# XMRVCC

Category: cards · Virtual Single-Use
Grade: B
KYC: anonymous_signup, no_kyc
Highlights: NO-KYC, XMR, BTC
Features: custodial, no_account
Fees: Custom balance · NOWPayments processing fee + operator margin embedded in card price · BTC/XMR/LN
Web: https://xmrvcc.com
Contact: Email: contact@xmrvcc.com · Telegram: https://t.me/userTalha · Signal: XMRVCC.50
Last verified: 2026-06-01
Operating since: 2025-10-15 (1y)
Also listed at: KYCnot.me, Monerica

> Disposable virtual credit card — crypto checkout (BTC/XMR/LN), no KYC, no account, manual delivery.

## Review

Disposable virtual credit card (VCC) service paid in crypto — choose a balance, pay via NOWPayments, receive a single-use card number delivered manually by the operator. Listed at **Grade B** because two peer directories confirm the listing, the ToS explicitly disclaims KYC and logging, and user reviews across three platforms report successful purchases, but the service is only 7 months old with no Tor mirror and manual delivery introduces a trust dependency on the operator's availability.

**What it is.** Single-use virtual credit card paid with cryptocurrency — one product (Disposable VCC), one checkout path, one Order ID for status tracking and card access. Listed at **Grade B** on the strength of a published no-KYC/no-log ToS, multi-platform user reviews, and two peer-directory matches; held under A by operational youth, manual delivery, and the absence of a privacy policy and Tor mirror.

**Background.** Operating since October 15, 2025 per kycnot.me tracking (brief.peer_matches.kycnot — 'Operating since Oct 15, 2025'). The operator maintains an active presence across multiple community platforms: a Bitcointalk announcement thread, a Monero Forum directory entry, an XMRBazaar listing, and profiles on kycnot.me and monerica.com (operator-published, brief.homepage social-proof links). No `/about` page exists (brief.sweep./about: 404). The service is operated by an individual or small team reachable via Telegram, Signal, and SimpleX — a deliberately thin identity surface consistent with the privacy-first positioning. Stage 2b grok not dispatched.

**What you trust.** KYC stance: The ToS states: 'We do not store unnecessary personal data. No email, no KYC, and no tracking logs are permanently stored.' (operator-published, ToS Section 6, https://xmrvcc.com/tos). kycnot.me rates this as KYC level 0/4 — 'Guaranteed no KYC' with 'Terms explicitly state KYC will never be requested' (brief.peer_matches.kycnot). No-log policy: ToS Section 6: 'No email, no KYC, and no tracking logs are permanently stored. However, minimal technical data may be temporarily processed for order handling.' (operator-published). The 'minimal technical data' carve-out is ambiguous — it could include IP addresses, browser fingerprints, or payment metadata during the order window. kycnot.me attributes a 'Strict no-log policy' (+5 Privacy, +3 Trust). No registration: The checkout flow does not require account creation — users pay, receive an Order ID, and use it to retrieve card details (operator-published, homepage flow description). kycnot.me confirms 'No registration needed' (+5 Privacy). Payment surface: NOWPayments processes the crypto checkout (operator-published, homepage: 'CRYPTO PAY — NOWPayments checkout'; ToS Section 8: 'All payments are processed via third-party providers (e.g., NOWPayments)'). NOWPayments is a non-custodial crypto payment gateway. The homepage lists accepted currencies via NOWPayments; kycnot.me lists Monero, Bitcoin, and Lightning support (brief.peer_matches.kycnot). Advertised coins: Bitcoin, Monero, Bitcoin Lightning, plus 'Fiat' and 'Cash' categories listed on kycnot.me. The homepage only references 'crypto' generically; specific coin support is visible at checkout. Consumer reviews: Two verified reviews on kycnot.me averaging 5/5: one customer reports a $120+$30 purchase working for days with responsive support (anti_banding_8003, May 12, 2026); another reports a $240 VCC delivered quickly with no issues (broken_deacon_500, May 12, 2026). One XMRBazaar review at 5/5: seller helped resolve a wrong-card issue and provided buying advice (Pestic34, May 2, 2026). (All sourced from operator-published homepage review section and kycnot.me comments.)

