# SwapRocket review: KYC policy, privacy and safety grades

> SwapRocket is an aggregator. Its terms put it at KYC level 3 of 4: ID on risk flag. NoKYC Score grades it 3.2/10 for privacy (poor) and 3.4/10 for safety (poor). In its favour: no account needed, no email needed and no phone number. To watch: it may ask for ID, screens deposits and passes orders to partner exchanges. No incidents are on record.

Source: NoKYC Score, "SwapRocket review", reviewed 22 Oct 2026, https://nokycscore.com/service/swaprocket

## Key facts
- **Category:** Swap Aggregators
- **KYC level:** 3 of 4: ID on risk flag
- **Grades:** Privacy 3.2/10, Safety 3.4/10
- **Sign-up:** No account needed
- **Custody:** non-custodial
- **Fees:** States no fee or markup is added to the provider quote and that it earns a commission from the executing provider; the terms page instead describes a margin included in the rate
- **Limits:** Per-pair minimums set by the quoting provider; no upper limit set by SwapRocket, though providers may cap or review large swaps
- **Jurisdiction:** Malta
- **Incidents on record:** 0
- **Last reviewed:** 22 Oct 2026
- **Official website:** https://swaprocket.com

## What it is
SwapRocket is a swap aggregator: it requests quotes from instant-exchange providers such as FixedFloat, ChangeNOW, Changelly, SimpleSwap and StealthEX, and the user sends the deposit to an address generated and controlled by the chosen provider. Its AML/KYC policy says SwapRocket itself asks for no identity documents on crypto-to-crypto swaps, but the executing provider may hold a transfer for review and ask for identity information at any amount, and SwapRocket cannot override a provider hold; refunds are also handled by the provider. SwapRocket screens payout addresses against sanctions and high-risk databases, may block an address or device fingerprint, keeps transaction records for at least five years and usage logs with IP addresses for up to twelve months. The terms give a registered address in Malta without naming a registered company or company number. A script-free swap form is offered at /tor/swap; no onion address was published on the pages read.

## What the terms say about ID
The AML/KYC policy says the provider executing a swap can hold a transfer for review and ask for identity information before releasing funds, at any amount; SwapRocket itself does not ask for ID on crypto-to-crypto swaps.

## Features and warnings
- **Identity:** ID never required: no; No account needed: yes; No email needed: yes; No phone number: yes
- **Payment:** Accepts Monero: yes; Accepts Lightning: not stated
- **Access:** Tor onion address: not stated; Works without JavaScript: yes
- **Trust:** Never holds your funds: not stated; Own liquidity: no; Refund without ID: not stated; Independent audit: not stated; Company named: not stated; 5+ years operating: not stated
- **Warnings:** May ask for ID: yes; Screens deposits: yes; Passes orders to partners: yes; Holds your funds: not in terms; Email required: not in terms; Phone number required: not in terms; Nobody accountable: not in terms

## Questions
### Does SwapRocket require KYC?
SwapRocket is rated KYC level 3 of 4 on this site: ID on risk flag. The AML/KYC policy says the provider executing a swap can hold a transfer for review and ask for identity information before releasing funds, at any amount; SwapRocket itself does not ask for ID on crypto-to-crypto swaps.

### Is SwapRocket safe to use?
SwapRocket has a Safety grade of 3.4 out of 10 and a Privacy grade of 3.2 out of 10. No incidents are on record. Evidence level: documentation reviewed.

### Is SwapRocket legit?
SwapRocket is a working aggregator. Being real is not the same as being safe: its Safety grade here is 3.4 out of 10, built from custody, liquidity, track record and incidents.

### Is SwapRocket a scam?
NoKYC Score does not label services as scams; it records documented incidents with their sources and outcomes. No incidents are on record for SwapRocket. Its terms also allow it to hold a flagged deposit and ask for identity documents.

### Do I need an account or email to use SwapRocket?
No account needed.

### What fees does SwapRocket charge?
States no fee or markup is added to the provider quote and that it earns a commission from the executing provider; the terms page instead describes a margin included in the rate. Fees were recorded from SwapRocket's own pages and can change; check before you send.

### What are SwapRocket's limits?
Per-pair minimums set by the quoting provider; no upper limit set by SwapRocket, though providers may cap or review large swaps.

### Does SwapRocket have a Tor onion address?
No official onion address was found on SwapRocket's own pages.

### Which cryptocurrencies does SwapRocket support?
SwapRocket supports BTC, ETH, XMR, USDT, USDC, SOL, LTC, XRP.

### Is SwapRocket custodial?
No. SwapRocket is non-custodial: the operator does not control user funds.

### Can I use SwapRocket over Tor?
SwapRocket does not publish an official onion address.

## Sources
- https://swaprocket.com
- https://swaprocket.com/terms
- https://swaprocket.com/privacy
- https://swaprocket.com/aml-kyc
- https://swaprocket.com/no-kyc
- https://swaprocket.com/about
- https://swaprocket.com/faq
- https://swaprocket.com/swap-faq
- https://swaprocket.com/tor/swap
- https://swaprocket.com/contact
- https://swaprocket.com/changelog
- https://swaprocket.com/llms.txt
- https://swaprocket.com/api/public/facts.json
- https://swaprocket.com/api/public/quote.json?from=BTC&to=XMR&amount=0.1

How grades are calculated: https://nokycscore.com/methodology
