What are ring signatures in Monero?

Ring signatures mix your transaction input with decoy inputs from other transactions on the blockchain. Currently, Monero uses a ring size of 16, meaning each transaction includes 15 decoy inputs alongside the real one. An observer cannot determine which of the 16 inputs is the real spender. This provides plausible deniability for every transaction.

Monero is legal to own and use in most countries, including the US, EU, UK, Canada, and Australia. Some exchanges have delisted Monero due to regulatory pressure, but ownership and peer-to-peer trading remain legal. Japan and South Korea have restrictions on exchange listings, and Dubai has prohibited privacy coins on licensed exchanges. Always check your local regulations.

Monero Privacy Explained: How XMR Keeps Your Transactions Private

Q: Is Monero really untraceable?

Monero is the most private cryptocurrency available. Its mandatory privacy features (ring signatures, stealth addresses, RingCT) make transaction tracing extremely difficult. No blockchain analytics firm has publicly demonstrated reliable Monero tracing. However, privacy depends on proper usage: avoid reusing addresses, use subaddresses, and transact through Tor or I2P when possible.

Q: How is Monero different from Bitcoin?

Bitcoin transactions are fully transparent: anyone can see sender, receiver, and amount on the blockchain. Monero hides all three by default using ring signatures (hide sender), stealth addresses (hide receiver), and RingCT (hide amount). Bitcoin privacy is opt-in and imperfect; Monero privacy is mandatory and protocol-level.

Q: Can governments trace Monero?

Despite some government contracts with blockchain analytics firms (like CipherTrace and Chainalysis), no publicly verified method of reliably tracing Monero transactions exists as of 2026. Academic research has found statistical methods that can narrow possibilities in some edge cases, but Monero's mandatory privacy, increasing ring sizes, and protocol upgrades continuously raise the bar. The IRS offered a $625,000 bounty in 2020 for Monero tracing tools, with no publicly confirmed success.

Q: What is Monero's ring size?

Monero's current mandatory ring size is 16 (since the August 2022 hard fork). This means every transaction includes 16 possible signers, with 15 decoys. Earlier versions used smaller ring sizes (3, 5, 7, 11), which provided less privacy. The upcoming Seraphis/Jamtis upgrade may increase this further or replace ring signatures entirely with a more advanced cryptographic scheme.

Ring signatures, stealth addresses, RingCT, and Dandelion++. The four layers that make Monero the most private cryptocurrency in 2026.

How It Works 4 Privacy Layers Monero vs Bitcoin Can It Be Traced? Future Upgrades FAQ

Why Monero Is Different

Most cryptocurrencies — including Bitcoin — operate on transparent blockchains. Every transaction is visible to anyone: the sender's address, the receiver's address, and the exact amount. Blockchain analytics companies like Chainalysis and Elliptic have built entire businesses around tracing these public transactions.

Monero takes the opposite approach: privacy by default. Every Monero transaction automatically hides the sender, receiver, and amount. This isn't an optional feature you toggle on — it's baked into the protocol. There's no way to send a "transparent" Monero transaction.

      Key principle: In Monero, privacy isn't a feature — it's the foundation. Every transaction looks identical to an outside observer. This makes Monero fungible: one XMR is always equal to any other XMR, because no coin carries a traceable history.
    

The Four Privacy Layers

Monero uses four complementary technologies to protect your financial privacy. Each layer addresses a different attack vector:

1 Ring Signatures

Hides Sender

When you spend XMR, your transaction input is mixed with 15 decoy inputs from other transactions on the blockchain. An observer sees 16 possible spenders but cannot determine which one is real.

Ring size: 16 (mandatory since August 2022). Earlier versions used smaller rings. Larger rings = more privacy.

2 Stealth Addresses

Hides Receiver

Every Monero transaction creates a one-time address for the recipient. Even if someone knows your public Monero address, they cannot find incoming transactions to it on the blockchain. Only you can detect and spend funds sent to you.

3 RingCT

Hides Amount

Ring Confidential Transactions use Pedersen commitments to prove a transaction is valid (inputs ≥ outputs) without revealing the actual amounts. Mandatory since 2017. Amounts are cryptographically hidden from everyone except sender and receiver.

4 Dandelion++

Hides IP Address

Before broadcasting a transaction to the network, Dandelion++ routes it through a random sequence of nodes (the "stem" phase) before "fluffing" it to the wider network. This makes it extremely difficult to link a transaction to the originating IP address.

