“Transfer the USDT first, and the cash is in the bag.” Many disputes arising from offline USDT exchanges begin with this single statement.
The seller sees that the counterparty has indeed arrived, and a bag of cash is indeed placed on the table. The parties sit down in a café, a hotel room, or a private dining room, first verify the wallet address, then open the mobile wallet, and wait USDT for the funds to be credited.
The issue arises because possession of cash depends on physical control: whoever obtains the bag and can control it is the one who actually receives the money; whereas USDT transfers depend on on-chain confirmation, and once the transfer is confirmed, the original holder generally cannot unilaterally reverse it.
If someone intentionally manipulates the sequence of delivery, a seemingly normal transaction can turn into a criminal case within seconds.
PreviouslyMankun Law Firmrepresented a client in a very typical scenario: Individual A wished to sell a batch of virtual assets. After agreeing on the price online, Buyer Jia arranged an offline meeting for the transaction. When Jia arrived, he carried a large bag and voluntarily opened it to show Individual A, stating that it contained cash and that he was sincere about completing the deal today. Upon seeing the cash, Individual A lowered his guard and, as agreed, transferred the USDT to the wallet address designated by Jia. After the USDT was credited, Individual A prepared to take the cash, but Jia did not hand over the bag; instead, he grabbed the bag and fled. Individual A was stunned on the spot: Was this merely a contractual dispute, fraud, or even robbery?
Similar fact patterns are not confined to anecdotal consultations. In a report by China National Radio, there was also an offline transaction involving “exchanging RMB 300,000 in cash for USDT”: Xiao Li, through intermediary Zhang Mou, agreed with Tian Mou to conduct an offline cash-for-USDT exchange. On the day of the transaction, after verifying the cash in a private dining room at a restaurant, Xiao Li transferred the USDT to Tian Mou’s account. A conflict subsequently erupted at the scene, with both parties claiming to be the victim, and the crux of the dispute centered on whether the act constituted “robbery” or “fraud.”
Therefore, the matter of offline cash-for-USDT exchanges is not simply a reminder to “exercise caution in transactions.” The real issue to be discussed in such cases is why, despite the same modus operandi of handing over cash while transferring USDT, some instances are treated merely as contractual disputes, others as fraud, still others as robbery, and in some cases, the USDT seller or the person assisting with cash withdrawal becomes a defendant in a case involving the concealment or disguise of criminal proceeds.
This article clarifies this line of inquiry: what law enforcement authorities and lawyers actually examine after an offline USDT exchange goes awry.
The Problem Lies in Who Delivers First
The risks associated with offline USDT exchanges primarily stem from the asynchrony in control over cash and on-chain assets.
If you are selling USDT and the counterparty places cash on the table, this typically merely allows you to "see the money." Seeing the money does not equate to your having obtained control over it. The cash remains at the counterparty's feet, within their reach, or in their bag. Whether there are accomplices present, whether someone is waiting outside to assist, whether the cash is genuine, and whether the amount is sufficient are all factors that only fall within your scope of control once you have physically taken possession, counted, and are able to take away the cash.
USDT, however, is different. Once you transfer USDT to the counterparty's address and the transaction is confirmed on the blockchain, the counterparty has already obtained actual control. Even if you are still sitting at the same table, the counterparty has already secured the most critical element. This time lag constitutes the primary risk factor in many offline USDT exchange cases.
During offline transactions, many individuals lower their guard due to the "sense of presence." The counterparty sits before you, stacks of cash are displayed, and an intermediary is present, perhaps even reassuring you by saying, "Rest assured, we are all acquaintances." However, criminal cases focus on the chain of delivery, not the atmosphere. Key determinants for subsequent legal characterization include who first disposed of the property, who obtained control, whether the counterparty had a genuine intent to perform, and whether there was violence or threats at the scene.
