Skip to content
NoKYC Score
DirectoryExchangesSwapsBuyRatesIncidentsGuides List a project Sign in

Email Since 2013 Reviewed 22 Oct 2026

cock.li review

Free, donation-funded email host with irreverent domains and Tor access

  • No account needed
  • Tor onion address
  • No email needed
  • 5+ years operating
  • No phone number
  • Nobody accountable
No ID mentioned KYC 1 Documentation reviewed
Visit cock.li Onion address Report an incident Watch

Privacy

7.0/ 10

Strong

Safety

4.8/ 10

Caution

Based on terms and documentation. No test transactions published yet. See the arithmetic

cock.li review in short

cock.li is an email provider operating since 2013. Its terms put it at KYC level 1 of 4: no ID mentioned. NoKYC Score grades it 7.0/10 for privacy (strong) and 4.8/10 for safety (caution). In its favour: no account needed, no email needed and no phone number. To watch: it has no publicly accountable operator. One incident is on record, the latest from 1 Jun 2025.

Category
Email
KYC level
1 of 4: No ID mentioned
Grades
Privacy 7.0/10, Safety 4.8/10
Sign-up
No account needed
Fees
Free; donation-funded
Onion address
Yes
Incidents on record
1
Last reviewed
22 Oct 2026
Cite this review

NoKYC Score, "cock.li review", reviewed 22 Oct 2026, https://nokycscore.com/service/cock-li

Also available as plain text.

What cock.li is

cock.li is a free email and XMPP host run by a small pseudonymous team that says it has been "mostly alive since 2013". The site says the service is free because it has no wish to profit from personal data, and it is funded by donations. It offers a range of deliberately crude domain names, standard IMAP and POP access and hidden-service addresses for the website and for mail protocols. The site provides a form for unblocking outgoing SMTP on new accounts, and some websites reject its domains at registration. It is a conventional mail host and does not advertise end-to-end encryption of stored mail.

What cock.li offers, and what to watch

5 of 14 privacy and safety features, 1 warning in its terms.

"Not stated" means its own pages do not say.

Identity

  • ID never required Not stated
  • No account needed Yes Usable without creating an account, or the account is only a random number.
  • No email needed Yes An email address is not required to sign up or use it.
  • No phone number Yes A phone number is never required.

Payment

  • Accepts Monero Not stated
  • Accepts Lightning Not stated
  • Accepts cash Not stated

Access

  • Tor onion address Yes An official .onion address, reachable only through Tor.
  • Works without JavaScript Not stated

Trust

  • Open source Not stated
  • No-logs policy Not stated
  • Independent audit Not stated
  • Company named No
  • 5+ years operating Yes Has operated continuously for five years or more.

Warnings

  • May ask for ID Not in terms
  • Email required Not in terms
  • Phone number required Not in terms
  • Closed source Not in terms
  • Nobody accountable Yes No company or person is publicly responsible for the service.

Does cock.li require KYC?

  1. 0
  2. 1
  3. 2
  4. 3
  5. 4

KYC level 1: No ID mentioned. No identity requirement appears anywhere in the terms or documentation.

Registration asks for no identity details and the service is reachable over Tor; no terms mention verification.

Read the terms we assessed ↗

How the grades add up

Both grades start at 50 points and move by fixed, published amounts. Nothing is adjusted by hand. The total is divided by ten.

Privacy

7.0
  • Starting points 50
  • KYC level 1: No ID mentioned +12
  • No email needed +3
  • No phone needed +1
  • Tor onion service +4
  • Total, clamped to 0–100 70

Safety

4.8
  • Starting points 50
  • 5+ years operating +10
  • Anonymous operator -4
  • Reported theft of about one million user records through retired webmail software high · unknown · 509 days ago -8
  • Total, clamped to 0–100 48

Test ledger

Real transactions run by our editors. A badge without a ledger is an assertion; this is the proof.

No test transactions published yet

The grades above rest on cock.li’s terms and documentation. Tests will appear here with the date, route, amount band and result as they are run.

Incidents on record

high

Data leak

Reported theft of about one million user records through retired webmail software

Security press reported in June 2025 that an attacker exploited the Roundcube webmail platform used by cock.li and offered the resulting databases for sale. According to the service's own statement as reported, records for an estimated 1,023,800 users who had logged in to webmail since 2016 were exposed, with contact entries for a further subset; passwords, email content and IP addresses were not included. The service removed Roundcube entirely.

Outcome unknown Source: bleepingcomputer.com ↗

User reviews

Reviews never change a grade. Reviews with a transaction reference are marked.

No reviews yet.

Write a review

Create an account to write a review. It takes ten seconds and needs no email: you get a random key and a random name. Already have a key? Sign in.

Alternatives to cock.li

All alternatives →

Proton Mail

Swiss end-to-end encrypted email with a free tier; paid plans payable in Bitcoin or cash

Privacy 7.2
Safety 7.3
Not mentioned KYC 1 Docs reviewed

Tuta

German encrypted email and calendar with open-source clients and a free tier

Privacy 6.5
Safety 7.3
Not mentioned KYC 1 Docs reviewed

Posteo

Berlin email provider at €1/month that separates payments from accounts; takes cash

Privacy 7.8
Safety 6.5
Never KYC 0 Docs reviewed

Onion Mail

Email with an official onion address, PGP storage encryption and anonymous signup

Privacy 7.4
Safety 6.5
Not mentioned KYC 1 Docs reviewed

cock.li vs Proton Mailcock.li vs Tutacock.li vs Posteocock.li vs Onion Mail

cock.li: common questions

Does cock.li require KYC?

cock.li is rated KYC level 1 of 4 on this site: no ID mentioned. Registration asks for no identity details and the service is reachable over Tor; no terms mention verification.

Is cock.li safe to use?

cock.li has a Safety grade of 4.8 out of 10 and a Privacy grade of 7.0 out of 10. There is 1 incident on record, listed with sources on this page. Evidence level: documentation reviewed.

Is cock.li legit?

cock.li is a working email provider that has operated since 2013. Its operators do not publish a company or names, so nobody is publicly accountable for it. Being real is not the same as being safe: its Safety grade here is 4.8 out of 10, built from custody, liquidity, track record and incidents.

Is cock.li a scam?

NoKYC Score does not label services as scams; it records documented incidents with their sources and outcomes. cock.li has 1 incident on record, 1 not resolved, the latest: "Reported theft of about one million user records through retired webmail software". Each is listed on this page with its source.

Do I need an account or email to use cock.li?

No account needed.

What fees does cock.li charge?

Free; donation-funded. Fees were recorded from cock.li's own pages and can change; check before you send.

Does cock.li have a Tor onion address?

Yes. cock.li publishes an official onion address, shown on this page. Open it in Tor Browser.

Can I use cock.li over Tor?

Yes. cock.li publishes an official onion address, shown on this page.

Listing history

  • Listing added. Facts and KYC level set from the service's own terms and documentation.
  • Incident recorded: Reported theft of about one million user records through retired webmail software