How a Monero Transaction Works

You initiate a send. Your wallet selects the real input (the XMR you're spending) and 15 decoy inputs from the blockchain.
Ring signature is created. A cryptographic signature proves one of the 16 inputs is real, without revealing which one. The true spender has plausible deniability.
One-time stealth address is generated. A unique address is derived from the recipient's public key. This address appears on-chain but cannot be linked to the recipient's public address.
Amount is hidden with RingCT. The transaction amount is encrypted using Pedersen commitments. The network verifies the math (no XMR created from nothing) without seeing the number.
Transaction is broadcast via Dandelion++. Your node passes the transaction to a random peer, which passes it to another, before broadcasting widely. Your IP is obscured.
Miners confirm the transaction. The transaction is included in a block. From the outside, it looks identical to every other Monero transaction — just encrypted blobs.

Monero vs Bitcoin: Privacy Comparison

Feature	Monero (XMR)	Bitcoin (BTC)
Sender privacy	Hidden Ring signatures (16 decoys)	Visible Input addresses public
Receiver privacy	Hidden Stealth addresses (one-time)	Visible Output addresses public
Amount privacy	Hidden RingCT (Pedersen commitments)	Visible Amounts in plain text
IP privacy	Obfuscated Dandelion++	Exposed Standard broadcast
Privacy mode	Mandatory Always on	Opt-in CoinJoin, mixers (detectable)
Fungibility	Fungible No coin history	Non-fungible Coins can be "tainted"
Blockchain analysis	Extremely difficult	Routine Chainalysis, Elliptic, etc.
Address reuse risk	None Stealth addresses prevent it	High Reveals transaction graph

Why "optional privacy" doesn't work: When privacy is opt-in (like Bitcoin's CoinJoin or Zcash's shielded pool), the very act of using the privacy feature makes you stand out. If only 5% of transactions use CoinJoin, those 5% are immediately suspicious. In Monero, 100% of transactions are private, so using privacy is indistinguishable from normal usage.

What About Other Privacy Coins?

Coin	Privacy Approach	Mandatory?	Practical Status
Monero (XMR)	Ring sigs + stealth + RingCT	Yes	Most used, proven at scale
Zcash (ZEC)	zk-SNARKs (shielded pool)	No	<10% use shielded txs
Dash	CoinJoin (PrivateSend)	No	Rarely used, weak mixing
Firo (FIRO)	Lelantus Spark	Partial	Small market, academic

Can Monero Be Traced?

This is the most common question. The honest answer: Monero tracing is extremely difficult, but not impossible in every scenario.

What Blockchain Analytics Can Do (Theoretical)

Statistical analysis of ring decoys: Older transactions (pre-2018) used small ring sizes (3-7), making probabilistic analysis feasible. Modern ring size of 16 makes this dramatically harder.
Timing analysis: If a transaction appears shortly after funds arrive, the timing pattern can leak information. Mitigation: wait before spending, or use churning (send to yourself).
Exchange metadata: If you withdraw XMR from a KYC exchange, the exchange knows your withdrawal amount and time. If someone receives that exact amount shortly after, the link is probabilistic. Mitigation: buy XMR P2P without KYC.
Poisoned outputs / flooding: An attacker creates many small transactions to "own" most decoy candidates, increasing the chance of identifying the real spender. Monero's decoy selection algorithm defends against this.

What Analytics Cannot Do

Determine exact amounts: RingCT makes this mathematically impossible without the transaction key.
Link receiver addresses: Stealth addresses generate unique one-time keys per transaction. No pattern to exploit.
Trace a chain of transactions: Unlike Bitcoin, where you can follow UTXOs from address to address, Monero transactions break the linkage at every hop.
Identify P2P transactions: If you buy XMR with cash by mail from a private trader and spend it later, there is no on-chain link between the purchase and the spend.

      The IRS bounty: In September 2020, the IRS offered $625,000 for tools to trace Monero. CipherTrace and Integra FEC received contracts, but as of 2026, no publicly verified, independently confirmed Monero tracing capability has been demonstrated. Academic papers have shown theoretical weaknesses in older protocols, but modern Monero (ring size 16, improved decoy selection) remains unbroken in practice.
    

Privacy Best Practices

Monero's protocol provides strong privacy by default. But user behavior can still leak information. Follow these practices to maximize your privacy:

Do

Use subaddresses for each contact or purpose. Your wallet can generate unlimited subaddresses, each unlinkable to your main address.
Connect via Tor or I2P. Dandelion++ helps, but routing your node through Tor provides an additional layer of network-level privacy. Feather Wallet has built-in Tor support.
Buy XMR P2P. KYC exchanges create a paper trail linking your identity to your coins. Buying P2P via cash by mail or face-to-face eliminates this.
Churn your XMR before large transactions. Send funds to yourself 1-2 times. Each hop adds another ring signature layer, compounding privacy.
Wait before spending. Spending immediately after receiving can leak timing patterns. Let funds sit for at least a few blocks.
Run your own node. Connecting to a remote node means that node sees your IP and transaction queries. Your own node = your own privacy.

