P2P market

RetoSwap review

RetoSwap is a P2P market. ID rule from its own pages: No ID, by design. kycnot.me rates it level 0, Never KYC.

No ID, by design

RetoSwap never asks for ID by design, per its own pages. You hold the keys.

ActiveNo accountOpen source

Latest release: V1.10.0-reto (2026-10-10)

By Ethan ParkerChecked Oct 22, 2026 to Oct 23, 2026How we read the terms

No IDNo account neededID rule: Never, by design. No company holds your order, so nobody can ask. Checked Oct 22, 2026.
Not statedRetoSwap's own pages we checked do not say, checked Oct 14, 2026. This is not the same as no.No-ID limit per trade
XMRPlus BTC, ZECMonero, Bitcoin, Zcash: supported. Transparent addresses only, per RetoSwap. Transparent Zcash is not private.
Your keysWho holds your coinsEscrow-multisig: Monero sellers lock the XMR in a non-custodial 2-of-3 multisig (buyer, seller, arbitrator); arbitrators hold one of three keys and never custody funds alone; no-deposit offers rely on a passphrase instead of a deposit. Checked Oct 22, 2026.
Tor built inOpen sourceTor onion: Tor built into the app. I2P: None published. Works without JavaScript: Not stated.
Our verdict

Choose RetoSwap if

Who RetoSwap suits, from the values on this page.

RetoSwap suits you if

  • You want to trade with no account and no ID: RetoSwap never asks for ID, by design.
  • You want to keep your own keys: on RetoSwap, you hold the keys.
  • You want Monero: RetoSwap lists it.
  • You want open-source software that trades over Tor.

RetoSwap might not be the right fit if

  • You want Lightning: RetoSwap does not support it.
  • You want shielded Zcash: RetoSwap accepts transparent addresses only.
  • You want a market with no incident on record: RetoSwap had one in 2026.

Best for

P2P without ID

RetoSwap
No ID and no account The ID rule comes from RetoSwap's own pages. Every P2P market on our list shows its rule the same way.

Monero for bitcoin

RetoSwap
Monero and bitcoin RetoSwap lists Monero and bitcoin. Checked Oct 22, 2026.
kycnot.me

What kycnot.me says about RetoSwap

kycnot.me is an independent directory of services you can use without ID checks. The rating and notes below are its own, not ours.

KYC level
Level 0: Never KYC

The terms rule out ID checks altogether. kycnot.me sorts services into five levels, from 0 (never asks for ID) to 4 (ID is mandatory).

kycnot.me score
9 out of 10 Privacy 100 out of 100, trust 83 out of 100
Listing status
Approved
Accepts as payment
MoneroBitcoinFiat moneyCash

Not accepted: Lightning.

Pros kycnot.me lists

  • Refunds do not require KYC
  • Personal info is not verified
  • Non-custodial wallet
  • Open source code
  • Peer to peer network
  • Escrow available
  • Accepts Monero
  • No registration needed
  • Decentralized network
  • Peer to peer market
  • Non-custodial protocol

Cons kycnot.me lists

  • Active incidents

Also noted: Mobile app available

Events kycnot.me lists

  1. 2026Oct 10, 2026: Update. kycnot.me writes: “v1.10 released | update recommended”
  2. 2026Jun 30, 2026: Update. kycnot.me writes: “Android app v1.0.7 released | update encouraged”
  3. No date given: Update. kycnot.me writes: “RetoSwap 1.8.0 released | security issue fixed”

Source: the kycnot.me listing. RetoSwap on kycnot.me (opens in a new tab)

Checked October 22, 2026

Platform

Inside RetoSwap

Screenshots taken November 3, 2026

Platforms
Desktop client for Windows, macOS (Intel, Apple Silicon) and Linux (AppImage, Flatpak, deb, rpm); Android APK (RetoSwap-App v1.0.8-reto, 2026-06-30)

What you get with RetoSwap

Yes, no or partly, from our data

Privacy 3 of 6, 1 partly

  • No IDYesBy design
  • No accountYes
  • Tor built inYes
  • Onion addressPartlyTor built into the app
  • I2P addressNoNone published
  • Works without JavaScriptNot statedNot statedRetoSwap's own pages we checked do not say. This is not the same as no.

