The leak that survives everything else
Privacy coins hide what is on the chain. They do nothing about the network layer: the IP address that visited the exchange, connected the wallet to a node, and broadcast the transaction. A Monero wallet on a home connection, talking to a remote node, tells that node "this IP is interested in these outputs" โ which, over time, is an ownership map. The four tools below exist to break that link. They are not interchangeable.
The four, compared
| Tor | Commercial VPN | Decentralised VPN (dVPN) | Nym mixnet | |
|---|---|---|---|---|
| How it works | Three volunteer relays; each knows only its neighbours | Encrypted tunnel to the provider's server; provider sees everything | Encrypted tunnel to a node run by an individual, paid per use in tokens | Packets shuffled and delayed across a mixnet with cover traffic |
| Who can see your traffic and origin together | No single party | The provider | The exit node operator | No single party; timing analysis resisted |
| Speed | Slow | Fast | Varies | Slower than VPN |
| Cost | Free | Subscription | Pay-as-you-go in crypto | Subscription / token |
| Trust required | In the design, not in any operator | In the provider's logging policy | In the exit node, which could be anyone | In the design and the node set |
| Best for | Browsing, wallet node connections, anything that must not be linkable | Everyday use, streaming, speed | Censorship circumvention, avoiding a single provider | Metadata-sensitive communication |
Tor: the default for crypto privacy
Tor routes your connection through three relays, encrypting in layers so that the entry node knows your IP but not your destination, the exit node knows your destination but not your IP, and the middle knows neither. Nobody has to be trusted; the design does the work.
For crypto specifically:
- Tor Browser for visiting exchanges and explorers. Many services, including account-free exchanges, work fine over Tor; some block exit nodes.
- Monero wallets over Tor. The official GUI/CLI and Feather can route to a node over Tor natively; Cake Wallet and Monerujo can use a Tor proxy on the device (Orbot). This removes the "remote node sees my IP" leak.
- Bitcoin wallets over Tor. Bitcoin Core, Sparrow and some mobile wallets support Tor; it hides which addresses you ask about and where you broadcast from.
- .onion services. Some exchanges and nodes publish onion addresses; they avoid exit nodes entirely.
The weaknesses: speed, exit-node snooping of unencrypted traffic (irrelevant for HTTPS and wallet RPC over TLS), and the fact that using Tor is itself visible to your ISP unless you use a bridge.
Commercial VPNs: convenience for the price of one trusted party
A VPN moves your trust from your ISP to the VPN company. If the company keeps no logs and is honest, your ISP sees only a tunnel and websites see the VPN's IP. If it keeps logs, it has a complete record. A VPN is the right tool when speed matters and your threat model does not include the provider โ everyday browsing, keeping your ISP out of your traffic, changing apparent location.
Two things matter when choosing one for crypto use: an independently audited no-logs policy, and anonymous payment. A VPN paid by card is tied to your name. Mullvad and IVPN accept Monero; several others accept Bitcoin. Paying in XMR โ which you can obtain from any coin via an account-free swap, for example BTC โ XMR or USDT (TRC-20) โ XMR โ means the subscription itself does not identify you.
Decentralised VPNs: no company, but an exit node you do not know
dVPNs (Mysterium, Orchid, Sentinel and others) replace the company with a marketplace: individuals run nodes, you pay per bandwidth in the project's token, and your traffic exits through a stranger's connection. The advantages are censorship resistance (there is no single provider to block) and no subscription tied to an identity. The disadvantage is that the stranger is now your exit node: they see your destinations and any unencrypted content, and there is no audit or policy protecting you. For HTTPS traffic to an exchange this is tolerable; for anything sensitive, combine it with Tor or choose a mixnet.
Payment is in project tokens, which are not on SyntheticSwap's core list; the practical route is to hold a major and use the project's own on-ramp.
Nym: metadata resistance
Nym is a mixnet: packets are split into uniform pieces, delayed and shuffled through multiple layers of nodes, with cover traffic so that an observer watching both ends cannot correlate timing. This addresses a weakness that Tor accepts โ a powerful adversary watching entry and exit can, in principle, match traffic patterns. NymVPN, launched in 2025, offers both a fast mode (two-hop, VPN-like) and an anonymous mode (five-hop mixnet). It is the strongest option on the list for metadata-sensitive use and the slowest.
A practical setup for a crypto user
- Tor Browser for exchanges, explorers and anything where linkability matters. Free, strong, no account.
- Wallet over Tor โ Monero via the wallet's Tor option or Orbot; Bitcoin via a Tor-capable wallet or your own node's onion service.
- A Monero-paid VPN for everything else on the device, so daily traffic does not expose your ISP-level identity. Pay in XMR from a swap.
- Own node where you can; it removes the remote-node leak that no network tool fixes.
- Never mix identities across the same circuit. Do not log in to a KYC exchange and then visit an account-free one in the same Tor session or VPN connection; new circuit, or different tool.
Frequently asked questions
Is a VPN enough? For most people, for everyday privacy from the ISP, yes. For the specific goal of not linking your IP to crypto activity, Tor is better because it does not require trusting anyone.
Does Tor make my swap anonymous? It hides your IP from the exchange and the node. It does nothing about the chain โ that is what a privacy coin is for.
Can I use Tor and a VPN together? Yes; VPN โ Tor hides Tor usage from the ISP; Tor โ VPN is rarely useful. Neither is necessary for most threat models.
Why pay in Monero rather than Bitcoin? A Bitcoin payment is a public record from your address to the VPN's; Monero is not. The subscription stays unlinked.
Which is fastest? VPN, then dVPN, then Nym fast mode, then Tor, then Nym anonymous mode.
BTC โ XMR
USDT (TRC-20) โ XMR
XMR โ BTC
ETH โ XMR