Is anonymous messaging safe? What a good inbox owes the person holding it

Two different promises

An anonymous inbox makes two promises to two different people, and almost every argument about whether these things are safe comes from mixing them up.

• To the sender: your name does not travel with what you wrote. That promise is called anonymity.
• To the owner: you are not defenceless against what arrives. That promise is called safety, and it is the one people mean when they ask.

These do not conflict, which is the useful thing to know. Keeping a sender unnamed does not require leaving the owner with no moves. A service that treats “anonymous” as a reason it cannot help you has confused a promise it made to somebody else with an excuse.

Safety is a set of controls

Ask a concrete version of the question instead: what can I do about a message I did not want? Every honest answer is a list of controls, and you can check for them before you share anything.

Close the inbox

The page stops taking messages and your name stays yours. It is reversible, which matters more than it sounds — an off switch you are afraid to use because it might be permanent is not really a control.

Block one sender

The important word is one. The realistic failure of an anonymous inbox is a single persistent person, not a mob, and an inbox whose only response is to shut everything hands that person a veto over everybody else.

There is a detail here worth naming because it is the difference between a block that works and a block that annoys somebody for ten seconds: on fisfis a blocked sender keeps seeing an ordinary send screen. Nothing tells them they were blocked, so there is no moment that prompts them to clear their browser and start again.

Rules that run before you see anything

Word rules and rate limits sit in front of the inbox rather than beside it. The point of a limit is that a person cannot sit there sending forty messages in a minute; the point of a word rule is that some things do not need to reach you in order to be dealt with.

The picture problem

If a service lets strangers attach images, this is the thing that decides whether people keep their inbox open — and it is the most common reason somebody closes one and never opens another.

On fisfis an image waits until it has been checked before it is shown to you. The first time you see a picture from a stranger is a moment you chose, rather than something you scrolled into on a bus.

What any service knows

A section that concedes something, because a page about safety that claims a service knows nothing at all is not being straight with you.

Every online service holds some technical information in order to operate — to keep it available, to stop abuse, to work out that forty messages came from one place. That is true here and it is true everywhere. fisfis writes down what is kept, in plain words, on its about page, and that page is the one to read rather than this paragraph.

The question that actually separates services is different: is any of it ever sold back to the person holding the inbox?

A service that offers to tell an owner who wrote — for a fee, as a hint, as a first letter, as a city — has decided that a sender’s anonymity is inventory. In July 2024 the US Federal Trade Commission and the Los Angeles District Attorney announced an action against NGL Labs over, among other things, paid hints that the complaint said did not reveal senders. It settled for $5 million.

fisfis has no paid tier at all, so it has nothing of the kind to sell. The longer version of that story is worth reading if you are choosing between services rather than deciding whether to use one.

Teenagers, and a regulator’s answer

The honest position: anonymous messaging aimed at school-age users has a track record that adults should look at directly.

The 2024 order against NGL Labs requires the service to bar anyone under 18 through a neutral age gate. The FTC described that as the first time it had required a business to block minors from an online service outright. That is a regulator concluding that the combination of an anonymous inbox and a school year group is its own risk, separate from anything a particular company did.

fisfis is built for adults sharing a public link. If you are a parent deciding about a service your child is asking for, the questions above are the ones to ask about it — not whether it looks friendly.

A checklist before you share

Anonymous does not have to mean unpleasant, and it does not have to mean unmoderated. It means the sender is unnamed. Everything else is a choice somebody made, and the choices are visible before you share a link if you know which ones to look for.

Claim a name, or read the general guide to anonymous message links first.