blog-contributions/opsec/haveno-cashbymail/index.html

267 lines
16 KiB
HTML

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="">
<meta name="author" content="">
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
<title>Haveno DEX Cash by Mail -> XMR transaction</title>
<!-- Bootstrap core CSS -->
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
<link href="../../assets/css/xt256.css" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="../../assets/css/main.css" rel="stylesheet">
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
<![endif]-->
</head>
<body>
<!-- Static navbar -->
<div class="navbar navbar-inverse-anon navbar-static-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand-anon" href="\index.html">nihilist`s Blog</a>
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav navbar-right">
<li><a href="/about.html">About</a></li>
<li><a href="/blog.html">Categories</a></li>
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
<li><a href="/contact.html">Contact</a></li>
</ul>
</div><!--/.nav-collapse -->
</div>
</div>
<!-- +++++ Posts Lists +++++ -->
<!-- +++++ First Post +++++ -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist@mainpc - 2024-05-19</ba></p>
<h1>Haveno DEX Cash by Mail -> XMR transaction </h1>
<img src="0.png" style="width:250px">
<p>In this tutorial we're going to cover how to buy Monero, for cash by mail on the Haveno Decentralised Exchange. This was the most popular payment method back on LocalMonero, due to being an improvement over <a href="../haveno-sepa/index.html">bank transfers (like SEPA in the EU)</a> when it comes to trading larger volumes in the long run, as <b>Cash cannot easily be traced by adversaries unlike bank transfers</b>, making Cash by Mail one of the most private ways to exchange real world money for Monero.</p>
<img src="0.1.png" class="imgRz">
<p><h2><u>OPSEC Recommendations:</u></h2></p>
<ol>
<li><p>Hardware : (Personal Computer / Laptop)</p></li>
<li><p>Host OS: <a href="../linux/index.html">Linux</a></p></li>
<li><p>Hypervisor: <a href="../hypervisorsetup/index.html">libvirtd QEMU/KVM</a></p></li>
<li><p>Virtual Machine: <a href="../hypervisorsetup/index.html">Linux</a> or <a href="../whonixqemuvms/index.html">Whonix</a> or <a href="../tailsqemuvm/index.html">Tails</a> </p></li>
<li><p>Application: <a href="../hypervisorsetup/index.html">Haveno DEX Setup</a> </p></li>
</ol>
<p>I recommend using this setup into one of the above mentionned VMs, either for <a href="../privacy/index.html">Private use</a>, or <a href="../anonymityexplained/index.html">Anonymous use</a>, as per the <a href="../opsec4levels/index.html">4 basic OPSEC levels</a>. (Note that Deanonymization will happen during the Fiat transaction, but it is minimized as you're revealing your identity to an other peer, rather than to a centralised exchange)</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /grey -->
<!-- +++++ Second Post +++++ -->
<div id="anon3">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Initiating the trade </b></h2>
<img src="bob.png">
<p>Here, we're Bob, we create our account on Haveno for Pay by Mail transactions, mentioning our real name, postal address, city and country.</p>
<img src="1.png" class="imgRz">
<p>Then we hit "save new account":</p>
<img src="2.png" class="imgRz">
<img src="3.png" class="imgRz">
<p>Make sure you understand the risks that cash by mail transactions have, then click "I understand": </p>
<img src="4.png" class="imgRz">
<p>Then, we can create a buying offer by going into the Buy section:</p>
<img src="5.png" class="imgRz">
<p>Here we want to purchase 20 euros worth of Monero, at the current market price, for 0.1533 XMR:</p>
<img src="6.png" class="imgRz">
<p>THen we fund the offer, and when the funds show up in our Haveno client, we hit "Review: Place offer to buy Monero"</p>
<img src="7.png" class="imgRz">
<img src="8.png" class="imgRz">
<p>Once the offer is confirmed, we can view it on the Portfolie page:</p>
<img src="9.png" class="imgRz">
<img src="10.png" class="imgRz">
<p>Here we wait approx 20 minutes for the monero transaction to be validated by the network, then the offer will appear as enabled:</p>
<img src="11.png" class="imgRz">
<p>And from there, other peers will be able to see Bob's offer into the "Sell Monero" section.</p>
<img src="alice.png">
<p>Now let's switch over to Alice's side, we also create an account to be able to do Cash by mail transactions:</p>
<img src="12.png" class="imgRz">
<p>Then we go into the "Sell monero" section and we take Bob's offer:</p>
<img src="13.png" class="imgRz">
<p>Once the offer is taken we fund the offer:</p>
<img src="14.png" class="imgRz">
<p>There we send the monero to the address as shown for both the security deposit and the actual monero we want to sell:</p>
<img src="15.png" class="imgRz">
<img src="16.png" class="imgRz">
<img src="17.png" class="imgRz">
<img src="18.png" class="imgRz">
<p>Now that the trade has been initiated, let's review the correct trade protocol for Cash By Mail transactions:</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Cash By Mail: the trade protocol</b></h2> </br> </br>
<p>To remain safe with cash by mail transactions, there are a number of steps that Bob need to be take in order to ensure that there is no possibility of being scammed as explained by the following LocalMonero article:</p>
<pre><code class="nim">
Staying Safe With Cash by Mail (originally from LocalMonero)
If you're buying...
