PGP verification
Every NoxSwap order comes with a letter of guarantee signed with our PGP key. Anyone can check in seconds that it really comes from us and that not a single character was changed. It is how trusted privacy services prove who they are, and it protects you from fake copies of our site.
Verify a letter
Paste the whole letter, from -----BEGIN PGP SIGNED MESSAGE----- to -----END PGP SIGNATURE-----.
The check runs entirely in your browser. The letter is not sent anywhere.
Why it matters
Protection from fake sites
Scammers copy exchange sites and put in their own deposit address. A fake site cannot produce a letter signed with our key, so a missing or invalid signature is your warning sign.
Proof of what we promised
The letter records your order: what you send, to which deposit address, what you receive and by when. If anything goes wrong, you hold a signed record that anyone can check.
Checked in seconds
No account and no personal data needed. All it takes is our public key, here, on BitList or in GnuPG.
What a letter of guarantee contains
- The order ID and the time it was issued
- What you send and the deposit address issued for this order only
- What you receive and your payout address
- The deposit deadline and our fixed-rate promise under the Terms
- Our key fingerprint, so you know which key to check against
You find it on your order page, right under the order ID, with buttons to copy, download and verify it. Keep it together with your order ID.
Verify independently
Checking on our own site is convenient, but you don't have to take our word for it. Use a tool we don't control:
BitList
BitList, an independent directory of privacy services, publishes our key on its own page and verifies NoxSwap letters in one click.
Verify on BitListGnuPG
With GnuPG on your computer: save the letter as letter.txt and run:
gpg --fetch-keys https://noxswap.io/pgp.txt gpg --verify letter.txt
Our public key
Fingerprint
2BEE 8468 AB94 9AC0 7C0A E29A DFE1 AE31 7EDB F79D
The same fingerprint is listed on BitList and in our signed address list below. If they ever differ, don't trust the key and write to us.
Official addresses, signed
Our only website and Tor mirror, signed with the same key. Verify this block like a letter of guarantee to be sure you are on a genuine NoxSwap address.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 NOXSWAP OFFICIAL ADDRESSES Website: https://noxswap.io Tor mirror: http://noxswap46e5kyuum33rcv4vno2icnkkpzw4bgbbgg5cedxwfztl27mqd.onion Support: info@noxswap.io PGP key: https://noxswap.io/pgp.txt Key fingerprint: 2BEE 8468 AB94 9AC0 7C0A E29A DFE1 AE31 7EDB F79D Any other domain, onion address or e-mail claiming to be NoxSwap is fake. Signed: 2026-10-28 -----BEGIN PGP SIGNATURE----- wrsEARYKAG0FgmrhQx8JEN/hrjF+2/edRRQAAAAAABwAIHNhbHRAbm90YXRp b25zLm9wZW5wZ3Bqcy5vcmcrDecyzutVfZPou4v0LHFAmFdeoixjinfKlNzC ncG+iBYhBCvuhGirlJrAfArimt/hrjF+2/edAABlpgEAnyM0FQIrgfMmVRsr ZO59aRHESuDa6BKp2hI0oOrx0SsBAO2di7hwGZ4QaardJrBatpWQENwSJDX3 4joVT+tCxtEK =F5oT -----END PGP SIGNATURE-----
Questions
Where do I find my letter?
On your order page, right under the order ID. You can open your order any time on the Track page with its ID.
My order has no letter. Why?
Letters are issued for orders created since 28 October 2026. After 90 days the letter is deleted together with the addresses in the order, as our privacy policy promises.
Does verification send my letter anywhere?
Not on this page: the check runs in your browser. BitList's tool receives the text you paste there, and GnuPG keeps everything on your computer.
What if the signature is invalid?
Do not send any funds. Make sure you are on noxswap.io or our official Tor mirror listed above, and write to info@noxswap.io with your order ID.