Coins 2 of 4, 1 partly

  • BitcoinYes
  • MoneroYes
  • LightningNo
  • ZcashPartlyTransparent addresses only

Custody and code 2 of 4

  • You hold the keysYes
  • Open sourceYes
  • Reproducible buildsNot publishedNot published
  • Address screeningNot statedNot statedRetoSwap's own pages we checked do not say. This is not the same as no.
ID check

When can RetoSwap ask for your ID?

Never, by design, per RetoSwap's own pages. Labels come from each provider's terms, never from our guess.

  1. 1Never, by designRetoSwap is on this stepNo company holds your order, so nobody can ask
  2. 2Only if you chooseID only for extras you opt into
  3. 3If a payment is flaggedNo ID by default; checks when a risk system flags you
  4. 4Above a limitID once you pass a stated amount
  5. 5AlwaysID before you trade, deposit or withdraw

If a check comes and you do not pass it

Not applicable: no identity checks. In disputes an arbitrator decides; penalties are taken from the offender's security deposit (up to 100% for fraud or chargebacks)

“Penalties are calculated as a percentage of the trade amount and are deducted primarily from the offending peer's security deposit.”

Not stated on RetoSwap's pages: what triggers a check, fee on refusal, refund policyRetoSwap's own pages we checked do not say, checked Oct 14, 2026. This is not the same as no.

If a trade goes wrong
Integrated arbitration; arbitrators usually reply within 12 hours, up to 7 days; traders must answer within 48 hours
How trust works
Payment account signing: a seller with a signed account signs the buyer's account after a successful payment; no public ratings

Checked October 22, 2026

Fees and limits

What RetoSwap costs

WhatRetoSwap
Trade feeMaker 0.1%; taker 0.8% for crypto trades and 2% for fiat trades (raised in May 2026 to compensate victims of the Haveno exploit); plus Monero network fees
No-ID limitNot statedRetoSwap's own pages we checked do not say, checked Oct 14, 2026. This is not the same as no.

Checked October 22, 2026

Ways to pay
Definitions in client: 83; includes crypto rails: 2; cash: Cash by mail; Cash deposit; Cash at ATM; Face to face
Currencies
Statement: most fiat currencies
Trade limits
Per payment method by risk class: 12.5 XMR (high risk, for example SEPA or Zelle), 25, 50 or 100 XMR; 200 XMR for crypto pairs; minimum trade 0.05 XMR
Typical time
Crypto trades typically complete within minutes; fiat transfers can take up to a week depending on the payment method; the maximum trade period is set per payment method
Your data

What RetoSwap knows about you

Who sees what during a trade, and who runs it.

During a trade

Data the policy collects
No central account; trade account data is stored locally and shared only with the trade partner; end-to-end encryption, Tor and Monero
What your payment reveals
Fiat account details must match the real account holder name and are shown to the trade partner; reference fields must stay blank or carry only the payer name
No ID check does not make a bank payment private.
Zcash
Transparent addresses only, per RetoSwap. Transparent Zcash is not private

Network and who runs it

Network
Tor built inI2P: None publishedWithout JavaScript: Not statedRetoSwap's own pages we checked do not say. This is not the same as no.
Who runs it
Operator: Not named
Governance
Model: Haveno network instance with its own arbitrators
Requests from authorities
Not published
Warrant canary
Not published

Checked October 22, 2026

Safety

Track record and code

Two protocol exploits in May and June 2026 with trading freezes; RetoSwap says its own infrastructure was not breached; trading available again per the October 2026 release.

