Case file · Card
Goblin Card
A physical Mastercard you buy with crypto (Monero included) with no ID - only a shipping address. The strongest no-KYC substance in the category, but an anonymous, sub-1-year, custodial operator whose load flow runs by hand over Telegram - rated UNVERIFIED.
The systematized overview
The bureau vs the internet.
4.0/10 · No-KYC in practice (unverified)
On no-KYC substance, Goblin is the best card we have found: no ID to buy (only a shipping address), Monero accepted, a working physical Mastercard, no bait-and-switch clause we could find. But that read is UNVERIFIED - the FAQ and the load/withdraw flow sit behind a bot-gate we could not open, so "no ID to load and cash out" rests on consistent third-party reports, not a primary source. And the trust picture is weak: an anonymous, sub-one-year Mexico operator, a custodial peso float, no named issuing bank, a manual "send crypto over Telegram and wait a day" load flow, and a blanket "for any other reason at our sole discretion" termination clause. Promising but un-derisked; score conservatively and re-review on any freeze report.
2 recurring praises · 3 recurring gripes
Most praised: first-hand reports of the card arriving and working at merchants/atms. Most cited downside: anonymous, sub-1-year operator; custodial float; no named issuer.
We track our editorial score and community sentiment separately — neither moves the other. Read together, they're the systematized overview.
The facts
Issuer, custody & load terms.
- Issuer / BIN
- Unnamed - "card issuing partners and payment providers"; no BIN sponsor disclosed. Anonymous Mexico operator
- Custody
- Custodial - balance held internally in Mexican pesos before conversion at spend
- KYC trigger
- None found at buy/load/withdraw (UNVERIFIED - FAQ/app flow bot-gated); no "may demand ID" clause
- Card type
- Physical contactless Mastercard (CR80)
- Load method
- Crypto to a provided address, then notify support via Telegram/app (~1 day to credit); min $100
- Limits
- $5,000/day, $25,000/month spend; $500/day ATM
- Fees
- $350 one-time; 3.5% deposit (4% for XMR); 0% FX / 0% ATM; ~$100 renewal every 3 years
- Coins
- Bitcoin, Ethereum, Solana, Monero (XMR), USDT
- Payment privacy
- No ID to buy; Monero accepted; only a shipping address collected
- Availability
- Worldwide (Mastercard); ships physically
- Freezes / voids if
- Discretionary "refuse, freeze, or reverse any deposit"; blanket "terminate ... for any other reason at our sole discretion"; no dormancy/refund clause
- Since
- 2025
The full read
Our analysis, in plain words.
On the axis this bureau cares about most - is it genuinely no-KYC - Goblin is the strongest card we have reviewed. You buy a physical Mastercard by sending crypto (Monero included) to an address and giving a shipping address; no name, email, phone or ID document. There is no "we reserve the right to demand ID" clause anywhere in the terms we could read, and first-hand reviewers report ID-free ATM cash-out. If those hold, its no-KYC substance genuinely beats Bing, Anon and even the honest Kripicard.
The problem is that the load-bearing claims are UNVERIFIED. The FAQ ("Do I need to provide ID?") and the GoblinApp/Telegram load-and-withdraw flow sit behind a "Preparing secure access" bot-gate that beat both our researcher and our reviewer, so "no ID to load and cash out" rests on five consistent third-party reports rather than a primary source. If the app or FAQ hides an ID step at load or withdrawal, this flips to a bait-and-switch and the score collapses. We flag that gap prominently rather than paper over it.
And the trust picture is weak regardless of the no-KYC read. The operator is anonymous, Mexico-based, less than a year old, with no company registration, no audit, and - critically - no named issuing bank behind a custodial peso float. The load flow is a hand-operated Telegram process; a promised app slipped; the terms carry a blanket "for any other reason at our sole discretion" termination with no dormancy or refund clause. So we hold Reliability down to the level of comparably-young cards and publish at 4.0 with an explicit UNVERIFIED / high-structural-risk frame: promising no-KYC substance, but do not park value on an anonymous custodial operator until it is derisked. We will re-review the moment the primary flow is confirmed or a freeze surfaces.
The score, broken down
How the 4.0 is built.
Privacy
weight 50%What identity, data and metadata the service can demand or collect.
58 × 50% = 2.9 of 10
Trust
weight 30%Whether it can technically deliver what it claims — code, audits, age.
22 × 30% = 0.7 of 10
Reliability
weight 20%Whether the no-KYC claim holds under real-world pressure.
24 × 20% = 0.5 of 10
Weighted total 4.0 / 10 · no reliability rule triggered, so the score stands. See the rubric →
Every point, sourced
What earned the score.
Privacy
The fine print, read for you
The clause they bury.
“We reserve the right to suspend or terminate your access to GOBLIN CARD at any time for violations of these Terms or for any other reason at our sole discretion.”
What it meansGoblin has no "we may demand ID" clause - which is why it earns a genuine no-KYC read - but it does reserve a blanket right to terminate access "for any other reason at our sole discretion," alongside a discretionary right to freeze/reverse a deposit. There is no incident yet, but for a custodial balance held by an anonymous operator, that undefined discretion is why it cannot be an unconditional level 0.
Read the source →“We reserve the right to refuse, freeze, or reverse any deposit that we determine, at our discretion, to be sanctioned or illegally sourced.”
