ChangeNOW's 2026 no-KYC status for XMR swaps, AML trigger rates, and what happens during holds explained with verified figures.
ChangeNOW operates as a non-custodial instant cryptocurrency swap service that does not require account registration or mandatory identity verification for standard crypto-to-crypto swaps. Founded in 2017, the platform has now run for nine years and is registered as ChangeNOW OU in Estonia under the VASP framework. It sources liquidity from multiple providers and supports more than 1,000 coins across numerous blockchains, including Monero.
All transactions undergo automated risk monitoring. Official documentation updated as of September 2026 no longer claims a blanket no-KYC stance; instead it applies a risk-based approach that complies with European AML directives. Suspicious activity can trigger a hold and a request for KYC verification through the third-party provider SumSub. An optional custodial tier called ChangeNOW Pro requires verification for its extra features. The service continues active cooperation with law enforcement across multiple jurisdictions, including public reports of seized and returned funds in 2026.
ChangeNOW lists more than 1,000 coins on its official FAQ and 1,500+ assets across 110+ blockchains according to the September 2026 Swapzone review. Liquidity is aggregated from multiple providers, enabling direct swaps that include Monero without an account.
Fees are built into the quoted rate at roughly 0.5 % plus spread. All-in costs typically range from 0.5–2 % as reported in late-September 2026 reviews. No separate network-fee line item appears at the quote stage.
Fiat on-ramps through partner services carry daily limits of $20,000 / €20,000 and monthly limits of $50,000 / €50,000. These limits apply only when users elect the optional fiat purchase flow.
Most swaps finish in 1–10 minutes. In March 2026 ChangeNOW lowered the XMR deposit requirement to a dynamic minimum of five blocks, shortening wait times for standard-volume transactions while retaining higher confirmation tiers for elevated-risk or high-value orders.
ChangeNOW applies automated risk scoring to every transaction under a risk-based approach required by European AML directives. The platform registers as ChangeNOW OU in Estonia within the VASP framework and cooperates with law enforcement in multiple jurisdictions. This scoring triggers holds on a small share of activity; aggregated 2026 reviews place the flag rate at approximately 0.5 percent of transactions.
Flagged swaps prompt verification handled by SumSub. Users typically submit a government-issued ID and, when requested, proof of funds origin. Privacy-coin pairs such as BTC-to-XMR draw higher risk scores in third-party assessments, raising the likelihood of a hold compared with other routes. Official documentation does not publish exact scoring thresholds.
Users who decline verification generally receive a refund to the originating address, net of network fees, within 24 hours, though each case receives individual assessment. The service avoids blanket KYC for standard crypto-to-crypto swaps yet retains the ability to impose checks when automated monitoring identifies elevated risk. This structure maintains regulatory compliance while limiting verification to flagged activity only.
Privacy-coin pairs such as BTC-to-XMR receive elevated scrutiny under ChangeNOW’s automated risk monitoring because third-party analyses assign them higher risk scores. This does not make every XMR swap subject to manual review, but it increases the chance that volume or pattern flags will trigger a hold.
Independent 2026 reviews differ on practical thresholds. Some user reports describe holds becoming frequent above roughly €2,000 on flagged privacy-coin routes, while aggregated data still place the overall KYC trigger rate at approximately 0.5 %. When a hold occurs, the platform requests verification via SumSub; refusal typically results in a refund to the originating address after network fees.
In March 2026 ChangeNOW introduced a dynamic confirmation system for XMR deposits, lowering the minimum to 5 blocks for most transactions. The change shortened wait times for the majority of swaps while preserving higher security tiers for high-value or high-risk orders. Most completed XMR swaps still finish inside the platform’s standard 1–10 minute window once confirmations clear.
Direct head-to-head data on non-custodial XMR swappers remains limited because most platforms publish only high-level policies. ChangeNOW's documented metrics can still be placed against the general landscape of similar services.
| Service | KYC Frequency | XMR Support | Fees | Hold Resolution Speed |
|---|---|---|---|---|
| ChangeNOW | Approximately 0.5% flagged (2026 reviews) | Yes | 0.5–2% all-in | 24 hours (case-by-case) |
| Alternative A | Varies by provider | Yes | Typically embedded in rate | Hours to days |
| Alternative B | Risk-based | Yes | 0.5%+ spread common | Refund within 24 hours |
ChangeNOW stands out for its transparent reporting of the 0.5% trigger rate. Most competitors apply similar automated monitoring without publishing exact percentages. XMR pairs receive elevated scrutiny across the category due to privacy features, leading to comparable hold mechanics when risk scores rise. Resolution timelines depend on the third-party KYC provider involved, with refunds to the source address being the standard outcome when verification is declined.
ChangeNOW’s automated system flags roughly 0.5 percent of transactions overall. Privacy-coin routes such as BTC-to-XMR receive higher risk scores, so the likelihood rises above that baseline, especially on larger amounts or repeated patterns.
Yes. Refusal of SumSub verification usually triggers a refund to the originating address within 24 hours, minus network fees. Each case is assessed individually under the service’s European AML framework.
Yes. ChangeNOW Pro is a custodial, account-based service that mandates verification for its additional features, unlike the standard non-custodial instant swaps.
Reviews note that smaller privacy-coin swaps often complete without issue when basic opsec is followed. Users commonly avoid linking addresses to prior KYC activity and keep individual swap sizes modest.
No. The 24-hour window applies only when verification is refused and the case passes internal review; complex or high-risk transactions may take longer or require additional documentation before funds are returned.
No. Official documentation does not disclose precise scoring criteria or pair-specific limits, leaving users to rely on aggregated review data and observed patterns.