xmr.club
EN 中文 ES RU
★ FRONT-PAGEASageSwap— Anonymous swap — no KYC, no AML hold, no IP logging, declines law-enforcement requests.→
/exchanges · verified 2026-07-29

El Capo

F

Monero-first instant swap — no ID, no name, no email, no records after 30 days. Tor-native with published onion mirror. kycnot 9/10. Self-branded around XMR as the operational default. Per-order letter of guarantee added 2026-08.

Maintainer: El Capo team ⚠

Incident timeline

  1. 2026-07-09 VICTIM 1 (first sign) — a user reported a ~$105,000 El Capo scam with the identical pattern: a $10k order worked, then ~60 ETH was taken -> hold -> expired -> denied. Unverifiable at the time (anonymous, operator produced no tx-hash), so it was not actioned; corroborated in hindsight by victims 2 and 3.
  2. 2026-09-08 VICTIM 2 — Grade A -> F. A ~$45,400 order (KR-71B69B10, 0.57395628 BTC) was created via El Capo's partner API; they swept the BTC on-chain (tx 629df2a3...f0408f) from the address their API issued, delivered no XMR, then denied the order existed. Sponsorship terminated; router routing to El Capo disabled.
  3. 2026-09-09 VICTIM 3 — 79.55 ETH (order B29A7FF45D73546E72C86F7613423FCC) reported: an 11 ETH order completed fine, then the large order was taken and denied. Third independent victim; repeat-offender pattern confirmed.
  4. 2026-09-09 Evidence — El Capo's own API reported order KR-71B69B10 as CONFIRMING at 17:22 UTC (our monitor mirrors only the provider), then returned not-found for it while still serving our other El Capo orders. They had the order they deny.
  5. 2026-09-09 Peer directories acted: Monerica, SwapRaven and BitMixList flagged El Capo; kycnot.me filed a Scam status (citing xmr.club).
  6. 2026-09-11 A reporter privately provided cryptographic proof tied to one of the disputed orders.
  7. 2026-09-11 That proof was independently verified — it confirms El Capo issued an order it denies. Held PRIVATELY at the reporter's request (not published); available to peer directories for verification on request.
  8. 2026-09-11auto The 0.57 BTC / 87.33 XMR non-delivery is unchanged: no operator admission, refund, or on-chain recovery. Independent directories have now publicly marked El Capo a scam and delisted it, while elcapo.io remains live and still advertising swaps. A claimed second large-order victim is unverified by the reporting direct…

At a glance

Grade
F ()
Rate integrity
98.5% of quoted delivered (small sample · 30d, measured by kyc.rip)
Last verified
2026-07-29
Operating since
operator-claims c.2026
Tor mirror
http://elcapo4l4xad5iipvv6ewg46x6jgb26ed43e5jbrlajxatjoxybue4id.onion
Incident
⚠ Active since 2026-09-08 — /incidents
curator verdict · bottom line

Curator Verdict & OpSec Breakdown

THE BOTTOM LINE

El Capo carries significant OpSec reservations, unverified compliance claims, or unresolved incident flags. It is not recommended for critical privacy workflows.

✓

Proven Strengths

  • ▸ Tor-native accessibility: active, verified .onion hidden service mirror available.
⚠

