XMRWallet.com review: is it safe?
We do not recommend XMRWallet.com. It is still online in October 2026, but it faces serious, unresolved allegations, published in 2026 by the security group PhishDestroy, that it collects users' view keys and alters transactions on its server. These claims have not been independently audited, and we found no public response from the operator.
Quick steps
- Install a local wallet. Install Cake Wallet, Feather or the Monero GUI from its official site, typing the address yourself.
- Create a new wallet. Create a brand-new wallet with a new seed. Do not reuse the seed you typed into XMRWallet. Write the new seed on paper.
- Restore the old seed separately. In the same app, restore the old seed as a second wallet so you can see and spend the balance.
- Send everything to the new wallet. From the restored old wallet, send the full balance to an address in your new wallet.
- Stop using the old seed. After the funds arrive and unlock, never use the old seed again.
Verdict
XMRWallet.com is a browser-based Monero wallet. A web wallet already carries extra risk, because the code is downloaded fresh every time you open the page. On top of that, XMRWallet faces detailed allegations that it has not publicly answered. Until there is an independent audit or a credible rebuttal, we treat it as high risk and suggest using a wallet that runs on your own device instead.
Facts at a glance
| Item | XMRWallet.com |
|---|---|
| Type | Web (browser) wallet |
| Platforms | Any browser |
| Open source | Claims to be; the public repository was reportedly last updated in November 2018, so the code the site serves today cannot be checked against it |
| Custody | Presented as non-custodial (you enter your own seed) |
| Sync method | Site says it works in your browser and your seed is never transmitted; PhishDestroy alleges the private view key is sent to its server |
| Hardware support | None |
| Status (Oct 2026) | Online; serious unresolved allegations |
The allegations, carefully stated
In a report titled "XMRWallet exposed" (PhishDestroy, February to March 2026), the group alleges that:
- the site sends the user's private view key to its server in a session token, in dozens of requests per session;
- transactions built in the browser are discarded and replaced on the server, so funds go to a different destination;
- extra JavaScript is injected through Google Tag Manager, and the production code differs from the public repository;
- losses run into millions of dollars. This is PhishDestroy's own estimate and has not been audited.
What we could confirm: GitHub issues in the XMRWallet repository that reported view-key problems now show as deleted, and the company said in July 2024 that it cannot provide per-transaction keys. What we could not confirm: the alleged server-side substitution and the loss estimates. The allegations come from a single advocacy group; no independent audit and no operator rebuttal were found as of October 2026.
User reports
XMRWallet's Trustpilot rating was 2.2 out of 5 when checked in 2026. Several 2024 to 2026 reviews, including one-star reviews dated 6 and 26 March 2026, describe wallets being emptied. Trustpilot does not verify reviews, so treat these as reports, not proof.
Why browser wallets are risky in general
With an app, you install one version and can verify it. With a website, the operator, or anyone who compromises its server or a third-party script, can change the code at any time, for one user or for everyone. "Open source" means little unless the served code matches a reproducible build. That is why we recommend local wallets. Full explanation: Monero web wallets in 2026.
Pros and cons
| Claimed pros | Cons and risks |
|---|---|
| No install; works in a browser | Unresolved allegations of view-key collection and transaction tampering |
| Accepts 13- and 25-word seeds | Served code cannot be checked against the public repository |
| No per-transaction keys, so proving a payment is harder | |
| Typing a seed into a website exposes it to whoever controls that site |
Safer alternatives
| You want | Use instead | Why |
|---|---|---|
| Something quick on a phone | Cake Wallet | Scans on your device; open source |
| Something quick on a computer | Feather | Light, Tor built in, verifiable downloads |
| To check a balance only | A view-only wallet in Feather or the GUI | No spend key involved (see view keys) |
| Instant sync | Skylight with your own light-wallet server | You control the server that sees your view key |
Who it suits
Nobody we would point to it today. If you want something quick, Cake Wallet on a phone or Feather on a computer take a few minutes to set up and keep your keys on your device.
If you have used XMRWallet
Assume the seed you typed into the site could be known to someone else. Move funds to fresh keys as soon as possible, following the steps below. If funds are already missing, record the transaction IDs and dates, and report to your local police or cybercrime unit; be wary of "recovery services" that contact you, which are a common follow-up scam (see Monero scams).
Safety notes
- Never type a Monero seed into any website.
- Type wallet addresses yourself or use bookmarks; avoid search ads for wallets.
- Prefer wallets listed on getmonero.org that scan locally.
Frequently asked questions
Is XMRWallet.com a scam?
We cannot say that as a proven fact. It faces serious, detailed allegations published in 2026 by PhishDestroy, and users have reported losses, but no independent audit has confirmed them and the operator has not publicly responded. We do not recommend using it.
Is XMRWallet the same as MyMonero?
No. They are unrelated services. MyMonero closed on 6 January 2026; XMRWallet.com is a separate website that is still online.
I used XMRWallet. What should I do?
Create a new wallet in a local app such as Cake or Feather, restore your old seed separately in that app, and send all funds to the new wallet. Then stop using the old seed.
Is there a safe Monero web wallet?
No browser wallet we know of can be fully verified, because the code can change on every visit. Light apps that scan on your device, such as Cake Wallet and Feather, are the safer alternative.