What is Monero's anonymity set?

The anonymity set is the group of possible senders for any transaction. In Monero, ring signatures mix your real transaction output with 15 decoys (ring size 16), making it 1-in-16 chance of identifying the real sender. The larger the anonymity set, the harder it is to trace. With FCMP++ (upcoming), the anonymity set becomes the ENTIRE blockchain — every output ever created — making statistical analysis practically impossible.

What is ring size in Monero?

Ring size is the number of outputs mixed in a ring signature. Current Monero: ring size 16 (1 real + 15 decoys). This means any transaction could have been sent by any of 16 possible addresses. Ring size has increased over time: 4 (2014), 7 (2018), 11 (2019), 16 (2022). Larger ring sizes improve privacy but increase transaction size. FCMP++ will replace ring signatures entirely with a proof that covers all outputs.

What is FCMP++ and how does it improve anonymity?

FCMP++ (Full-Chain Membership Proofs) is the next major upgrade for Monero. Instead of mixing with 15 decoys (ring size 16), FCMP++ proves that your output exists SOMEWHERE in the entire blockchain — without revealing which one. The anonymity set jumps from 16 to potentially millions. This makes statistical analysis (timing, output age, spending patterns) virtually useless because EVERY output is equally likely to be the real one.

Can Monero be traced with current ring size?

In practice, no. While ring size 16 is not theoretically perfect (a 1-in-16 chance per transaction), Monero combines ring signatures with stealth addresses (hide receiver), RingCT/Bulletproofs (hide amount), and Dandelion++ (hide IP). Breaking the ring signature alone doesn't deanonymize a transaction — an attacker would need to break ALL four layers simultaneously. Academic papers have shown some statistical weaknesses in decoy selection, but no practical deanonymization has been demonstrated.

How does Monero's anonymity set compare to other privacy coins?

Bitcoin: anonymity set = 1 (fully transparent). Zcash: shielded pool is opt-in (~10% of transactions), small anonymity set in practice. Dash: CoinJoin with ~3-8 mixing rounds, moderate anonymity. Monero: ring size 16 mandatory on ALL transactions, plus stealth addresses and amount hiding. After FCMP++: Monero will have the largest possible anonymity set — every output on the entire blockchain.

Monero Anonymity Set (2026)

Why ring size matters and how FCMP++ changes everything

TL;DR: Monero's anonymity set is the group of possible senders for each transaction. Current ring size: 16 (1 real + 15 decoys). Combined with stealth addresses, Bulletproofs, and Dandelion++, this makes tracing practically impossible. FCMP++ will make the anonymity set the entire blockchain — the ultimate upgrade.

Anonymity Set Evolution

Period	Ring Size	Anonymity Set	Privacy Level
2014-2016	4 (min 3)	1-in-4	Weak
2016-2018	5 (mandatory)	1-in-5	Moderate
2018-2019	7 (mandatory)	1-in-7	Good
2019-2022	11 (mandatory)	1-in-11	Strong
2022-present	16 (mandatory)	1-in-16	Very strong
Future (FCMP++)	Full chain	1-in-millions	Maximum

How Ring Signatures Work

When you send Monero, your wallet creates a ring signature that mixes your real output with 15 decoy outputs from the blockchain. To an observer, any of the 16 outputs could be the real sender. The math guarantees that no one — not miners, not nodes, not blockchain analysts — can determine which is real.

Think of it as standing in a crowd of 16 people. A message is delivered, and it's mathematically provable that one of the 16 sent it — but impossible to determine which one.

Privacy Coin Anonymity Comparison

Coin	Anonymity Set	Mandatory	Privacy Level
Bitcoin	1 (transparent)	N/A	None
Zcash (transparent)	1	N/A	None
Zcash (shielded)	~10% of pool	Opt-in	Moderate
Dash (CoinJoin)	3-8 rounds	Opt-in	Moderate
Monero (current)	16	Mandatory	Very strong
Monero (FCMP++)	Entire chain	Mandatory	Maximum

FCMP++ — The Endgame

FCMP++ (Full-Chain Membership Proofs) replaces ring signatures entirely. Instead of proving "my output is one of these 16," FCMP++ proves "my output exists somewhere in the entire blockchain" — without revealing where.

The anonymity set jumps from 16 to the total number of outputs on the blockchain (millions). Statistical analysis based on output age, spending patterns, or timing becomes practically impossible because every output in history is equally likely to be the real one.

This is the final evolution of Monero's sender privacy. After FCMP++, there is no stronger anonymity set possible — the entire history of the blockchain is your crowd.

Bottom Line

Monero's current ring size 16 already makes practical tracing essentially impossible when combined with stealth addresses, Bulletproofs, and Dandelion++.

FCMP++ will make it mathematically perfect — the anonymity set becomes the entire blockchain.

No other cryptocurrency offers mandatory privacy with an anonymity set this large.

Experience this privacy: Buy XMR from arnoldnakamura — EUR P2P, no KYC.