Aggregator

CypherGoat review

CypherGoat is an open-source swap aggregator operating under the AGPL-3.0 license. It checks rates across 20+ exchanges for 100+ coins. The interface requires no email, sign-up, or profile, and functions with or without JavaScript. It also offers a Tor address. However, the provider you select will still monitor incoming funds for AML reasons. Once a transaction reaches the provider, CypherGoat cannot screen, freeze, delay, or reverse it. The platform retains destination addresses and amounts for 14 days before anonymizing them. In our view, CypherGoat is a good fit for users seeking a rate comparison while minimizing data retention.

ID only if flagged

CypherGoat asks for ID only if a payment is flagged, per its own pages.

ActiveNo account

Latest release: No tagged release; last commit 2026-07-01 (repository CypherGoat/web)

By Ethan ParkerChecked Oct 22, 2026How we read the terms

ID if flaggedNo account neededID rule: If a payment is flagged. No ID by default; checks when a risk system flags you. Checked Oct 22, 2026.
Not statedCypherGoat's own pages we checked do not say. This is not the same as no.No-ID limit per trade
LNCoinsLightning: supported.
Not statedCypherGoat's own pages we checked do not say. This is not the same as no.Who holds your coins
Onion addressNetworkTor onion: cyphergmw4huw7jzhat3misfm5jj2m4nvafockqbj7i5rrlec6mobdid.onion. Works without JavaScript: Not stated.
Our verdict

Choose CypherGoat if

Who CypherGoat suits, from the values on this page.

CypherGoat suits you if

  • You want no ID for normal use: CypherGoat asks only if a payment is flagged.
  • You want to pay or get paid over Lightning.

CypherGoat might not be the right fit if

  • You want a market that can never ask for ID: CypherGoat can ask if a payment is flagged.
kycnot.me

What kycnot.me says about CypherGoat

kycnot.me is an independent directory of services you can use without ID checks. The rating and notes below are its own, not ours.

KYC level
Level 0: Never KYC

The terms rule out ID checks altogether. kycnot.me sorts services into five levels, from 0 (never asks for ID) to 4 (ID is mandatory).

kycnot.me score
8 out of 10 Privacy 82 out of 100, trust 65 out of 100
Listing status
Approved
Accepts as payment
MoneroBitcoinLightning

Not accepted: Fiat money, Cash.

Addresses on kycnot.me
Onion: http://cyphergmw4huw7jzhat3misfm5jj2m4nvafockqbj7i5rrlec6mobdid.onionI2P: http://cjorx2hmv3jxs5sshxhw73nmkiayupim6gfye3sfts2pzmjgk5rq.b32.i2p

Pros kycnot.me lists

  • Accepts Monero
  • Has Onion or I2P URLs
  • No registration needed
  • Good Customer Support
  • Mature service
  • Non-custodial protocol
  • Partially open source code
  • No JavaScript needed

Cons kycnot.me lists

  • KYC depends on partners
  • Service Termination Policy
  • Data Sharing
  • Liquidity Provider may block funds

Also noted: API available, Some countries are restricted

Events kycnot.me lists

  1. No date given: Warning. kycnot.me writes: “DDoS attack”
  2. No date given: Warning. kycnot.me writes: “Service Down”

Source: the kycnot.me listing. CypherGoat on kycnot.me (opens in a new tab)

Checked October 22, 2026

Platform

Inside CypherGoat

Screenshots taken November 3, 2026

Platforms
Runs with or without JavaScript, Tor supported

What you get with CypherGoat

Yes, no or partly, from our data

Privacy 2 of 6, 1 partly

  • No IDPartlyIf a payment is flagged
  • No accountYes
  • Tor built inNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
  • Onion addressYes
  • I2P addressNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
  • Works without JavaScriptNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.

Coins 1 of 4

  • BitcoinNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
  • MoneroNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
  • LightningYes
  • ZcashNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.

Custody and code 0 of 3

  • You hold the keysNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
  • Open sourceNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
  • Address screeningNot statedNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
ID check

When can CypherGoat ask for your ID?

If a payment is flagged, per CypherGoat's own pages. Labels come from each provider's terms, never from our guess.

  1. 1Never, by designNo company holds your order, so nobody can ask
  2. 2Only if you chooseID only for extras you opt into
  3. 3If a payment is flaggedCypherGoat is on this stepNo ID by default; checks when a risk system flags you
  4. 4Above a limitID once you pass a stated amount
  5. 5AlwaysID before you trade, deposit or withdraw

If a check comes and you do not pass it

Not statedCypherGoat's own pages we checked do not say. This is not the same as no.

Not stated on CypherGoat's pages: what triggers a check, fee on refusal, refund policyCypherGoat's own pages we checked do not say. This is not the same as no.

Checked October 22, 2026

Fees and limits

What CypherGoat costs

WhatCypherGoat
Trade feeNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
No-ID limitNot statedCypherGoat's own pages we checked do not say. This is not the same as no.
Your data

What CypherGoat knows about you

Who sees what during a trade, and who runs it.

During a trade

Data the policy collects
Not statedCypherGoat's own pages we checked do not say. This is not the same as no.
What your payment reveals

No ID check does not make a bank payment private.

