Bitcoin Escrow Services: Trade P2P with Confidence

Bitcoin Escrow Service Comparison

Bitcoin escrow services protect both buyer and seller during peer-to-peer trades by locking BTC in a neutral mechanism until the fiat payment is confirmed. The escrow model a platform uses determines how much trust you place in third parties, how disputes are resolved, and what happens if something goes wrong.

Several major centralized P2P platforms have shut down in recent years: LocalBitcoins closed in February 2023, AgoraDesk in November 2024, and Paxful in November 2025. The surviving platforms are overwhelmingly non-custodial, using multisig or HTLC-based escrow instead of holding user funds directly. The following table compares the four leading non-custodial P2P Bitcoin exchanges.

For a broader view of P2P exchange features beyond escrow, see our Bitcoin P2P exchange comparison. To plan your own multisig setup, use the multisig planner.

How Bitcoin Escrow Models Work

The three escrow models used by P2P Bitcoin exchanges each make different tradeoffs between trust, complexity, and speed. Understanding the mechanics helps you evaluate what risks you are actually taking on.

2-of-3 Multisig Escrow

In a 2-of-3 multisig escrow, three parties each generate a key pair: the buyer, the seller, and the escrow mediator. The three public keys are combined into a P2SH address using OP_CHECKMULTISIG, and any two of the three private keys can authorize a spend. Private keys are generated client-side and never leave the user's device.

In the happy path, the seller deposits BTC into the escrow address, the buyer sends fiat off-platform, and the seller confirms receipt. The buyer and seller co-sign the release transaction together, and the mediator's key is never used. In a dispute, the mediator reviews evidence from both parties and uses their key combined with the prevailing party's key to release funds. The mediator cannot unilaterally move funds because they hold only one of three keys.

Hodl Hodl uses this model. Keys are distributed as: buyer (Key 1), seller (Key 2), and Hodlex Ltd (Key 3). The main risk is mediator collusion: if the mediator conspires with one trader, they can authorize an unfair release that looks identical to a legitimate dispute resolution on-chain. For a deeper technical walkthrough, see our guide to Bitcoin multisig wallets.

2-of-2 Multisig Escrow

A 2-of-2 multisig escrow removes the third-party key entirely. Only the buyer and seller hold keys, so both must cooperate to release funds. This eliminates mediator collusion risk but introduces deadlock risk: if one party disappears or refuses to sign, funds are locked permanently without an escape mechanism.

Bisq solves deadlock with a pre-signed, time-locked "delayed payout transaction" created at trade time. This transaction uses OP_CHECKSEQUENCEVERIFY and becomes valid after 10 days (altcoin trades) or 20 days (fiat trades). If the trade stalls completely, the delayed payout sends all funds to a Bisq DAO donation address controlled by "Burningmen" (bonded DAO contributors), and an arbitrator reimburses the prevailing party from their own funds. Both parties also lock security deposits (15-50% of the trade amount) into the escrow to create an economic incentive for honest behavior.

Peach Bitcoin also uses 2-of-2, but with a key difference: the seller holds one key and Peach holds the other. This gives Peach effective mediation power, making it functionally closer to a 2-of-3 model where the platform can resolve disputes by choosing whether to co-sign.

Lightning Hold Invoice Escrow

RoboSats takes a fundamentally different approach by using Lightning Network hold invoices (also called hodl invoices). A hold invoice creates an HTLC that locks the sender's funds along the payment route without settling them. The coordinator holds the preimage and decides whether to settle (releasing funds to the buyer) or cancel (returning funds to the seller).

Both maker and taker post fidelity bonds as hold invoices (default 3% of trade amount, customizable from 2% to 15%). The seller then locks the trade escrow amount via a separate hold invoice. When the seller confirms fiat receipt, the hold invoice settles and the buyer receives their payout. If either party cheats, fails to lock escrow, or abandons the trade, they forfeit their fidelity bond: half goes to the counterparty, half to RoboSats.

The advantage is speed: Lightning trades settle in seconds rather than waiting for on-chain confirmations. The tradeoff is trade size: the maximum is roughly 0.04 BTC due to Lightning routing capacity constraints. The coordinator also has a semi-custodial role during the brief escrow window.

