Ranked on documented facts, not sponsored placement - every provider page shows the evidence.
Short answer: Nine providers need no identity documents, but KYC-free signup solves only the form. Payment, the app-store account and your signup IP are independent identity anchors - close all three or the "no KYC" badge is cosmetic.
providers on this page: 15 · independent audit on file: 73% · court-proven no-logs: 2 · open-source apps: 47%
quick picks
The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…
The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual…
The best-evidenced no-logs claim in the business - twice tested in US courts (2016, 2018) and twice found to have nothing - plus the cheapest long-term renewal…
cryptostorm.is is verifiably LIVE (fetched today, HTTP 200) with a PGP-signed warrant canary dated July 1, 2026 and an unbroken Wayback snapshot record…
Community-run Italian operator with the best power-user transparency stack in the business: fully open-source Eddie client (GPL-3.0), 258 bare-metal entry IPs…
The most honest mainstream deal in 2026: open-source apps, real audits, a genuinely usable free tier with no data cap, and a transparent renewal model - and in…
A rare genuinely usable free plan (no card, P2P allowed on the 10 GB free tier) plus audited no-logs claims twice over - DefenseCode 2015 and Securitum 2024…
The most trustworthy free VPN on structural grounds: an anarchist Seattle collective that has run since 1999, funds itself by donations, asks no account…
The freemium that actually respects you: a 10 GB free tier, transparent $9/$69 pricing with no renewal rug-pull, open-source Linux CLI, and a CEO who publicly…
Unlimited devices and a genuinely documented 2025 Deloitte ISAE 3000 no-logs audit - the strongest paper trail in the Kape/Nord orbit. But it is half of the…
The most expensive VPN in the room wearing the most auditing laurels: $8.33/mo forever after a $2.99 teaser, owned by Kape Technologies (ex-Crossrider adware…
Cheap ($2.19/mo intro on 26 months, renews at $56.94/yr = ~2.2x), Romanian-based, and one of few Kape brands whose no-logs claim is Deloitte-audited - but the…
Mostly a ghost with a live storefront: the operator lives at betternet.co, while betternet.io redirects straight to GoDaddy's 'domain for sale' lander and…
A strong everyday VPN with a huge live-verifiable network (7,287 servers in 150 countries counted in the official API on 2026-10-01) and a genuine audit…
The cautionary tale of the entire industry: the service that literally proved a VPN's 'no logs' can be a lie - real logs to DHS in 2016, then sold three times…
"No KYC" means the provider skipped the identity form. It does not mean you are unidentifiable, because identity reaches the operator through at least three channels that never touch a signup form. 15 providers in our ranking need no identity documents; 5 of them take no personal data at all beyond what the payment itself carries.
A card payment carries your legal name, billing address and a bank-grade transaction record straight into the provider's payment processor. Crypto changes the strength, not the kind: Bitcoin is pseudonymous with a public trail; Monero is private at the protocol level; cash by mail is the Mullvad classic and still works[1]. The anonymous-payment hub ranks the providers by exactly this link, because a KYC-free signup behind a traced payment is a privacy theater.
Email-only signup (most of this page's population) leaves a contactable identifier - IVPN's own essay on anonymous-VPN marketing is blunt about what that does and does not protect[2]. The account-number model (Mullvad) removes it entirely. The app-store link is the one everyone forgets: your Google or Apple account is a legal identity, and it tags the install, the device and often the payment. Desktop clients and Android sideloading close it.
Three remain after perfect signup hygiene - and the anonymous-payment hub covers the payment link in full depth. First, the signup IP - your account was created from your real connection before any tunnel existed. Second, the renewals: a saved card re-links you on every billing cycle, and refunds require a payment trail by definition[4]. Third, the device itself: local bypass attacks like TunnelCrack can route traffic around a misconfigured client[5], which is why the leak test exists. None of this makes the [Five Eyes framework][6] irrelevant - jurisdiction decides what the operator can be forced to add to whatever it holds. Signup hygiene is a one-time effort, but the renewal link recurs on autopilot - audit your saved payment methods once a year, because that is where most de-anonymizations actually happen.
The provider never asks for a name, address, phone number or government ID - the signup is an email at most, and the best operators skip even that. What it does not mean: that you are unidentifiable. Your payment method, your app-store account, your IP at signup and your device DNS are all identity leaks that operate independently of the signup form.
Mullvad is the strongest case - a random account number is the entire account, no email asked. IVPN requires no email or personal data. Riseup has no accounts at all - install and run. Most commercial providers ask for an email only; that is KYC-free in letter but leaves a contactable identifier on file.
Not by itself, and Bitcoin is the weaker option - the payment chain is public on-chain. Monero is genuinely private at the payment layer. But anonymity is a chain: pay with Monero and sign up with your main email, and the email re-identifies you. Every link in the chain must be strong; the anonymous-payment hub covers the payment links in detail.
Installing from Google Play or the App Store attaches the download to your personal store account - real name, payment history, device identifiers. A "no-KYC" VPN downloaded through your personal Apple account has a full identity chain to the install. Sideloading on Android, or a desktop app, closes it.
It is a bounded one: an email address is a contactable identifier that links your VPN account to your other accounts if the same address appears elsewhere. Use a dedicated address that appears nowhere else. The stronger question is what the provider does with it - check the data-retention language, not just the signup form.
Providers log signup metadata unless they document otherwise - and that IP links to your real location unless you sign up through an existing tunnel or a network you trust. This is the leak nobody checks: the account is created before the tunnel exists, and that first connection can carry your home IP. 15 providers match this page; ask each of them what they store at signup.