Privacy guide

Can Bitcoin be traced? Every coin can be followed. Your name is the harder part.

sections
9
min read
9
primary sources
10
Fig. 00How a name gets attached to addresses
ONE OWNER, MANY ADDRESSESGROUPED AS ONEEXCHANGENAME ON FILEon the ledger forever

Short answer: yes. Every coin, forever.

In 2022 the US Department of Justice seized more than 94,000 bitcoins stolen in a hack. The theft had happened in 2016, more than five years earlier.

Five years. And the trail was still there, on a ledger anyone can read.

In this guide you'll see the two questions every answer mixes up, the rules analysts use to link Bitcoin addresses, how often those rules are wrong, three real cases, and what actually keeps your name off your coins.

Let's get into it.

01Two questions: can the coins be followed, and can they be tied to you?

Almost every answer online blurs these together. Pull them apart and the whole topic gets clear.

Can the coins be followed? Always. Every transaction names the coins it spends and the addresses it pays, and every node keeps a copy. bitcoin.org itself calls Bitcoin one of the most transparent payment networks in the world.

Can they be tied to you? Only through a link. The ledger holds no names. Yours arrives from outside: an exchange's records, a shop's delivery address, a post with your address in it, your IP address.

Two separate questions. Can the coins be followed? Always: every payment is a public line in the ledger. Can they be tied to you? Only where a link puts your name on one address.followed?tied to you?payment 1payment 2payment 3payment 4always: yesone link neededonly via a link
Following the coins needs nothing but the ledger. Putting a name on them needs one link from outside it.

So the real question isn't "can Bitcoin be traced". It's "where could my name have entered the trail?" That's what the rest of this guide answers. For every coin, not just Bitcoin, see our main guide: is crypto anonymous?

02The rules analysts use to link Bitcoin addresses

One address tells an analyst very little. The work is grouping addresses into owners. Two rules do most of it.

Rule 1: coins spent together share an owner

To spend from an address you need its key. So when one payment spends from addresses A and B, whoever signed it held both keys.

Bitcoin's white paper says it plainly: multi-input transactions necessarily reveal that their inputs were owned by the same owner. And it chains. A with B, then B with C, and now A, B and C are one owner.

The common-input rule. Payment 1 spends from addresses A and B together, so A and B share an owner. Payment 2 spends B and C together, so C joins them. Three addresses, one owner.PAYMENT 1ABspent togetherPAYMENT 2BCspent togetherA, B and C: one ownerfind one name, get all three
The common-input rule: two payments, three addresses, one presumed owner.

Rule 2: the change goes home

Bitcoin spends whole coins, like paying with a banknote. Pay 0.50 from a 0.55 coin and the rest comes back to you as change, usually to a brand-new address. Spot the change and that new address joins your group.

Finding the change. A payment has two outputs: a round 0.50 BTC to the receiver and an odd 0.0497 BTC. The odd one goes to a brand new address of the same type as the inputs, so it is very likely the sender's change.your coins 0.55shop: 0.50change: 0.0497WHY ANALYSTS PICK 0.0497new, unused addressodd amountsame address typethe sender's wallet
An illustration: the clues that mark the change. Amounts are made up.

The smaller clues

The Bitcoin Wiki's privacy page lists the rest: reused addresses, round amounts, matching times, the habits of a particular wallet app, and peel chains, where a big coin is spent down in small payments with the change hopping to a new address each time. Each clue is weak alone. Stacked, they point one way.

03How well does it work? The numbers from the research

"Very accurate" is easy to say. Here's what was actually measured.

In 2013, researchers bought goods and services from Bitcoin businesses 344 times and tagged 1,070 addresses by hand. Then they ran the two rules over the whole ledger.

The result? Those hand-tagged addresses grew into 2,197 named groups covering over 1.8 million addresses.

They measured their mistakes too. The first version of the change rule was wrong 13% of the time. Refined, including waiting a week to see if an address was used again, it was wrong 0.17% of the time.

And the field is older than most people think: researchers showed the ledger could be linked to people as early as 2011.

Worth knowing

Those figures are from 2013. Analysis has had more than a decade of data and software since. Treat them as a floor, not a ceiling.