OpSec Trade-offs & Caveats

  • ▸ ACTIVE INCIDENT (2026-09-08): El Capo is a repeat exit-scammer — **at least three independent victims** reported to date (~$105,000 in July 2026, ~$45,400 and 79.55 ETH in September 2026), each with the identical playbook: a small order completes fine to build trust, then a large order is taken, flipped to "hold"/"expired", and the order is denied. The fully-documented case: On 2026-09-07 an order to swap 0.57395628 BTC -> 87.33135572 XMR (~$45,400) was created through El Capo's own partner API, which returned the order ID (16B53402BD0BA087C06855ED9CD3293E) and a BTC deposit address (bc1qw0zr6z996td5pg39wa20a5vryhavhq4fcgr79n). The user funded that address (deposit tx cc16c51224c6a3387d01f782ade4d78d69783f563555d573c7894bad65512801); El Capo then swept the deposit into its consolidation wallet (sweep tx 629df2a314b2e49036488f05de2c51bf7dd09cd198bb344776d29d6e04f0408f) -- an on-chain spend FROM the address their API issued, which proves their control of it. The 87.33 XMR was never delivered. When the dispute was raised, El Capo denied the order had ever existed and stalled support past the resolution window. This route is operated non-custodially: the deposit address was El Capo's own, relayed to the user; the funds were never held by us. An operator that fulfils an order proves delivery; one that disowns an order while its own key demonstrably swept the deposit is exit-scamming.
  • ▸ Standing reliability caveat: We graded El Capo A on months of clean operation, and they were a paying headline sponsor -- which is exactly what a patient exit-scam invests in earning. The A was honest on the evidence then; this reversal is honest on the evidence now. Trigger: a ~$45,400 non-delivery on order KR-71B69B10 (2026-09-07). El Capo's partner API issued the deposit address, their own key swept the BTC on-chain, they delivered no XMR, then denied the order existed and stalled past the 24h ultimatum. Grade dropped A -> F; the headline sponsorship has been terminated. Grades are not for sale and a paying sponsor gets no shield -- that is the entire point of the firewall. Beyond the sponsorship, we also earned affiliate revenue-share routing orders to El Capo; we are ending that routing and warning users away, forfeiting that income. Neither our grades nor our routing are for sale -- we are downgrading a service we were paid by and profited from, against our own financial interest, because it stopped paying users.

Review

> INCIDENT (2026-09-08) - grade dropped A -> F. El Capo failed to deliver a ~$45,400 Monero order (ref KR-71B69B10): their partner API issued the BTC deposit address, their own key swept the deposit on-chain (sweep tx `629df2a3...`), and they then denied the order ever existed and stalled support. We route this non-custodially and never held the funds. Do not send funds to El Capo. They were an A-grade listing and a paying headline sponsor - that slot is pulled and the grade is F; grades are not for sale. We also earned affiliate rev-share routing to El Capo - we are ending that too and forfeiting the income. Full account below.

What it is. Monero-first instant swap service. Currently observed pairs include BTC → XMR and XMR → USDT (fixed or float rate). The site is explicitly built around Monero (*"XMR — the cartel's coin of choice"*), with Tor-native styling and a published onion mirror at `elcapo4l4xad5iipvv6ewg46x6jgb26ed43e5jbrlajxatjoxybue4id.onion` (verify from Tor Browser before quoting).

Data collection. Advertised as *Ghost Mode*: no ID, no name, no email. Order records are advertised as deleted after 30 days, or *"sooner on request."* No account is required for a swap; deposit-to-receive is the entire flow. Operator publishes an explicit Level 0 KYC posture — no ID, docs, selfies, or source-of-funds requested at any order size.

AML posture — Level 0 with risk-based pricing. Operator publishes an explicit no-gatekeeping AML policy: swaps are never blocked, frozen, or de-anonymized on AML grounds. A free AML risk check is available on request, and the resulting risk score is used only for risk-based pricing — it may adjust the fee and the final amount received, but never to deny, delay, or identify the customer. That posture is unusually direct for the instant-swap category, where "AML gatekeeping" is the standard shape of KYC-triggering behaviour mid-swap.

Per-order letter of guarantee (added 2026-08). As of August 2026, El Capo issues a signed letter of guarantee for each order — an operator-supplied protection artifact tied to a specific swap. The letter accompanies the order flow (announced to the directory directly by the operator; format not independently verified in a separate follow-up test yet). Practical value: adds a written commitment tied to the specific transaction, which strengthens the reader's recourse position vs a swap-only handshake — useful especially for larger orders where a paper trail of what was promised has material weight.

Liquidity & pricing. El Capo operates on its own liquidity book (not an aggregator or order-router-through-others), with a 0.75% margin baked into the displayed rates — the operator publishes both facts openly, which is unusually direct for the category. Margin is absorbed into the quoted rate rather than surfaced pre-swap on the widget; factor it in when comparing quotes across services.

Peer position. Two independent peer-directory anchors: kycnot.me at 9/10 (`/service/el-capo`) and monerica.com (`/site/el-capo`). Reciprocally, El Capo's own post-swap success page embeds xmr.club's *Rate-Us* badge alongside the KYCnot.me and Monerica prompts — actively routing satisfied customers to all three directories most likely to move readers on a grade. That's material trust-signal reciprocity, not just listing tolerance.