If you stick to high reputation sellers it's very unlikely that you'll encounter any issues while buying with cash by mail, however the following tips will help you prove your payment in a dispute should it arise. The most important thing to do is to make a video recording of your payment. Here are the guidelines:
Your video should be filmed within a single take, without cuts
You can put the cash in the envelope at home or in the car, and you can put your phone with the video turned on in your front shirt pocket and it'll record the whole process without much extra work from you apart from making sure that you do everything in front of where the camera's pointing. If you have something like a GoPro or the latest iPhone which has a camera with a wider viewing angle it's going to be even easier. Keep the footage in case of a dispute for 180 days.
Put custom markings inside the envelope
Use some sort of a custom chop/stamp/seal, or a signature or just random movements with a sharpie inside the envelope, covering all surfaces. This will help establish whether the seller is actually opening the envelope you've sent or a fake one. Make sure the mark is visible on the video.
Try to disguise the cash
To mitigate a (potential, but very rare) case of postal theft en route, try to conceal the fact that the package contains cash. You may put the cash in a magazine, mylar bag or some other container. Vacuum sealing the cash also works.
Place envelopes inside of envelopes
Instead of simply placing the cash into the envelope, use multiple nested envelopes for your package. Place the cash into the smallest envelope (or simply fold a bigger envelope as necessary), seal it, and place it into another envelope. Repeat this process until you have at least 3 nested envelopes. This helps ensure that if the receiving party tries to tamper with your package they will have a much harder time resealing it all in a way that would be undetectable when inspected by the dispute mediator.
Send with tracking
Packages sent without tracking may get lost with and without tracking it could be all but impossible to locate it. Having tracking also allows the receiving end to have peace of mind that the package is en route in case it's taking longer than expected.
Conclusion
As we've mentioned before, with established traders the risk for a buyer is very low. Very low doesn't mean zero though, so make sure to follow these rules to be prepared for a dispute situation.
</pre></code>
<p>And there are also a few steps that the monero seller (Alice) has to follow in order to make sure the trade is conducted in a secure manner:</p>
<pre><code class="nim">
If you're selling...
Make a video of receiving and opening the package
Record yourself receiving the package from the postal worker, the postal worker weighing it, record the label, all the outer sides of the package; open the package while filming with the camera pointed into it, run the cash through a counter and counterfeit scanner. Make sure everything is filmed in one take. Always keep the package in view of the camera. Keep the footage in case of a dispute for 180 days.
Under no circumstances finalize a trade early
The key thing to remember (and we put disclaimers about this on every step of the way) is to NEVER finalize a trade UNTIL you have the money and you are absolutely confident that everything is in order. A legitimate buyer won't pressure you into early finalize.
Have a buyer put a note with their username and trade ID
This will help you distinguish packages coming from different buyers and avoid confusion. This also will help in preventing man-in-the-middle attacks, where a scammer interposes themselves in-between the buyer and the seller, pretending to be the seller when talking to the buyer and pretending to be the buyer when talking to the seller.
