Monero (XMR) is the best-known privacy cryptocurrency. On Bitcoin, anyone can open a block explorer and see addresses, amounts and the full history of transfers; Monero hides the sender, the receiver and the amount of every transaction by default. That is why some people call XMR “digital cash”, while regulators and many exchanges treat it with suspicion.
This Monero review is for readers who want to understand how blockchain privacy actually works: beginners who want to grasp the difference between pseudonymity and real confidentiality, users who value financial privacy, and experienced readers curious about RandomX, tail emission, the Qubic episode and the upcoming move to FCMP++.
We cover the project’s history, ring signatures and stealth addresses, the emission model, wallets and keys, the regulatory picture and exchange delistings, and give an honest list of XMR’s pros, cons and risks.
- What is Monero
- Monero history
- How Monero privacy works
- RandomX mining and XMR emission
- Monero vs Bitcoin: comparison table
- Monero wallets, addresses and keys
- Regulation and delistings
- How to get and swap XMR
- Upcoming upgrades: FCMP++
- Monero pros and cons
- Monero risks
- FAQ
- Conclusion
- Sources
What is Monero
Monero is a decentralized, open-source cryptocurrency focused on privacy. Its native coin is XMR, and the name comes from the Esperanto word for “coin”. The network runs on Proof of Work and has no owning company, issuing foundation or premine: development is funded by the community and voluntary donations.
The core idea behind Monero is privacy by default. Bitcoin transactions are transparent: addresses and amounts are visible to everyone and can often be linked to real people through analytics. In Monero, every transaction automatically hides three things: who sent it, who received it and how much was sent. There is no special mode to switch on — every transfer works this way.
Another key property is fungibility. Because coin histories are not visible, one XMR cannot be told apart from another. On transparent blockchains, coins with a “tainted” history can be blocked; Monero has no such labeling at the protocol level. That brings XMR closer to physical cash, but it also raises regulatory questions we cover below.
Monero history
Monero launched on April 18, 2014 as a fork of Bytecoin, one of the first projects built on the CryptoNote protocol. It was originally called BitMonero. Developers were unhappy with how Bytecoin had been set up — notably a large hidden premine — and created a new network with no premine. A few days after launch the name was shortened to Monero.
The project then evolved through regular, scheduled hard forks. In January 2017 it introduced RingCT (confidential transactions that hide amounts), and in 2018 Bulletproofs, which significantly reduced transaction sizes and fees. In 2019 the network switched to the CPU-oriented RandomX mining algorithm. In 2020 it adopted Dandelion++, which makes it harder to trace a sender’s IP address, along with CLSAG signatures. In August 2022 the ring size increased to 16 and Bulletproofs were replaced by the more compact Bulletproofs+.
The person most often associated with the project is Riccardo Spagni (“fluffypony”), for years one of its lead maintainers. But Monero has no single figurehead: the protocol is developed by independent contributors, and research is carried out by the Monero Research Lab.
How Monero privacy works
Monero’s privacy rests on several independent technologies, each hiding a different part of a transaction.
Ring signatures hide the sender
A ring signature lets a transaction be signed so that a verifier can confirm it was signed by one member of a group, without knowing which one. Monero automatically adds 15 decoys from the blockchain’s history to the real input, for a ring of 16 members in total. An outside observer cannot tell which one is actually being spent. Double spending is still prevented by special values called key images.
Stealth addresses hide the receiver
When you send XMR, the wallet does not write the recipient’s public address to the blockchain. Instead, a one-time stealth address is generated for every transaction. The recipient uses their private view key to find outputs that belong to them, while outsiders cannot link those outputs to the published address.
RingCT hides amounts
RingCT (Ring Confidential Transactions) hides the amount being transferred. The network still verifies mathematically that inputs equal outputs, so nobody can create coins out of thin air. Bulletproofs+ keep these proofs compact.
Dandelion++ protects at the network level
Even with perfect cryptography, an observer could try to figure out which IP address first broadcast a transaction. Dandelion++ first passes the transaction along a random chain of nodes and only then spreads it widely, which makes that analysis much harder. For extra protection, many users connect through Tor or I2P.
It is important to understand the limits: ring signatures provide probabilistic, not absolute, protection of the sender. Researchers have repeatedly shown that user mistakes or control over many outputs can help analysis narrow the list of candidates. That is exactly why the community is working to rеplace rings with FCMP++.
RandomX mining and XMR emission
RandomX
Since November 2019 Monero has used the RandomX algorithm. It executes randomly generated programs and relies heavily on memory, so it runs best on ordinary processors (CPUs). The goal is to prevent specialized ASICs from dominating and to keep mining open to a wide range of participants. Many miners use the decentralized P2Pool, which does not require trusting a pool operator.
Blocks and fees
Monero targets a 2-minute block time. Block size is dynamic: it can grow under heavy load, and the fee depends on transaction size and current network demand. Fees are usually small, but they are not fixed.
