Is Monero traceable?
Monero's blockchain hides the sender, receiver and amount of every transaction, and there is no public evidence that its current cryptography has been broken. But Monero is not untraceable in every situation: exchange identity records, IP addresses, timing and old weaknesses have let researchers and police link some transactions to people.
The balanced answer
On Bitcoin, anyone can follow coins from address to address. On Monero, an outside observer looking only at the blockchain cannot reliably do that. That much is widely accepted. What is disputed is how much information leaks around the edges, through the internet connection, the exchanges people use and patterns in their behaviour. This page sets out the mechanisms, the public research and the claims made by analytics companies, so you can judge for yourself.
What Monero hides on the blockchain
| Data | Bitcoin | Monero | How |
|---|---|---|---|
| Sender | Visible address | One of 16 possible sources | Ring signatures (CLSAG) mix the real coin with 15 decoys |
| Receiver | Visible address | A one-time address only the receiver can recognise | Stealth addresses derived from the receiver's public keys |
| Amount | Visible | Encrypted | RingCT with Bulletproofs+ range proofs |
| Double spend check | Public history | Key image | A unique tag per coin that reveals reuse but not which coin it is |
RingCT became mandatory in September 2017. The minimum ring size has grown over time and has been fixed at 16 since 13 August 2022. These features protect everyone at once, because every transaction looks alike.
What academic research found
The 2017 to 2018 traceability studies
The best-known study, "An Empirical Analysis of Traceability in the Monero Blockchain" by Möser and colleagues (Proceedings on Privacy Enhancing Technologies, 2018), found that about 62% of inputs with at least one decoy could be traced by elimination in the data they studied, and that guessing the newest ring member identified the real input about 80% of the time. These weaknesses came from early Monero, when transactions without decoys were allowed and decoys were chosen poorly. The Monero Project published a response on 29 March 2018 noting that minimum ring sizes, mandatory RingCT and a new decoy-selection method had since addressed most of the problem. The study is still a fair reminder that coins from before 2017 have weaker privacy.
Known limits researchers still discuss
- Small rings. 16 possible sources is far more than 1, but statistical analysis across many transactions can narrow guesses, especially if decoy selection does not match real spending habits.
- Poisoned outputs. If an adversary controls both sides of a flow, for example an exchange that sends you coins and later receives them back, it can recognise its own outputs as decoys and rule them out. This is sometimes called the EAE (Eve-Alice-Eve) problem.
- Transaction shape. Unusual numbers of inputs or outputs, odd fees or unusual timing can make a transaction stand out from the crowd.
The planned FCMP++ upgrade is designed to replace 16-member rings with a proof that covers every eligible output on the chain, which would remove the decoy-elimination class of attacks. It has no mainnet date yet.
What analytics firms and authorities have claimed
| Date | Claim | What we know |
|---|---|---|
| September 2020 | The US IRS awarded contracts worth up to $1.25 million to Chainalysis and Integra FEC for Monero and layer-2 tracing tools | Results have not been published |
| August 2020 | Russia's Rosfinmonitoring was reported to be building a "Transparent Blockchain" system that could partially reduce Monero's anonymity | No public results |
| January 2024 | Finnish media reported that police traced Monero in the Vastaamo extortion case | Methods not disclosed; the trail reportedly involved exchanges and a bank account (Cointelegraph, 27 Jan 2024) |
| September 2024 | A leaked Chainalysis training video suggested tracing using the firm's own Monero nodes to collect IP addresses and timestamps | Chainalysis declined to comment (Cointelegraph, 9 Sep 2024); the claim concerns network metadata, not breaking ring signatures |
None of these public claims shows the cryptography being defeated. They point to the same weak spots: data collected off-chain, at the network layer and at the places where people convert XMR to and from regular money.
Where metadata leaks
Your internet connection
When your wallet sends a transaction, a node sees the IP address it came from. If you use a public remote node, its operator sees your IP and can link it to the transactions you broadcast. Monero spreads new transactions using Dandelion++ to blur their origin between full nodes, but that does not protect you from the remote node you connect to directly. Running your own node gives the most privacy. See Monero remote nodes and run a Monero node.
View keys and light-wallet servers
Some wallets send your private view key to a server so it can scan the chain for you. That server can see your incoming payments and, in practice, much of your outgoing history. MyMonero worked this way until it closed on 6 January 2026. See Monero view key and Monero web wallet.
Exchanges and identity checks
An exchange that verified your identity knows what you bought, when, and the address you withdrew to. Monero's blockchain does not reveal what happens next, but the exchange's records, plus timing and amounts, can still be matched with other data.
Timing and behaviour
Sending the same amount minutes after receiving it, reusing patterns, or telling people your address in public all give away information that cryptography cannot hide.
How Monero compares
Bitcoin is fully transparent by default. Zcash offers strong shielded transactions, but they are optional, and much activity happens in transparent addresses. Litecoin's MWEB is also opt-in. Monero's default privacy means the "crowd" includes every user. For details see Monero vs Bitcoin and Monero vs Zcash.
Bottom line
- On-chain, Monero is much harder to trace than Bitcoin, and no public research shows current transactions being routinely de-anonymised from blockchain data alone.
- Off-chain data, such as IP addresses, exchange records and timing, has been used, or is claimed to have been used, to link people to transactions.
- Privacy is not a licence. Authorities investigate crimes involving Monero, and laws apply regardless of the coin. We do not give advice on hiding activity from lawful investigations.
For sensible everyday settings, see the privacy checklist.
Frequently asked questions
Can police trace Monero?
Sometimes, but usually not from the blockchain alone. Reported cases, such as Finland's Vastaamo investigation in January 2024, involved exchanges and bank records, and the methods were not disclosed.
Has Monero's privacy been broken?
There is no public evidence that its current cryptography has been broken. Early Monero transactions from before 2017 had weaknesses that researchers exploited, and network-level metadata remains a known risk.
Can Chainalysis track Monero?
A training video leaked in September 2024 suggested Chainalysis gathered IP addresses and timestamps through its own nodes. That is metadata collection, not a break of ring signatures. Chainalysis did not comment.
Are Monero amounts visible?
No. Since RingCT became mandatory in September 2017, amounts are encrypted on the blockchain. Only the sender and receiver, or someone with the receiver's view key, can see them.
Will FCMP++ make Monero untraceable?
It is designed to replace 16-member rings with proofs over the whole set of outputs, which would remove decoy-elimination attacks. It would not hide off-chain data such as exchange records or IP addresses.