The No-KYCKnow Your Customer rules require users to submit identity information such as passports, selfies, addresses, or phone numbers before accessing a service.Glossary → Phone Stack 2026: GrapheneOS + Phreeli + SimpleX
Your phone tracks location, contacts, payments, and habits. The default setup shares much of that with the OS vendor, the carrier, app companies, and anyone who can demand records. This stack cuts those links one layer at a time.
The complete stack at a glance:
- Device: GrapheneOS on a cash-bought Google Pixel
- Carrier (US): Phreeli - ZIP code only, Monero payment, no ID
- Carrier (global): Silent.Link eSIM - Monero, 160+ countries, no account
- VPNA virtual private network encrypts traffic between your device and a provider-run server, hiding activity from local networks while shifting trust to the VPN operator.Glossary →: Mullvad - WireGuard, no account required, accepts XMR
- Number (if needed): JMP.chat or LNVPN rental
- Messaging: SimpleX Chat - zero identifiers, no phone number
- Finance: Cake Wallet (XMR/ZEC/BTC), Monerujo (XMR)
Layer 1 - The device: GrapheneOS on Pixel
The base layer is the operating system. Stock Android and iOS ship with telemetry, carrier hooks, and account plumbing you do not control. GrapheneOSstrips that back and adds hardening, per-app network and sensor controls, sandboxed Google Play, and verified boot on Pixel hardware.
GrapheneOS only supports Google Pixel devices. That is deliberate. Pixels have strong hardware security, verified boot, and long update windows. In early 2026, the Pixel 8a is the obvious value pick. The Pixel 8 and 9 series are also solid.
Buy the phone with cash at a physical store, or second-hand from a private seller paid in XMR. If you buy it with a card, the IMEI can be tied to your identity before you even install GrapheneOS.
Key GrapheneOS hardening steps after install:
- No Google account - use Sandboxed Google Play without signing in, or skip it
- Per-app network controls - cut internet access for apps that do not need it
- Per-app sensor controls - block mic, camera, GPS, and other sensors app by app
- Auto-reboot timer - set 18 to 72 hours so keys leave RAM after a reboot
- Duress PIN - use a secondary PIN that wipes the device
- USB-C locked when screen is off - block easy physical attacks
- Hardware camera/mic toggles - disconnect sensors at the hardware level
For the full install and hardening guide, see: GrapheneOS: The Privacy Phone Guide.
Layer 2 - The carrier: anonymous mobile service
A hardened OS does not fix an identity-linked carrier. The carrier still knows which towers you connect to and when. Major carriers also have a history of turning location data into a product. The goal is to use a provider that has little or nothing about you on file.
| Service | Region | KYC | XMR payment | Network | Notes |
|---|---|---|---|---|---|
| Phreeli | US only | ZIP only | Yes | T-Mobile | First anonymous US carrier; ZK credit card option |
| Silent.Link | 160+ countries | None | Yes | Multi-carrier | eSIM, no account, US number at $59/yr |
| LNVPN | 200+ countries | None | Yes (LN) | Multi-carrier | eSIM + disposable numbers + VPN bundle |
| Cash prepaid SIM | Varies | None (if no registration law) | N/A | Local carrier | Legal in US/UK; most EU countries require registration |
US users: Phreeli is the cleanest option for full US service. It is a real carrier product with a US number, voice, SMS, and data. ZIP code only. Pay with XMR or ZEC. See: Phreeli: The Anonymous Phone Carrier.
Global users: Silent.Link is the default pick for international coverage. It gives you an eSIM, takes XMR, asks for no account, and works in 160+ countries. Buy through TorThe Tor network uses onion routing to obscure IP addresses and browsing paths by relaying traffic through multiple volunteer-run nodes.Glossary → if you want the cleanest path.
Layer 3 - The VPN: encrypt above the carrier
An anonymous carrier helps with account identity. A VPN helps with traffic visibility. Without a VPN, the carrier can still see which IPs and domains you reach.