This is why, when issues arise in offline USDT exchanges, the situation cannot be summarized simply as "he ran off with the money" or "he did not provide the coins." For instance, if the transaction location was designated by the counterparty, the cash remained at the counterparty's feet, the wallet address was provided temporarily, and the counterparty left immediately after the USDT arrived, these combined details suggest more than a simple breach of contract. Conversely, if the cash had already been exchanged and the parties had a history of transactions, with disputes arising only regarding subsequent receipt or supplemental payments, the legal entry point for the case would differ.
While these details may seem trivial, they determine whether the matter proceeds along the lines of civil disputes, fraud, robbery, or the concealment or disguise of criminal proceeds.
What Constitutes Mere Transactional Disputes
Not every instance where "money was paid but USDT was not received" or "USDT was provided but payment was not made" automatically escalates into a criminal case.
Consider the following example: Zhang San had long purchased USDT from Li Si, with previous transactions completed normally. One day, Zhang San transferred 200,000 yuan to Li Si, who claimed that his exchange account was under risk control and that the USDT could not be withdrawn temporarily. Despite Zhang San's repeated urges, Li Si did not lose contact, acknowledged receipt of the funds, and offered either a refund or to deliver the USDT once the account was unfrozen. In such a scenario, even if Zhang San is angered, he cannot simply label Li Si as committing fraud merely because "payment was made but USDT was not received."
Why? Because criminal fraud cannot be determined solely by whether performance occurred; the focal point is whether the counterparty had the intent of illegal possession at the time of receiving the money. Put more directly, it depends on whether Li Si initially intended to conduct the transaction or had no intention of delivering the USDT from the outset.
This distinction is crucial in crypto asset-related cases. In practice, transactions may fail to be completed as agreed due to account freezes, blockchain congestion, wallet permission issues, sudden price fluctuations, or upstream failures to release coins. Such situations may involve breaches of contract, restitution following contract invalidity, creditor-debtor disputes, or unjust enrichment claims. While these matters are complex to resolve, they do not inherently constitute criminal offenses.
The Mankun Criminal Defense Team has previously encountered similar scenarios: Party A transferred funds to an acquaintance, Party B, to purchase USDT. After receiving the money, Party B failed to transfer the USDT as agreed, consistently claiming that the account was frozen, and the issue remained unresolved for two months. When Party A reported the incident to the police, providing chat logs and transfer records, the police determined that the facts were genuine but did not constitute fraud, recommending civil remedies instead. The most notable aspect of this case is not whether the police judgment was definitively right or wrong, but rather that it illustrates a reality: disputes involving crypto asset transactions often fall within the intersection of criminal and civil law. It is insufficient to look only at one party's losses; one must also examine the counterparty's true status at the time of receiving payment and their subsequent conduct.
When adjudicating transactional disputes, lawyers typically examine several categories of materials. For instance, whether the parties had a history of stable transactions, whether the price was negotiated in line with market rates, whether the counterparty took genuine steps to receive or prepare USDT ("U"), whether there was continued communication, refunds, supplementary payments, or acknowledgment of debt after the incident, and whether the funds flowed to normal transaction counterparties. Conversely, if the counterparty becomes unreachable immediately upon receiving money or U, uses a false identity, employs temporarily changed wallet addresses, provides no evidence for alleged account freezes, and rapidly splits and transfers away the funds, it becomes difficult to treat the case as merely an ordinary civil dispute.
Crypto-related transactions present a special issue at the civil level: virtual assets are not legal tender, and domestic business activities involving virtual assets operate under a stringent regulatory framework. Courts do not always adopt a uniform approach to the validity of sales contracts and liability for restitution. This is why many parties seek to pursue criminal avenues. However, criminal proceedings are not a shortcut for civil rights enforcement; what truly drives criminal characterization remains the factual elements of deception, violence, intent of illegal possession, and the fund chain.
