Bitcoin Forum
September 04, 2026, 09:11:57 PM *
News: Latest Bitcoin Core release: 31.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [ANN] Pablo.Cash — KYC-never Crypto Exchange | Tor | No JS | No Logs | PGP | XMR  (Read 179 times)
Pablo.Cash (OP)
Copper Member
Newbie
*
Offline

Activity: 5
Merit: 3


View Profile
September 01, 2026, 11:10:35 PM
Last edit: Today at 09:21:08 AM by Pablo.Cash
Merited by Shishir99 (1)
 #1

PABLO.CASH
PRIVATE AUTOMATIC CRYPTO EXCHANGE

KYC-NEVER • NO REGISTRATION • NO LOGS • 24/7

WEBSITE | TOR MIRROR | RULES | FAQ | PGP KEY




WHAT IS PABLO CASH?

Pablo Cash is an accountless crypto-to-crypto exchange operating automatically 24/7.

KYC-never: no identity verification before or after a deposit.

Each exchange is processed as a separate order through the Pablo Cash liquidity pool. There are no user accounts or stored balances.

KEY FEATURES

Privacy: KYC-never • no registration • no email • no activity logs
Access: Clearnet • Tor • no executable JavaScript
Exchange: Live quote before payment • automatic payouts • own liquidity pool
Verification: PGP-signed order statements • operator support 24/7

SUPPORTED ASSETS

Coins: XMR • BTC • ETH • LTC • BNB • TRX • SOL
USDT: TRON • Ethereum • BSC • Solana
USDC: Ethereum • BSC • Solana

Available routes depend on the selected input asset and network.

FEES

XMR → Crypto: 0.50%
Crypto → XMR: 0.90%
Crypto → Crypto: 0.90%

HOW IT WORKS

1. Select the input and payout assets.
2. Enter the amount and recipient address.
3. Review the live rate, fee and expected payout.
4. Send funds to the one-time deposit address.
5. Receive the payout after the required network confirmations.

Every deposit address is intended for one order and one transaction only.

PGP VERIFICATION

Order statements can be downloaded and verified independently of the website.
A valid PGP signature confirms the origin and integrity of the saved order statement. It does not replace checking the transaction on the blockchain.

Code: (Primary fingerprint:)
3EC2 8B27 CD30 3B2B B2BD 18E7 9429 7C45 C682 A409

IMPORTANT

Always verify the asset, network, amount and recipient address before sending funds. Payments sent through an incorrect network or after the order validity period may be impossible to process or recover.




OPEN PABLO CASH

Questions and feedback are welcome in this thread.
Shishir99
Legendary
*
Offline

Activity: 1470
Merit: 1045


A swap that needs a hand? zeto.cash@proton.me


View Profile
September 02, 2026, 11:21:41 AM
 #2

Welcome to the forum Pablo.cash

Seems like a pretty basic exchange/swap website. I don't see much information on the website. No FAQ page that could answer a lot of questions. I checked that the minimum swap amount is $10 in Bitcoin and XMR, which is pretty low compared to other swaps. Usually the minimum is around $100 on other swaps. So, you advance others in this part.

Most of the website gives an AI-generated vibe, including the support tab. I think you should focus on the UI more and make it more professional. The announcement thread design is good, but not the best. Do you plan to run any promotional campaigns on the forum?

Pablo.Cash (OP)
Copper Member
Newbie
*
Offline

Activity: 5
Merit: 3


View Profile
September 02, 2026, 06:08:13 PM
 #3

Welcome to the forum Pablo.cash

Seems like a pretty basic exchange/swap website. I don't see much information on the website. No FAQ page that could answer a lot of questions. I checked that the minimum swap amount is $10 in Bitcoin and XMR, which is pretty low compared to other swaps. Usually the minimum is around $100 on other swaps. So, you advance others in this part.

Most of the website gives an AI-generated vibe, including the support tab. I think you should focus on the UI more and make it more professional. The announcement thread design is good, but not the best. Do you plan to run any promotional campaigns on the forum?

Thank you for the detailed feedback, Shishir99.