Escrow Model Comparison

The following table compares the three escrow models on key security and usability dimensions.

With Taproot and Schnorr signatures, multisig escrow transactions can use MuSig2 to aggregate multiple signatures into a single signature indistinguishable from a standard single-sig transaction on-chain. Bisq 2 is building toward this model, which would reduce the on-chain footprint from four transactions to one and eliminate the privacy leakage of visible multisig scripts.

Dispute Resolution Compared

Dispute resolution is where escrow models diverge most sharply. How a platform handles a contested trade determines whether your funds can be recovered and how long that recovery takes.

Bisq uses a three-tier cascade. First, traders communicate directly via encrypted chat. If that fails, either party can open a mediation ticket with a bonded DAO contributor who suggests a payout distribution within 48 hours. Mediation is non-binding: both parties must voluntarily accept. If mediation fails, the pre-signed delayed payout transaction can be broadcast after its timelock expires (10 to 20 days), sending funds to the DAO's Burningmen address. An arbitrator then reimburses the winning party from their own funds, seeking DAO reimbursement via a BSQ proposal. This process is robust but slow.

Hodl Hodl's process is simpler: either party opens a dispute, a platform administrator reviews evidence, and the admin uses Hodl Hodl's key combined with the winning party's key to release funds. Initial contact is expected within 12 hours, with 10-hour response windows. Maximum dispute duration is 60 days, with a 120-day appeal window. ID verification may be requested during disputes even though standard trading requires none.

Peach Bitcoin's dispute resolution leverages PGP-encrypted chat history between the parties. Because Peach holds one of the two keys in the 2-of-2 multisig, they can effectively decide whether to co-sign a release to the buyer or refuse to co-sign (keeping funds locked until the seller cooperates with the correct resolution).

RoboSats relies on coordinator staff who review disputes manually. The fidelity bond system provides built-in deterrence: both parties have skin in the game from the moment they accept a trade. Bonds are forfeited for cheating, unilateral cancellation during chat, or failing to confirm fiat receipt within the time limit.

Smart Contract Escrow on Bitcoin L2s

Beyond on-chain multisig and Lightning, Bitcoin Layer 2 networks are beginning to enable programmable escrow through smart contracts. This approach allows escrow conditions to go beyond simple "who signs" logic: time-locks, oracle feeds, multi-stage releases, and automated dispute resolution can all be encoded in contract code.

On the Liquid Network, Blockstream launched the Simplicity smart contract language in July 2025, enabling trust-minimized escrow and vaults. Liquid's existing atomic swap protocols (SideSwap, LiquiDEX) eliminate escrow entirely for asset trades by making both sides of a swap settle simultaneously or not at all. On Rootstock, PayDece has deployed Solidity-based escrow contracts for P2P fiat-to-crypto trading, audited by Hacken.

However, smart contract escrow on Bitcoin L2s remains largely experimental for P2P trading. The dominant escrow mechanisms are still on-chain multisig and Lightning hold invoices. As BTCFi matures and protocols like Spark bring programmable functionality to Bitcoin, smart contract escrow may become more practical for P2P use cases.

How to Choose a P2P Escrow Platform

The right platform depends on your trade size, privacy requirements, and tolerance for complexity.

For maximum trade sizes and the widest payment method selection: Hodl Hodl supports trades up to 5 BTC with 100+ payment methods. Its 2-of-3 multisig provides straightforward dispute resolution. The tradeoff is trusting Hodl Hodl as the mediator and creating an account with an email address. Note that US users are blocked.

For privacy-focused small trades: RoboSats offers the highest privacy with Tor-only access, no registration, and a new robot identity per trade. At 0.2% total fees, it is also the cheapest option. The constraint is Lightning routing capacity, which limits trades to roughly 0.04 BTC.

For a fully decentralized experience: Bisq runs as a desktop application with no central server. Its 2-of-2 multisig and DAO-backed arbitration system eliminate the need to trust any single entity. The tradeoffs are higher fees (1.3% in BTC), a steeper learning curve, and security deposit requirements.

For mobile convenience: Peach Bitcoin is a mobile-first app available on iOS and Android. The 2% buyer fee is higher than alternatives, but the user experience is polished, with features like UTXO management and transaction batching. It is not available in the United States.

