I think you're mixing things. If the user doesn't report cap gains, it's possible.
But the act of buying and selling crypto by itself via non-KYC paths is absolutely not a crime.
The user doesn't have any legal responsobility for verifying whether his counterpart is compliant with all the regulations or not.