Is Monero Traceable? Understanding the FCMP++ Upgrade and Its Timeline

Monero (XMR) is designed so that external observers cannot see who paid whom, or the amount transferred. By default, every transaction conceals its sender, receiver, and amount, and there is no mechanism to accidentally send a transparent Monero payment. Consequently, the question “Is Monero traceable?” typically receives a concise answer: not from the blockchain alone.

The answer is evolving. Monero developers are preparing a significant privacy upgrade known as FCMP++, which will replace the ring signatures currently used to obscure every spend. The upgrade is not yet live and lacks an official fork date. Below is an overview of the changes FCMP++ will bring, a summary of research regarding Monero’s current privacy, and actionable steps users can take in the interim.

HiddenSwap (hiddenswap.com) is a no-KYC, anonymous cryptocurrency exchange facilitating crypto-to-crypto swaps without requiring accounts, email addresses, or identification. The platform monitors the public FCMP++ status tracker, providing sources for every update.

How Monero Conceals Payments Today

Monero employs three distinct mechanisms, each protecting a specific component of a payment.

• Ring signatures conceal the sender. When spending, a wallet signs using a ring comprising the actual output being spent alongside decoys selected from the blockchain. Following the August 2022 network upgrade, every ring consists of 16 members, meaning each input points to 16 potential sources, only one of which is genuine.
• Stealth addresses conceal the receiver. The sender’s wallet generates a unique one-time address for each payment, ensuring that multiple payments to the same published address appear unrelated to external observers.
• RingCT conceals the amount. Ring Confidential Transactions became active in January 2017, and their use has been mandatory for all transactions since September 2017.

Viewing a recent Monero transaction on a block explorer reveals the 16 ring members for each input, one-time output addresses, and amounts listed as unknown. None of these elements identify a sender or receiver.

Is Monero Traceable? Insights from Research

Monero’s privacy features have been subjected to public scrutiny, with early studies identifying specific vulnerabilities. A 2017 study by Kumar and colleagues successfully identified the actual output being spent in 87% of the cases analyzed. A 2018 paper by Möser and colleagues discovered that many early inputs lacked decoys entirely, allowing researchers to eliminate spent coins from other rings, and noted that the newest ring member was frequently the actual spend.

Most of these vulnerabilities were addressed through protocol updates. The implementation of a minimum ring size eliminated spends without decoys, RingCT inputs proved largely immune to the “chain reaction” described in the 2018 paper, and wallets now select decoys using the same spending-time curve measured in that study. The warnings in the 2018 study primarily applied to transactions created before February 2017.

Research into current rings of 16 continues. A known weakness involves patterns where a user repeatedly sends to and receives from the same counterparty; if that party wishes to track funds, they may be able to make statistical inferences. The user-side solution is straightforward: avoid moving coins back and forth through the same counterparty.

What FCMP++ Changes

FCMP++ stands for Full-Chain Membership Proofs, combined with spend authorization and linkability. Instead of hiding a spend among 16 ring members, a transaction will prove that it spends one of all spendable outputs on the chain, a number the developers estimate exceeds 150 million.

For users, the planned changes include:

• Retention of current addresses, with existing standard addresses and subaddresses remaining functional.
• A significantly larger anonymity set for every transaction.
• Increased transaction sizes.
• Wallets requiring a chain re-scan once after updating.
• The removal of custom unlock times for new transactions.

A new addressing protocol called Carrot will be released alongside FCMP++. Addresses from new Carrot wallets will appear identical to previous ones, while Carrot introduces protection against the Janus address-linking attack and the so-called “burning bug.”

Current Status of FCMP++

The only public timeline is a draft plan by a Monero developer, described as “a non-binding working draft.” The draft suggests a first fork-enabled release between October 14 and 21, 2026, a fully featured release with hardware wallet and multisig support in early December, and activation around the first week of March 2027. However, as of October 23, getmonero.org has not announced a fork-enabled release. Dates in the plan have shifted previously and may shift again; Monero’s blog noted in May 2026 that a specific fork date was not yet fixed.

How to Maintain Privacy Until Then

• Keep XMR in a self-custodied wallet. Services holding an account know which address received payments.
• Use a new subaddress for each payer. Assigning a unique subaddress to each payer prevents two payers from determining they paid the same person when comparing notes.
• Run your own node, or connect via Tor or I2P. Operators of remote nodes can observe which IP address a transaction originated from.
• Avoid mirror-image payments. Ensure incoming and outgoing amounts and timing differ to prevent pattern matching.
• Acquire XMR through an account-free route. Swapping BTC, USDT, or another coin you hold keeps your identity out of the record. On HiddenSwap, you can swap Bitcoin to Monero without an account, with the XMR arriving at a one-time address in your own wallet. Swap records retain no name or IP address.

HiddenSwap’s comprehensive guide, “Is Monero traceable?”, details the research and sources behind each of these privacy steps.

FAQ

Is Monero traceable?

Not from the blockchain alone. Every Monero transaction hides the sender, receiver, and amount by default. Traces typically originate from external factors: exchange accounts, remote nodes, and repeated payments with the same counterparty.

When will FCMP++ go live?

There is no official date. A developer’s draft plan indicates a timeline around March 2027, but the developer describes this as non-binding.

Will my Monero address change after FCMP++?

No. Existing addresses and subaddresses will remain functional. Wallets will require an update and a one-time chain re-scan.

Is Monero more private than Bitcoin?

Yes. Bitcoin addresses and amounts are public, allowing anyone to view the balance and history of an address. Monero conceals all three components of every payment by default.