Mullvad VPN is the default recommendation here. It needs no email, gives you a random account number, accepts Monero and cash, and supports WireGuard. Install the Android APK from mullvad.net or through Sandboxed Google Play.
On GrapheneOS, set Mullvad as an always-on VPN with kill switchA VPN feature that blocks internet traffic if the VPN connection drops, preventing accidental exposure of your real IP address.Glossary → in Settings → Network & internet → VPN. If the tunnel drops, traffic stops.
Layer 4 - The number: when you need a phone number
Some services still demand a number for sign-up, 2FA, or recovery. If you must use one, do not use your main line.
| Service | Type | KYC | Payment | Number type | Best for |
|---|---|---|---|---|---|
| Silent.Link US.PLUS | eSIM | None | XMR, BTC/LN | Real US number | Persistent US identity plan, $59/yr |
| JMP.chat | XMPP VoIP | None | BTC/LN | Real US/CA number | Persistent number, calls + SMS over Wi-Fi |
| LNVPN | Rental number | None | Lightning, XMR | Disposable | One-time SMS verifications |
| Phreeli | Real carrier | ZIP only | XMR, ZEC | Real US number | Full US carrier plan with voice/data/SMS |
For one-time SMS checks, LNVPN rental numbers are the cheapest clean option. For a number you want to keep, JMP.chat or Phreeli make more sense. JMP runs over Wi-Fi. Phreeli gives you a real mobile line.
Do not rely on SMS 2FA for anything serious. All phone numbers are vulnerable to SS7 abuse and SIM swaps. For important accounts, use a TOTP app such as Aegis.
Layer 5 - Messaging: communicating without a phone number
The strongest messengers do not ask for a phone number or an email address. Here is the current field for GrapheneOS users.
| App | Phone number required | Decentralized | Metadata protection | Cautions |
|---|---|---|---|---|
| SimpleX Chat | No | Partial (relay servers) | Strong (no user IDs) | UK jurisdiction; Village Global investors (Bezos/Gates/Zuckerberg LPs) |
| Session | No | Yes (onion routingA routing method that wraps traffic in layers of encryption and passes it through multiple relays so no single node sees both sender and destination.Glossary →) | Strong | Lokinet/OPTF foundation; open source |
| Briar | No | Yes (P2P over Tor) | Strongest (no central server) | OTF funding (indirect US State Dept); no iOS app |
| Signal | Yes | No (centralized) | Moderate (phone number = identifier) | Phone number required; US jurisdiction; Open Whisper Systems |
| Yes | No | Poor (Meta/Facebook) | Avoid entirely for privacy use |
SimpleX Chat is the practical default. It needs no user ID at all. You share a QR code or link to start. Relays move traffic, but they do not hold a stable identity for you.
Session is the pick if you want deeper decentralization. It uses onion routing, so even the relay layer learns less. It can feel slower than SimpleX.
Briar is the hardline option. Pure P2P over Tor, no central server, and it can keep working in limited ways over Bluetooth or Wi-Fi direct.
Layer 6 - Finance on the device
A privacy phone should also handle money without dragging identity back in. The goal is simple: hold and spend from wallets that are not tied to your main identity.
- Cake Wallet - open source, supports XMR, ZEC, and BTC in one app. Good default mobile wallet.
- Monerujo - Android-only Monero wallet, open source, with Tor support and a tighter XMR focus.
- Feather Wallet - desktop Monero wallet with Tor built in. Keep larger balances there and move spending amounts to mobile.
- Zashi - Zcash shielded wallet built for z-to-z transfers. A natural fit if you already use ZEC.
For P2P acquisition without KYC, Haveno is the Monero-native DEXA decentralized exchange is a non-custodial trading system, often peer-to-peer or smart-contract based, that reduces reliance on a central operator.Glossary →. It runs over Tor and lets you acquire XMR from peers without an account.
Putting it together: the full stack
Buy hardware with cash
Buy a Pixel 8a or Pixel 8 in person with cash. Do not use a card. Do not sign into Google at the store. If you buy used, pay in XMR and meet face to face.
