BorsoMonero

BorsoMonero is a Tor-first peer-to-peer Monero marketplace with server-side queue entry, locked-XMR escrow, and a PGP-signed monthly canary. Listed at Grade C as the methodology default for a brand-new no-KYC exchange in a high-loss-asymmetric category; path to B is several months of clean operation, first user reports on record, and peer-directory pickup.

Product. BorsoMonero is a P2P marketplace where users create Buy or Sell offers for XMR. Fiat currencies (~45 supported) are used only for pricing, filters, limits, and payment-method labels — the platform's only tradable asset is Monero. Payment-method taxonomy is wide (SEPA, ACH, Interac, Faster Payments, Cash by mail, cash deposit to bank, IBAN, Alipay, WeChat, M-PESA, Pix, UPI, Cash App, Wise, Revolut — around 80 in total across ~120 country markets).

The queue system. A server-side queue gates entry — every URL initially serves a `You are in queue` page that auto-refreshes every 15 seconds until a session slot opens. Curator probe from clearnet was admitted after 30-60 seconds. Not a placeholder or coming-soon page; the real marketplace lives behind it. Practical implication for the reader: expect a short waiting-room stop before you can browse offers.

Escrow rule (the golden line, per operator FAQ). *Private payment details are shown only after XMR is locked for that trade. No locked XMR means no private payment instructions.* The seller must lock the Monero into escrow before the buyer sees payment instructions. After the buyer pays out-of-band and marks the trade paid, the seller confirms and releases the XMR. Disputes go to staff review that can only move funds already locked to the trade.

Fees. Creating an account, browsing, opening trades, buying, and selling are free. Only the maker pays a 1.00% platform fee on completed trades (0.50% for Premium users). Cancelled, expired, refunded, or failed trades pay nothing. Withdrawals to outside Monero wallets pay the Monero network fee (shown on the wallet page before sending). Transfers between BorsoMonero user wallets are free.

Encryption at rest (operator claim). Sensitive user content — support ticket subjects and messages, dispute details, dispute messages, private payment-related text, proof files, and dispute evidence files — is encrypted at rest per the operator's own FAQ. Public ads, terms, usernames, trade status, timestamps, amounts, and audit records stay readable where needed for trading, safety, accounting, moderation, and dispute review. Claim not first-party verified by the directory today; standard for the P2P-marketplace category.

Warrant canary. A PGP-signed monthly canary is published at `/canary`. Latest at listing time: signed 2026-07-01, valid until 2026-08-01, declaring *"BorsoMonero is online and operated by the current team. The public site is active. The staff and wallet controls have not been intentionally transferred. No BorsoMonero signing key rotation is announced in this canary. This canary should be replaced every month. If this canary is missing, expired, malformed, or unsigned, users should treat that as a warning."* Signed by the BorsoMonero canary key. Monthly rotation is a real ongoing commitment worth respecting.

Privacy-first UX signals. The site shows a `JavaScript is enabled — for better privacy, consider disabling JavaScript` overlay on every JS-enabled visit (dismissable, but the fact it's there at all is a real editorial signal). The site is designed to work with JS disabled — that alone puts it above most fiat-P2P marketplaces on the privacy shelf.

Language surface. Six-language UI: English, Deutsch, Русский, 简体中文, Español, Français. Broad enough to serve the primary Monero-community language groups.

Terms of service. Short, reader-clear ToS at `/terms`. Notably: no advice on any topic, users are responsible for their own local rules, escrow rule is spelled out, staff dispute decisions can only move funds already locked to the trade, false proof or false claims can get an account limited or closed. No surprises; matches the shape of a P2P marketplace that has thought about what it is and is not.

Tenure and what we don't yet know. Wayback has zero snapshots for `borsomonero.com` at listing time. The domain footprint is brand-new. We have no independent third-party mentions, no accumulated user-review history, no observed volume, no track record on dispute-resolution behaviour, no test-trade observation. Grade C reflects that: the surface reads honestly, the mechanics are sensibly designed, but a new marketplace in a category where users can lose real money to a bad-actor-operator has to earn its way to B on time and independent evidence.

What we can't yet verify from the outside. The escrow-mechanic claim, the encryption-at-rest claim, and the dispute-review behaviour all require actual trade observation to confirm — not just reading the FAQ. First user reports, on-chain evidence of paid-and-released trades, or a curator-side test trade would each move the grade math.

Grade C — what it means here. Acceptable with reservations — verify the caveats before depositing. Reservations: (a) brand-new curator-side tenure, (b) zero observed trade history from independent sources, (c) queue-gated entry means the operator can effectively cap concurrent users, and we don't yet know how that capacity scales, (d) all the mechanic claims (escrow, encryption at rest, dispute process) live in operator-published copy without first-party verification. None of these are structural flaws — they are the shape of a young no-KYC P2P marketplace that hasn't had time to prove itself.

Path to B. Several months of clean curator-side observation, first independent user reports on record (ideally with tx hashes for completed trades), at least one canary rotation cycle observed on time, and any peer-directory pickup would each contribute. No promise on timing — the review will refresh whenever new evidence lands.

Bottom line. A privacy-first P2P Monero marketplace with a well-thought-out escrow model, monthly PGP-signed canary, encryption-at-rest claim, and a queue-gated entry that keeps the surface load-controlled. Genuinely aligned with the no-KYC Monero mission. Grade C reflects the tenure default rather than a specific structural concern; the operator's editorial posture reads honestly.