01Two questions: can the coins be followed, and can they be tied to you?
Almost every answer online blurs these together. Pull them apart and the whole topic gets clear.
Can the coins be followed? Always. Every transaction names the coins it spends and the addresses it pays, and every node keeps a copy. bitcoin.org itself calls Bitcoin one of the most transparent payment networks in the world.
Can they be tied to you? Only through a link. The ledger holds no names. Yours arrives from outside: an exchange's records, a shop's delivery address, a post with your address in it, your IP address.
So the real question isn't "can Bitcoin be traced". It's "where could my name have entered the trail?" That's what the rest of this guide answers. For every coin, not just Bitcoin, see our main guide: is crypto anonymous?
02The rules analysts use to link Bitcoin addresses
One address tells an analyst very little. The work is grouping addresses into owners. Two rules do most of it.
Rule 1: coins spent together share an owner
To spend from an address you need its key. So when one payment spends from addresses A and B, whoever signed it held both keys.
Bitcoin's white paper says it plainly: multi-input transactions necessarily reveal that their inputs were owned by the same owner. And it chains. A with B, then B with C, and now A, B and C are one owner.
Rule 2: the change goes home
Bitcoin spends whole coins, like paying with a banknote. Pay 0.50 from a 0.55 coin and the rest comes back to you as change, usually to a brand-new address. Spot the change and that new address joins your group.
The smaller clues
The Bitcoin Wiki's privacy page lists the rest: reused addresses, round amounts, matching times, the habits of a particular wallet app, and peel chains, where a big coin is spent down in small payments with the change hopping to a new address each time. Each clue is weak alone. Stacked, they point one way.
03How well does it work? The numbers from the research
"Very accurate" is easy to say. Here's what was actually measured.
In 2013, researchers bought goods and services from Bitcoin businesses 344 times and tagged 1,070 addresses by hand. Then they ran the two rules over the whole ledger.
The result? Those hand-tagged addresses grew into 2,197 named groups covering over 1.8 million addresses.
They measured their mistakes too. The first version of the change rule was wrong 13% of the time. Refined, including waiting a week to see if an address was used again, it was wrong 0.17% of the time.
And the field is older than most people think: researchers showed the ledger could be linked to people as early as 2011.
Those figures are from 2013. Analysis has had more than a decade of data and software since. Treat them as a floor, not a ceiling.
04The network layer almost nobody mentions
Before a payment is in any block, your wallet has to announce it. bitcoin.org warns that the nodes relaying transactions can log the IP addresses they come from.
A phone wallet usually doesn't even talk to the network itself. It asks the app maker's server, which sees your addresses, your balance and your IP together.
Newer versions of Bitcoin Core encrypt the traffic between nodes by default. That stops someone on the wire reading it. It doesn't hide your IP from the node you're talking to.
05Three real cases, in the Justice Department's own words
Three cases show what tracing does in practice, each from the US Department of Justice's own press release.
Colonial Pipeline, 2021
The company paid about 75 bitcoins in ransom. The DOJ says that by reviewing the Bitcoin public ledger, investigators tracked the transfers to an address the FBI held the key for, and seized 63.7 bitcoins.
Bitfinex, 2016 to 2022
119,754 bitcoins were stolen in a 2016 hack. In 2022 the DOJ arrested two people and seized more than 94,000 of them, then worth over $3.6 billion. The release describes years of moves through fake identities, automated transactions and hops into other coins. The keys turned up in files in an online account.
Bitcoin Fog, 2011 to 2024
A service that mixed other people's bitcoin together ran for a decade and moved over 1.2 million bitcoins. In 2024 a jury convicted its operator, after what the DOJ calls painstaking tracing through the blockchain.
The lesson isn't that everyone gets caught. It's that the ledger waits.
06How to trace a Bitcoin payment yourself, in five steps
You don't need special software to follow a payment. A free block explorer and five minutes are enough.
- Copy the transaction ID. Your wallet shows it for every payment: a long string of letters and numbers, often called the TXID.
