Conventional crimes, marked by structural rigidity, have evolved as criminal organisations embrace digital possibilities facilitated by the Internet and expanding electronic commerce. Disruption, however, doesn’t solely arise from technological progress; it stems from the convergence of disruptive technologies, challenging established legal frameworks. This evolution is evident in cybercrime within the metaverse, reflecting the sophistication of criminal behaviour and the emergence of new forms of illegal conduct. Our exploration has highlighted challenges within the metaverse, transcending conventional cyber threats. From the potential criminal liability of avatars to the complex interplay between legal identities and virtual personas, we’ve addressed issues like defamation, privacy breaches, and identity theft. The metaverse, envisioned as a utopia, harbours shadows of malevolent actors exploiting its vast potential. We discovered profound implications for personal identity as we delved into data protection and privacy breaches in this virtual space. The clash between interaction freedom and the darker side of individuals challenges us to balance liberty and security, especially with internet trolls finding refuge in the metaverse. Contemplating the metaverse’s future requires addressing potential abuses, such as nefarious avatars or anonymity exploitation for harm. Robust regulations and ethical frameworks ensure the metaverse thrives without succumbing to malevolent forces undermining its transformative potential.