An anonymous phone in Australia starts at the device level, not the app level.

What sets a genuinely private device apart

The anonymity stack

Full operational anonymity requires every layer addressed simultaneously. A single weak link — a carrier-registered SIM, a bank-linked payment, an app checking in with a server — breaks the chain.

Our anonymous device setup covers: no Google account, eSIM with no name registration, always-on Mullvad VPN, Threema with no phone number requirement, randomised MAC addressing, and Phantom Protocol for device security. Payment via Monero provides the strongest financial anonymity.

Anonymous order process

Contact us on WhatsApp or via the contact form before ordering. We will walk you through crypto payment, delivery address options, and packaging. No name on the order, no receipt tied to your identity.

What "anonymous" actually requires — five separate layers

True device anonymity is not a single feature. It is the simultaneous absence of identifiers across five separate layers. Miss any one of them and the whole stack falls back to "private" rather than "anonymous". The distinction matters: a private phone is one where surveillance is harder. An anonymous phone is one where the device cannot be tied to a specific human identity at all.

Layer 1 — Device identity

Stock Android and iOS bind the device to a Google or Apple account on first boot. That account becomes the master identifier — every app on the phone, every backup, every recovery flow funnels through it. GrapheneOS requires no account at any point. The OS is functional without one. Sandboxed Google Play, if you choose to use it for specific apps, runs in an isolated profile that does not leak into the main user.

Layer 2 — Network identity

Every cellular connection writes you to the carrier's records: which tower, when, for how long, who you called. Your home carrier knows your real name because you registered with it under Australia's Telecommunications Act identification requirements. Our anonymous setup uses a global eSIM that is provisioned without name registration at activation, paired with always-on Mullvad VPN so that every IP-bound query goes through Mullvad's anonymous infrastructure. The cellular layer still exists, but the identity bound to it is unrelated to your everyday number.

Layer 3 — Application identity

Most messaging apps require either a phone number (Signal, WhatsApp) or an email (most others). That identifier links your conversations back to you regardless of how strong the encryption is. Threema is the exception — it uses a randomly-generated 8-character ID with no email or phone-number requirement. We pre-provision a paid Threema identity on every anonymous device. For accounts that do require a phone number, the eSIM number becomes that identifier — separate from your real number, and rotatable.

Layer 4 — Financial identity

The payment method that buys the device is itself an identifier. A credit card buys you a phone, but the phone is now linked to your bank-issued name. Bitcoin and Ethereum payments are pseudonymous (the chain is public), so a determined investigator can sometimes link addresses back to you via exchange KYC. Monero (XMR) is the strongest financial-anonymity option because the cryptography hides sender, receiver, and amount by default. We accept all four — for full anonymity we recommend Monero paired with a delivery to a PO box you opened with cash.

Layer 5 — Logistical identity

Even with everything above handled, a device shipped to your home address is registered to your home address. We accept PO box and parcel-locker delivery, ship in plain unbranded packaging, and on request will pre-arrange a discreet pickup at a venue of your choosing in major AU cities. Message us before ordering to set up the delivery method that fits your operational requirements.

Threat models this is genuinely useful for

Anonymous-device setup is more work and more expense than a standard privacy phone. It is the right call when:

• You are a journalist meeting a source whose identity, if learned, would put them at risk. Standard precautions (Signal, VPN) are insufficient when the source's safety depends on no record of contact existing. The anonymous-device protocol is designed for this.
• You are an executive whose movements are themselves market-sensitive. A phone in your name is a phone whose location data is, in principle, subpoena-able. An anonymous secondary device with no legal connection to you is, in principle, not.
• You are a domestic-violence survivor with an active perpetrator. Every recovery path on a phone in your name is an opportunity for the perpetrator to re-establish contact. An anonymous device gives you a known-clean starting point. See the DV-safe phone page for the full survivor protocol.
• You are an organiser or activist whose adversaries may include lawful authorities pursuing legal-but-targeted surveillance. The protocol does not help you evade lawful process, but it limits the data available to be subpoenaed in the first place.
• You handle confidential commercial material on the move. Mergers, acquisitions, intellectual-property negotiations — situations where the existence of communications is itself sensitive.

It is not useful for ordinary privacy enthusiasm. If your concern is "Big Tech is creepy", buy a normal GrapheneOS phone and stop there. Anonymous setup is overkill for that threat model and will burn money without giving you a meaningful upgrade.

And if you landed here after searching for a burner phone in Australia, read that guide first — true anonymous burners barely exist here under SIM-registration law, and a compartmentalised device usually gives you what a throwaway handset cannot.

What this setup explicitly is not

• Not a tool to commit crimes. We do not provide tools to evade lawful process. The setup makes legitimate operational security stronger; it does not make illegal activity invisible to determined investigators.
• Not a guarantee against state-level adversaries. A capable intelligence service with sufficient resources can still link the device to you through behavioural fingerprinting, SIGINT correlation, or operational mistakes you make. The setup raises the cost of attribution, not its impossibility.
• Not a substitute for operational discipline. An anonymous device used carelessly — calling your real-identity contacts from it, browsing your usual sites, posting to your usual social accounts — is no harder to identify than a stock phone used carefully. We pair every anonymous-device order with a written threat-model briefing covering operational habits.
• Not a shortcut around Australian SIM-registration law. The eSIM we provide is a non-AU global service, legitimately purchased, with no name registration at the carrier level. It is not an unregistered AU SIM, which would breach Telecommunications Act requirements.

Frequently asked questions