Independent & unsponsored · No ads, no tracking · verified every 6 hours
Published April 4, 2025 · Last updated 1 month ago
No-KYC swap site with serious fraud allegations.
MoleSwap.xyz presents itself as a no-KYC cryptocurrency swap service offering instant exchanges between digital assets. The domain was registered with Njalla privacy name servers and carries a "server hold" status as of 2026-05-30, indicating potential registry-level intervention. The site should not be confused with MoleSwap.com or MoleSwap.io, which appear to be separate, unaffiliated projects operating as DEX aggregators on other chains.
The service advertises a no-KYC policy, meaning no identity verification is required to execute swaps. KYCnot.me previously listed MoleSwap.xyz with a "Guaranteed no KYC" classification and noted user praise for its instant swaps and Telegram support. However, the same source flagged concerns about address reuse and social media growth patterns as potential scam indicators. As of 2026-05-30, the official site could not be successfully crawled, making current operational status unverifiable.
The privacy picture is deeply compromised by serious security allegations. A GitHub discussion in the Supabase repository explicitly names MoleSwap.xyz as one of "3 Cryptocurrency scam services using supabase," listing its specific project ID alongside zeroslip.finance and crowswap.exchange. Separately, a GitHub issue in MetaMask's eth-phishing-detect repository (#167818) shows the domain was blocked as a phishing site, with the operator unsuccessfully challenging the flag. These are not routine scam rumors but infrastructure-level fraud confirmations from credible security sources.
No current fee structure, minimums, or supported currency pairs could be verified from the 2026-05-30 evidence. The older KYCnot.me listing referenced Monero and Bitcoin support, but without official site access, these claims cannot be confirmed. No payment method details beyond standard crypto-to-crypto swapping are documented in available sources.
Prior third-party mentions noted a Telegram support channel and "great UX" from a small user base. These references predate the major fraud allegations and may no longer reflect reality. The MetaMask phishing issue suggests the operator actively disputed the block without providing credible counter-evidence. No current user feedback channels or responsive support could be verified.
MoleSwap.xyz is not suitable for any privacy-conscious crypto user. The weight of evidence-Supabase fraud confirmation, MetaMask phishing detection, and registry server hold-overwhelms any historical no-KYC convenience claims. Users seeking genuine no-KYC swapping should consider established alternatives with clean security records and verifiable operational status.
No account required at all.
While MoleSwap.xyz historically claimed no-KYC operation, the Supabase fraud report and MetaMask phishing block indicate the service was likely designed to harvest funds or data rather than protect privacy. No logging policy could be verified, and the privacy name servers and server hold status obscure any operational transparency.
No
Custodial
No
Requires email
No
Logs IP
Verdict
MoleSwap.xyz carries multiple credible fraud designations that make it unsuitable for any use. Privacy-focused users seeking no-KYC swaps should avoid this domain entirely and prefer established services with clean security records, active communities, and verifiable infrastructure.
This review is monitored and refreshed regularly.
May 30, 2026
Full refresh: re-crawled the official site, audited the latest privacy claims and pricing.
January 26, 2026
Added Supabase fraud confirmation and MetaMask phishing block to security assessment.
January 9, 2026
Updated domain status to 'server hold' per WHOIS data.
November 5, 2025
Removed unverifiable fee and limit details after official site crawl failure.
July 23, 2025
Downgraded trust score to reflect confirmed scam infrastructure allegations.
April 4, 2025
Initial review published.
4 user reviews
xmr_only
glad i checked before sending. supabase calling it out by project id is pretty damning. avoid.
anon_trader
used it once last year, swap went through but seeing it on the scam lists now makes me nervous. moved funds immediately.
privacyfirst
metaMask blocking it and the operator failing to prove innocence in the github thread says everything. not worth the risk.
cypher_punk
kycnot.me had some positive notes back in the day but the red flags piled up fast. server hold status is the final nail.
Featured
Decentralized multisig exchange, your keys, your crypto.
Featured
Featured
Curated directory and aggregator for no-KYC crypto services.
