How does Monero hide the sender?

Ring signatures. When you send XMR, your transaction input is mixed with 15 other inputs (decoys) from the blockchain. The ring signature cryptographically proves that one of the 16 inputs is the real one, but no observer can determine which. Since August 2024, ring size is 16 (previously 11). The upcoming FCMP (Full-Chain Membership Proofs) upgrade will use the entire blockchain as the anonymity set.

How does Monero hide the receiver?

Stealth addresses. When you send XMR to someone, Monero generates a unique one-time address for that specific transaction. The recipient's public address never appears on the blockchain. Only the recipient (with their private view key) can detect that a transaction was sent to them. Even if you send multiple payments to the same person, each appears as a different address on the blockchain.

How does Monero hide the amount?

RingCT (Ring Confidential Transactions). Since January 2017 (mandatory since September 2017), all Monero transactions use Pedersen commitments to hide amounts. The network verifies that inputs equal outputs (no inflation) without revealing the actual numbers. Bulletproofs (2018) and Bulletproofs+ (2022) reduced the proof size, making RingCT more efficient. No observer can see how much XMR was transferred.

What is Dandelion++ and how does it help?

Dandelion++ hides which node originated a transaction. Without it, a network observer could monitor IP connections and correlate them with new transactions. Dandelion++ works in two phases: (1) Stem phase — the transaction is passed through a random chain of nodes (1-2 hops). (2) Fluff phase — the transaction is broadcast normally. This prevents any single node from knowing if their neighbor created the transaction or just forwarded it.

What are the three layers of Monero privacy?

Monero uses three simultaneous privacy technologies: (1) Ring signatures — hide the sender among 15 decoys (WHO sent). (2) Stealth addresses — generate one-time addresses for each transaction (WHO received). (3) RingCT — hide the transaction amount using Pedersen commitments (HOW MUCH). Additionally: Dandelion++ hides transaction origin (WHICH NODE), and key images prevent double-spending without revealing which input was spent. All five work together on every single transaction — they are not optional features.

Monero Transaction Privacy (2026)

How XMR hides sender, receiver, and amount — every transaction, every time

TL;DR: Every Monero transaction uses three privacy technologies simultaneously: ring signatures (hide sender among 15 decoys), stealth addresses (one-time receiver address), RingCT (hide amount). Plus Dandelion++ (hide originating node) and key images (prevent double-spend). All mandatory. All automatic. Not opt-in.

The Three Layers

Layer	Technology	What It Hides	How
1. Sender	Ring Signatures	Who sent	16 possible signers, 1 real
2. Receiver	Stealth Addresses	Who received	One-time address per tx
3. Amount	RingCT	How much	Pedersen commitments
+Network	Dandelion++	Origin node	Stem → fluff routing
+Integrity	Key Images	Double-spend	Unique per spend, unlinkable

Layer 1: Ring Signatures — Hiding the Sender

When you spend XMR, your real input is mixed with 15 decoy inputs from the blockchain. The resulting ring signature proves that one of the 16 is the real spender, but no one can determine which.

Ring size was increased to 16 in the August 2024 hard fork (previously 11). The upcoming FCMP upgrade will use the entire blockchain as the anonymity set — instead of 16 possible senders, every output ever created becomes a potential sender.

Layer 2: Stealth Addresses — Hiding the Receiver

When someone sends you XMR, Monero generates a unique one-time address for that specific transaction. Your public address never appears on the blockchain.

Even if you receive 100 payments to the same public address, each creates a different stealth address on-chain. No outside observer can link them to each other or to your wallet. Only you, with your private view key, can detect incoming payments.

Layer 3: RingCT — Hiding the Amount

Ring Confidential Transactions use Pedersen commitments to hide amounts. The network mathematically verifies that inputs equal outputs (no XMR created from thin air) without revealing the actual numbers.

Bulletproofs+ (2022 upgrade) made the range proofs 96% more efficient, reducing transaction size and fees while maintaining the same privacy guarantee.

Comparison: Privacy by Default vs Opt-In

Blockchain	Sender Hidden	Receiver Hidden	Amount Hidden	Default
Monero	Always	Always	Always	Mandatory
Bitcoin	Never	Never	Never	Transparent
Zcash	Optional	Optional	Optional	Transparent*
Dash	Optional	Never	Never	Transparent
Ethereum	Never	Never	Never	Transparent

*Zcash: ~95% of transactions use transparent addresses. When privacy is optional, almost nobody uses it — and those who do are suspicious by contrast.

Why This Matters

On Bitcoin, your entire financial history is a Google search away. Address, balance, transaction partners, spending patterns — all public. On Monero, none of this exists.

The three layers work together: hiding the sender alone is useless if the amount reveals you. Hiding the amount is useless if the receiver is public. All three must be hidden simultaneously, on every transaction, with no opt-out. That's what Monero delivers.

For EUR P2P trading: arnoldnakamura — 683 trades, 100% feedback.