Don't

Don't convert XMR to BTC and back. The transparent Bitcoin blockchain creates linkage points. If you need BTC, use atomic swaps or no-KYC exchanges.
Don't share your view key unless you specifically want someone to see your incoming transactions (e.g., for auditing).
Don't use the same address across identities. If you use a single address for both personal and trading purposes, you link those activities.
Don't announce amounts publicly. If you post "just bought 5 XMR" and a 5 XMR transaction appears on-chain shortly after, the correlation is obvious.

Future Privacy Upgrades

Monero continuously improves its privacy through protocol upgrades. Here are the most significant upcoming changes:

2022 — Ring size increased from 11 to 16. Bulletproofs+ reduced transaction size and fees while maintaining privacy.

2024-2026 — Full Chain Membership Proofs (FCMP++) in development. Instead of picking 16 decoys, your transaction will prove membership in the entire blockchain output set. This effectively makes the anonymity set = all Monero ever spent. Eliminates ring signature weaknesses entirely.

Future — Seraphis + Jamtis addressing scheme. Redesigns Monero's address system with separate keys for scanning, spending, and delegation. Enables better light wallet privacy, allows third-party scanning without spending capability, and supports more flexible multisig.

FCMP++ is a game-changer. Current ring signatures have a fixed anonymity set of 16. With Full Chain Membership Proofs, the anonymity set becomes every output ever created on the Monero blockchain — millions of outputs. This eliminates statistical attacks on ring selection entirely, making Monero privacy essentially perfect at the protocol level.

Why Fungibility Matters

Fungibility means every unit of a currency is interchangeable with every other unit. A $20 bill is the same as any other $20 bill, regardless of who held it before.

Bitcoin is not fungible. Coins that have passed through darknet markets, hacks, or sanctioned wallets get "tainted." Exchanges reject them. Payment processors blacklist them. Your perfectly legal Bitcoin can become worthless because of what a previous owner did with it.

Monero is fungible. Because transaction history is hidden, no coin carries a traceable past. One XMR is always worth the same as any other XMR. No tainted coins, no blacklists, no discrimination. This is how money should work.

Privacy and P2P Trading

P2P trading is the most privacy-preserving way to acquire Monero. When you trade with me, the privacy chain is:

You contact me via Telegram (encrypted) or Signal (end-to-end encrypted).
Payment: You send EUR cash by mail (no bank records) or meet face-to-face (no digital trail).
XMR delivery: I send Monero to your wallet subaddress. The transaction is hidden by ring signatures, stealth addresses, and RingCT.
Result: No KYC, no exchange records, no blockchain trail. Your XMR has no connection to any identity.

Compare this to buying on a KYC exchange: your passport scan + selfie + bank account are permanently linked to your coins. With P2P, the link simply doesn't exist.

Trade XMR Privately

Cash by Mail (EU-wide) and Face-to-Face (SW Germany). 683 trades, 100% feedback.

Haveno escrow available on request.

Contact on Telegram

Frequently Asked Questions

Is Monero really untraceable?

Monero is the most private cryptocurrency available. Its mandatory privacy features make transaction tracing extremely difficult. No blockchain analytics firm has publicly demonstrated reliable Monero tracing. However, privacy depends on proper usage: use subaddresses, connect via Tor, and acquire XMR through P2P channels when possible.

How is Monero different from Bitcoin?

Bitcoin transactions are fully transparent: anyone can see sender, receiver, and amount. Monero hides all three by default using ring signatures (sender), stealth addresses (receiver), and RingCT (amount). Bitcoin privacy is opt-in and imperfect; Monero privacy is mandatory and protocol-level. See the comparison table above.

Can governments trace Monero?

Despite some government contracts with analytics firms, no publicly verified method of reliably tracing Monero exists as of 2026. The IRS offered a $625,000 bounty in 2020 with no publicly confirmed success. Monero's protocol upgrades (ring size increases, FCMP++) continuously raise the bar.

Is Monero legal?

Monero is legal to own and use in most countries including the US, EU, UK, Canada, and Australia. Some exchanges have delisted it due to regulatory pressure, but ownership and P2P trading remain legal. Check your local regulations for specifics.

What is Monero's ring size?

The current mandatory ring size is 16 (since August 2022). Every transaction includes 16 possible signers with 15 decoys. The upcoming FCMP++ upgrade will replace fixed ring sizes with full-chain membership proofs, making the anonymity set = the entire blockchain.

What wallet should I use for maximum privacy?

Feather Wallet (desktop) with built-in Tor is the strongest privacy option. Cake Wallet (mobile) also supports Tor. For hardware security, Trezor Model T supports Monero natively. See our complete wallet comparison.