Frequently Asked Questions

What is Bitcoin escrow and how does it work?

Bitcoin escrow is a mechanism that locks BTC in a neutral address or contract during a peer-to-peer trade, releasing it only when both parties fulfill their obligations. In a typical flow, the seller deposits BTC into an escrow address, the buyer sends fiat payment off-platform, and the seller confirms receipt to trigger the BTC release. The escrow mechanism prevents either party from cheating: the seller cannot take the fiat and keep the BTC, and the buyer cannot receive BTC without paying.

Is multisig escrow safer than centralized escrow?

Multisig escrow eliminates the single point of failure inherent in centralized custody. In a centralized escrow, the platform holds your BTC and could be hacked, go bankrupt, or freeze your funds. In a multisig escrow, no single party controls the funds. A 2-of-3 setup means even a compromised platform cannot steal funds without also compromising one trader's key. A 2-of-2 setup goes further by removing the platform's key entirely. The closure of centralized platforms like Paxful (where the co-founder pleaded guilty to AML failures) illustrates why non-custodial escrow has become the industry standard.

Which Bitcoin P2P exchange has the lowest fees?

RoboSats has the lowest platform fees at 0.2% total (0.025% maker, 0.175% taker). However, it requires a fidelity bond (default 3% of trade amount, returned after successful completion) and is limited to Lightning-sized trades. Bisq charges 1.3% in BTC but offers a roughly 50% discount when paying fees in BSQ tokens (0.65% total). Hodl Hodl charges 0.75% per party (1.5% total), and Peach Bitcoin charges 2% to the buyer only.

Can I buy Bitcoin without KYC using escrow?

Yes. All four major non-custodial P2P platforms (Bisq, Peach Bitcoin, RoboSats, and Hodl Hodl) allow trading without identity verification. Bisq and RoboSats require no registration at all. Peach Bitcoin operates under Swiss FINMA limits of 1,000 CHF per day and 100,000 CHF per year without KYC. Hodl Hodl requires only an email address but may request identification during dispute resolution. Privacy levels vary: RoboSats (Tor-only, new identity per trade) offers the strongest privacy, while Peach and Hodl Hodl collect some device or account metadata.

What happens if the seller does not release Bitcoin from escrow?

The resolution depends on the escrow model. In a 2-of-3 multisig (Hodl Hodl), the platform administrator can co-sign with the buyer's key to release funds without the seller's cooperation. In a 2-of-2 multisig (Bisq), a pre-signed time-locked transaction becomes valid after 10 to 20 days, sending funds to a DAO-controlled address for arbitrator-directed redistribution. On Lightning (RoboSats), the seller's hold invoice automatically expires after the configured timeout (1 to 8 hours), returning locked sats to the seller's wallet, but the seller forfeits their fidelity bond.

How does Bisq escrow work technically?

Bisq creates a 2-of-2 multisig address from the buyer's and seller's public keys. Both parties fund this address: the seller deposits the trade amount plus a security deposit (15-50%), and the buyer deposits a matching security deposit. At the same time, both sign a delayed payout transaction with an OP_CHECKSEQUENCEVERIFY timelock that becomes valid after 10 to 20 days. In the normal case, both parties co-sign a payout transaction after the fiat payment is confirmed. If the trade stalls, the delayed payout transaction routes funds to a Bisq DAO donation address for arbitrator-directed recovery.

What is the difference between 2-of-2 and 2-of-3 multisig escrow?

In 2-of-3, a third-party mediator holds one key and can break deadlocks by siding with either the buyer or seller. The mediator cannot steal funds alone but could collude with one party. In 2-of-2, no third party holds a key, eliminating collusion risk entirely. However, both parties must cooperate to release funds, creating deadlock risk if one party disappears. Platforms like Bisq solve this with time-locked fallback transactions. The 2-of-3 model prioritizes resolution speed; the 2-of-2 model prioritizes trustlessness.

This tool is for informational purposes only and does not constitute financial advice. Platform fees, trade limits, and policies change frequently. Data is based on publicly available information as of mid-2026. Always verify current terms on each platform before trading. Peer-to-peer Bitcoin trading carries risks including counterparty fraud, regulatory uncertainty, and potential loss of funds during disputes.