Network and who runs it

Network
Onion: cyphergmw4huw7jzhat3misfm5jj2m4nvafockqbj7i5rrlec6mobdid.onionWithout JavaScript: Not statedCypherGoat's own pages we checked do not say. This is not the same as no.
Who runs it
Not statedCypherGoat's own pages we checked do not say. This is not the same as no.
Requests from authorities
Responds to validly issued legal process through proper channels and cooperates with lawful requests; others case by case; contact [email protected]
Warrant canary
Not published

Checked October 22, 2026

Safety

Track record and code

Incidents

Not statedCypherGoat's own pages we checked do not say. This is not the same as no.

Open source
Not statedCypherGoat's own pages we checked do not say. This is not the same as no.
License
AGPL-3.0
Audits
Not published
Bug bounty
Not published
Support
E-mail [email protected]; e-mail [email protected]; Telegram channel; SimpleX bot
Wallet needed
Yes: a destination address; CypherGoat does not hold or transmit funds
More facts

More facts we checked on CypherGoat

Coins listed
Provider headline: 100+; exchanges: 20+
Log retention
Transaction data (destination addresses, amounts) kept 14 days, then anonymised; some partners require longer capture
Onion address
Cyphergmw4huw7jzhat3misfm5jj2m4nvafockqbj7i5rrlec6mobdid.onion
I2P address
Not published
Where you live

CypherGoat in the US and elsewhere

In the US

US availability: Not statedCypherGoat's own pages we checked do not say. This is not the same as no.

VPN clause in terms
Not published

If you are a US person, US sanctions rules apply to you whether or not a service asks for ID.

Outside the US

Excluded countries: Not statedCypherGoat's own pages we checked do not say. This is not the same as no.

Regional rule: Not statedCypherGoat's own pages we checked do not say. This is not the same as no.

Site blocks by region
Users must not be in countries under comprehensive UN or OFAC sanctions; sanctioned addresses refused

Where you live and the provider's terms

Many services on this page do not serve every country. Some exclude people because of where they live or their citizenship, not only where they connect from. Read the provider's terms before you send funds. If the terms exclude you, do not use the service, and do not try to get around the restriction, for example with a VPN.

Taxes

A service that does not ask for ID does not change your taxes. In the US, the federal income tax return asks a yes-or-no question about digital assets, and you must report digital asset transactions whether or not they result in a gain or loss. In the UK, you may owe Capital Gains Tax when you sell, swap or spend crypto, and you must keep your own records. Rules in other countries differ.

No KYC is not anonymity

"No KYC" here means the provider says it does not ask for ID in the cases its terms describe. It does not make you anonymous. The provider's terms may let it ask for ID later. Regulated exchanges you send funds from or to may have to collect information about who sends and who receives a crypto transfer. Your tax duties stay the same.

Funds can be held

If a provider asks for more information during a swap or a withdrawal, it may hold your funds until it gets it. Its terms decide what happens next. In the UK, a crypto business that asks for information on a transfer to or from a self-custody wallet, and does not receive it, must not pass the funds on. Read what the provider's terms say before you send.

Alternatives

Swap aggregators to compare with CypherGoat

Other active services in this category from our list. The shield shows each one's ID rule from its own terms.

Houdini Swap Monero ID rule: If a payment is flagged. No ID by default; checks when a risk system flags you.
Intercambio Monero ID rule: If a payment is flagged. No ID by default; checks when a risk system flags you.
Swapzone Monero ID rule: If a payment is flagged. No ID by default; checks when a risk system flags you.
Trocador Monero ID rule: If a payment is flagged. No ID by default; checks when a risk system flags you.

CypherGoat side by side

From our privacy data, the same fields for every service
WhatCypherGoatHoudini SwapIntercambioSwapzoneTrocadorOrangeFren
ID ruleID only if flaggedID only if flaggedID only if flaggedID only if flaggedID only if flaggedNot stated
AccountNoneNoneNoneNoneNoneNot stated
You hold the keysNot statedNoNoNoNoNot stated
MoneroNot statedYesYesYesYesNot stated
LightningYesYesYesYesYesNot stated
Open sourceNot statedNot statedNot statedNot statedNot statedNot stated

Checked October 23, 2026

FAQ

Short answers about CypherGoat

From the data on this page.

Does CypherGoat ask for ID?

CypherGoat asks for ID only if a payment is flagged, per its own pages. There is no account.

Author

Who checked this page

Ethan Parker

Senior Content Editor

Every value on this page comes from CypherGoat's own pages and code, read on the dates shown. The kycnot.me section is the exception: it shows kycnot.me's own rating. Checked Oct 22, 2026.

Sources

Sources, how we read the terms and our process

Sources

  1. api.github.com/repos/CypherGoat/web, for license, checked October 22, 2026
  2. api.github.com/repos/CypherGoat/web/commits, for latest release, checked October 22, 2026
  3. cyphergoat.com, for status, account, Lightning, onion address, platforms and coins listed, checked October 22, 2026
  4. cyphergoat.com/privacy, for log retention, checked October 22, 2026
  5. cyphergoat.com/terms, for ID rule, requests from authorities, warrant canary, audits, bug bounty, support, wallet needed, VPN clause in terms, site blocks by region and I2P address, checked October 22, 2026
  6. kycnot.me/service/cyphergoat, for kycnot.me rating, checked October 22, 2026

How we read the terms

We do not give privacy services a score. We record what each provider's own pages say: when it asks for ID, the limits, who holds your coins and what it costs. Labels come from each provider's terms, never from our guess. How we read the terms

Our process

We take fees, availability, licenses and coin counts from primary sources: CypherGoat's own fee schedules, terms and help pages, and the public registers kept by regulators. Every value carries the date we last checked it. The values on this page were checked on October 22, 2026.