Evidence and risk△Partial evidence/△CautionSome material claims still need confirmation.; those sources show trade-offs worth reading.
Last reviewedReviewed 5 Sep 2026KYC checked 5 Sep 2026 · verified jurisdiction · Source → official siteHow to cite this pageSource coveragePartial evidenceRecorded riskCaution
Evidence and facts
Evidence and facts
CUNICULA SCORE 4.0
57/100△Limited evidencePrivacy 17/25 · Control 7/20 · Transparency 8/20 · Security 15/25 · Accountability 10/10 · Cap 79 · Method
JURISDICTIONGI
INCIDENTBTCPay and Lightning payment-server compromise resolved · high · since 2026-08-07 A critical BTCPay Server vulnerability exposed Lightning-node credentials and 0.6168 BTC of IVPN operating funds was stolen; IVPN reported no customer data or funds and no VPN infrastructure impact.IVPN incident disclosure (now 404; hash-locked 2026-08-25 capture)
AUDITED BYNo audit listed
OPERATOR DATAHosted operator recorded
SOURCE COVERAGE
△Partial evidenceTHIRD-PARTY REPORTED2/12Reviewed 5 Sep 2026 · Source → official site
LAST CHECKED2026-06-24
LAST UPDATED2026-09-05
Specs
DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSAdvertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.
FEE$6/mo
CATEGORIESVPN
FEATURESNo email required, Account ID only, XMR accepted, BTC accepted, No VPN activity logs, Open source clients, Multi-hop, WireGuard and OpenVPN, +1 more
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
About
Anonymous VPN - account ID only, no email, accepts XMR/BTC. No logs, independently audited, multi-hop. Open source. (Zero KYC)
Analysis
OVERVIEW
Account creation issues an ID with no email, payment can be made in Monero or Bitcoin, and the no-logging claims carry a Cure53 audit trail rather than only a policy page.
LIMITS
Incorporation in Gibraltar, a British overseas territory, sits closer to UK legal process than a non-aligned jurisdiction. Paying by card or PayPal attaches a name to the account the signup flow kept clean.
USEFUL FOR
Audited multi-hop VPN use where the whole identity surface, signup and payment included, needs to stay empty.
┌────────────────────────────────────┐
│ IVPN Limited │
│ ──────────────────────── │
│ Founder and CEO: Nicholas Pestell │
│ Ownership: Nicholas Pestell, 100% │
│ Team: 10 people across 7 countries │
└────────────────────────────────────┘
No identity verification is recorded for typical use. Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is GI, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is partial evidence, last reviewed 2026-09-05, and recorded risk is caution.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
not set → Outcome: HOLD; Checked at: 2026-08-27; Inputs: Operator data exposure: moderate; Control model: hosted-account; Source model: partial; Audit: Score eligible: no; Reason: Remove current audit credit until a dated, scoped report or conclusion covering the score-critical service is normalized; a scheduled audit and historic program are insufficient for this field-level pass.
not set → On 7 August 2026, an exploited critical BTCPay Server vulnerability exposed IVPN’s Lightning-node credentials and 0.6168 BTC in operating funds was stolen. IVPN says no customer data or funds and no VPN infrastructure were affected; Lightning payments were restored on 10 August after patching, credential rotation and a rebuild.
Recorded risk
standard → caution
Score assessment
not set → Operator data exposure: moderate; Control model: hosted-account; Source model: open
Anonymous VPN — account ID only, no email, accepts XMR/BTC. No logs, independently audited, multi-hop. Open source. (Zero KYC) → Anonymous VPN - account ID only, no email, accepts XMR/BTC. No logs, independently audited, multi-hop. Open source. (Zero KYC)
Evidence status
not set → verified
Public claims / Follow the money / Sources
Label: IVPN — Team; Href: https://www.ivpn.net/en/team/; Type: official → Label: IVPN - Team; Href: https://www.ivpn.net/en/team/; Type: official
Recorded risk
not set → standard
Tagline
A privacy-preserving tool offering genuine utility. → not set
not set → IVPN Limited
────────────────────────
Founder and CEO: Nicholas Pestell
Ownership: Nicholas Pestell, 100%
Team: 10 people across 7 countries
Public claims
not set → Follow the money: IVPN Limited
────────────────────────
Founder and CEO: Nicholas Pestell
Ownership: Nicholas Pestell, 100%
Team: 10 people across 7 countries