Circumstances More Likely to Constititute Fraud
In offline cash-for-U exchanges, the most common structure of fraud involves inducing the counterparty to believe that a genuine transaction is taking place.
Returning to the story of Person A and Jia: Jia arrived at the meeting with a bag of cash, actively displayed the cash, emphasized that he was "here to close the deal today," and requested Person A to transfer U first. Person A clicked to transfer because he believed Jia would genuinely make the payment. When Jia later fled with the bag, the key question became: Did Jia have a genuine intention to pay at the outset of the transaction? Was the bag of cash intended to complete the transaction, or was it used to induce Person A to transfer U first?
If evidence shows that Jia never intended to pay from the beginning, but instead used the bag of cash, acquaintances acting as intermediaries, and the atmosphere of an on-site transaction to deceive Person A into disposing of U, the conduct more closely resembles fraud. Fraud does not require sophisticated schemes or significant time intervals. Even if only a few minutes elapsed between displaying the cash, transferring U, and fleeing, as long as the victim disposed of property based on a mistaken belief, the conduct falls within the scope of fraud.
The fake U case follows similar logic. Mankun Law Firm previously handled a case where an individual opened a so-called digital wallet app during an offline meeting, showing a large amount of U on the interface and claiming that on-site trading and immediate verification were possible. After the victim transferred RMB 200,000 as agreed, the counterparty found an excuse to leave. The suspect later confessed that the U shown was virtually generated by the wallet app, with backend controls over the quantity and the ability to create fake transfer interfaces. The deception here was more direct: the subject matter of the transaction displayed by the counterparty was entirely fictitious.
Another pattern is "building trust with small amounts before striking with a large amount." In a public case from Jilin Province, the buyer first completed several small-value transactions with the counterparty to gain trust. Then, at a hotel, the buyer displayed USDT in a mobile wallet and asked the victim to arrange for friends to transfer RMB 1.29 million in two installments to purchase 200,000 USDT. Although the defendant appeared to initiate the transfer, it was never successfully completed. He placated the victim by citing "blockchain confirmation issues" and then escaped from the scene under the pretext of going to the restroom. In such cases, the earlier successful small-value transactions do not necessarily prove the counterparty's ongoing good faith; rather, they may serve as groundwork for a larger-scale fraud.
There is an even more sinister fraud chain in offline U exchanges: online fraud, offline cash withdrawal, and subsequent conversion into U. Criminal syndicates first use scripts such as investment scams, brush-order rebates, impersonating customer service representatives, or posing as military officer boyfriends to induce victims to withdraw cash. They then arrange for so-called U merchants, riders, or securities company specialists to collect the cash door-to-door. For those who directly collect cash and convert it into U, if they are merely acting as mechanical couriers, the case may initially be examined from the perspective of concealing or disguising criminal proceeds. However, if they know that the victim is being defrauded, or even participate in fabricating identities, training on scripts, or arranging "cash collectors," they may be evaluated as accomplices to fraud.
This is also the warning highlighted in relevant cases by the Supreme People's Procuratorate. Whether a person involved in cash withdrawal and U conversion is liable for concealing criminal proceeds or as an accomplice to telecom fraud should not be determined solely by whether they physically handled the cash. One must examine when they intervened in the fraud—whether before the victim was deceived into delivering property or after the criminal proceeds were formed; what they knew—whether they merely knew that the "money came from illicit sources" or already knew that the counterparty was deceiving the victim through scripts; and whether they participated in front-end actions such as gaining trust, organizing cash withdrawals, or falsifying identities.
Therefore, fraud analysis cannot stop at "the counterparty did not provide money" or "the counterparty did not provide U." The true questions to pursue are: What false impressions did the counterparty create? What facts did they conceal? Why did the victim deliver the property? And where did the funds or U go after delivery?
The Presence of Violence Constitutes a Different Matter
In offline transactions, if violence, coercion, or physical restraint occurs on-site, the nature of the case will immediately change.