We understand why the interface may give that impression. Modern websites often rely heavily on JavaScript to provide animations, dynamic components, and a more polished interactive experience. Pablo Cash, however, works entirely without JavaScript. This naturally limits some UI possibilities, but it is a deliberate privacy-first decision rather than a lack of attention to the interface.

Our priority is to keep the exchange lightweight, functional, and accessible without running executable code in the user’s browser. That said, we agree that the presentation can still be improved within these limitations, and we will continue refining it.

Your point about the FAQ is also fair. We are already working on it, and it will be added soon.

We also plan to run a promotional campaign on the forum after completing our listings in the main crypto directories.
hugeblack
Legendary
*
Offline

Activity: 3360
Merit: 4772


View Profile WWW
September 03, 2026, 08:28:23 AM
 #4

I noticed that the service *uses* its own liquidity pools with a maximum limit of $150,000, and there are 14 cryptocurrencies. Does this mean your reserves are over $1 million? Can you provide proof of this, or provide an escrow?

Quote
Permitted use
An exchange may be requested only where it is not prohibited by applicable law.
What do you mean by this part?

▄███████████████████████▄
███████████████████████
████████████▀▀██████████
████████████████████████
██████████▄▄██████████
█████████████████████
███████████████████████
█████████████████████
██████████▀▀██████████
████████████████████████
██████████▄▄████████████
███████████████████████
▀███████████████████████▀
 
 MoBit 
████
██
██
██
██
██
██
██
██
██
██
██
████
 NO   LOGS
 
 LOW  FEES
 
 PGP  GUARANTEE
████
██
██
██
██
██
██
██
██
██
██
██
████
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Shishir99
Legendary
*
Offline

Activity: 1470
Merit: 1045


A swap that needs a hand? zeto.cash@proton.me


View Profile
September 03, 2026, 08:58:35 AM
 #5

Thank you for the detailed feedback, Shishir99.

We understand why the interface may give that impression. Modern websites often rely heavily on JavaScript to provide animations, dynamic components, and a more polished interactive experience. Pablo Cash, however, works entirely without JavaScript. This naturally limits some UI possibilities, but it is a deliberate privacy-first decision rather than a lack of attention to the interface.

Our priority is to keep the exchange lightweight, functional, and accessible without running executable code in the user’s browser. That said, we agree that the presentation can still be improved within these limitations, and we will continue refining it.

Your point about the FAQ is also fair. We are already working on it, and it will be added soon.

We also plan to run a promotional campaign on the forum after completing our listings in the main crypto directories.

Fair points.
Yes, as you said, there is room for improvement without even using JS. I appreciate that you care about privacy and focusing on that when building the website. Yes, please add the FAQ, which will help users get the answers without contacting support. It seems the support says 24/7 online. Is this actually real? If so, that is pretty impressive considering a new exchange. I assume you already hired team members to handle support.

Quote
Permitted use
An exchange may be requested only where it is not prohibited by applicable law.
What do you mean by this part?
I think this means that you should not use the exchange if you live in a region where crypto exchange is prohibited. This is just a line for the regulators that may want to hunt down the privacy exchanges. However, we can wait for their official reply. Since there is no account and no KYC, there is no way to know where the users are from.

Cinexa
Jr. Member
*
Offline

Activity: 46
Merit: 73


View Profile WWW
Today at 12:04:24 AM
Merited by hugeblack (10)
 #6

I looked at the site.

It really is zero JS. Script-src 'none', no external scripts,onion-location header set to this onion site. Frankly, much better than most of these swaps are.
Clear-net uses Cloud Flare though(cf-ray, CF NS's, CF's certs). Anyone who doest want their clearnet IPs sitting behind a US-CDN; use the onion onion and check the onion itself. http://Http://pablocashyjghnx5yzrd2a73eau47zx5eyc7peomtuldnumdicg3doyd.onion/

They claim they are using their own liquidity pool through their rules; this makes them custodial. My coins go in first then out from their end: no company name or jurisdiction, typical counterparty risk.

The home page says "clean coins on pay out," their rule said it has noAML screenings. The homepage text and their rules seems inconsistent in this regard.

