Monero payments arrive at addresses the recipient never published

One address, unlimited one-time destinations

Every time someone sends Monero ($XMR), the payment lands at an address the recipient never actually published. Stealth addresses are a core part of Monero's privacy model. They require the sender to create a random one-time address for every transaction on behalf of the recipient. The result is that a single published address can collect unlimited payments without any two of them sharing a visible location on the blockchain.

Three keys make the system work. The public address is what a recipient shares. The private view key lets a wallet detect incoming transactions. The private spend key is what authorises funds to move. The viewing key allows a holder to access all stealth addresses tied to a wallet, but without the ability to spend funds from those addresses.

The receiver scans all transactions with their private key, reconstructs the destination key, and accepts the payment if it matches. Sender and receiver never interact directly, but each receiver must scan the entire ledger to find incoming payments. This is why wallet syncing takes time: there is no shortcut lookup, only a full scan of every transaction on the network.

Stealth addresses ensure that transactions cannot be linked back to a recipient's actual address. Third parties observing the blockchain see only one-time public keys, with no way to connect them to a known wallet or identity.

Sender privacy is also evolving

Recipient privacy through stealth addresses has been part of Monero since launch. Sender privacy has historically relied on ring signatures, a mechanism that hides each real spend among a small group of decoys. When a user initiates a transaction, their signature is included in a ring of signatures, making it computationally difficult for an observer to determine which participant is the actual sender.

That system is now being replaced. The upcoming FCMP++ upgrade (Full-Chain Membership Proofs++) will replace the original ring signatures with a more powerful zero-knowledge proof system. When fully deployed, every Monero transaction will be hidden among every single output ever created on the chain, currently over 150 million UTXOs.

Fixed ring sizes can degrade privacy over time as the chain grows, and advanced chain analysis techniques can sometimes narrow down possibilities. FCMP++ addresses this by expanding the anonymity set substantially, making correlation attacks computationally infeasible. The @monero project is working to apply this upgrade across the entire native output set, meaning older outputs will also benefit from the expanded anonymity pool.

Sources
Monero: Stealth Address (Moneropedia)
Quasa: Monero's Privacy Revolution, FCMP++ Explained