How private is Monero? What it hides and what it doesn’t

Monero is private by default on its blockchain: every transaction hides who sent it, who received it and how much moved. That doesn’t make it untraceable in every situation. Your IP address, exchange records, timing and your own mistakes can still give you away, and Monero’s own FAQ says nothing is 100% anonymous.^[1]

Is Monero actually private?

Yes, on the blockchain, and you don’t have to switch anything on. Monero combines three techniques: ring signatures hide the sender, stealth addresses hide the receiver and RingCT hides the amount.^[1] On Bitcoin, all three are public for anyone to read; our guide to Monero vs Bitcoin goes into the differences.

The sender: ring signatures

When you spend Monero, your wallet doesn’t point to the one earlier output (a past payment to you) that it is spending. It signs with a ring of 16 outputs, yours plus 15 decoys taken from the blockchain, so an outsider can see that one of them was spent but not which one.^[1][2]

Rings have grown over the years: at least 3 members from March 2016, at least 5 from September 2017, at least 7 from April 2018, a fixed 11 from October 2018 and a fixed 16 since August 2022.^[2]

The receiver: one-time addresses and subaddresses

Your Monero address is never written to the blockchain. For each payment, the sender’s wallet creates a random one-time address (a “stealth address”) on your behalf, which can’t be linked back to the address you published. Only the sender and the receiver can tell where a payment went.^[3]

Subaddresses add a second layer. One wallet can create many receiving addresses, all derived from the same seed, and Monero’s documentation recommends using a subaddress by default, with a new one for each payment you expect.^[4]

The amount: RingCT and Bulletproofs+

Ring Confidential Transactions, or RingCT, hide how much each transaction moves.^[1] RingCT has been compulsory for every transaction since September 2017. Since August 2022 it has used Bulletproofs+, a more compact version of the proofs that let every node check a hidden amount is valid without seeing it.^[2]

What doesn’t Monero hide?

Monero’s cryptography protects what is written on the blockchain. Everything around it is up to you, and the project says so plainly in its FAQ: “Monero is not magic.”^[1] These are the usual gaps.

• Your IP address. The node your wallet connects to can see the IP address a transaction comes from, even though it can’t see the recipient or the amount.^[1] Our guide to Monero nodes covers what a remote node can see and how to limit it.
• Timing. Every transaction is recorded in a timestamped block, so when you transact is public. Patterns in timing are what early research used to guess which ring member was real.^[5]
• Exchange and service records. A company that knows who you are keeps its own records of what you deposit and withdraw. Those records can link your payments whatever the blockchain shows.^[1]
• Everything off the blockchain. Names, delivery addresses, emails and chat messages about a payment sit outside Monero. Whoever you share them with keeps them.^[1]
• Mistakes and weak security. Malware on your device, a weak wallet password or a seed backed up to the cloud can expose everything.^[1]
• Keys you share. Your private view key shows every payment you receive to whoever holds it, though not reliably what you spend.^[6] Our guide to Monero wallets explains which kinds of wallet share it, and why.

Is Monero 100% untraceable?

No, and its developers don’t claim it is. The getmonero.org FAQ answers the question directly: “There is no such thing as 100% anonymous.” It adds that your crowd is only as big as the number of people using Monero, and that bugs or future attacks could reveal information.^[1]

A fair summary is that Monero’s privacy is much stronger than in its early years, and that its remaining weak points are known and being worked on. The research history shows both.

What the 2017–2018 research found

Two studies first released in 2017 found ways to tell decoys from real inputs, and their methods traced a majority of the transactions they examined.^[7] One of them, published in 2018, described two weaknesses.^[5]

First, about 62% of inputs with at least one decoy could be traced by elimination. Most inputs at the time had no decoys at all, so they revealed which coins had been spent, and those coins could then be ruled out wherever they appeared as decoys in other people’s rings. Second, the real input was usually the newest in its ring, a guess the authors estimated was right about 80% of the time.^[5]

Their data ran to April 2017. They warned that people who made sensitive transactions before February 2017 were at significant risk of being identified after the fact.^[5]

What changed after

Some changes came before the papers and some after. A minimum of two decoys was enforced from March 2016, RingCT became compulsory in September 2017 and ring sizes rose in steps to today’s 16.^[2] Wallets now pick decoys with a gamma distribution, a statistical model of how soon people really spend coins, which is what the 2018 paper proposed.^[5][8]

A follow-up study presented in 2019 tested the known methods on recent transactions and found they did not significantly outperform random guessing. Its authors concluded that Monero was, at that point, mostly immune to known passive attacks: ones that only analyse public blockchain data.^[7]

Later worries about decoys

Decoys remain the weak point. In 2023 the Monero project disclosed a high-severity wallet bug, present from version 0.13.0.2 to 0.18.2.1, that stopped wallets from choosing decoys exactly 10 blocks old. In the worst case, that revealed the real input of transactions spending funds of exactly that age. Version 0.18.2.2 fixed it.^[8]

More broadly, Monero’s developers say rings are open to statistical analysis and to attacks such as the “EAE” attack, where the same party, or parties working together, both pays you and later receives funds from you, and uses what it knows about both ends.^[9] That is why they plan to replace rings altogether.

Can the IRS track Monero?

The public record is short. In September 2020 the US Internal Revenue Service awarded contracts worth up to $625,000 each to two analytics firms, Chainalysis and Integra FEC, to build tools for tracing Monero transactions. The IRS contracting officer confirmed the awards to Decrypt, which reported that each contract required a working submission within eight months.^[10] As far as we could find, neither the IRS nor the firms have published what those tools can do.

Breaking the cryptography isn’t the only route, either. Exchanges and other services that verify their customers keep their own records, and Monero can’t hide what a company already knows about you.^[1] For the legal side, see Is Monero legal in the US?, and check the rules where you live.

Will Monero ever be traceable?

Nobody can promise it won’t be, for two reasons. The blockchain is permanent, so a method found in future can be applied to transactions made today, as happened to transactions from before 2017.^[5] And software has bugs, as the decoy fix above shows.^[8]

The main plan to strengthen sender privacy is FCMP++, built on full-chain membership proofs. Instead of hiding each input among 16 ring members, a transaction would prove that it spends one of all the outputs on the blockchain: about 100 million when developers described the plan in April 2024. They proposed it because rings are open to the EAE attack and to statistical analysis.^[9]

As of November 2026, FCMP++ isn’t live. The network still runs the 0.18 software series that came with the August 2022 upgrade, and the project’s table of network upgrades lists the next one as undetermined.^[2] Even when it arrives, FCMP++ changes what goes on the blockchain, not your IP address or anyone’s records, so the gaps listed above will still apply.

How do you keep your Monero private?

1. Use your own node, or reach nodes over Tor or I2P. Your own node gives the most privacy; Tor, I2P or a VPN reduce what a remote node can learn about you.^[1] See our guide to local and remote nodes.
2. Give each payer a new subaddress. If you combine the funds later, use one transaction per subaddress: sweeping them all in a single transaction links them together.^[4]
3. Treat exchanges as on the record. Assume anything done through an account in your name is known to that company.^[1]
4. Share keys only on purpose. A view key is for someone you want to show your incoming payments; your seed and spend key are for nobody.^[6]
5. Keep your wallet updated. Bugs like the decoy one above are fixed in new releases, so an old version can leak more than a current one.^[8]
6. Leave a short trail. Share only the personal details a payment really needs.^[1]