Incidents

  1. 2026Jun 17, 2026: Second suspension of trading after the Haveno protocol was exploited again (press); losses said to be limited to large crypto trades; release 1.8.0-reto (2026-06-20) shipped security fixes for arbitrator and trade message verification.
  2. 2026May 20, 2026: Haveno trade protocol exploit: attacker impersonated the arbitrator with a forged out-of-order message and gained control of 2-of-3 multisig wallets; press reports about 7,000 XMR (about 2.7 million USD) drained from large crypto trades, fiat trades unaffected; RetoSwap froze trading within minutes by client update. RetoSwap release 1.6.0-reto (2026-05-24) acknowledges the exploit and raised taker fees to help affected traders recover.
License
AGPL-3.0
Audits
Not published
Bug bounty
Not published
Support
SimpleX group; in-app arbitration chat (disputes); X (@RetoSwap); GitHub issues

Checked October 23, 2026

Reddit

Community

Discussions about RetoSwap on Reddit (opens in a new tab) (r/RetoSwap)

More facts

More facts we checked on RetoSwap

Coins listed
Count: 6; assets: XMR; USDT; ETH; BTC; LTC; BCH
Networks
Monero; Bitcoin; Ethereum; Tron (USDT); Litecoin; Bitcoin Cash
Rate type
Not published
Log retention
Not published
Onion address
Not published
I2P address
Not published
Security deposit
Both sides lock a security deposit of 15% to 50% of the trade amount (at least 0.1 XMR); sellers can also post no-deposit offers shared by passphrase
Where you live

RetoSwap in the US and elsewhere

RetoSwap's pages name no blocked country. That is not a promise that it is legal where you live.

In the US

US availability: Available

Blocks US IPs
Terms: no country restriction stated; users must follow their local law
VPN clause in terms
Not published

If you are a US person, US sanctions rules apply to you whether or not a service asks for ID.

Outside the US

Excluded countries: none named on the page we checked.RetoSwap's pages list no excluded country or group. We show no flags because the list is empty.

Regional rule: Not statedRetoSwap's own pages we checked do not say. This is not the same as no.

Site blocks by region
None stated: the network is accessible worldwide and users are responsible for local compliance

Where you live and the provider's terms

Many services on this page do not serve every country. Some exclude people because of where they live or their citizenship, not only where they connect from. Read the provider's terms before you send funds. If the terms exclude you, do not use the service, and do not try to get around the restriction, for example with a VPN.

Taxes

A service that does not ask for ID does not change your taxes. In the US, the federal income tax return asks a yes-or-no question about digital assets, and you must report digital asset transactions whether or not they result in a gain or loss. In the UK, you may owe Capital Gains Tax when you sell, swap or spend crypto, and you must keep your own records. Rules in other countries differ.

No KYC is not anonymity

"No KYC" here means the provider says it does not ask for ID in the cases its terms describe. It does not make you anonymous. The provider's terms may let it ask for ID later. Regulated exchanges you send funds from or to may have to collect information about who sends and who receives a crypto transfer. Your tax duties stay the same.

Funds can be held

If a provider asks for more information during a swap or a withdrawal, it may hold your funds until it gets it. Its terms decide what happens next. In the UK, a crypto business that asks for information on a transfer to or from a self-custody wallet, and does not receive it, must not pass the funds on. Read what the provider's terms say before you send. RetoSwap's terms say that if a check is requested and not completed: not applicable: no identity checks. In disputes an arbitrator decides; penalties are taken from the offender's security deposit (up to 100% for fraud or chargebacks).

Checked October 22, 2026

Alternatives

P2P markets to compare with RetoSwap

Active P2P markets from our list. The shield shows each one's ID rule from its own terms.

Bisq Monero ID rule: Never, by design. No company holds your order, so nobody can ask.
RoboSats Lightning ID rule: Never, by design. No company holds your order, so nobody can ask.
lnp2pBot Lightning ID rule: Never, by design. No company holds your order, so nobody can ask.
Mostro Lightning ID rule: Never, by design. No company holds your order, so nobody can ask.
Vexl Lightning ID rule: Never, by design. No company holds your order, so nobody can ask.