Install GrapheneOS
Use the web installer at grapheneos.org/install/web. Chromium browser, USB cable, about 20 minutes. Re-lock the bootloader when done. Full guide: GrapheneOS Privacy Phone Guide.
Get anonymous connectivity
US: Visit phreeli.com over Tor Browser. Enter ZIP only. Pay with XMR. Scan the eSIM QR code in Settings → Network & internet → SIMs → Add eSIM.
Global: Visit silent.link over Tor. Pay with XMR. Scan the QR code.
Install Mullvad VPN
Download the APK from mullvad.net. Generate an account number with no email. Pay with XMR. Turn on always-on VPN and kill switch.
Set up messaging
Install SimpleX Chat from F-Droid or direct APK. No registration needed. Share your SimpleX link with contacts. Install Session as a backup channel. Keep SMS out of sensitive conversations.
Install financial tools
Install Cake Wallet from cakewallet.com with the direct APK. Create a fresh XMR wallet. If you need a separate Zcash wallet, install Zashi from the ECC GitHub releases.
What this stack protects - and what it does not
This stack removes identity from the parts you control: the OS, the carrier record, the VPN account, the messenger, and the wallet.
What it does not protect:
- Physical seizure of the device - rely on encryption, fast auto-reboot, and the duress PIN.
- Tower IMEI records - towers still see the device hardware ID, even if the account is anonymous.
- Behavioral patterns - timing and habits can still reveal who is using the phone.
- Endpoint attacks - if you install malware or someone gets hands-on access, the stack will not save you.
Related guides: Phreeli: The Anonymous Phone Carrier · Surveillance-Resistant Phone Numbers · GrapheneOS Privacy Phone Guide · Anonymous VPN Setup with Mullvad
Cunicula receives no funding from government agencies, political organizations, or financial services companies.
Follow the Money
The default phone stack is built to extract value from your data. Each layer in the no-KYC stack removes one of those business models.
- Default stack
- Google Android $238B ad revenue (2024) via Play Services · Apple iCloud analytics + App Store 30% cut · AT&T/Verizon sell location to brokers · Qualcomm baseband: closed, no audit
- No-KYC stack
- GrapheneOS (zero Google telemetry) · Phreeli (ZIP code only, nothing to sell) · Mullvad VPN $5/mo, no account, no logs · SimpleX (no user IDs, relay sees nothing)
- Hardware
- Pixel 8a Titan M2 · verified boot chain · cash purchase only - IMEI not linked to identity
Frequently Asked Questions
What is the most private phone setup in 2026?
A strong setup is GrapheneOS on a Pixel bought with cash, an anonymous carrier like Phreeli in the US or Silent.Link globally, Mullvad VPN for network privacy, and a messenger like SimpleX or Session that does not need a phone number. No Google account. No identity-linked carrier record. No number required for chat.
Can I use GrapheneOS without a SIM card?
Yes. GrapheneOS works fine on Wi-Fi only. You can use Tor Browser, VPNs, crypto wallets, and messengers like SimpleX, Session, or Briar without any SIM card. A SIM only adds mobile data and, if you want it, a phone number.
What phone number should I use with GrapheneOS?
If you need a real US number without identity checks, Phreeli is the main purpose-built option. Silent.Link offers anonymous eSIM service in 160+ countries with Monero and no account. JMP.chat gives you a real US or Canadian number over XMPP paid with Lightning. If you only need messaging, use SimpleX and skip the phone number entirely.
Is there a phone plan that does not require ID in the US?
Yes. Phreeli is a US MVNO that asks only for a ZIP code, which is the legal minimum. No name and no ID. You can pay with Monero or Zcash, or use its zero-knowledge card system if you need a card payment without a stored account link.
How do I message people anonymously on a smartphone?
Use apps that do not need a phone number. SimpleX has no phone number, no email, and no user ID. Session is decentralized and uses onion routing. Briar works peer-to-peer over Tor. All run on GrapheneOS. Avoid SMS, WhatsApp, and other tools that tie chat to a real-world identifier.