Test swap (2026-07-05). Small-order end-to-end swap completed clean:

  • 0.32 XMR → 101.59882 USDT-ETH
  • Rate 316.576763 USDT/XMR (FLOAT) — variance ~0.04% vs quote
  • Effective completion ~4 min from broadcast to credit
  • Minimum order size: $100; rate lock: 20 min from order creation

Confirmation policy. Operator publishes an up-to-10 confirmations ceiling for XMR — a documented maximum, not a floor. Observed behaviour at the ~$100 tier: 1 confirmation was effective (the "10 confs" widget text is informational at that size). Larger amounts likely tighten toward the ceiling; the operator has not published a per-tier threshold, so if you're moving a five-figure amount, budget for the full 10-conf wait or ask support to confirm the per-order requirement. Edge case: a first attempt at Slow/Default priority sat in mempool and expired around the 20-min mark; resend at Fast priority cleared in a single confirmation. Reader tip: don't skimp on the fee when the rate is locked.

Why Grade A. Seven converging signals: (a) kycnot 9/10 peer score, (b) monerica corroboration, (c) working onion mirror advertised on the clearnet homepage, (d) explicit no-data-collection framing that survived an end-to-end test, (e) transparent fee/rate handling — 0.75% margin operator-published + quoted rate held within 0.04% of settled rate on FLOAT, (f) operator-side reciprocal directory linkage (Rate-Us badge embed on the success page), (g) explicit Level 0 AML posture — never blocks, freezes, or de-anonymizes on AML grounds; risk-score used only for risk-based pricing, never for gatekeeping.

Tenure caveat. Publicly verified on xmr.club since 2026-07-03. Grade A is granted on the strength of structural + verified operational signals rather than 90-day tenure. A 90-day re-check remains scheduled (2026-10-01); a serious incident before then drops the grade to C or lower without appeal.

Caveats. Branded copy leans on cartel imagery (*"cartel's coin of choice"*) — stylistic choice, not a functional concern, but worth noting for readers who care about how a service self-positions. Fee is not surfaced pre-swap on the widget; it's absorbed into the quoted rate. Larger-amount confirmation behaviour is bounded by the operator's up-to-10 published ceiling — budget accordingly for large orders and confirm the per-order requirement with support ahead of time.

Live ops data

Typical XMR settlement
12.9m (median)
90th percentile
37.4m
Slow tail (>30m)
20%
XMR confs required
10 (~20m wait)
Routing volume
occasionally routed

Computed from kyc.rip routing observations · 90d window · last updated 2026-09-30

Links

Sourced from operator pages — verify identity via more than one channel before trusting time-sensitive instructions.

Audit trail — receipts for the editorial claim

  • ● UPSTREAM Up · HTTP 200 · 95ms · checked 22h ago
  • ○ ONION Listed but operator doesn't advertise it (expected for Tor-only services + some clearnets) — elcapo4l4xad5iipvv6ewg46x6jgb26ed43e5jbrlajxatjoxybue4id.onion
  • ✎ MANUAL Last manual verification 2026-07-29 (<90d)

Reviews — moderated · rules

  • lost 79.55 ETH ★☆☆☆☆ 2026-09-09

    amount : 79.55 ETH order ID : B29A7FF45D73546E72C86F7613423FCC deposit address : 0x24E9B9CCDECb267946502158d39106Ce3722c4D6 created on : 06/Sept/2026 The order is pending, and there has been no response via email. exit scammed after successfully completed a 11 ETH transaction. I downloaded the letter of guarantee and their signing key. Due to character limitations, I can't post them here. It's better not to give a rating if the service is not older than 5 months. The admin can contact me at : [contact redacted]

  • anon ★☆☆☆☆ 2026-09-08

    terrible scammer.

  • anon ★★★★★ 2026-08-08

    Monero to btc. Quick rate didn’t move, support responded in less then 5 min. Got my funds - they even shared the aml of my new funds. Great one

  • anon ★★★★★ ✓ VERIFIED $50-200 BTC→XMR 2026-07-27

    fast settlement

Add a review

Honest, brand-neutral feedback welcome. A curator approves before it appears here. No JS required.

Required: review body. Honest, descriptive reviews get approved within a day. Marketing copy, slurs, or invective get rejected. Per-day cap of 5 submissions per IP.