- Paste it into a block explorer. Any public Bitcoin explorer will do. No account needed.
- Read the inputs and outputs. Inputs are the coins that were spent; outputs are where they went. Spot the payment and the change, using rule 2 above.
- Click an output address. You see its whole history: every payment in, every payment out, and the balance today.
- Follow where it was spent. Explorers link each output to the later transaction that spent it. Click, and keep walking the trail.
That's exactly what investigators start with. The difference is scale: software walks millions of these steps and adds the labels that say which addresses belong to exchanges and shops.
07Can police, the IRS or an exchange trace my bitcoin?
Police read the ledger like anyone else, often with paid analysis software, and ask exchanges for their records with legal process. That request is where most names come from.
The IRS sees what US brokers report. Brokers file Form 1099-DA for sales from 1 January 2025, and every Form 1040 asks whether you received or disposed of digital assets.
An exchange knows every address it paid you and every deposit you made, with your ID attached. Under the FATF travel rule, regulated services also pass sender and receiver details to each other.
08If your bitcoin was stolen
The ledger works both ways. If your coins were taken, the trail is public too, and that's what lets law enforcement recover some of them, as the Bitfinex seizure shows.
- Write down everything now. The transaction IDs, the addresses the coins went to, dates, amounts and every message from the scammer.
- Report it. In the US, file a complaint with the FBI's Internet Crime Complaint Center at ic3.gov. Elsewhere, go to your national police cybercrime unit.
- Tell the exchange if the coins went to one. Exchanges can freeze accounts that receive stolen funds when law enforcement asks.
- Ignore "recovery" offers. People who promise to get your bitcoin back for an upfront fee are, very often, the next scam.
Tracing shows where coins went. Getting them back needs someone with the legal power to seize them. Report fast, keep records, and never pay a stranger to "trace" for you.
09What makes Bitcoin harder to trace, and what doesn't
Each habit below closes one specific link. None of them makes the coins vanish from the ledger.
| Step | What it closes | What stays open |
|---|---|---|
| A new wallet | Your old history | Any link you send into it, like an exchange withdrawal |
| A new address per payment | Address reuse | Spending addresses together later (rule 1) |
| Coin control | Mixing sources in one payment | Change detection on each payment |
| Tor or your own node | Your IP address | Everything on the ledger |
| A VPN | Your IP, from your wallet's server | The ledger, and the VPN company's logs |
| CoinJoin | Rule 1: many people spend together | What you do with the coins afterwards |
| Swapping to Monero | The public trail of later payments | The swap itself, and where you bought or cash out |
The Bitcoin Wiki notes that CoinJoin is built to break the common-input rule, because many people sign one transaction together. Monero goes further and hides sender, receiver and amount on every payment.
The most common leak by far is the first one: coins that go straight from an ID-checked exchange into the wallet you want private. The fix is to put something without your name between the two ends. A swap with no account does exactly that. Try Bitcoin to Monero, or follow the full private-sending routine.
No step rewrites history. If an address is already tied to your name, its past stays readable. Start fresh rather than trying to clean it.
Keep reading
How we checked this
Written by the team that runs the SilentMule swap desk. Every number comes from the study or government release it cites, linked where it appears. The rules are described as Bitcoin's own documentation and the original research describe them. Last checked . Spotted something wrong? Tell us and we fix it.
Sources
- Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System, section 10, Privacy
- bitcoin.org: Protect your privacy
- Bitcoin Wiki: Privacy
- Meiklejohn et al., A Fistful of Bitcoins, IMC 2013
- Reid and Harrigan, An Analysis of Anonymity in the Bitcoin System, 2011
- US Department of Justice, 7 June 2021: Colonial Pipeline ransom seized
- US Department of Justice, 8 February 2022: Bitfinex hack arrests and seizure
- US Department of Justice, 12 March 2024: Bitcoin Fog operator convicted
- IRS: digital assets
- FATF: virtual assets and the travel rule