.::no kyc::.

updated 2026-07 · 9 min read · index

kyc, "know your customer", is the requirement to hand over government id, a selfie, an address, or a phone number before you may use a service. it is sold as fraud prevention. in practice it does two things to you. it builds an ever-growing pile of your identity documents in databases that are breached with grim regularity, and it welds your real name to whatever you then do. this guide is about identity minimization, preferring services that never ask, wherever a legitimate no-ask option exists.

what kyc actually costs you

the privacy case against handing over id is concrete, not ideological.

honeypots. every kyc database is a concentrated target: passports, selfies and addresses in one place. exchange and fintech id leaks are a recurring headline, and once your passport scan is in a breach dump it is out forever.
permanent linkage. kyc attaches your legal identity to your activity at the source, so everything downstream is pre-deanonymized no matter how careful you are afterward.
one point unmasks a chain. a single kyc checkpoint can unravel an otherwise pseudonymous trail. link one address, one account, one number to your name, and correlation does the rest.
function creep. data collected "for aml" is reused, sold, shared between companies, and handed over on request. the purpose you consented to is rarely the only purpose.

the principle of identity minimization

it is the data-minimization rule again, applied to who you are. the id you never hand over cannot leak, be linked, or be subpoenaed. so when a service exists that meets your need without demanding identity, that is the one to use. this is not about hiding from a court. it is about not scattering copies of your passport across dozens of companies that did not need it and cannot keep it safe.

how to read a "no-kyc" claim

the single most important nuance on this page. no kyc, no account, and anonymous are three different claims, and marketing blurs them on purpose. before trusting a service, ask:

does it require identity at all? id documents, a selfie, a real phone number.
does it require an account? account-free is stronger than "account, but no id".
what does it log? a swapper with no account can still record your ip and the addresses involved.
how do you pay? paying with your bank card can deanonymize a "no-kyc" purchase instantly.
jurisdiction and openness. where does it sit legally, and is the code open to inspection.

no account is not no logsa custodial "no-kyc" service can still freeze your funds, log your ip, and fold under pressure, and small unknown ones carry real exit-scam risk. treat "no kyc" as one property among several, verify it, and reach these services over tor so the network layer does not undo the identity layer.

kycnot.me, the directory

vetting all of this by hand is the hard part, and there is a purpose-built tool for it. kycnot.me is a free, open-source directory that catalogues services which do not require identity verification, maintained by a single developer (pluja) with the code public on codeberg, and, importantly, with no ads and no paid listings. services have repeatedly offered to pay for priority and been refused. it grades each entry, a "never kyc" badge for terms that explicitly promise it, plus trust levels from verified (tested by the team) down through checked, community-submitted, and delisted (removed after documented kyc violations). read the badge, not merely the presence in the list. it runs tor and i2p mirrors, and being open-source you can host or audit it yourself.

where no-kyc options actually exist

kycnot.me sorts services into categories. the ones worth knowing:

crypto exchange and swap. the big one, covered in depth on the payments page: p2p desks (haveno for monero, bisq and robosats for bitcoin), atomic swaps, and privacy aggregators like trocador.
vpn. providers that take cash or crypto and issue a random account number with no email attached. mullvad is the archetype: no username, no email, just a generated number, payable in cash. anonymous payment is what separates a private vpn from a logged one.
email. providers that do not demand a phone number to sign up, plus aliasing so no single address links your accounts. see email.
sms and phone numbers. services that rent a number for one-time codes without id, so you never have to hand a site your real number in the first place.
hosting, vps and domains. directly relevant if you run anything yourself. privacy-first registrars and hosts that accept crypto and do not demand identity, njalla and 1984 hosting among them. the domain serving this wiki was bought exactly this way.
e-sim and data, gift cards, marketplaces. anonymous data sims, gift cards bought with crypto to spend at mainstream shops without a card tied to you, and monero-native marketplaces.

the honest boundaries

two lines worth drawing clearly. first, some services are legally required to perform kyc, regulated fiat banking and licensed exchanges chief among them. this guide is about choosing the many services that do not require it, not about defeating the ones that do. supplying a fake id to a service that mandates real verification is fraud, an entirely different act from using a service that never asks. second, no-kyc is one layer, not a cloak. your network path, your wallet, and your opsec decide whether an id-free purchase is actually private. the id you did not hand over is a large win on its own. treat it as the start of the picture, not the whole of it.

sources

[ home ]

.:: eof ::.