RetoSwap side by side

From our privacy data, the same fields for every market
WhatRetoSwapBisqRoboSatslnp2pBotMostroVexl
ID ruleNo ID, by designNo ID, by designNo ID, by designNo ID, by designNo ID, by designNo ID, by design
AccountNoneNoneNoneNeededNoneNeeded
You hold the keysYesYesYesYesYesYes
MoneroYesYesNoNoNoNo
LightningNoYesYesYesYesYes
Open sourceYesYesYesYesYesYes

Checked October 23, 2026

FAQ

Short answers about RetoSwap

From the data on this page.

Does RetoSwap ask for ID?

RetoSwap never asks for ID by design, per its own pages. There is no account.

Who holds your coins during a RetoSwap trade?

You hold the keys. Escrow-multisig: Monero sellers lock the XMR in a non-custodial 2-of-3 multisig (buyer, seller, arbitrator); arbitrators hold one of three keys and never custody funds alone; no-deposit offers rely on a passphrase instead of a deposit.

Can you buy Monero on RetoSwap?

Yes. RetoSwap lists Monero.

What does RetoSwap cost?

Trade fee: Maker 0.1%; taker 0.8% for crypto trades and 2% for fiat trades (raised in May 2026 to compensate victims of the Haveno exploit); plus Monero network fees.

Author

Who checked this page

Ethan Parker

Senior Content Editor

Every value on this page comes from RetoSwap's own pages and code, read on the dates shown. The kycnot.me section is the exception: it shows kycnot.me's own rating. Checked Oct 22, 2026 to Oct 23, 2026.

Sources

Sources, how we read the terms and our process

Sources

  1. api.github.com/repos/retoaccess1/haveno-reto, for license, checked October 22, 2026
  2. api.github.com/repos/retoaccess1/haveno-reto/releases, for incidents, checked October 22, 2026
  3. api.github.com/repos/retoaccess1/haveno-reto/releases/latest, for status and latest release, checked October 22, 2026
  4. coingabbar.com/en/crypto-currency-news/retoswap-suspends-trading-haveno-protocol-exploit-again, for incidents, checked October 22, 2026
  5. cryptotimes.io/2026/05/21/monero-dex-retoswap-suspends-trading-after-2-7m-exploit-in-haveno-protocol, for incidents, checked October 22, 2026
  6. github.com/retoaccess1/haveno-reto/releases/tag/1.3.0-reto, for Zcash and Zcash address type, checked October 22, 2026
  7. haveno.exchange, for onion address and Tor in the app, checked October 22, 2026
  8. kycnot.me/service/retoswap, for kycnot.me rating, checked October 22, 2026
  9. raw.githubusercontent.com/retoaccess1/haveno-reto/master/core/src/main/java/haveno/core/payment/payload/PaymentMethod.java, for ways to pay and trade limits, checked October 22, 2026
  10. raw.githubusercontent.com/retoaccess1/haveno-reto/master/core/src/main/java/haveno/core/xmr/wallet/Restrictions.java, for security deposit, checked October 22, 2026
  11. retoswap.com, for ID rule, account, data collected, Monero, bitcoin, Lightning, I2P address, operator, excluded countries, US availability, fees, ways to pay, platforms, currencies, typical time, governance, requests from authorities, warrant canary, audits, bug bounty, support, blocks US IPs, site blocks by region, coins listed, networks, log retention and onion address, checked October 22, 2026
  12. retoswap.com, for open source, checked October 23, 2026
  13. retoswap.com/Penalties%20and%20Resolutions.html, for what happens if a check fails, checked October 22, 2026
  14. retoswap.com/Trading%20Rules.html, for custody, custody in detail, if a trade goes wrong, how trust works, VPN clause in terms, What your payment reveals and rate type, checked October 22, 2026

How we read the terms

We do not give privacy services a score. We record what each provider's own pages say: when it asks for ID, the limits, who holds your coins and what it costs. Labels come from each provider's terms, never from our guess. How we read the terms

Our process

We take fees, availability, licenses and coin counts from primary sources: RetoSwap's own fee schedules, terms and help pages, and the public registers kept by regulators. Every value carries the date we last checked it. The values on this page were checked between October 22, 2026 and October 23, 2026.