04The network layer almost nobody mentions

Before a payment is in any block, your wallet has to announce it. bitcoin.org warns that the nodes relaying transactions can log the IP addresses they come from.

The network layer. Your wallet broadcasts a transaction to nearby nodes. A node that logs connections sees your IP address next to the transaction, before it is ever in a block.yourwalletlogs your IP
The first nodes to hear a payment can see the IP address that sent it.

A phone wallet usually doesn't even talk to the network itself. It asks the app maker's server, which sees your addresses, your balance and your IP together.

Newer versions of Bitcoin Core encrypt the traffic between nodes by default. That stops someone on the wire reading it. It doesn't hide your IP from the node you're talking to.

05Three real cases, in the Justice Department's own words

Three cases show what tracing does in practice, each from the US Department of Justice's own press release.

Three cases on a timeline from 2010 to 2025. Colonial Pipeline: ransom paid and mostly seized in 2021. Bitfinex: hacked in 2016, coins seized in 2022. Bitcoin Fog: a mixer that ran from 2011, its operator convicted in 2024.2010201520202025Colonial Pipelinepaid and seizedBitfinex hackseized 5+ years onBitcoin Fogconvicted 2024
Three cases. The trail can be followed the same year, or years after the coins moved.

Colonial Pipeline, 2021

The company paid about 75 bitcoins in ransom. The DOJ says that by reviewing the Bitcoin public ledger, investigators tracked the transfers to an address the FBI held the key for, and seized 63.7 bitcoins.

Bitfinex, 2016 to 2022

119,754 bitcoins were stolen in a 2016 hack. In 2022 the DOJ arrested two people and seized more than 94,000 of them, then worth over $3.6 billion. The release describes years of moves through fake identities, automated transactions and hops into other coins. The keys turned up in files in an online account.

Bitcoin Fog, 2011 to 2024

A service that mixed other people's bitcoin together ran for a decade and moved over 1.2 million bitcoins. In 2024 a jury convicted its operator, after what the DOJ calls painstaking tracing through the blockchain.

The lesson isn't that everyone gets caught. It's that the ledger waits.

06How to trace a Bitcoin payment yourself, in five steps

You don't need special software to follow a payment. A free block explorer and five minutes are enough.

  1. Copy the transaction ID. Your wallet shows it for every payment: a long string of letters and numbers, often called the TXID.
  2. Paste it into a block explorer. Any public Bitcoin explorer will do. No account needed.
  3. Read the inputs and outputs. Inputs are the coins that were spent; outputs are where they went. Spot the payment and the change, using rule 2 above.
  4. Click an output address. You see its whole history: every payment in, every payment out, and the balance today.
  5. Follow where it was spent. Explorers link each output to the later transaction that spent it. Click, and keep walking the trail.

That's exactly what investigators start with. The difference is scale: software walks millions of these steps and adds the labels that say which addresses belong to exchanges and shops.

07Can police, the IRS or an exchange trace my bitcoin?

Police read the ledger like anyone else, often with paid analysis software, and ask exchanges for their records with legal process. That request is where most names come from.

The IRS sees what US brokers report. Brokers file Form 1099-DA for sales from 1 January 2025, and every Form 1040 asks whether you received or disposed of digital assets.

An exchange knows every address it paid you and every deposit you made, with your ID attached. Under the FATF travel rule, regulated services also pass sender and receiver details to each other.

08If your bitcoin was stolen

The ledger works both ways. If your coins were taken, the trail is public too, and that's what lets law enforcement recover some of them, as the Bitfinex seizure shows.

  1. Write down everything now. The transaction IDs, the addresses the coins went to, dates, amounts and every message from the scammer.
  2. Report it. In the US, file a complaint with the FBI's Internet Crime Complaint Center at ic3.gov. Elsewhere, go to your national police cybercrime unit.
  3. Tell the exchange if the coins went to one. Exchanges can freeze accounts that receive stolen funds when law enforcement asks.
  4. Ignore "recovery" offers. People who promise to get your bitcoin back for an upfront fee are, very often, the next scam.
Be realistic

Tracing shows where coins went. Getting them back needs someone with the legal power to seize them. Report fast, keep records, and never pay a stranger to "trace" for you.