It uses ED25519 for its key; It is "Pablo Cash Order Signing" with their Pablo Cash UID and no expiry:
Primary: 3EC2 8B27 CD30 3B2B B2BD 18E7 9429 7C45 C682 A409
Subkey: 06E8 EEB8 C9D3 628F 4ECC E1DB F52B A7AD D576 0622
Key readily visible on the webpage, their documented downloads page 500-error'd for me; please pin your subkey-finger-print from the Onion and NOT the Cloud Flare Onion's page; actually, I see it at onion.page saying that their subkey-sign could not verify payment.

Test22.pablo.cash and creat22.pablo.cash can be seen in the same Cloudflare IP block as can be found in a CT-log. (a form of pre-production exposure)

I am NOT going to claim this to be a scam because of the things above. Please take it as a regular exchange; use its onion. Use a very small amount for your first test payment.

Use different wallets.

DYOR.
Pablo.Cash (OP)
Copper Member
Newbie
*
Offline

Activity: 5
Merit: 3


View Profile
Today at 01:05:04 AM
 #7

I noticed that the service *uses* its own liquidity pools with a maximum limit of $150,000, and there are 14 cryptocurrencies. Does this mean your reserves are over $1 million? Can you provide proof of this, or provide an escrow?
Thank you for the questions.
We operate two separate pools. Pool 1 receives customer deposits, while Pool 2—funded with our own assets—is used for payouts. A customer’s incoming funds are not used to fund that same order’s payout. Before sending, we instantly convert the required amount from Pool 2 into the requested coin.
Therefore, we do not need to hold $150,000 in each of the 14 assets. Processing a maximum-size order requires at least $150,000 in liquid payout funds, not over $1 million. Our available payout liquidity is currently above $150,000.
For security reasons, we cannot disclose the pool addresses. However, we have started placing deposits with independent platforms and will continue doing so to build user trust.


Quote
Permitted use
An exchange may be requested only where it is not prohibited by applicable law.
What do you mean by this part?
“Permitted use” simply means that the transaction and source of funds must be lawful under the laws applicable to the user. It does not imply KYC; this responsibility remains with the user.

Fair points.
Yes, as you said, there is room for improvement without even using JS. I appreciate that you care about privacy and focusing on that when building the website. Yes, please add the FAQ, which will help users get the answers without contacting support. It seems the support says 24/7 online. Is this actually real? If so, that is pretty impressive considering a new exchange. I assume you already hired team members to handle support.
We are already working on the FAQ and expect to publish it within the next 1–2 days.
And yes, our support is genuinely available 24/7. We have already hired a dedicated team to provide round-the-clock assistance.



Quote
Permitted use
An exchange may be requested only where it is not prohibited by applicable law.
What do you mean by this part?
I think this means that you should not use the exchange if you live in a region where crypto exchange is prohibited. This is just a line for the regulators that may want to hunt down the privacy exchanges. However, we can wait for their official reply. Since there is no account and no KYC, there is no way to know where the users are from.
You are correct. This is a standard legal formality clarifying that each user is responsible for ensuring that their use of the service complies with the laws applicable to them.


They claim they are using their own liquidity pool through their rules; this makes them custodial. My coins go in first then out from their end: no company name or jurisdiction, typical counterparty risk.

The home page says "clean coins on pay out," their rule said it has noAML screenings. The homepage text and their rules seems inconsistent in this regard.

As explained above, we use two separate pools: Pool 1 receives customer deposits, while Pool 2 is used exclusively for payouts. A customer’s deposited coins are not forwarded to another user—the payout is made from clean funds prepared in advance in Pool 2.
Therefore, there is no contradiction: “no AML screening” refers to incoming customer funds, while “clean coins on payout” refers to the separate liquidity used for payouts.

