Is Monero traceable? What the blockchain shows and what it hides

What the Monero blockchain shows and what it hides

The Monero blockchain is public, just like Bitcoin's: anyone can download the whole thing or open a block explorer. The difference lies in what is actually recorded. On Bitcoin, a transfer reads like a bank statement: sender address, receiver address, amount and the link to earlier transfers. On Monero, an outsider sees that a transaction happened and its technical shell, but the record doesn't say who paid whom or how much.

Here is a side-by-side view as of October 4, 2026:

The table shows the main point: what stays public is the time, the fee, the transaction size and the key images. A key image is a tag produced every time an output is spent. It lets the network confirm that the same output hasn't been spent twice, but it doesn't reveal which output was spent. The price and key network data are on the Monero coin page with the live XMR price.

How Monero hides the sender, the receiver and the amount

Privacy in Monero is on for everyone, all the time, and there is no wallet setting to turn it off. Every transaction conceals three things:

• Ring signatures hide the sender. The wallet takes the real output being spent and adds 15 decoys pulled from the blockchain. From the outside you see a ring of 16 candidates, and the signature proves that one of them is being spent without revealing which. The ring size of 16 has been in place since the August 2022 hard fork.
• One-time addresses hide the receiver. Your public address never lands on the blockchain: for each payment the sender's wallet derives a new address, and only the holder of the keys can find it among all the outputs.
• RingCT hides the amount. Since 2017 the amounts of all transfers have been encrypted, while the network still checks that inputs and outputs balance and no coins appear out of thin air.

The strength of this design is that your transaction looks like everyone else's: decoys come from the shared history, where every output is hidden too. In Zcash, privacy is opt-in, and we covered separately how Monero privacy differs from Zcash in practice.

Is Monero traceable: where it loses privacy

You can't read a Monero transaction from the blockchain alone the way people read Bitcoin. But people don't live only on the blockchain. Nearly every known case where investigators or analysts linked Monero to a specific person relied on data from outside the network.

KYC exchanges on the way in and out

The weakest point is wherever crypto meets a passport. If someone buys coins on a KYC exchange, swaps them to XMR and then sends them back to the same or another exchange with identity checks, an analyst has both ends of the chain with a name attached. Matching amounts and timing between them is often enough for a high-probability conclusion, even if the middle part in Monero can't be read.

IP addresses and nodes

A transaction enters the network from some computer. Whoever runs many nodes can see which IP address broadcast a transaction first and when. Monero has countered this since 2020 with the Dandelion++ protocol: a transaction first travels along a chain from node to node and only then spreads across the whole network, so the first node to see it is not necessarily the sender's neighbor.

Dandelion++ has limits, and the Monero documentation names them plainly: it won't protect you from your internet or VPN provider, or from the first remote node in the chain. If your wallet connects to someone else's remote node, that node's operator sees your IP and when you sent the transaction. That's why the documentation separately explains how to wrap your wallet or your own node in Tor or I2P: it isn't on by default.

User mistakes

Some leaks are created by users themselves. The same primary address given to different people links them to each other off-chain: each of them knows they are paying the same recipient. Subaddresses solve this, and you can create as many as you like. It's worth using a fresh one for every swap too: when you exchange crypto online for XMR, give a new subaddress, and those payments won't be linked to each other. Another common story is round or unusual amounts: 3.7 BTC goes into a swap, and ten minutes later almost the same value lands on an exchange, so the ends can be matched without any ring analysis. Metadata around a transfer, such as chats, screenshots and public posts with an address, gives away more than the transaction itself.

Ring statistics

A ring of 16 candidates is a small crowd, and researchers have long looked for ways to narrow it down. In 2018, a team from Princeton, Carnegie Mellon and other universities showed that in Monero's early history the real input could often be identified: about 62% of inputs with decoys could be deduced by elimination, and the rule "the real output is the newest one in the ring" guessed right about 80% of the time. Back then decoys were few, and some transfers had none at all. Monero later made rings mandatory, increased their size and changed decoy selection so that decoys resemble real spends by age.

Today such methods give a probability rather than proof. Each bit of narrowing is still a risk for anyone relying on privacy, and that is exactly why the community is preparing to replace rings.

What we know about attempts to trace Monero

Loud claims about Monero being "cracked" come up regularly. The confirmed stories are more modest than the headlines.