09What makes Bitcoin harder to trace, and what doesn't

Each habit below closes one specific link. None of them makes the coins vanish from the ledger.

What each step protects, and what it leaves open
StepWhat it closesWhat stays open
A new walletYour old historyAny link you send into it, like an exchange withdrawal
A new address per paymentAddress reuseSpending addresses together later (rule 1)
Coin controlMixing sources in one paymentChange detection on each payment
Tor or your own nodeYour IP addressEverything on the ledger
A VPNYour IP, from your wallet's serverThe ledger, and the VPN company's logs
CoinJoinRule 1: many people spend togetherWhat you do with the coins afterwards
Swapping to MoneroThe public trail of later paymentsThe swap itself, and where you bought or cash out

The Bitcoin Wiki notes that CoinJoin is built to break the common-input rule, because many people sign one transaction together. Monero goes further and hides sender, receiver and amount on every payment.

The most common leak by far is the first one: coins that go straight from an ID-checked exchange into the wallet you want private. The fix is to put something without your name between the two ends. A swap with no account does exactly that. Try Bitcoin to Monero, or follow the full private-sending routine.

One honest limit

No step rewrites history. If an address is already tied to your name, its past stays readable. Start fresh rather than trying to clean it.

Keep reading

How we checked this

Written by the team that runs the SilentMule swap desk. Every number comes from the study or government release it cites, linked where it appears. The rules are described as Bitcoin's own documentation and the original research describe them. Last checked . Spotted something wrong? Tell us and we fix it.

Sources

  1. Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System, section 10, Privacy
  2. bitcoin.org: Protect your privacy
  3. Bitcoin Wiki: Privacy
  4. Meiklejohn et al., A Fistful of Bitcoins, IMC 2013
  5. Reid and Harrigan, An Analysis of Anonymity in the Bitcoin System, 2011
  6. US Department of Justice, 7 June 2021: Colonial Pipeline ransom seized
  7. US Department of Justice, 8 February 2022: Bitfinex hack arrests and seizure
  8. US Department of Justice, 12 March 2024: Bitcoin Fog operator convicted
  9. IRS: digital assets
  10. FATF: virtual assets and the travel rule

Bitcoin in. A fresh wallet out.

Swap your Bitcoin into the coin you want, paid to a wallet you just made. No account, no email, no ID, so no customer record with your name sits between the two ends.

  • Monero, if you want the next payment private too
  • What lands is shown before you send
  • Fast lands within the hour, Stealth on the day you pick
Lands at your new wallet
Arrives in

Questions, answered.

Can police trace bitcoin?

Yes, often. In 2021 the US Department of Justice seized 63.7 of about 75 bitcoins paid in the Colonial Pipeline ransom after tracking the transfers on Bitcoin's public ledger. The name usually comes from an exchange that checked the customer's ID.

Can bitcoin be traced to my bank account?

Not from the chain, which holds no bank details. But if you bought bitcoin on an exchange with your bank account, the exchange holds both, and its records show which address it paid.

Can the IRS see my bitcoin?

Anything that passed through a US broker, yes. Brokers report sales on Form 1099-DA for transactions from 1 January 2025, and every Form 1040 asks whether you received or disposed of digital assets.

Does a new wallet make bitcoin impossible to trace?

No. The coins in it can still be followed. A new wallet only keeps your name off them if nothing links into it: no coins straight from an ID-checked exchange, no reuse, no payments to people who know you.

Does a VPN hide my bitcoin?

It hides your IP address from the nodes and servers your wallet talks to. It does nothing about what the ledger records or what an exchange knows.

Can stolen bitcoin be traced?

The coins can be followed, and law enforcement does recover some, like the Bitfinex coins seized in 2022. If you lost bitcoin to a scam in the US, report it to the FBI at ic3.gov, and be wary of anyone who promises recovery for a fee.

How long does a bitcoin trail last?

Forever. The ledger is permanent and tracing tools improve, so a trail that looks cold today can be followed years later.

The ledger never forgets.

Start the next chapter clean. The mule carries it.