**Operational specs.** Product: Single SKU: Disposable VCC, custom balance, crypto checkout, delivery after approval (operator-published, homepage purchase module). No tiered plans or subscription model — one-off purchases only. Delivery model: Manual — 'All cards are delivered manually by the admin after payment confirmation. Delivery time may vary but typically occurs within a reasonable timeframe.' (operator-published, ToS Section 3). kycnot.me flags this as 'Orders processed manually' (-2 Trust). Manual delivery means card availability depends on the operator being awake and responsive. Refund policy: 'If a card is proven to be non-functional at the time of delivery, a replacement may be provided. Refunds are not guaranteed and are evaluated on a case-by-case basis.' (operator-published, ToS Section 4). This is a weak refund posture — replacement is 'may' not 'will', and refunds are explicitly not guaranteed. Support channels: Email (contact@xmrvcc.com), Telegram (t.me/userTalha), Signal (XMRVCC.50), SimpleX chat link (operator-published, homepage footer). Four channels across different threat models. kycnot.me rates support as 'Basic' (+1 Trust): 'Customer support for this service is average. They answer questions and fix problems in a reasonable time.' User reviews corroborate responsiveness. Tor mirror: None advertised — no onion-location header and no onion URL (brief.technical.advertised_onion: null, brief.onion: null). Clearnet-only. Signal and SimpleX support partially mitigate this for communication, but the checkout and order-tracking pages require clearnet. API surface: `/api/` returns 403 Forbidden (brief.sweep./api: 403, stealth tier). An API endpoint exists but requires authentication or is access-controlled — not publicly documented. Pricing: Custom balance — user chooses the card value at checkout. No fixed tiers or published fee schedule. The NOWPayments gateway adds its own processing fee; the operator's margin is embedded in the card price. No separate platform fee is disclosed.

**Operator philosophy.** The operator positions the service as a focused, minimal-surface utility: one product, one checkout flow, one Order ID. The ToS is written in plain English with direct claims ('No email, no KYC, and no tracking logs are permanently stored') rather than legal hedging. The choice to offer Signal and SimpleX alongside Telegram and email suggests the operator understands the Monero community's threat-model diversity. The 'VCC Vault' branding in the ToS footer (absent from the homepage) hints at back-end service naming but no corporate entity is disclosed — consistent with a pseudonymous operator model.

**Grade rationale.** Listed at **Grade B** because two independent peer directories confirm the listing (brief.peer_matches._any_count: 2 — kycnot.me and monerica.com, both direct hits), a published ToS explicitly disclaims KYC and logging with quotable language, and user reviews across three platforms (kycnot, XMRBazaar, Trustpilot) report successful purchases with responsive support. Grade A is withheld because: (1) the service is only 7 months old per kycnot (brief.peer_matches.kycnot — operating since Oct 2025, flagged -4 Trust as 'New service'); (2) no privacy policy exists (36/39 paths 404, no /privacy, /privacy-policy, or /legal/privacy resolved — brief.sweep_summary); (3) manual delivery introduces an operator-availability dependency and prevents instant card issuance; (4) no Tor mirror. Among VCC/card providers in this directory, publishing a privacy policy and reducing delivery time (or going automated with a Tor-accessible checkout) would justify Grade A.

**Caveats.** The ToS is the *only* legal page on the domain — 36 of 39 slug probed returned 404. No privacy policy, no AML page, no FAQ, no /about, no /contact page (the homepage embeds contact info directly). This is an extreme concentration of legal surface into a single 2.9KB ToS document. The ToS covers the key trust claims but does not replace a privacy policy. 'Refunds are not guaranteed and are evaluated on a case-by-case basis' (operator-published, ToS Section 4) is the weakest consumer-protection language seen in any B-grade listing to date. Combined with manual delivery, the buyer bears substantial counterparty risk — mitigated in practice by positive user reviews, but structurally unaddressed. The NOWPayments dependency introduces a second trust surface: NOWPayments sees the payment amount and crypto address, and their own logging/retention policies apply. Users who want full payment privacy need to trust both the operator's no-log claim AND NOWPayments' data practices. The recommended `feature_tags` include `non_custodial` — this is a template default from the auto-onboard script. A VCC provider holds a balance and delivers a financial instrument; 'non-custodial' is inaccurate. Curator should override before publish.

Source: https://xmr.club/cards/xmrvcc