The crime of robbery addresses the forcible taking of property on the spot. In the context of exchanging cash for USDT, the key issue is whether the other party deprived you of the space to make free decisions by means such as brandishing a knife, beating, surrounding and blocking, physically restraining, snatching your mobile phone, forcing you to unlock your wallet, or compelling you to transfer funds.
If Party A merely falsely claims that payment will be made, induces Little A to transfer USDT first, and then flees with the cash bag, it generally cannot be classified as robbery simply because Little A suffered significant losses. In this scenario, the direct cause of Little A’s transfer of USDT was deception, not suppression by violence.
However, if the on-site circumstances differ, the conclusion may change. For example, if the buyer brings several individuals into a private room, locks the door, produces a knife, and forces the seller to open their wallet and transfer USDT; or if, immediately after the seller finishes counting the cash, the other party beats them, seizes the cash, and prevents pursuit; or if the counterparty takes the mobile phone and forces the input of passwords, modification of wallet permissions, and transfer of assets. In such cases, the legal assessment shifts to on-site coercive force: whether the victim was unable to resist freely, and whether the other party obtained the property on the spot by leveraging such suppression.
As previously reported by Tencent News, a Chinese man was set up during an offline crypto asset transaction with an online acquaintance in Bangkok, resulting in the robbery of his cash and mobile phone; police subsequently arrested multiple suspects. Hong Kong has also recently seen numerous robbery cases involving currency exchange shops or cash conversion services. Although these cases occurred in different locations and are subject to different jurisdictions, the warning for readers in mainland China remains the same: offline cash transactions expose cash, mobile phones, wallet addresses, and one’s whereabouts simultaneously. As long as the counterparty intends to control the scene, both personal safety risks and criminal law risks will escalate concurrently.
Another easily confused scenario is snatching. For instance, where there is no brandishing of knives, beating, or obvious suppression of resistance, but the other party suddenly seizes the cash bag or mobile phone and flees while you are off guard. Whether this constitutes snatching, theft, or fraud still depends on an analysis of who had control over the property at the time, the manner in which the property was obtained, and whether there was deceptive groundwork. Cases involving digital assets are not limited to the binary choices of “fraud” and “robbery”; the clearer the on-site actions, the more accurate the determination of charges.
Sellers of USDT May Also Become Defendants
Many sellers of USDT worry only about being defrauded, overlooking another layer of risk: the cash brought by the counterparty may itself be proceeds of crime.
In cases involving telecom fraud, online gambling, and illegal payment-settlement schemes, criminal syndicates increasingly use combinations of cash, gold, and virtual assets to move funds. Online transfers are susceptible to payment stops and freezes, making cash handovers combined with USDT transfers a new money-laundering channel. For upstream criminal syndicates, the value of offline USDT merchants, errand runners, and cash-withdrawal agents lies in converting victims’ cash into virtual assets that are easier to transfer across borders.
There are already numerous public cases.Guanling, GuizhouIn cases disclosed by the court, four defendants were convicted of the crime of concealing or disguising proceeds of crime for helping others transfer criminal funds by exchanging USDT for cash with victims, despite making minimal profits. In cases disclosed by the Luotian Police in Hubei, fraud syndicates arranged for domestic riders to collect cash offline and convert it into USDT, with the riders receiving commissions of 3% to 5% per transaction. The Chongqing Police have also dismantled gangs engaged in cash withdrawal and USDT conversion operations that posed as USDT merchants or securities company specialists to collect cash involved in fraud on-site.
These cases send a direct warning to USDT merchants and ordinary sellers: while you may believe you are merely selling USDT and earning the spread, judicial authorities may view your conduct as assisting criminal syndicates in transferring funds.