What it meansA discretionary deposit-freeze power over a custodial peso float, with no refund or dormancy clause anywhere in the (thin) terms saying what happens to your balance if your card is terminated. No freeze has been reported, but the structural risk is live - and the operator is anonymous.
Read the source →No ID at any touchpoint we could verify: buying takes only a shipping address, loading is crypto (Monero included), and third-party reviews report ID-free ATM cash-out. But the FAQ ("Do I need to provide ID?") and the GoblinApp/Telegram load-and-withdraw flow are behind a bot-gate we could not open, so this is UNVERIFIED - if the app or FAQ imposes ID to load or withdraw, it would flip to bait-and-switch (level 3-4, cap 4/10).
Policy review — point by point
-
No ID-demand clause
The terms contain no "we may require KYC/ID" clause; buying takes only a shipping address, which is what earns the genuine no-KYC read. ↗
-
Blanket sole-discretion termination
Access may be suspended or terminated "at any time ... for any other reason at our sole discretion," with no dormancy or refund clause for a custodial balance. ↗
-
Discretionary deposit-freeze
It reserves the right to "refuse, freeze, or reverse any deposit that we determine, at our discretion, to be sanctioned or illegally sourced." ↗
-
Unnamed issuer + anonymous operator
The issuing bank / BIN sponsor is never named, the operator is anonymous, and the FAQ/app flow could not be read - so the no-load-KYC claim is unverified. ↗
Goblin Card is operated anonymously from Mexico with no company registration or founder names disclosed, and the card’s issuing bank is never named. It holds a custodial balance in Mexican pesos and credits deposits through a manual Telegram process. There is no legal entity to pursue if a balance is stranded - the classic profile of a young no-KYC custodial card that has not yet been stress-tested. Not to be confused with the lookalike cardgoblin.shop.
We keep watching
Incident & policy timeline.
- 2025
Launched as a non-KYC physical crypto card
Goblin Card launched as a physical Mastercard bought with crypto (BTC/ETH/SOL/XMR/USDT), operated anonymously from Mexico, funded via a GoblinApp/Telegram flow. Less than a year of track record.
source ↗ - Early 2026
Working reports, but a missed app commitment
First-hand reviews (Nov 2025-Apr 2026) describe the card arriving and working at Mastercard merchants and ATMs; the load flow is manual (deposit crypto, notify support on Telegram, ~1 day to credit). A promised standalone app (end-Feb 2026) was undelivered as of March - a small credibility ding for a young operator.
source ↗ - Ongoing
No corroborated freeze; heuristic scam-scanner flags only
No corroborated freeze, seizure, or stranded-funds pattern was found. Automated scam-scanners flag the domain, but those are heuristic (young domain, hidden WHOIS, high-risk category), not user-harm reports - so they do not fire a cap. Do not conflate with the lookalike cardgoblin.shop.
source ↗
The verdict
Where it stands.
Strengths
- No ID to buy - only a shipping address; no email/phone at purchase
- Monero (XMR) accepted for top-ups
- Working physical Mastercard with ATM cash-out per first-hand reports
- No "we may demand ID" clause - a genuine no-KYC posture on the terms we could read
Trade-offs
- UNVERIFIED: the FAQ + app load/withdraw flow are bot-gated and could not be read
- Anonymous operator, no company registration, <1 year old, no audit
- Custodial peso float with no named issuing bank / BIN sponsor
- Manual, off-platform (Telegram) load run by an anonymous party; blanket sole-discretion termination
Across the internet
What reviewers report.
Consistently praised
- First-hand reports of the card arriving and working at merchants/ATMs
- No ID to buy; Monero accepted; helpful support and quick shipping
Recurring complaints
- Anonymous, sub-1-year operator; custodial float; no named issuer
- Manual Telegram load flow; a missed app-release commitment
- Automated scam-scanner flags (heuristic, not user-harm)
Thin on both sides: a handful of positive first-hand reports (Trustpilot ~4/~15, read via search only) vs heuristic scam-scanner flags driven by anonymity and newness. No corroborated freeze or stranded-funds pattern - and no primary confirmation of the no-load-KYC claim either. Low-confidence, UNVERIFIED. Synthesized from Kardd, Monerica, Bitcointalk and scanner sites.
Keep exploring
Related lists & categories.
Ask the bureau
Goblin Card, common questions.
Is Goblin Card really no-KYC?
On everything we could verify, yes - you buy with just a shipping address, load with crypto (Monero included), and third-party reviews report ID-free ATM cash-out, with no "we may demand ID" clause in the terms. But we rate it UNVERIFIED: the FAQ and the app/Telegram load-and-withdraw flow are behind a bot-gate we could not open, so we cannot certify the no-ID-to-load-and-withdraw claim from a primary source. We rate it KYC level 1.
Is it safe to load money onto Goblin Card?
Treat it as un-derisked. It is live and reportedly works, but it is an anonymous, sub-one-year operator holding a custodial peso balance with no named issuing bank, a manual Telegram-based load flow, and a blanket sole-discretion termination clause with no dormancy/refund clause. No freeze has been reported, but there is little track record. Load small; do not park value.
Why the "unverified" rating?
Because the strongest claims (ID-free load and withdraw) rest on consistent third-party reports rather than a readable primary source - the FAQ is bot-gated. We score it conservatively (Reliability pulled to the level of comparably-young cards) and will re-review the moment the primary flow is confirmed or a freeze is reported.
Your exact case not covered? The live Ask the bureau answers it and turns it into a public FAQ.