Since mid-October 2026, many people have had their bank accounts frozen after selling crypto assets in the form of P2P. According to the Department of Cyber ​​Security (Ministry of Public Security), transactions on the exchange may be completely real, but the money received may originate from fraud or money laundering.

Since mid-October 2026, authorities and banking industry units have recorded a series of cases of people having their bank accounts blocked or locked after buying and selling crypto assets. Most involve P2P (peer-to-peer transactions) orders with cash flows originating from accounts on the blacklist suspected of money laundering, or assets misappropriated by fraudulent criminals. Many investors, even though their transactions are completely real, still encounter legal trouble and have not been able to reopen their accounts after many times working with the bank.

According to the Department of Cyber ​​Security, the specific risk of P2P transactions lies in the fact that the exchange of crypto assets such as USDT and BTC on the exchange takes place completely real, but the amount of Vietnam Dong that the seller receives into the bank account may be "dirty" money. For example, an investor sells USDT and receives 100 million VND in transfer, the exchange application notifies that the transaction is complete. However, if this 100 million VND comes from an online fraud being traced by the police, the account receiving the money will immediately be placed under control and blocked for investigation.

In fact, people and individual investors do not have the tools or ability to verify the origin of cash flows at previous "links". This puts traders at risk of becoming a passive link in the money circulation chain that violates the law without even knowing it.

According to Decree 52/2024/ND-CP dated May 15, 2024 of the Government on non-cash payments, effective from July 1, 2024, payment accounts will have part or all of their balance blocked when there is a decision or written request from a competent authority such as the Investigation Agency or Procuracy. Individuals using legal bank accounts to buy and sell crypto assets is not prohibited by law and does not automatically constitute money laundering. However, these transactions are required to strictly comply with regulations on payment, crypto asset management and money laundering prevention.

When an account is locked or blocked by the authorities for investigation, to prove that the transaction is legal and not related to money laundering, investors need to clarify 3 core factors. The first is the source of cash flow and income, which proves the legality of the money used for initial investment. Next is to prove the reality of the amount of crypto assets owned. Finally, there is a transparent relationship, which provides evidence of a direct connection between the money received into the bank account and the corresponding transaction order on the exchange.

To do that, investors need to store bank account statements and documents proving the original source of income. At the same time, it is necessary to keep the history of placing P2P orders on the exchange, the partner's identification information, the number of assets, the exchange rate, the time of money transfer and the exchange message log. For transactions related to blockchain wallets, it is necessary to accurately save the wallet address and transaction code (TXID/Transaction Hash).

To prevent risks, the Police recommend that people absolutely not receive payments from bank accounts that do not match their real names and verified partner information on the P2P platform. People also absolutely do not lend money to others, rent bank accounts, or receive or transfer money in any form. This behavior can be criminally prosecuted as an accomplice to money laundering and fraud.

If you still choose P2P transactions, people need to proactively verify the partner's identity, strictly control transfer information, and take photos and fully backup evidence of each transaction order to protect themselves in the event of an incident.

According to the Department of Cyber ​​Security