It uses ED25519 for its key; It is "Pablo Cash Order Signing" with their Pablo Cash UID and no expiry:
Primary: 3EC2 8B27 CD30 3B2B B2BD 18E7 9429 7C45 C682 A409
Subkey: 06E8 EEB8 C9D3 628F 4ECC E1DB F52B A7AD D576 0622
Key readily visible on the webpage, their documented downloads page 500-error'd for me; please pin your subkey-finger-print from the Onion and NOT the Cloud Flare Onion's page; actually, I see it at onion.page saying that their subkey-sign could not verify payment.
We have just checked the download page and signature verification, and everything is working correctly on our side. We recently updated the website, so your test may have coincided with the deployment.
If possible, please try again. If the error persists, let us know and we will investigate it further.

Test22.pablo.cash and creat22.pablo.cash can be seen in the same Cloudflare IP block as can be found in a CT-log. (a form of pre-production exposure)
That is correct. These were temporary subdomains created for testing and have now been removed. However, their historical records remain visible in public Certificate Transparency logs.
hugeblack
Legendary
*
Offline

Activity: 3360
Merit: 4772


View Profile WWW
Today at 06:55:52 AM
 #8

For security reasons, we cannot disclose the pool addresses. However, we have started placing deposits with independent platforms and will continue doing so to build user trust.
As a start, you can deposit an amount into BTT escrow account. Use any trusted member here as a escrow account, and we can recommend some users, but honestly, you will need a lot to gain trust.

▄███████████████████████▄
███████████████████████
████████████▀▀██████████
████████████████████████
██████████▄▄██████████
█████████████████████
███████████████████████
█████████████████████
██████████▀▀██████████
████████████████████████
██████████▄▄████████████
███████████████████████
▀███████████████████████▀
 
 MoBit 
████
██
██
██
██
██
██
██
██
██
██
██
████
 NO   LOGS
 
 LOW  FEES
 
 PGP  GUARANTEE
████
██
██
██
██
██
██
██
██
██
██
██
████
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Arhad
Newbie
*
Offline

Activity: 9
Merit: 8


View Profile
Today at 09:26:46 AM
 #9

I won't rush to add your site to our database of suspicious sites. But how are you planning to send my BTC to this "randomBTCwallet" address?
https://www.talkimg.com/images/2026/09/04/UeE4c5.png
Pablo.Cash (OP)
Copper Member
Newbie
*
Offline

Activity: 5
Merit: 3


View Profile
Today at 10:02:27 AM
 #10

Yes, please add the FAQ, which will help users get the answers without contacting support.
The FAQ has now been added. Thank you for the helpful suggestion!

As a start, you can deposit an amount into BTT escrow account. Use any trusted member here as a escrow account, and we can recommend some users, but honestly, you will need a lot to gain trust.
Thank you for the advice. We would appreciate it if you could recommend a few trusted escrow providers from this forum.

I won't rush to add your site to our database of suspicious sites. But how are you planning to send my BTC to this "randomBTCwallet" address?
Our terms state that users are responsible for entering the correct recipient wallet address. Since you entered the phrase “randomBTCwallet” instead of a valid BTC address, we would not have been able to process the payout, and you would have needed to contact support.
Nevertheless, thank you for bringing this to our attention. We have now added wallet-address validation, so an order cannot be created if a similar phrase is entered in the recipient wallet field.
NotATether
Legendary
*
Offline

Activity: 2450
Merit: 10266


┻┻ ︵㇏(°□°㇏)


View Profile WWW
Today at 10:08:18 AM
 #11

BitMixList has reviewed the Pablo.cash swap service.

The exchange service states that it uses PGP, has no JavaScript or logs. During a browser test we found no JavaScript was fetched by the website. Therefore, calculation of the rate is done manually by clicking on the Calculate button. It is a fixed swap (not floating),.

The first swap that was performed was XMR to BTC. They use their own captcha system. The deposit page presents the Monero address to deposit to, and it allows for multiple deposits up to the target amount input. The fee was 0.50%.

Processing took around 25 minutes. There is an option to delete the swap once finished.



