1. Escrow architecture: 2-of-3 multisig fund mechanics
In standard escrow the market holds your coins in one wallet it controls. Earlier centralized platforms ran that single-wallet model, and users lost deposits whenever an operator shut down or walked away with the treasury. The most advanced users say to pick multisig escrow whenever you have the choice.
A 2-of-3 multisig wallet needs two of three private keys to move any coin. You hold one key, the vendor holds one, and WeTheNorth mediation holds the third. When the order arrives, you and the vendor sign. When it doesn’t, the moderator signs with whichever side the evidence supports. If the market disappears or is taken offline, you and an honest vendor can still sign without it once your parcel has landed. No single party can take the deposit alone.
If the signing threshold can’t be met, funds are stuck for everyone. Back up any key or seed on paper, away from the device you browse with.
Don't trust an invoice address because it looks right. A clone swaps it and the page looks identical. Verify the PGP signature on the order invoice first.
[Buyer: Deposits XMR] ──► [2-of-3 Multisig Depository]
│
┌────────────────┴─────────────────┐
[Order Delivered Safely] [Conflict / Non-Delivery]
│ │
(Sig: Buyer + Vendor) (Sig: Buyer + Support)
▼ ▼
[Vendor Payout] [Buyer Refund]
2. Crypto comparison: Monero (XMR) vs Bitcoin (BTC)
Bitcoin transactions stay on a public ledger permanently, and Chainalysis and Elliptic sell analysis of it.
Monero hides what Bitcoin exposes. Ring signatures bury the sender among decoys, stealth addresses
give each payment a one-time destination (subaddresses start with 8), and RingCT
hides the amount. Bitcoin that has touched a hack, a sanctioned address or a mixer can get your deposit flagged
and your exchange account frozen.
| Parameter | Monero (XMR) | Bitcoin (BTC) |
|---|---|---|
| Network privacy | Private by default: RingCT + stealth addresses | Pseudonymous public ledger |
| Blockchain analysis | Sender, receiver and amount hidden | Routine and commercialised |
| Tainted coin risk | None: coins are fungible | High: deposits and accounts get frozen |
| Credit speed | 10 confirmations, roughly 20 min | 2–3 confirmations, up to 1–2 h |
| Typical fee | Under $0.05 | $2.00 – $15.00 and volatile |
| Recommended | Yes | Fallback only |
Tumblers won’t save you. Many steal coins or leak your opsec, and chain analysis can still follow you through the rest. Convert to XMR and use this route: exchange → Monero wallet on Tails or Whonix → market. Never send coins from an exchange straight to a market. Sending funds directly from a custodial exchange permanently links your verified identity to the destination address.
3. Recommended wallets and non-KYC acquisition pathways
3.1 Desktop: Feather Wallet (Tails OS & PC setup)
Feather Wallet is the lightweight client the Bible builds its setup around. It runs on Tails, Linux and Windows and connects through remote nodes, so you never download the full blockchain. Check the AppImage’s GPG signature before you run it, because a tampered wallet can empty your funds. On Tails, store the wallet in a persistent volume or a reboot will erase it. Run Feather inside a Tails session, never on your daily system. The Tails OS workstation setup guide walks through it. Finish it before you fund anything.
3.2 Mobile: Cake Wallet & non-KYC acquisition routes
Cake Wallet (Android / iOS) keeps your keys on the device and generates fresh subaddresses. Don’t reuse one, and copy addresses instead of typing them. Buy XMR directly when you can. If you can’t, buy BTC or LTC and swap to Monero through an instant exchanger over Tor, sending the result to your own wallet first. A swap routed straight to the market can arrive late and the order may expire. Atomic swaps (BTC ↔ XMR) remove the exchanger entirely.
Custodial exchanges log every withdrawal
Coinbase, Kraken and Binance link every withdrawal to your verified documents. A direct transfer to a non-custodial address triggers automated compliance locks, account closures and permanent metadata linking.
4. Hold timers, auto-finalize schedule and FE risks
Platform Rule #10 sets the timers. Physical postal orders inside Canada are held for 14 days from the moment they are marked shipped, and digital goods for 48 hours. If you do nothing, the timer pays the vendor automatically. Domestic mail usually arrives within 10 to 12 days. If yours hasn’t, open a dispute or request an extension 24 to 48 hours before the counter reaches zero.
Finalize Early (FE) is handing over your money
Vendors pitch FE as “confirm for express shipping” or “10% off if you FE.” Once you press it, the vendor has your full deposit and you don’t have the product, and escrow and arbitration no longer apply. Trusted names burn people too — documented cases exist of vendors with thousands of positive reviews requiring FE, then walking away with the full treasury. Never FE money you can’t afford to lose.
5. Dispute resolution playbook: 48h window and mediation
The same playbook covers a missing parcel, a short count and a product that isn’t as described. If time allows, message the vendor first. Before you escalate to support, check which marketplace rule or vendor requirement the seller actually broke.
-
Freeze the timer
Hit [Open Dispute] the moment something is wrong. Auto-finalize stops, and the deposit stays locked in multisig until mediation ends.
-
48-hour direct dialogue
You and the vendor get two days in the encrypted order ticket to check tracking and agree on a reship or partial refund. Rule #2 bans Telegram, Wickr, Jabber and ICQ. A vendor who tries to move the conversation off-platform is avoiding the evidence trail, so report it.
-
Escalate to WeTheNorth support
If you haven’t agreed after 48 hours, a bilingual moderator (EN/FR) steps in and reviews account history, shipping proof, weight receipts and PGP logs.
-
Verdict and signatures
The moderator rules for one side and co-signs with them. Buyer plus support releases a refund, and vendor plus support releases the payout. A single signature never moves funds.
6. Pre-payment financial safety checklist
A single careless detail can tie your identity to the order, so check all six before you send.
- One-time subaddress: Fresh Monero address starting with
8. Never reuse it across orders. - Non-custodial source: Send from Feather or Cake, never from an exchange account or web wallet.
- Invoice verification: Amount and address match the market order after verifying PGP signatures on order invoices. A phishing clone will show you the scammer’s address instead.
- TXID logged locally: Save it in an encrypted note and track it on
xmrchain.net. - Ten-block clearing: Wallet on the latest version and fully synced. Wait for 10 monero confirmations (~20 minutes) before you close the session.
- Mirror authenticity: The address in your Tor Browser bar matches one in the verified mirror registry.
7. Frequently asked questions (escrow & payment FAQ)
QWhat should I do if the Auto-Finalize timer is running out and my parcel has not arrived?
Open a dispute with [Open Dispute] at least 24–48 hours before the timer expires. That freezes auto-finalize and keeps the deposit locked until support rules.
QCan I deposit funds directly using a Bitcoin mixer or CoinJoin?
No. Analytics vendors flag mixer and CoinJoin outputs as high risk, and chain analysis can still trace tumbled coins. Swap to native Monero, send it to Feather or Cake, then pay the order’s subaddress from there.
Wallet configured and escrow rules clear?
Only use PGP-verified mirrors. A link from a random site can send your deposit to a phisher’s wallet.