Security··5 min read

How to vet a P2P merchant in 30 seconds (the 6 numbers that matter)

Stop reading merchant profiles. Six numbers tell you if a P2P merchant is safe in 30 seconds: completion rate, order count, account age, response time, payment-method match, and avg release time. Here's the threshold for each.

By OpenRate Research

Cover image for How to vet a P2P merchant in 30 seconds (the 6 numbers that matter)

Most P2P scam victims spent too long reading merchant bios and not enough time looking at the numbers. Bios are easy to fake; the numbers aren't. Here are the six metrics every major P2P platform exposes, the threshold for each, and what specifically goes wrong when you trade with a merchant that fails one.

1. Completion rate ≥98% (30-day)

The single most important number. Completion rate = orders completed ÷ orders started, on a 30-day rolling window. Below 98% means the merchant is regularly cancelling orders mid-flow, which strongly correlates with disputes, slow releases, and outright scam attempts.

Below 95%: avoid. Between 95-98%: only for small trades or if you're price-shopping aggressively. Above 98%: the volume merchants tend to cluster here. Above 99.5%: institutional-grade merchants.

2. Order count ≥1,000

Total completed orders, all-time. A merchant with 1,000+ orders has a track record platforms can dispute against; a merchant with 50 orders doesn't.

Below 100: high risk, even at 100% completion. Between 100-1,000: workable for very small trades but treat as untested. Above 1,000: track record exists. Above 10,000: mature merchant with reputation skin in the game.

3. Account age ≥6 months

Most P2P platforms expose 'merchant since' or 'verified merchant since' dates. Accounts under 30 days old are the highest-risk cohort — scam patterns include fresh accounts that build artificial completion stats via wash trades, then defraud retail buyers in the first month of real activity.

Below 30 days: skip unless you have a specific reason to trust. 30 days to 6 months: workable but elevated risk. 6+ months: account has weathered at least one platform-policy update + dispute cycle.

4. Response time <3 minutes (avg)

Average response time in chat, exposed by Binance + Bybit + OKX. Slow merchants lock your funds in escrow longer, which raises both depeg and dispute risk. A merchant averaging 10+ minute responses is going to make a 5-minute trade take 30.

Under 1 min: fast. 1-3 min: normal. 3-10 min: slow but workable. Over 10 min: skip — you'll spend more time waiting than trading.

5. Payment method match (not 'add new')

Click into the merchant's ad. Their accepted payment methods should overlap with what you have set up. If not, you'll see 'Add new payment method' — and adding a new method right before a trade is the highest-risk operational pattern in P2P.

Why it matters: KYC name match is verified at trade time. If you add a new UPI mid-trade, the merchant rejects you (legitimate) or pretends to and demands you send via a different method (scam). Either way, abort.

6. Average release time <10 minutes

How long the merchant typically takes between buyer-paid notification and crypto release. Exposed by Binance and Bybit. Long release times correlate with merchants who're triple-checking suspicious payments — fine in principle, but operationally inconvenient and a sign their customer pool skews higher-risk.

Under 5 min: excellent. 5-10 min: normal. Over 15 min: skip; pick another merchant.

What this filtering actually buys you

Eliminates 99%+ of scam-pattern merchants. The remaining 1% are sophisticated operators who can fake stats — for those, the defences are different (escrow integrity, dispute documentation, never going off-platform).

Keeps your trades fast. The 30-second filter gets you to merchants with predictable release times and tight spreads. You'll trade more efficiently, take fewer disputes, and lose less time to slow-release inventory.

Reduces bank-rail freeze probability. High-completion-rate, high-order-count merchants are themselves filtered for reliable counterparties. Low-completion merchants are over-represented in the cohort whose UPI funds get later flagged in cybercrime complaints.

Frequently asked

What if no merchant on the cheapest BUY ad meets all six?
Skip the cheapest, pick the cheapest that DOES meet all six. The savings on a single suspicious trade are tiny vs. the cost of a single failed trade or bank freeze. There are always more ads.
Do these thresholds apply outside India?
Yes — completion rate and order count are universal. Account age can be relaxed slightly in newly-active markets (Russia post-2022, where many top merchants are objectively young). Response time and release time are universal. Payment-method match adapts to local rails (UPI, JazzCash, Pix, SBP).
Should I lower these thresholds for a really good price?
No. Spread compression at the bottom of the ad list is rarely worth the elevated risk. The cheapest BUY price across the top 5 vetted merchants is almost always within 0.2% of the absolute cheapest unvetted price.
What about merchant verification badges?
Useful but secondary. Binance's 'Verified Merchant' badge has real KYC behind it; OKX's is similar. But badges are proxies for the underlying numbers — completion rate, order count, etc. — which you should still verify directly.
How does this interact with the bank-rail freeze risk?
Filtering for high-quality merchants reduces freeze probability but doesn't eliminate it. Section 102 CrPC freezes can hit any UPI receiver who happens to be in the wrong chain of funds. Vetting is necessary; documentation (UPI receipts, screenshots) is what you need if a freeze does happen.

Key takeaways

  • Six numbers, 30 seconds: completion rate, order count, account age, response time, payment match, release time.
  • Skip merchants that fail any one. There's always another ad.
  • Bios are fake-able; numbers aren't.
  • Filter saves more in time-to-trade than you lose in spread.
  • Vetting reduces but doesn't eliminate bank-rail freeze risk.
#safety#merchant#checklist#vetting

More from Security