When running the receive address through KayAMLBot checker, it reported an AML score of 100/100, with a single category 'stolen funds':

Code:
        "turnover": "0.00610149 BTC / $493.22",
        "route": {
            "network": "BTC",
            "syntax": "kayrison-network-coin-address",
            "bot": "KayAMLBot",
            "risk_type": "aml",
            "query_type": "address"
        },
        "balance": "0.00610149 BTC / $493.22",
        "network": "BTC",
        "source_sections": [],
        "risk_label_raw": null,
        "risk_label": "Very high risk level",
        "transactions": 1,
        "links": [],
        "entities": [
            {
                "type": "dangerous",
                "percentage": 100,
                "share": "100%",
                "label": "stolen_funds"
            }
        ],
        "bot": "KayAMLBot",
        "token": "BTC",
        "flags": [
            {
                "type": "dangerous",
                "percentage": 100,
                "share": "100%",
                "label": "stolen_funds"
            }
        ],
        "check_date": "2026-09-04T06:53:17.058Z",

KayAMLBot can sometimes be incorrect about classifications, so I ran the address through the official AMLbot website and received 68/100 Medium Risk, with main sources - High Risk: dark market | Medium risk: Exchange risky, unnamed service and Low risk: official exchange. It was much better than KayAMLBot's classification and more reassuring, but highlights the risks of sending this output to an exchange.



The second swap we performed was from BTC -> ETH. For both swaps a letter of guarantee was provided. The swap order automatically expires after 2 hours since it uses a fixed rate.



This swap took roughly 40 minutes to complete. We then ran an AML check on the resulting address. It received a 50/100 AML score, with 100% from DEX.

Code:
        "turnover": "0.20692271 ETH / $518.52",
        "route": {
            "network": "ETH",
            "syntax": "kayrison-network-coin-address",
            "bot": "KayAMLBot",
            "risk_type": "aml",
            "query_type": "address"
        },
        "balance": "0.20692271 ETH / $518.52",
        "network": "ETH",
        "source_sections": [],
        "risk_label_raw": null,
        "risk_label": "Medium risk",
        "transactions": 1,
        "links": [],
        "entities": [
            {
                "type": "suspicious",
                "percentage": 100,
                "share": "100%",
                "label": "dex"
            }
        ],
        "bot": "KayAMLBot",
        "token": "Ethereum",
        "flags": [
            {
                "type": "suspicious",
                "percentage": 100,
                "share": "100%",
                "label": "dex"
            }
        ],
        "check_date": "2026-09-04T07:52:30.613Z",

AMLbot has the address classified as "Low risk", but with no classifiers or scores.



A note: When performing this swap, we ran into a technical issue. The system would not work when we created an order for 0.0061 BTC (about $490), but the system took us to the deposit page when we increased it to 0.0065 BTC (or $520). We are not sure whether this is because of a minimum size amount or an issue with the Ethereum node in general, as ETH -> XMR yielded the same problem, whereas XMR -> ETH swaps could initiate fine. It would be nice if the operator can clarify if this behavior is àbug.

 
 b1exch.to 
  ETH      DAI   
  BTC      LTC   
  USDT     XMR    
.███████████▄▀▄▀
█████████▄█▄▀
███████████
███████▄█▀
█▀█
▄▄▀░░██▄▄
▄▀██▄▀█████▄
██▄▀░▄██████
███████░█████
█░████░█████████
█░█░█░████░█████
█░█░█░██░█████
▀▀▀▄█▄████▀▀▀
Pablo.Cash (OP)
Copper Member
Newbie
*
Offline

Activity: 5
Merit: 3


View Profile
Today at 12:05:51 PM
Merited by NotATether (2)
 #12

Thank you for performing real exchanges and documenting the completed payouts.

There are two points that should be clarified so readers do not draw a stronger conclusion than the test supports.



1. The rate is floating, not fixed

Pablo Cash uses a floating-rate model, not a fixed-rate model.

The absence of JavaScript only means that the quote is refreshed by a server-side request when the Calculate button is pressed. It does not determine whether a rate is fixed or floating.

The amount displayed when an order is created is an estimate based on the current market rate. The final payout amount is calculated after the deposit receives the required network confirmations, using the market rate at that time and including the applicable fees.

The two-hour period is the payment-validity window for the order. It is not a two-hour rate lock.

