if you truly did not know, it is hard to show. That is the value of records, they are not a hassle; they are the proof of your good faith.

Whether you are ultimately recognised as a good-faith party and how the tainted funds are handled rests with the authorities and courts under law. What this site can tell you is: making every trade real, checkable, and recorded is the best endorsement you can give the words “good faith.”

Staying off the chain at the source

Once you understand the tracing, the landing point is always prevention. These habits, stacked, push your odds of catching tainted funds very low:

  • Use escrowed, verified P2P only; never trade privately. Private deals have no escrow, no checks, no trail, the gap dirty money loves most.
  • Cash out through fully verified, high-volume merchants. Big merchants guard their own account safety intensely, so they are less likely to be contaminated.
  • Be wary of low-price orders that are too good to be true. Abnormally cheap is often dirty money's bait.
  • Use a dedicated account for crypto, separate from salary and mortgage accounts. This reduces collateral damage and eases self-clearing (the purpose is compliant self-protection, not dodging a trace).
  • Keep complete records of every trade. Order, counterparty, chat, delivery, credit, not one missing.
  • Never lend, rent, or sell your account. This is the floor of the floor.

These run in one line with chapter one's “shut it out at the source,” only here the reasons come from the angle of fund tracing. Turning them into habit is far less hassle than clearing yourself after the fact. For the full version, see the four clean habits at the source.

The legal line that must hold

Understanding tracing is for avoiding, not evading

This site explains fund tracing and first- and second-layer accounts with one purpose only: to let you see where the risk comes from and never touch it at the source. We will never, ever teach you “how to make money untraceable,” “how to split it to beat the trace,” or “how to wash dirty money clean.” Those are not staying safe; they are taking part in crime, and they turn an innocent bystander into a real accomplice. If your funds are the problem itself, this site cannot help you; you need a lawyer, not a how-to. Holding the compliant line is the whole premise of this site existing.

A stay-clear checklist

Run these eight to stay off dirty money

  • Remember: bank money leaves a full trail, so switching accounts to hide is a fantasy and more suspicious
  • Trade only in escrowed, verified P2P; never trade privately
  • Cash out through fully verified, high-volume merchants
  • Be wary of too-good-to-be-true low-price orders, often dirty money's bait
  • Use a dedicated account for crypto, separate from salary and mortgage accounts
  • Keep complete records of every trade, your proof of being unknowing and in good faith
  • Never lend, rent, or sell your bank account or SIM (mule-account penalties)
  • Stay far from any “rent your account for extra income,” it is a criminal trap

To put this prevention into practice, step one is a platform where every trade is checkable and self-provable. Binance P2P's verified-merchant system maps directly onto this checklist.

Sign up and verify on Binance →

FAQ

How do police trace the tainted funds from a P2P sale to me?

Every bank transfer leaves a complete record. After a victim complains, investigators start from the victim's account and follow the money outward, layer by layer, which is fund tracing. Whose account the dirty money entered is written plainly. If your receiving account caught that money, it will be found, regardless of whether you meant any harm. The record is simply there.

What are first-layer and second-layer accounts?

Informal labels for how close an account sits to the source. The account that received the victim's funds directly is often called a first-layer account; one a step removed, a second-layer account, and so on. The closer to the source, the more attention it usually draws. But how anything is classified and handled is for the authorities and the law; the layers are just a frame to understand the chain.

Can a money-mule penalty affect my daily life?

It can. Measures against buying, selling, renting, or lending out accounts and SIM cards can mean limits on account functions and trouble opening or using accounts later. That is why this site keeps repeating it: never lend, rent, or sell your account or SIM to anyone, even for money. It can pull you into someone else's crime, and the cost far outweighs the small payment.

I received the dirty money unknowingly. What does good faith require?

In plain terms, if you obtained the funds through a real, normal trade for fair value, and you genuinely did not know and had no reason to know they were tainted, you may be treated as a good-faith party. But that has to be backed by complete records: a real order, the counterparty, the chat, an equal delivery, and the credit record. Whether and how good faith is recognised is decided by the authorities and courts under law, and complete records are your strongest support.

How do I avoid touching tainted funds at the source?

Stack a few clean habits: trade only in a verified P2P market with escrow and never in private; cash out through high-volume verified merchants; be wary of prices too good to be true; use a dedicated account for crypto, separate from salary and mortgage accounts; keep complete records of every trade; and never lend, rent, or sell your account. Do these and the odds of catching dirty money fall sharply.

By here you have seen through one thing: money leads to a person through that indelible bank record, and your move is never to “hide the record” but to “keep dirty money out of the record.” Turn those prevention habits into muscle memory and you are largely clear of tainted-fund risk. To learn how long a real freeze takes to lift, read how long a frozen account stays frozen; if you are mid-freeze and unsure, read what to do after a freeze; and to tell the on-chain freeze apart from the bank freeze, read can USDT in a cold wallet be frozen. The full set is in the cash-flow guides index, and to learn who Tong is, visit the about page.