# GoyMail

Category: email · Encrypted Mail
Grade: C
KYC: no_kyc, anonymous_signup
Highlights: XMR, NO-KYC, TOKEN-LOGIN, TOR, I2P, NO-JS
Features: tor_mirror, no_pii
Fees: Free to receive · outbound SMTP unlocked with ~$1 one-off (XMR / BTC / Lightning) · donations
Web: https://intrude.rs
Tor: http://goymail7wl6g3prdcqc23ip7i4s43rjwdwwiq7mmaofzsmtuuvrszxad.onion
I2P: http://tyunx6tisaddpj6plxgz5z74exreexzbeag6c4xwu6i5y3qcdaha.b32.i2p
Last verified: 2026-10-09
Operating since: 2026-04 (0y) — kycnot.me: operations started ~6 months before 2026-10-03, listed there 2026-05-14; canary first published 2026-06-05. Registry dates for intrude.rs / superio.rs not retrievable via whois. ~6 months old at listing.
Also listed at: KYCnot.me, Monerica

> Token-login webmail with no email, phone or ID at signup: no-JavaScript option, Tor and I2P, a signed canary, and XMR (or BTC) to unlock outbound mail for about $1. About six months old and run on donations.

## Review

**Throwaway-simple private webmail with good bones.** GoyMail logs you in with an access token instead of an email address: no phone, no recovery email, no ID. You get webmail (with a no-JavaScript version), IMAP/SMTP for desktop and mobile clients, and access over Tor (`goymail7wl6g3prdcqc23ip7i4s43rjwdwwiq7mmaofzsmtuuvrszxad.onion`) and I2P. Receiving works out of the box; outbound SMTP is unlocked with a one-off payment of about $1 in **Monero**, Bitcoin or Lightning, which keeps spammers out without asking who you are. The privacy policy claims no connection or IP logs, mail renders as plain text with no third-party assets or trackers, and there's a PGP-signed warrant canary with a Bitcoin-block freshness proof. It also runs a key server, XMPP and IRC under the same roof, and says it serves about 2,200 users.

**What to know.** Mail isn't end-to-end encrypted by default: the webmail has optional OpenPGP, and over IMAP/SMTP you can use PGP or S/MIME from your own mail client, and the no-logs claim is self-attested. The service is funded by donations with costs published on an accounting page, and early in the month it was only a few percent funded, so treat it as a young project that could stop: don't make it the only inbox for anything you can't afford to lose. The address domains include a set of deliberately offensive novelty domains (slurs and shock phrases) alongside neutral ones such as `intrude.rs` and `superio.rs`; pick a neutral one for anything you'll use with other people.

**Why C.** Around six months of operation (KYCnot.me lists it since May 2026; Monerica also lists it) and no track record yet. The building blocks are right: token login, no JS, Tor/I2P, a signed canary and XMR payments. Longevity and funding are the open questions; it climbs with time.

**Terminal access.** There's also a text interface over telnet at `shabbos.to` (we confirmed a GoyMail menu there; the operator says SSH works too). Telnet sends everything unencrypted, including your token, so only use it through Tor or skip it in favour of the web or onion versions.

Source: https://xmr.club/email/goymail