What Are Decoys in a Monero Transaction?
Decoys are the heart of how Monero hides who sent a payment. When you spend Monero, your wallet does not point at just the one coin you actually own. Instead it mixes that real coin together with a set of decoy outputs pulled from the blockchain, so an outside observer cannot tell which one was truly spent. This is Monero decoy outputs explained in practice: a built-in crowd that every transaction hides inside of, by default, with no setting to turn off.
The problem decoys solve
On a transparent chain like Bitcoin, every spend clearly references the exact coin being moved. Anyone can follow the trail backward and forward and link addresses, balances, and behavior over time. The sender is exposed by design because the network needs to prove the coin being spent is real and unspent.
Monero needs the same proof, that a real and unspent coin is backing the transaction, but without revealing which coin it is. Decoys are how it squares that circle. Your real input is hidden in a group, and the math proves one of the group is genuine without saying which.
How ring signatures use decoys
The mechanism is called a ring signature. Your wallet gathers several past outputs from the blockchain, mixes in your real one, and signs the transaction in a way that proves the signer owns one of the outputs in the ring. To a verifier the signature is valid, but the specific member that did the signing stays hidden among the decoys.
Every member of the ring looks equally plausible to an outside observer. There is no flag, no ordering, and no metadata that singles out the real spend. That ambiguity is the privacy. The larger and better-chosen the ring, the harder it is to guess which output actually moved.
Ring size and how it has grown
Ring size is the total number of outputs in the ring, which is your real coin plus the decoys. Monero has steadily increased this floor over the years through network upgrades, moving from small rings to a mandatory size of 16, meaning 15 decoys accompany every real spend. Because the size is fixed by consensus, all transactions look uniform and none stand out as having weaker privacy.
Uniformity matters as much as the number itself. If users could pick different ring sizes, the choices would create distinguishing fingerprints. By forcing everyone to the same ring size, Monero keeps the anonymity set consistent across the whole network.
How decoys are chosen
Decoys are not picked at random across all of history. The wallet selects them using a distribution that mirrors how real outputs are actually spent, weighting toward recent outputs since most coins are spent soon after being received. The goal is to make the decoys statistically indistinguishable from the genuine spend.
This selection algorithm is important because poorly chosen decoys can be eliminated by an analyst. If a decoy was already provably spent elsewhere, or comes from an implausible time window, it stops doing its job. Monero's decoy selection has been refined repeatedly to close those gaps.
What decoys do and do not hide
Decoys and ring signatures hide the sender, specifically which input was spent. They work alongside two other features that complete the picture. Stealth addresses hide the recipient by generating a fresh one-time address for every payment, and RingCT hides the amount being sent. Together these mean a Monero transaction reveals neither sender, receiver, nor amount on the public chain.
What decoys do not do is hide network-level metadata like your IP address. That is a separate layer handled by tools like Tor or Dandelion++ for transaction broadcast. Decoys protect the on-chain trail, not your connection to the internet.
Why this is on by default
A privacy feature only works if enough people use it. If decoys were optional, the few transactions that used them would stand out, and the small anonymity set would be easy to attack. Monero avoids this by making decoys and the full privacy stack mandatory for every transaction. There is no transparent mode to opt into.
That default is one reason Monero is a practical choice for keeping financial activity private. When you swap into Monero, your coins immediately gain the protection of this system, and you can swap out again later non-custodially and without KYC. The decoys are working for you whether or not you ever think about them.
Swap into or out of Monero, no KYC
MoneroSwap is non-custodial, no account, no KYC, no logs, 0% fee right now, open source, and available over Tor. Verify every claim, then pick a pair and swap into Monero. New here? Start with the FAQ.
← All guides