What it means
When you visit a website normally, the site can see the address of your device, which reveals roughly where you are and who provides your connection. Tor breaks that link by sending your traffic through a chain of relays, usually three, so that no single relay knows both who you are and what you are looking at.
The name comes from the layers of encryption, like the layers of an onion, that are peeled off one at a time as the traffic moves along the chain. The software was first developed for protecting government communications and is now maintained by a non-profit organisation, with the relays run by volunteers around the world.
In business, Tor has legitimate uses. Companies and researchers use it to investigate competitors without revealing their identity, whistleblowers use it to report wrongdoing safely, and people in countries with heavy censorship use it to reach the open internet.
Its relevance to finance comes from the other side of the coin. Because it hides identity, Tor is also used for darknet marketplaces (websites reachable only through special software) where stolen data, drugs and other illegal goods are sold, usually for digital currencies.
Banks, payment firms and crypto exchanges therefore treat a login or transaction from a Tor exit node (the last relay, whose address the website sees) as a risk signal. It does not prove wrongdoing, but it can trigger extra identity checks, a manual review or a block, depending on the firm's policy.
Do not confuse Tor with ToR, which is a common abbreviation for terms of reference, the document that sets out the scope and responsibilities of a project or committee. Tor is also not the same as a virtual private network (VPN), which routes traffic through a single provider that can see everything.
In practice
Real-world examples.
Example
A payments company notices that a new customer account is being accessed through a Tor exit node and that the first transaction is for $9,500. The fraud team pauses the payment, asks for photo identification and releases the money only after the customer is verified.
Example
An investigative journalist working for a news organisation uses Tor to research a company without leaving traces on its web servers. The legal team approves this as part of normal source protection, and it has no effect on the paper's accounts.
Example
A crypto exchange's compliance officer reviews a wallet that received funds from addresses linked to a darknet market. She files a suspicious activity report with the regulator and freezes the account while the review is under way.
Case study
Seen in the real world.
Calloway Pay is an illustrative, fictional online payments business that noticed a rise in chargebacks (payments reversed by the card issuer after a customer disputes them). A review by the risk team found that a large share of the disputed payments had originated from sessions routed through Tor exit nodes.
Rather than blocking all such traffic, which would have also shut out genuine privacy-minded customers, the team added a rule. Sessions from Tor exit nodes were sent to step-up verification, meaning an extra identity check, and any single payment over $2,000 was held for manual review.
In the illustrative quarter that followed, chargebacks on the affected sessions fell sharply while legitimate customers were barely affected. The lesson is that Tor is best treated as one input into a risk score rather than as a simple yes or no. The risk team also reported the rule's results to the board each quarter, showing how many sessions were reviewed, how many payments were stopped and how much fraud loss was avoided. That reporting turned a technical setting into a measurable control that finance could defend to auditors and to the payment partners that monitor chargeback rates.
Watch out
Common mistakes.
- Assuming that anyone using Tor is a criminal, which ignores the many journalists, researchers and privacy-conscious customers who rely on it.
- Blocking all Tor traffic without measuring the lost legitimate business, which can cost more in revenue than it saves in fraud.
- Believing that Tor makes every action untraceable, when mistakes by the user, malware or activity on the blockchain can still reveal who is behind a transaction.
Questions
People also ask.
Is Tor illegal?
In most countries using it is legal, though some governments restrict or monitor it, and the legality of what a person does while using it is judged separately.
Is Tor the same as the dark web?
No. Tor is the tool, and the dark web refers to sites that can only be reached with tools like it, although Tor can also be used to visit ordinary websites.
Can a business tell when a customer is using Tor?
Often yes, because lists of Tor exit node addresses are published, so a website can check whether a visitor's connection comes from one.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%