Of course, not everyone who sells USDT for cash can be simply equated with committing a crime. The key still lies in subjective knowledge and objective anomalies. In the eyes of judicial authorities, an individual engaging in an occasional transaction is not in the same category as someone who long-term accepts orders in anonymous groups, collects cash in person at off-site locations, takes commissions of 3% to 5%, and transfers USDT to unfamiliar overseas addresses. The former may need to explain the transaction background and source of funds, while the latter is likely to be scrutinized as part of a fund transfer chain.
If involvement in a case has already occurred, family members should not first ask whether "selling USDT is illegal," but should instead reconstruct exactly what the individual did. For example, did they have direct contact with upstream personnel? Did they see the victim when collecting cash? To whom was the USDT ultimately transferred? Did they earn a normal spread or a high commission? Chat records are also critical; if they contain phrases such as "do not ask about the source," "the client is under investigation," "fabricate identity," or "collect cash in person," the risk associated with the case will significantly increase.
In offline USDT exchanges, some individuals are victims, some are parties to ordinary transactional disputes, and others become defendants in money laundering chains. The distinction does not lie in the term "USDT," but in the source of funds, division of labor in the conduct, and subjective knowledge.
How to Handle Matters After an Incident
If you are a victim, after an incident involving an offline USDT exchange, do not merely scold the intermediary in group chats, nor gather people to block the other party, seize back cash or mobile phones. Cases involving crypto assets are most susceptible to secondary loss of control; although you were initially the victim, improper subsequent handling may escalate the matter into mutual affray, illegal detention, extortion, or even robbery.
More importantly, preserve evidence. This includes chat records prior to the transaction, the intermediary's introduction process, the counterparty's identity information, wallet addresses, on-chain transaction hashes, photos or videos of the cash, the counting process, clues from on-site surveillance, witnesses present, location records, ride-hailing records, records of hotel or restaurant private rooms, and voice messages or text from the counterparty promising payment or delivery of USDT. All such materials should be retained to the greatest extent possible. A transaction hash is the unique identifier for each on-chain transaction, while records of cash handover relate to whether physical assets were genuinely delivered offline; both types of evidence must be examined in conjunction.
If you are a USDT seller and discover that the funds received may be involved in fraud, do not rush to delete chat records, nor continue to transfer, split, change addresses for, or find nominees to hold the crypto assets. You should first clearly organize details regarding the transaction counterparty, source of funds, method of receipt, transaction price, verification of the counterparty's identity, and your own profits. If you are indeed an ordinary trader, the completeness of the evidence will directly influence how public security organs assess your subjective knowledge.
If you are a family member of a person involved in a case, the first step is to reconstruct their role, rather than immediately asking about the potential sentence. Was this person a buyer, seller, intermediary, guarantor, cash-collection runner, or an upstream organizer? Did they have face-to-face contact with the victim? Did they participate in scripting or deception? Did they receive high commissions? Did they transfer USDT to overseas addresses? Did they engage in repeated operations? These questions determine whether the case may be classified as a transactional dispute, fraud, robbery, concealment of criminal proceeds, aiding information network criminal activities, or another crime.
For ordinary crypto asset holders, the truly prudent approach is to minimize large offline cash transactions. Do not readily accept buyers found temporarily in anonymous groups, prices significantly above market rates, or remote locations or enclosed private rooms designated by the counterparty. During transactions, do not allow the counterparty sole access to your mobile phone or wallet, and do not transfer USDT first while waiting for the counterparty to provide cash. More importantly, do not collect cash, transfer USDT, or deliver cash on behalf of others, nor impersonate any identity to meet so-called "clients."
When incidents arise from offline cash-for-USDT exchanges, the true difficulty lies in clearly reconstructing the handover process, source of funds, transfer of control, and any coercive conduct on site. The boundaries between transactional disputes, fraud, robbery, and concealment of criminal proceeds all depend on the facts. The clearer the chain of facts, the greater the opportunity for the case to be accurately understood; the more chaotic the chain of facts, the more easily one may be drawn into heavier criminal risks under the general label of "offline USDT exchange."