Our previous wording could have made this distinction insufficiently clear, so it has now been stated explicitly in the FAQ:

Is the rate locked when the order is created?



2. The KayAML result is a risk signal, not proof of stolen BTC

Your post correctly notes that KayAMLBot can sometimes classify an address incorrectly.

The KayAML result is worth recording as a screening signal, but it does not establish that the BTC received in this test was stolen.

The payout transaction can be independently inspected here:

01c9f4264e0e86d6d59b85331255f7ce692b66206d911d809f918046ca9d6468

The transaction contains:

  • Six inputs totalling 620,497 sats;
  • A customer payout of 610,149 sats;
  • A change output of 9,225 sats;
  • A transaction fee of 1,123 sats.

This is a multi-input pool transaction.

Bitcoin does not assign particular inputs to particular outputs. Therefore, the transaction itself does not show that one specific input funded all, or any defined part, of the customer output.

Under the model described in our rules, customer deposits and payout liquidity are operated as separate pools. The required payout is prepared from the payout pool rather than forwarding one customer’s deposit directly to another customer.

The multi-input transaction with change is consistent with such pooled operation. However, the transaction structure alone should not be treated as a guarantee of absolute cleanliness.



3. The alleged theft path was not supplied

The KayAML response shown in the review contains no:

  • Originating theft transaction;
  • Affected amount;
  • Hop distance;
  • Victim or incident reference;
  • Contaminated UTXO;
  • Reproducible transaction path.

Its
Code:
source_sections
and
Code:
links
fields are also empty.

Therefore, the
Code:
100% stolen_funds
result is an automated address-level label. It is not a reproducible transaction trace proving that 100% of the received satoshis were stolen.



4. Independent providers produced materially different results

A same-day independent MistTrack recheck classified the receiving address as:

Quote
3/100 — Low Risk

No risk details and no malicious label.

The reusable input/change address was also classified as:

Quote
3/100 — Low Risk

No risk details and no malicious label.

The official AMLBot check cited in the review returned a materially different 68/100 Medium Risk result with mixed categories, rather than a transaction-level finding that the payout consisted of stolen funds.

This does not justify claiming that any wallet is “guaranteed clean.” It shows that different automated providers produced materially different heuristic results.

AMLBot’s own published methodology explains that a wallet score is a risk signal rather than a legal verdict, and that even a High Risk result does not prove criminal activity:

AMLBot: What Low, Medium and High Risk Actually Mean



The precise conclusion

Quote
One automated checker produced a
Code:
stolen_funds
alert, but no underlying theft transaction, affected amount or traceable path was supplied.

Another checker returned Medium Risk with different categories, while MistTrack classified the relevant addresses as Low Risk.

The evidence presented is therefore insufficient to conclude that Pablo Cash paid out stolen BTC.



5. The 0.0061 BTC / 0.0065 BTC behavior

The difference you observed between 0.0061 BTC and 0.0065 BTC is consistent with the route-specific minimum for the asset being received, rather than a fixed-rate mechanism or a blockchain-node failure.

The minimum depends on the payout asset. If the applicable threshold was not displayed clearly enough during your test, that is fair feedback and the presentation should be unambiguous.



Thank you again for documenting the completed tests.

The successful payouts and the reported screening results are both useful facts. They simply need to be described with the appropriate technical limits.
NotATether
Legendary
*
Offline

Activity: 2450
Merit: 10266


┻┻ ︵㇏(°□°㇏)


View Profile WWW
Today at 06:23:10 PM
 #13

@Pablo.Cash: we are working on finding an alternative risk provider for AML checks, especially for BTC, preferably one that is less deviant from amlbot while remaining cost effective.

 
 b1exch.to 
  ETH      DAI   
  BTC      LTC   
  USDT     XMR    
.███████████▄▀▄▀
█████████▄█▄▀
███████████
███████▄█▀
█▀█
▄▄▀░░██▄▄
▄▀██▄▀█████▄
██▄▀░▄██████
███████░█████
█░████░█████████
█░█░█░████░█████
█░█░█░██░█████
▀▀▀▄█▄████▀▀▀
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!