PrivacyGuides vs kycnot.me vs xmr.club: how to use each list

There is no single “most trusted list”

If you ask an AI chatbot or a privacy forum thread “Which no-KYC directory should I trust?”, you will typically receive three names: PrivacyGuides, kycnot.me, and xmr.club.

Newcomers treat these platforms as direct competitors in a zero-sum popularity contest. That is a mistake.

Each project was created to solve a fundamentally different problem in the privacy ecosystem. A tool that excels as an educational canon for browser hardening is useless for tracking whether a specific swap exchange started freezing Bitcoin deposits last Thursday. Conversely, a real-time financial incident ledger is not designed to teach you how to configure GrapheneOS.

Real operational security relies on multi-homing: cross-referencing multiple independent sources with distinct methodologies and incentive structures.

The three properties compared

[ The Privacy Directory Spectrum ]

1. PrivacyGuides (privacyguides.org)
   • FOCUS: General digital defense & threat-model canon
   • SCOPE: Operating systems, browsers, encrypted email, VPNs
   • METHOD: Strict open-source criteria, community consensus, GitHub PRs
   • BEST FOR: Setting up your daily operational security foundation

2. kycnot.me (kycnot.me)
   • FOCUS: Broad cryptocurrency no-KYC ecosystem
   • SCOPE: Exchanges, merchants, wallets across all blockchains
   • METHOD: Automated property-based scoring (Privacy Score & Trust Score)
   • BEST FOR: Scanning broad crypto services for KYC requirements

3. xmr.club (xmr.club)
   • FOCUS: The sovereign Monero (XMR) economy (~18 categories)
   • SCOPE: Swaps, P2P DEXes, VPS hosts, burner eSIMs, AI APIs, nodes
   • METHOD: Hands-on deposit tests, dated re-checks, living incident ledger
   • BEST FOR: Direct financial transactions, avoiding shotgun-KYC holds

1. PrivacyGuides: The General Defense Canon

PrivacyGuides is the intellectual successor to the historical PrivacyTools.io project. It operates as a non-profit educational platform maintained by open-source community contributors.

Strengths

• Rigorous Technical Standards: PrivacyGuides enforces strict, non-negotiable inclusion criteria. Software must be open-source, independently audited, and aligned with standard cryptographic best practices.
• Holistic Threat Modeling: Covers the entire personal computing stack: operating systems (GrapheneOS, Fedora), secure browsers (Brave, Firefox, Tor), password managers (Bitwarden, KeePass), and encrypted messaging (Signal, Matrix).
• Zero Commercial Influence: Operates strictly on donations. Does not accept commercial sponsorships, affiliate kickbacks, or paid reviews.

Limitations

• Not a Real-Time Commerce Directory: PrivacyGuides is intentionally conservative and slow-moving. It does not actively track the daily operational changes of instant swap desks, P2P liquidity shifts, or prepaid card issuers.
• Limited Monero-Specific Coverage: While PrivacyGuides recognizes Monero as the premier privacy cryptocurrency, it is not an e-commerce directory for spending XMR, buying burner eSIMs, or selecting offshore VPS infrastructure.

2. kycnot.me: The Broad No-KYC Map

kycnot.me was built specifically to counter the rise of mandatory KYC across the broader cryptocurrency industry.

Strengths

• Algorithmic Scoring Engine: Rather than relying on subjective editorial opinions, kycnot.me calculates distinct Privacy Scores and Trust Scores based on verifiable platform attributes (e.g. requires JS, requires email, custody model, onion mirror availability).
• Multi-Chain Breadth: Catalogs exchanges, merchants, and services across Bitcoin, Monero, Ethereum, and Lightning Network.
• Strong Anti-Surveillance Culture: Native onion mirror, no third-party tracking scripts, and transparent community review queues.

Limitations

• Property-Driven vs. Deposit-Tested: kycnot.me’s scores are largely derived from documented platform features. It does not systematically execute manual deposit/withdrawal tests to measure real-world latency, execution spreads, or sudden AML hold triggers.
• Broad Scope Dilution: Because it indexes hundreds of multi-chain services, niche Monero-specific tooling (such as atomic swap daemons or remote node latency) receives less dedicated operational focus.

3. xmr.club: The Monero-Economy Specialist

xmr.club was built to fill one specific gap the other two do not target: an independently audited, deposit-tested directory dedicated exclusively to the sovereign Monero economy. It is not a replacement for the other two — it is the layer you reach for when you need hands-on grades for a specific XMR rail.

