What 'No-KYC' Actually Means for a VPS Provider
KYC - Know Your Customer - is a regulatory concept borrowed from finance. In hosting, it means verifying a customer's real identity before providing service. No major hosting jurisdiction requires KYC for VPS sales. The collection of identity data is a business choice, not a legal one - until a subpoena or court order forces disclosure of whatever was collected.
That is the key distinction. A provider that collects nothing has nothing to hand over. A provider that collects a billing address and card number has that data, and a court order covering that provider's jurisdiction can compel disclosure. The privacy gap between "email-only" and "email + card + billing address" is enormous in practice, even if both providers call themselves no-KYC.
The Anonymity Scorecard - 6 Providers Compared
We evaluated six providers on five dimensions: what they require at signup, what payment they force (or allow), whether a legal demand in their jurisdiction could compel them to retroactively collect ID, and whether there is a pattern of compliance with foreign law enforcement requests.
Star ratings: 5 = maximum anonymity achievable / 1 = heavy KYC. Ratings reflect the no-crypto-card pathway where available - some providers score differently depending on payment method chosen.
| Provider | Signup requires | Payment options | Can be compelled to collect ID later? | Anonymity score |
|---|---|---|---|---|
| AnubizHost | Email only | BTC, XMR, ETH, USDT, LTC (no card required) | No - Romanian courts can compel disclosure of what exists; nothing beyond email exists | ★★★★★ |
| Njalla | Email only | BTC, XMR, BCC, card optional | Technically yes (Swedish law) - but Njalla's legal posture is to act as the nominal owner of services; legal demands target Njalla, not the customer | ★★★★☆ |
| 1984 Hosting | Email only | Bank transfer, card, BTC; no XMR listed | Yes - Icelandic court orders can compel. Iceland has strong speech laws but is not outside EU enforcement cooperation | ★★★★☆ |
| Cinfu | Email only | BTC, LTC, ETH, USDT, card | Unclear - limited transparency on jurisdiction and data practices | ★★★☆☆ |
| BuyVM | Email + payment method required at signup | Card or crypto (card required for some plans) | Yes - US-based; US subpoenas compel disclosure of whatever BuyVM holds | ★★☆☆☆ |
| Hetzner (contrast) | Email + full name + address required | Card, SEPA, PayPal | Yes - German court orders; GDPR still allows LE access with proper process | ★☆☆☆☆ |
What Each Data Point Reveals About You
Not all account data is equally dangerous to anonymity. Here is what each data point can expose:
- Email address: The weakest link only if the email provider knows who you are. A throwaway ProtonMail or Tutanota address created over Tor has no identity value. Gmail or Outlook email created on your personal device links to Google/Microsoft logs including your IP history.
- Phone number: Highly traceable. SIM registration laws in most countries link a number to an ID. Even an unregistered SIM (prepaid, bought with cash) ties to a physical purchase event and can be tower-located. Providers that require SMS verification have a real identifier.
- Payment card: The clearest link to your identity. Card transactions are logged by the card issuer with your legal name and billing address. Any subpoena to the payment processor or provider returns your full identity. There is no card payment that is anonymous.
- Crypto wallet address: Pseudonymous for Bitcoin (blockchain analysis can link addresses to identities over time), genuinely private for Monero. Paying with XMR from a non-custodial wallet is the payment option with the lowest traceability.
Jurisdiction Matters More Than Policy
A privacy policy is a statement of intent. A court order overrides it. The actual protection a provider offers depends on which court has jurisdiction over them - and what that court can demand.
Relevant jurisdictions for this comparison:
- Romania (AnubizHost): EU member but outside the DMCA reach. A Romanian court order is required for disclosure. US and UK law enforcement cannot directly compel a Romanian provider - they need to go through mutual legal assistance treaties (MLAT), a slower and more uncertain process than a domestic subpoena.
- Sweden (Njalla): EU member. Swedish police can compel via court order. Njalla's structure deliberately minimizes what exists to compel - the company itself is the nominal service owner.
- Iceland (1984 Hosting): Outside the EU. Strong domestic speech protections. Enforcement requests must go through Icelandic courts.
- United States (BuyVM): US National Security Letters can compel disclosure with gag orders. US-based providers have the weakest structural protections for international customers from a legal standpoint.
AnubizHost as the Top Performer - What That Actually Means
AnubizHost earns the top anonymity score on this list because of what it collects, not what it claims. Specifically: signup requires only an email address, no payment card is ever required, and Monero is a supported payment option. There is no account-level identity data beyond the email to compel disclosure of.
The brand operates from Romania and has been delivering offshore services since 2020 (Anubiz Host brand launched 2025). Plans start at $24.99/month for a Ukraine Mini VPS. See the full lineup at anubizhost.com/offshore.
This does not mean AnubizHost is immune to all legal process - Romanian courts can compel disclosure of what exists. It means that when there is nothing beyond an email to disclose, that is what any process will return.
Frequently Asked Questions
What is the difference between no-KYC and anonymous hosting?
No-KYC means the provider does not request identity documents. Anonymous means the provider has no information that identifies you. The two overlap when you sign up with a disposable email and pay with Monero - but a no-KYC provider that forces card payment is not actually anonymous.
Is BuyVM considered private even though it is US-based?
BuyVM has a good reputation for content tolerance and is a long-running provider. But US jurisdiction means US subpoenas apply. The anonymity score here reflects legal exposure, not service quality.
Can I use a temporary email to register at AnubizHost?
Yes. There is no email verification gate on signup. You can use any email address you have access to, including temporary email services. Order notifications go to that address - if you will not check it, use one you will.
Do any of these providers accept cash payments?
None of these providers formally accept cash by mail (a practice some older offshore hosts offered). Monero from a non-custodial wallet is the practical cash equivalent for digital payments.