Tail emission
Unlike Bitcoin, Monero has no hard supply cap. The main emission (about 18.1 million XMR) ended in 2022, after which tail emission began: miners receive a fixed 0.6 XMR per block indefinitely. In percentage terms that is under 1% per year, and the rate keeps shrinking as total supply grows.
The reasoning behind tail emission is to give miners stable income and keep the network secure over the long term without relying on fees alone. Critics call it inflation; supporters see it as compensation for coins that are inevitably lost and a guarantee of security.
Monero vs Bitcoin: comparison table
Monero and Bitcoin are both Proof of Work blockchains without a central issuer, but they take opposite approaches to transparency. We leave out prices and market caps because they change constantly.
| Parameter | Monero (XMR) | Bitcoin (BTC) |
|---|---|---|
| Launch | 2014 (Bytecoin fork) | 2009 |
| Mining algorithm | RandomX (CPU) | SHA-256 (ASIC) |
| Block time | about 2 minutes | about 10 minutes |
| Supply | Tail emission of 0.6 XMR per block, no hard cap | Capped at 21M BTC, halving every 210,000 blocks |
| Sender | Hidden by ring signatures | Visible on-chain |
| Receiver | Hidden by one-time addresses | Visible on-chain |
| Amount | Hidden (RingCT) | Visible on-chain |
| Privacy | Default for every transaction | Only through external tools |
| Smart contracts and tokens | None | Limited scripting |
| Exchange availability | Restricted in many jurisdictions | Nearly everywhere |
It is worth noting that Litecoin offers optional privacy through MWEB, but only when a user chooses to use it. See our Litecoin review for details.
Monero wallets, addresses and keys
You can store XMR in the official Monero GUI and CLI wallets, in popular community desktop and mobile wallets (such as Feather or Cake Wallet), and on some Ledger and Trezor hardware wallet models. Your wallet should be non-custodial; otherwise much of the privacy is lost, because the custodian sees your activity. We explain wallet types in detail in what a crypto wallet is.
Monero addresses are long — 95 characters. A primary address starts with 4, while subaddresses start with 8. Subaddresses are handy for giving a different address to each payer, since outsiders cannot link them together. Integrated addresses, which embed a payment ID, also start with 4 but are longer — 106 characters.
A Monero wallet has two types of private keys:
- The view key lets you see incoming transactions. You can share it with an auditor or accountant without giving them the ability to spend funds.
- The spend key is needed to send coins. Never share it with anyone.
Both keys are derived from a mnemonic seed: the classic format is 25 words, and some wallets use a shorter 16-word Polyseed format. Losing the seed means losing access to your funds; leaking it means losing the funds themselves. Learn how to store it properly in our guide to the seed phrase.
Regulation and delistings
Privacy by default is exactly what makes Monero difficult for regulated platforms. Anti-money-laundering (AML) requirements and the Travel Rule assume an exchange can trace where funds came from, and on Monero that is not possible at the blockchain level.
As a result, many major exchanges have restricted XMR. Japanese platforms removed privacy coins back in 2018, and South Korean exchanges delisted them as well. In 2024 Binance stopped trading XMR, and several other exchanges restricted it for users in certain regions, including the European Economic Area. The EU has adopted an Anti-Money Laundering Regulation (AMLR) that, from July 2027, bars crypto-asset service providers from handling anonymity-enhancing assets.
It is important to distinguish between the two: in many countries simply owning Monero is not illegal, and the restrictions mainly target regulated service providers. But rules change and differ by jurisdiction, so check the current law where you live. In practice, delistings reduce liquidity and make it harder to move in and out of XMR. To understand why services freeze funds and how screening works, read our article on AML checks in crypto.
How to get and swap XMR
Because of delistings, buying Monero on a major exchange is not possible everywhere. The main options are exchanges that still support XMR in your country, P2P marketplaces, decentralized atomic swaps and instant crypto exchangers. For example, on RubyCash you can swap USDT or another cryptocurrency to XMR without registration by entering your Monero wallet address. Keep in mind that, like any responsible service, an exchanger may run AML screening on incoming funds.
- Install a non-custodial Monero wallet and write the mnemonic seed down on paper. Wait for the wallet to sync with the network.
- Copy a receiving address — either the primary address (starts with 4) or a new subaddress (starts with 8).
- Choose the pair, for example USDT on the right network to XMR, and check the amount you will receive and the rate type.
- Paste your XMR address and compare the first and last characters: Monero addresses are long, and a swapped address is easy to miss.
- Send the coins to the deposit address on exactly the specified network.
- Wait for the funds. Received XMR becomes spendable after 10 confirmations — a protocol rule that takes about 20 minutes.
To understand how an exchanger sets its rate and how fixed and floating rates differ, read our article on how an instant crypto exchanger works.