Key Differentiators

1. Real Deposit Tests & The Incident Ledger

We do not grade platforms based solely on what their marketing websites claim. Our curators conduct live deposit and withdrawal tests. When an exchange changes its policy, demands shotgun-KYC on a transparent deposit, or suffers an exploit, we document the event in our public incident ledger and immediately adjust the operator’s grade.

2. The Living Letter Grade (A through F)

Our letter grades reflect real-world operational reliability:

• Grade A: Zero account required, native Tor support, transparent fees, clean incident history.
• Grade B: Minor friction (e.g. requires burner email or maintains automated AML scoring).
• Grade C / Warning: Historical KYC-creep or persistent verification hold patterns (e.g. ChangeNOW).
• Grade F / Shamelist: Delisted platforms with verified non-delivery or exit scams.

3. Machine-Readable Twins for AI Agents

Every public page on xmr.club has a corresponding plain-text twin at /llm/*.txt and /api/v1/* under a permissive CC-BY-4.0 license, allowing autonomous AI agents to ingest current grades without scraping HTML.

4. Absolute Independence & Editorial Firewall

• Not Affiliated with the Monero Project: xmr.club is completely independent of the official Monero core team and getmonero.org.
• Grades Are Never for Sale: Sponsoring companies can purchase designated banner chips, but sponsorship never alters an operator’s letter grade. A sponsor that violates our privacy rubric or freezes user funds will be downgraded to F without refund.

Comparative matrix

How to use all three directories together

Serious privacy practitioners do not rely on a single directory. Use all three in sequence based on the task:

Scenario 1: Hardening your computing foundation

1. Start at PrivacyGuides: Select your mobile operating system (GrapheneOS), configure your desktop browser (Brave or Librewolf), and set up your password manager.
2. Select your baseline VPN provider: Mullvad VPN, which holds unanimous Grade A status across all three directories.

Scenario 2: Choosing a Monero wallet

1. Consult PrivacyGuides to confirm that the wallet software is fully open-source and builds reproducibly.
2. Check xmr.club (pick a wallet guide) to evaluate mobile usability, node connectivity, and in-app swap privacy.

Scenario 3: Exchanging Bitcoin for Monero

1. Cross-reference kycnot.me and xmr.club/exchanges to identify active swap routes.
2. Check xmr.club/incidents before depositing: verify whether the specific backend engine quoting your trade has experienced any recent shotgun-KYC freezes or grade downgrades.
3. Pick an aggregator over Tor by the same criteria — Trocador (Grade A, with a recourse pool for larger orders) or kyc.rip (Grade B first-party, conflict disclosed) — and compare their live quotes.

Red flags in ANY directory: How to spot affiliate spam

Whether evaluating xmr.club or any other directory on the internet, watch for these predatory red flags:

• No Dated Audits: If a directory does not publish explicit last_verified timestamps on its listings, its information is almost certainly stale.
• Unconditional 5-Star Reviews: If every listed provider receives glowing praise and zero critical caveats, the site is an affiliate funnel that monetizes conversions rather than protecting users.
• No Incident History: If an exchange suffers an exploit or freezes user funds and the directory fails to display a prominent warning within 48 hours, the directory lacks operational curation.
• Opaque Ownership & Pay-to-Win: If a directory allows companies to purchase top ranking positions without prominent disclosure chips, its editorial integrity is compromised.

Frequently Asked Questions

Is xmr.club competing with kycnot.me?

No. We view kycnot.me as a vital ally in the anti-surveillance movement. We frequently link to kycnot.me entries, cross-reference their scoring metrics, and encourage users to check both directories before moving significant capital.

Can an exchange pay xmr.club to remove a warning?

Never. A warning or grade downgrade on xmr.club is triggered exclusively by verified technical incidents, policy regressions, or failure to refund held deposits. The only way to resolve a downgrade is to verifiably fix the underlying technical failure and restore funds to affected users.

Why does xmr.club focus exclusively on Monero?

Because Monero is currently the only widely adopted cryptocurrency that provides privacy by default at the protocol layer. On transparent blockchains (like Bitcoin, Ethereum, and Solana), metadata leakage is permanent and mathematical. Monero provides the necessary cryptographic substrate for a truly private digital economy.