</code></pre>
<p>To recap the recommendations we have the following graph:</p>
<img src="26.png" class="imgRz">
<p>Here bob puts the cash into a mylar bag (to disguise the cash), which gets put into a tamper proof bag (that way, if alice tries to open it, it'll be easy to see), then bob puts it into at least 3 envelope layers with custom markings inside each layer (again, as anti tampering measures), and then putting it inside the tracking envelope. </p>
<p>Also very important, Bob needs to record himself from the moment he wraps the cash into the mylar bag, all the way to when he places the letter in the letterbox. and Alice needs to do the same from her letterbox, all the way to unpacking the cash from the mylar bag. That way in case if there is a dispute, the arbitrator will be able to see who's at fault if there are any steps along the way that have not been respected.</p>
<p>In total per cash by mail transaction (assuming the final envelope weighs less than 100grams), the cost involved for the seller should be around 2 euros in France (including tracking), assuming the seller sends the envelope within the same country, and that he buys enevlopes, mylar bags and tamper proof bags in bulk.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Second Post +++++ -->
<div id="anon1">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Finishing the Transaction</b></h2> </br> </br>
<img src="19.png" class="imgRz">
<p>Bob of course makes sure that the envelope is sent to Alice's address as it is showcased within the trade window:</p>
<img src="20.png" class="imgRz">
<p>And once he followed the trade protocol to send the envelope to Alice, he can declare that he has sent the payment:</p>
<img src="21.png" class="imgRz">
<p>And then, both Alice and Bob will have to wait for the postal service to take the letter to it's destination. Bob also sent Alice the tracking link so that she can pinpoint where the envelope is in case if there is an issue along the way.</p>
<img src="alice.png">
<p>Back to Alice's side, we get the following notification:</p>
<img src="22.png" class="imgRz">
<p>There, the delay depends on the postal service. But she receives the envelope 5 days later, she records herself from the point of retrieving, to the unpacking of the cash inside. and then if all is ok on her side, she confirms that she has received payment to release the monero funds to Bob:</p>
<img src="23.png" class="imgRz">
<img src="24.png" class="imgRz">
<img src="bob.png">
<p>And lastly, Bob sees that the funds are arriving on his Haveno client, and now he closes the trade.</p>
<img src="25.png" class="imgRz">
<p>And there, Bob can withdraw his funds from his Haveno monero wallet to another wallet if he chooses so inside the "Funds" tab, as we detailed in our previous tutorial <a href="../haveno-client-f2f/index.html">here</a>.</p>
<p>Check out my other tutorials on Decentralised Finances below:</p>
<ol>
<li><a href="../monero2024/index.html">✅ How to acquire and use Monero </a></li>
<li><a href="../chainalysisattempts/index.html">✅ Why can't I trust Centralised Exchanges, and random Monero nodes ?</a></li>
<li><a href="../haveno-client-f2f/index.html">✅ Haveno Decentralised Exchange direct Fiat -> XMR transaction ⭐</a></li>
<li><a href="../haveno-arbitrator/index.html">✅ Haveno DEX Dispute resolution (Fiat -> XMR) </a></li>
<li><a href="../haveno-sepa/index.html">✅ Haveno DEX Bank Transfer (ex: SEPA) -> XMR transaction </a></li>
<li><a href="../haveno-cashbymail/index.html"><b>✅ Haveno DEX Cash By Mail -> XMR transaction ⭐</b></a></li> </ol></br>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Footer Section +++++ -->
<div id="anonb">
<div class="container">
<div class="row">
<div class="col-lg-4">
<h4>Nihilism</h4>
<p>
Until there is Nothing left.</p></br></br><p>Creative Commons Zero: No Rights Reserved</br><img src="\CC0.png">
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>My Links</h4>
<p>
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FH4g7zPbitSLV5tDQ51Yz-R6RgOkMEeCc%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAkts5T5AMxHGrZCCg12aeKxWcpXaxbB_XqjrXmcFYlDQ%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22c3Y-iDaoDCFm6RhptSDOaw%3D%3D%22%7D">SimpleX Chat</a><br/>
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>About nihilist</h4>
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@contact.nowhere.moe (<a href="https://nowhere.moe/nihilist.pubkey">PGP</a>)</p>
</div><!-- /col-lg-4 -->
</div>
</div>
</div>
<!-- Bootstrap core JavaScript
================================================== -->
<!-- Placed at the end of the document so the pages load faster -->
</body>
</html>