• CipherTrace, 2020. The company announced that it had built the first Monero tracing toolkit for the US Department of Homeland Security. CEO Dave Jevans explained at the time that the result was probabilistic: the tool estimates how likely two addresses are linked rather than proving it. Monero researchers noted that the company hadn't shown details backing up its effectiveness.
• US tax agency contracts, 2020. On September 30, 2020, the IRS picked Chainalysis and Integra FEC to develop Monero tracing tools, at $625,000 each. Decrypt wrote at the time that the separate contracts pointed to the agency's doubts about the CipherTrace tool.
• The Vastaamo case, Finland, 2024. In January 2024, Finnish police said they had traced, through Monero, the payments of the blackmailer who hacked the Vastaamo psychotherapy center. According to investigators, the money went from Monero to Binance, and the exchange handed over information about the owner. Police kept their Monero analysis method classified, describing it as heuristic, meaning based on probabilities and patterns.
• The leaked Chainalysis video, 2024. In September 2024, a recording of an internal Chainalysis presentation surfaced online and was later deleted. It described how the company runs its own Monero nodes, collects IP addresses and the time transactions appear, and then matches them against ring decoys. The Monero community responded that the method had been known for years and doesn't work against people who connect to their own node or use Tor. Chainalysis declined to comment on the video.

All these stories share one thing: what works is KYC exchanges, IP addresses and probabilistic guesses. There is no publicly confirmed way to read the sender, receiver and amount directly from the Monero blockchain.

The view key: disclosure on your own terms

Monero's privacy doesn't stop you from showing your transactions when you need to. Every wallet has a private view key. With it, you can open the wallet in read-only mode and see all incoming payments: people do this for an accountant, an auditor or tax reporting. The view key can't spend coins.

Outgoing transfers can't be reliably seen through the view key, so the balance shown in that mode may be inaccurate. To prove a specific payment, the wallet produces a transaction key: the recipient or a reviewer can use it to confirm the transfer happened and for how much. Whether to disclose anything is always up to the person holding the keys.

FCMP++: what changes for traceability

The main answer to ring statistics is the FCMP++ (Full-Chain Membership Proofs) upgrade, together with the new Carrot addressing protocol. Instead of a ring of 16 candidates, the wallet will prove that it is spending one of all the outputs in the network's history, and there are already more than 150 million of them. There will be nothing left to guess the sender from based on decoy age.

Where the upgrade stands:

• On October 5, 2026, at block 3,102,800, the new stressnet beta v3.0 with FCMP++ and Carrot will split off from the Monero testnet. The release came out on September 25.
• No mainnet date yet. In May 2026, the official Monero blog wrote that no date had been set for the hard fork, and none has been announced since.
• No need to change addresses. Carrot is compatible with existing addresses.

FCMP++ shuts down ring analysis but doesn't touch what happens off-chain: KYC exchanges, IP addresses and user behavior stay the same. We wrote in detail about how FCMP++ will replace Monero's ring signatures in a separate article.

How to exchange bitcoin for Monero without registration

Monero was removed from OKX in January 2024, from Binance in February 2024 and from Kraken in the European Economic Area in October 2024, so most people get XMR through a swap. On VertEXchange, you don't need an account, email or phone number:

1. Install a Monero wallet and create a new subaddress in it. A primary address starts with 4 and a subaddress with 8: the form accepts both and verifies the checksum, so it won't let a typo in the address through.
2. Open a pair and enter the amount: you can exchange BTC to XMR without registration, and USDT TRC20 or ETH work too. The form shows right away how much XMR you will receive.
3. Paste your Monero address and a refund address for your coin, create the exchange and send the coins to the address you're given.
4. Wait for the XMR. Received coins can be spent after 10 network confirmations, roughly 20 minutes.

Keep in mind that the exchange service sees your incoming transfer and the address the XMR went to: that's true for any swap service. A full breakdown of every option is in our guide on how to buy Monero when major exchanges don't list it.

FAQ

Can a Monero transaction be traced by address?

No. The receiver's address never lands on the blockchain: a one-time address is recorded instead, and payments to your address can only be found with your view key.

Can you see the amount of a Monero transaction?

No. Since 2017, the amounts of all transfers have been encrypted with RingCT. Only the fee is publicly visible.

Can police trace Monero?

In known cases, investigators linked Monero to people through data outside the blockchain: KYC exchanges, IP addresses, matching timing and amounts. In the Finnish Vastaamo case, the money moved from Monero to Binance, and police kept their Monero analysis method classified.

Can an exchange see where my XMR came from?

The exchange sees that XMR arrived at its address, and it knows who you are if you passed identity verification. From the Monero blockchain, it can't tell which address or person the coins came from.

Does Monero hide your IP address?

Partly. Dandelion++ makes it harder to link a transaction to an IP address, but it doesn't protect you from your provider or from the remote node your wallet is connected to. Connecting through Tor or I2P, which you enable manually, hides your IP from network nodes.

What is a Monero view key?

A key that lets someone see a wallet's incoming payments without being able to spend coins. It is shared voluntarily, for example with an accountant or auditor.

Will Monero be more private after FCMP++?

Yes, on the blockchain side: the sender will hide among all 150+ million outputs on the network instead of 16. The upgrade doesn't remove leaks through exchanges, IP addresses or user mistakes.

Is it legal to use Monero?

Owning Monero is legal in most countries. The restrictions target services: many exchanges have delisted XMR, and from July 10, 2027, crypto service providers in the European Union will be barred from handling anonymity-enhancing coins. That regulation does not ban individuals from holding them in their own wallets.