Exchange USDT to XMR
Upcoming upgrades: FCMP++
Monero’s most anticipated upgrade is FCMP++ (Full-Chain Membership Proofs). Instead of a 16-member ring, a transaction will prove that the output being spent belongs to the entire set of outputs on the blockchain, without revealing which one. That dramatically expands the anonymity set and removes most of the weaknesses of probabilistic ring analysis.
Alongside FCMP++, a new address and key scheme called CARROT is being prepared. During 2025–2026 the upgrade went through testing on test networks. At the time of writing, no mainnet activation date for FCMP++ has been announced, so rely on official announcements at getmonero.org rather than rumors and forecasts.
Monero pros and cons
Pros
- Privacy by default. Sender, receiver and amount are hidden in every transaction.
- Fungibility. Coins carry no visible history that could devalue them.
- Accessible mining. RandomX targets ordinary CPUs, and the decentralized P2Pool is available.
- Strong research culture. The protocol is upgraded regularly, and major changes go through open discussion and audits.
- Flexible keys. The view key allows selective disclosure without giving access to funds.
- No premine and no issuing company. The project is community-driven.
Cons
- Regulatory pressure. Delistings on major exchanges reduce liquidity and make buying harder.
- Heavier transactions. They are larger, and the blockchain grows faster than many transparent networks.
- Harder for beginners. Wallet syncing, long addresses and multiple keys require care.
- No smart contracts or DeFi. Monero is money and nothing else.
- No hard supply cap. Some investors see tail emission as a drawback.
Who Monero suits: users for whom financial confidentiality is a firm requirement and who are willing to learn non-custodial wallets. Who it does not suit: people who want to keep coins on a regulated exchange, need deep liquidity, or live in a jurisdiction where privacy coins are restricted.
Monero risks
Hashrate attacks. In August 2025 a mining pool linked to the Qubic project temporarily gained a large share of Monero’s hashrate and carried out a chain reorganization several blocks deep. Some exchanges paused XMR deposits for a while, and the community moved more actively to the decentralized P2Pool. The episode showed that hashrate concentration is a real risk for smaller PoW networks; waiting for extra confirmations on large amounts is sensible.
Regulatory risk. New restrictions could further shrink the number of venues where XMR can be bought or sold, affecting liquidity and price.
Volatility. Like any cryptocurrency, XMR can lose value sharply. This review is not investment advice.
User mistakes. Privacy does not protect you from phishing, fake wallets or a lost seed. Download software only from the official website and verify file signatures.
A false sense of total anonymity. Monero hides on-chain data, but KYC exchanges, IP addresses and user behavior can still reveal identity. Privacy is a set of habits, not a single button.
FAQ
Monero is a cryptocurrency that hides the sender, receiver and amount of every transfer by default. It is secured by mining and has no central issuer. The network’s coin is called XMR.
A Monero block explorer does not show addresses and amounts the way a Bitcoin explorer does. However, ring signatures provide probabilistic protection, and outside data — exchange KYC, IP addresses, user behavior — can assist analysis. No technology guarantees complete anonymity.
In many countries owning Monero is not prohibited, but regulated exchanges and crypto service providers are increasingly unable to support privacy coins. Rules differ by jurisdiction and change over time, so check the law where you live.
Regulated exchanges must meet AML requirements and trace the origin of funds. That is not possible on Monero at the blockchain level, so many platforms drop XMR or restrict it in certain countries.
There is no hard cap. The main emission of about 18.1 million XMR ended in 2022, and miners now receive 0.6 XMR per block indefinitely. Annual inflation is under 1% and keeps declining.
Yes. The RandomX algorithm is designed for ordinary processors, so CPU mining is possible. Profitability depends on electricity costs, your processor and total network hashrate. P2Pool is a popular way to mine without trusting a pool operator.
Blocks arrive about every 2 minutes. Received coins become spendable after 10 confirmations, roughly 20 minutes. Services may set their own confirmation requirements.
A view key lets someone see a wallet’s incoming transactions but not spend its funds. You can give it to an auditor or use it in a watch-only wallet. The spend key must stay with the owner alone.
On Monero, privacy is mandatory for every transaction. On Litecoin, MWEB is an optional mode the user must opt into, while regular transfers stay transparent. Monero also uses different technology: ring signatures, stealth addresses and RingCT.
Conclusion
Monero is the most consistent implementation of the idea of private digital money. Ring signatures, stealth addresses, RingCT and Dandelion++ protect every transaction by default, while RandomX and tail emission aim at long-term decentralization and network security.
That model comes at a price: regulatory pressure, delistings, a steeper learning curve and exposure to hashrate concentration, as the Qubic episode showed. The upcoming move to FCMP++ could strengthen privacy considerably, but its activation timeline should be followed through official sources.
If financial confidentiality matters to you and you are prepared to follow the laws of your country and basic security practices, Monero deserves careful study. Start with small amounts, use a non-custodial wallet and never store your seed in digital form.