What is Monero?
Monero is digital cash that hides who paid, who got paid, and how much. Same idea as handing someone banknotes, except online and anywhere in the world. Here is how that works, and where the privacy stops.
- Every Monero payment hides the sender, the receiver, and the amount, by default. You can't turn it off.
- That makes each coin interchangeable, so no one can blacklist "tainted" coins the way they can on Bitcoin.
- It protects the transaction. It does not protect you from a KYC exchange, a leaked IP, or your own mistakes.
On this page
Monero in one sentence
Monero (ticker: XMR) is private, peer-to-peer digital cash. No bank, no account, no company in the middle. It launched in April 2014 and has been running ever since.
What sets it apart from almost every other cryptocurrency: privacy is the default, and it's mandatory. There is no public mode you can accidentally use. Every transaction is private, or it doesn't happen.
Why it's different from Bitcoin
Bitcoin and most coins run on a fully public ledger. Every payment, every amount, and every balance is visible forever to anyone who looks. The addresses are nicknames, not names, but they aren't anonymous: analytics firms cluster and follow them, and the moment one address is tied to you, its whole history is too.
Monero hides the sender, the receiver, and the amount on every transaction, and you can't switch that off. (This is also the difference from Zcash, where privacy is optional and most activity stays transparent.)
The short way to picture it: Bitcoin is like paying from a glass wallet everyone can read. Monero is like paying with cash.
How the privacy works
Four pieces do the work. Each one hides a different part of a payment.
| Feature | What it hides | In plain terms |
|---|---|---|
| Stealth addresses | The receiver | You share one address, but every payment lands at a fresh one-time address on the blockchain. They can't be linked to each other or back to you. |
| Ring signatures | The sender | Your real coin is signed alongside 15 decoy coins pulled from the chain, so an outsider can't tell which one was actually spent. |
| RingCT | The amount | The network can confirm no coins were created out of thin air without ever seeing the numbers involved. |
| Dandelion++ | Your IP address | Your transaction passes quietly through one peer at a time before it broadcasts, so it's harder to tie it to the device that sent it. |
One useful detail: if you ever need to prove your own payments, for an audit or your taxes, you can hand someone a read-only view key. It shows your incoming transactions without giving away the ability to spend.
A bit more technical, if you want it
Stealth addresses are derived from the recipient's public view and spend keys; the sender generates a one-time output key, and the recipient scans for it with a private view key. Ring signatures use the CLSAG scheme (shipped 2020), with a mandatory ring size of 16 (one real output, 15 decoys) since the August 2022 hard fork. Decoys are chosen by a gamma distribution designed to resist statistical filtering. RingCT has been mandatory since September 2017 and uses Pedersen commitments with Bulletproofs range proofs. Dandelion++ was merged in 2020. It raises the bar on IP privacy but is not a replacement for Tor or i2p against a determined adversary.
What's coming: a future upgrade called FCMP++ (Full-Chain Membership Proofs) is set to replace ring signatures entirely. Instead of hiding your coin among 15 decoys, it proves your coin belongs to the entire set of outputs ever created, an anonymity set of millions rather than 16. As of August 2026 it is running on testnet, not mainnet, and the official roadmap lists it as coming. Ignore any article claiming it already launched on the main network. It hasn't.
Why fungibility matters
Fungible means every unit is identical and interchangeable, the way one $20 bill is as good as any other. Cash and gold are fungible. Most cryptocurrencies aren't.
On a transparent chain, coins carry their whole history in the open. Exchanges and services can flag coins that passed through a hack, a darknet market, or a sanctioned address as "tainted," and freeze or refuse them. Your perfectly legal coins can be tarred by what a stranger did with them three owners ago. Monero coins have no visible history to inspect, so there is nothing to blacklist. Every XMR is worth exactly one XMR.
Supply and tail emission
Blocks arrive about every two minutes. The main issuance ran down until May 2022, when Monero switched to a fixed tail emission of 0.6 XMR per block, paid out forever.
The reason it never stops: miners need a reason to keep securing the network after the big rewards end. Bitcoin bets that transaction fees alone will eventually be enough; Monero chose to keep paying a small, predictable amount instead.
The numbers are modest. That's about 157,680 XMR a year, currently under 1% of the supply and shrinking every year as the base grows. Circulating supply is roughly 18.8 million XMR as of August 2026. There is no hard cap like Bitcoin's 21 million, but the emission is disinflationary, not an inflation spiral. Anyone quoting a ~1.9% rate is using stale pre-2022 math.
What Monero can't hide
Monero protects the transaction. It does not protect you from telling on yourself.
- KYC exchanges. Buy XMR on an ID-verified exchange and it keeps a permanent record that you bought Monero, when, and how much. The on-chain hop is private; the purchase isn't.
- Your IP and network. A default node shows your IP to the peers it connects to, and researchers have documented network-layer attempts to link transactions to where they came from. Serious users route through Tor or i2p, or run their own node.
- Metadata and habits. Posting your address publicly, tying a payment to a shipping address or email, or reusing the same amounts can give you away no matter how good the cryptography is.
On-chain, there is no public, demonstrated case of tracing a Monero payment from one party to another. That's "untraceable in practice today," not a forever-guarantee, and it never covered the leaks above. Treat anyone promising "100% anonymous" as selling something.
Common questions
Is Monero actually untraceable, or is that hype? No one has publicly shown an on-chain trace from sender to receiver. But it doesn't cover a KYC purchase, your IP, or a leaked address, so drop the "100% untraceable" framing.
Isn't Bitcoin already private? No. Bitcoin is a public ledger where every transaction is visible and traceable. That misconception is the clearest reason Monero exists.
Do I need to "mix" or "clean" my Monero? No. Privacy is built into every transaction. "Tainted" and "clean" are transparent-chain ideas that don't apply here.
Isn't endless supply just inflation? The tail emission is under 1% and falling, and it pays for network security. It's disinflationary, not a printing press.
Is FCMP++ live yet? Not on mainnet as of August 2026. It's in testing. You don't need to do anything, and your coins won't change overnight.
Where it came from
Monero launched in April 2014 as a fair, pre-announced fork of the CryptoNote codebase. CryptoNote first appeared in a coin called Bytecoin, which turned out to have a large secret premine, so the community forked the code cleanly and started over. From there it added its privacy piece by piece: RingCT in 2017, Bulletproofs in 2018 to shrink transactions, RandomX in 2019 to keep mining on ordinary CPUs, CLSAG and Dandelion++ in 2020, tail emission and ring size 16 in 2022, and FCMP++ now in testing.