Educational guide
Custodial vs Non-Custodial XMR Swaps — Full Risk Comparison
A structured comparison of how each model handles your funds, what can go wrong, and which residual risks remain in either case.
No KYC • Non-custodial • Educational
Definitions
Custodial Swap
The service receives your deposit into a wallet it controls, converts the asset internally or through partner providers, and pays out from its own infrastructure. Your funds are held by a third party for the duration of the swap.
Non-Custodial Swap
Funds move through a controlled execution path without entering a long-term third-party wallet. The service routes the swap but does not pool, hold, or score user deposits.
Risk Comparison — Side by Side
Each row scores the custodial model on a specific risk. Lower scores are better.
| Risk vector | Custodial swap | Non-custodial swap |
|---|---|---|
| Counterparty custody | Funds held by third party | No third-party custody |
| AML / address freezes | Possible on flagged deposits | Not applicable |
| Hot-wallet breach | Pooled hot wallet is a target | No pooled user wallet |
| KYC escalation | Can be triggered post-deposit | Not part of the flow |
| Insolvency exposure | User funds at risk if service fails | No deposit balance to lose |
| Refund friction | Requires support ticket | Direct return path |
| Rate transparency | Aggregator spread possible | Direct routing |
| Privacy of metadata | Deposit, IP, and address logged | Minimal metadata retained |
Custodial Swap Flow
Where your funds sit at each step of a custodial Monero swap, and who can act on them.
Deposit into pooled wallet
Your incoming transaction lands in the service's hot wallet, mixed with other user deposits.
AML scoring
The deposit address is scored against compliance providers. A flagged result can pause the swap immediately.
Internal conversion
The service converts the asset internally or routes it through a partner exchange that applies its own controls.
Payout from pooled wallet
If the swap clears, XMR is sent from the service's pooled wallet to your destination address.
Logged metadata
The deposit address, payout address, IP, timing, and amounts remain in the service's records subject to its retention policy.
Custodial Risks in Detail
AML / address freezes
Custodial services apply on-chain scoring. Funds from addresses flagged by a compliance provider may be paused, returned, or require user contact for release.
Hot-wallet breach
Pooled hot wallets are a high-value target. FixedFloat publicly disclosed a 2023 exploit; similar incidents have hit other custodial swap services.
Insolvency risk
If the service is shut down or becomes insolvent during the swap, in-flight deposits and any cleared XMR balance can be lost.
Post-deposit KYC
"No KYC up front" does not prevent KYC escalation after a deposit is received. Some services request documents before releasing payout.
Metadata retention
Deposit address, payout address, IP, timestamps, and order parameters are recorded and may be retained or disclosed under legal process.
Refund friction
Recovering a held deposit typically requires a support ticket and may require identity information that was not requested at order time.
Non-Custodial Swap Flow
How a non-custodial routing layer handles the same swap without pooling user funds.
Order created without account
Order parameters are generated without registration. No persistent user identity is attached.
Direct routing
Funds move through the execution layer without entering a long-term custodial wallet.
Conversion to XMR
The swap is executed inside the controlled routing path. No external AML scoring engine sits between deposit and payout.
Direct XMR delivery
XMR is delivered straight to the user's destination address. No pooled payout wallet is involved.
Minimal metadata
Order data is kept only as required to execute and reconcile the swap, then discarded according to the service's retention policy.
Residual Risks of Non-Custodial Swaps
Non-custodial routing removes the largest risk vectors but does not eliminate every risk. The remaining ones are smaller and different in nature.
User address errors
Sending to a wrong destination or providing the wrong refund address is the user's responsibility. There is no support-side recovery for a confirmed misdirected transaction.
Network confirmation delay
Swaps depend on source-chain confirmations. Slow networks or low fees can delay payout regardless of the routing model.
Market rate movement
Float-style execution exposes the order to rate movement between deposit and payout. Fixed rates trade this for spread.
On-chain analysis of source asset
Non-custodial routing does not retroactively privatise a transparent input asset. Pre-swap on-chain history of BTC or ETH inputs remains public.
How to Choose
- ▸If freeze risk is unacceptable, choose non-custodial
AML address scoring on custodial services can hold deposits indefinitely. Non-custodial routing does not introduce that hold surface.
- ▸If you require a fixed rate lock, weigh the trade-off
Fixed-rate locks are usually a custodial feature. Decide whether the rate certainty is worth the additional custody and freeze risk.
- ▸If the source asset is transparent, fix the upstream first
Choosing a non-custodial swap does not erase the on-chain history of a BTC or USDT input. Address that upstream before the swap matters.
- ▸If KYC must be avoided end-to-end, verify both layers
Some "no KYC" custodial services reserve the right to escalate after a deposit. A non-custodial routing layer has no mechanism to do this.
FAQ — Custodial vs Non-Custodial XMR Swaps
Are non-custodial swaps slower?+
Not inherently. Speed depends on source-chain confirmations and the routing implementation, not the custody model itself.
Can a non-custodial swap still freeze my funds?+
There is no pooled wallet and no AML scoring engine acting on incoming deposits in a non-custodial routing model, so the freeze mechanism custodial services use does not apply.
Is "no KYC" the same as non-custodial?+
No. Many custodial services advertise no-KYC entry but retain the ability to request documents or freeze funds after a deposit lands.
Why do custodial services exist at all?+
They are simpler to operate, can offer fixed-rate locks, and can plug into existing exchange infrastructure. The trade-off is custody and the risks that come with it.
Does non-custodial mean fully anonymous?+
No. It removes counterparty custody and metadata retention on the swap layer, but on-chain history of the source asset remains public.
Swap Without Custody Risk
No pooled wallet. No AML scoring. No account. Route directly into Monero with XMRPrivate.
Start Private XMR Swap