Is Monero untraceable? What it hides, what still leaks, and where it's restricted

“Is Monero untraceable?” is one of the most searched questions about crypto privacy. The honest answer is: it is far harder to trace than Bitcoin or Ethereum, but “untraceable” overstates it. This guide explains what the protocol hides, where information still escapes, and what the rules look like in late 2026.

Everything below was checked against official project pages, exchange announcements and legal texts on 5 Nov 2026. This is an educational guide, not legal advice.

Short version: Monero’s cryptography hides the important details of every transaction from the public. Most real-world privacy failures come from the edges: how you connect, when you transact, and which company sees you buy or sell.

Who holds the money and who can freeze it

On this site we classify every tool by the same two questions: who holds the money, and who can see or freeze it.

• Monero itself: non-custodial and decentralised. Coins are controlled by your own keys. The network is run by independent miners and node operators; there is no company, admin key or smart contract that can freeze a Monero address.
• Exchanges and custodial wallets that offer XMR: custodial. While your coins sit on an exchange, the exchange holds them, knows who you are, and can freeze or delist them, as several have done (see below).

Keep the two apart. Most stories about Monero being “traced” or “banned” are really about the custodial edges, not the protocol.

What Monero hides

Monero combines three techniques, all switched on for every transaction. Unlike Zcash, there is no transparent mode to fall back to.

Sender: ring signatures

When you spend, your wallet signs with your real input plus decoy outputs pulled from the blockchain. An observer sees a “ring” of possible senders and cannot tell which one is real (Moneropedia: ring signatures). Since the v0.18 network upgrade on 13 Aug 2022, every ring has 16 members, up from 11 (getmonero.org, v0.18 release).

Receiver: stealth addresses

The address you share is never written onchain. Each payment goes to a new one-time address that only the recipient can recognise, so two payments to the same person don’t look related (Moneropedia: stealth addresses).

Amount: RingCT

Ring Confidential Transactions hide amounts while still letting the network check that no coins were created from nothing (Moneropedia: RingCT).

What can still leak

Researchers and analytics firms rarely “break” Monero’s cryptography. They look for weaker points around it.

1. A ring of 16 is a small crowd

Sixteen candidates is real cover, but it is a fixed, small number. Over the years, academic work has shown that decoy-selection flaws, reused outputs and patterns across many transactions can reduce the effective set below the nominal ring size, and the developers have fixed issues as they were found. Treat 16 as an upper bound for a single spend, not a guarantee. This is exactly what FCMP++ is meant to address (next section).

2. Your IP address and the node you use

Monero added Dandelion++ in v0.16 (May 2020), which passes a new transaction quietly through a few peers before it is broadcast, making it harder to see which computer it came from (getmonero.org, v0.16 release). But many mobile and light wallets connect to a remote node run by someone else. That node sees your IP address and when you submit transactions.

In 2024 a leaked Chainalysis training video described exactly this approach: running remote nodes to collect IP and timing data rather than breaking the cryptography (Cointelegraph). The project’s own docs suggest running your own node or connecting over Tor or I2P to reduce this exposure.

3. Timing and behaviour

If coins arrive in a wallet and leave minutes later, or the same unusual amount appears on an exchange right after, an observer with outside data can make educated guesses. Hidden amounts help a lot here compared with transparent chains, but timing patterns remain.

4. Exchange records

This is the biggest one in practice. If you buy XMR on a regulated exchange, that exchange holds your identity, your deposit and withdrawal addresses, and the times and amounts, and can share them with authorities on lawful request. The chain may be private; your account history is not.

5. View keys you choose to share

Monero has optional view keys and payment proofs. Sharing a view key lets someone (an accountant, an auditor) see incoming payments to your wallet. That is useful for compliance, but it is a deliberate leak of privacy to whoever holds the key.

FCMP++: the upgrade that would replace rings

The next big change is Full-Chain Membership Proofs (FCMP++), together with a new address scheme called Carrot. Instead of hiding among 16 outputs, each spend would prove it comes from the whole set of eligible outputs on the chain, which is well over a hundred million.

Status as of 5 Nov 2026:

• It is running on a public test network (the “stressnet”). Its third beta version forked on 5 Oct 2026 at a test-chain block height.
• There is no official mainnet date. The getmonero.org roadmap lists Full-Chain Membership Proofs under “Coming Soon” with no date. A core contributor’s work plan estimates around week 17 of 2027, and its author calls it a non-binding working draft [Estimate].
• Remaining audits and a licensing question around one cryptography library were still open in October developer meetings [per meeting reports; not independently verified].

If and when FCMP++ ships, the “small crowd” weakness above largely goes away. Network-level and exchange-level leaks would not change.

How Monero compares

The table uses the same columns for each option. All three are non-custodial at the protocol level; the difference is what the public ledger shows.

Scroll the table sideways to see all columns.

Any exchange holding these coins for you is a custodial service that can freeze your account, whichever coin it is.

Where Monero is restricted

There is a pattern: governments generally restrict regulated businesses from handling Monero rather than criminalising ownership. Rules change, so check your own country.

European Union

The Anti-Money Laundering Regulation (EU) 2024/1624 applies from 10 July 2027. Article 79 bars credit institutions, financial institutions and crypto-asset service providers from keeping anonymous accounts or accounts allowing “increased obfuscation of transactions, including through anonymity-enhancing coins” (EUR-Lex, AMLR). It defines those coins as crypto-assets with built-in features that make transfer information anonymous, “either systematically or optionally”. In practice that means EU-licensed exchanges and custodians will not be able to offer Monero from that date. The regulation does not ban individuals from holding it in their own wallets.

Exchanges delisting ahead of rules

• Binance delisted XMR worldwide on 20 Feb 2024, citing its regular review criteria (Binance announcement).
• Kraken halted XMR trading for EEA clients on 31 Oct 2024 “due to regulatory changes” and converted remaining balances to BTC after 31 Dec 2024 (Kraken support). Kraken had earlier removed it for UK clients in 2021.
• OKX removed XMR pairs in early January 2024 (Decrypt).

Other jurisdictions

• Japan: the Financial Services Agency pushed registered exchanges to drop privacy coins in 2018; licensed exchanges still don’t list them.
• South Korea: rules effective March 2021 require domestic exchanges to remove so-called “dark coins” such as Monero (Finance Magnates).
• Dubai: VARA’s 2023 regulations prohibit licensed providers from issuing or dealing in “anonymity-enhanced cryptocurrencies” (Elliptic summary). The separate DIFC zone added its own restrictions in January 2026 [per press reports].
• United States and UK: no general ban on holding Monero as of 5 Nov 2026; access depends on each exchange’s policy.

So, is Monero untraceable?

Not in the absolute sense. A fairer summary:

• To a member of the public with a block explorer: yes, practically. You can’t see who paid whom or how much.
• To a well-resourced analyst with outside data: sometimes partly. IP addresses, remote nodes, timing and exchange records can narrow things down, and a ring of 16 is a limited crowd.
• To an exchange you used: no. It knows what you bought or sold and where it went.

That is still a very different situation from Bitcoin or Ethereum, where the full history of every address is public forever. Monero is the clearest example of privacy built into the base layer, with no operator who can see or freeze funds. Its real limits sit at the edges, and those apply to every privacy tool.

Sources checked 5 Nov 2026. Estimates are labelled [Estimate]; items we could not confirm against a primary source are labelled as press or meeting reports. Written by Nora.