SwapNoKYC 9.6 / 10

SwapNoKYC is a non-custodial crypto swap aggregator that has operated since 2020, polling aggregated order books across dozens of liquidity venues to quote the best executable rate for any pair among 70+ supported coins and 20+ networks. The site has a single focus — moving value across chains without an account, an email or an identity document — and it ships that focus with unusual rigor: no analytics, no third-party trackers, a zero-log posture documented end-to-end, and a refund-first policy for upstream-flagged orders.

How it works

A visitor picks a sending asset and a receiving asset from a widget on the homepage (BTC, ETH, XMR, Lightning, SOL, native Tron, Cosmos, XRPL and the major stablecoins on every EVM network are all present), pastes a destination wallet address, and optionally enters a refund address. The backend provisions a single-use deposit address, valid only for this order. The visitor sends the deposit; after the sending chain confirms, the aggregator executes the swap at the best rate available at that moment and forwards the output to the destination wallet. Median end-to-end time: about 8 minutes, dominated by deposit confirmation on the source chain. Lightning deposits settle in under a minute.

Both rate models are supported: float re-quotes at confirmation and tracks the market (tighter spread), fixed locks the quote for ten minutes (wider spread, price certainty).

KYC & privacy

The stance is as close to architecturally trustless as a web frontend gets. There is no user account — no email, no password, no seed, no 2FA enrolment, because there is no identity to protect. Each swap is an independent capability: the order ID plus a bearer token embedded in the URL you hold. The server keeps a minimal order record (pair, amounts, deposit and payout addresses, created-at timestamp) and purges it on settlement, or within 30 days in the worst case.

Nginx access logs (method, path, status, user-agent) rotate every 24 hours. The only cookie is a short-lived CSRF session token with no identifier inside. There are no analytics tags, no Google/Meta pixels, no behavioural tracking, no fingerprinting. Tor and VPN traffic is welcome and unrestricted. The published /transparency page lists every third party the service calls and the exact payload each one receives.

Strengths and limits

The strongest signal is operational discipline: many "no-KYC" swap frontends accept the no-KYC claim at face value but still drop Google Analytics, a Meta Pixel and a long-retention session cookie on the page. SwapNoKYC ships a restrictive Content-Security-Policy, HSTS-preload-ready headers, a Permissions-Policy locking geolocation/camera/microphone/payment to none, and a public security contact. The comparison page is unusually honest — it flags where competitors match or beat the site on specific features, rather than cherry-picking.

Limits: the order book is routed through a liquidity layer, which means screening of deposit addresses against sanctions and illicit-flow feeds can fire on individual orders. The site is transparent about this and offers a refund-first resolution path with no identity demand. The frontend codebase is not open-sourced, so verification of the zero-log posture rests on the published architecture and on operator reputation rather than on auditable source.

Verdict

Scored 9.6/10 on the NoKYCZone methodology — trustless KYC stance, non-custodial custody model, mature operational track record, and an exceptionally complete transparency report. One of the cleanest no-KYC swap frontends currently in production.