Is crypto anonymous? The complete guide to how coins get traced, and how to keep yours private.

Most arguments about crypto privacy are really arguments about three words.

So let's pin them down.

Anonymous means no name and no trail. A five-dollar bill handed over in person is close.

Pseudonymous means there's a trail, but it sits under a nickname. That nickname is your wallet address. Bitcoin, Ethereum and most coins work this way.

Private means the trail itself is hidden from the public. Monero works this way by default, and so do Zcash's shielded addresses.

Here's the catch with a pseudonym: it only protects you until someone matches it to the person.

And on a public blockchain, that match works backwards. One link reveals every payment the address ever made.

This isn't a flaw someone found later. It's in the design. Bitcoin's white paper says the public can see that someone is sending an amount to someone else, just without information linking the transaction to anyone. Privacy, it says, comes from keeping public keys anonymous.

A walkthroughWhat one payment tells a total stranger

Let's make this concrete. Open any block explorer, paste a Bitcoin address, and here's what you get. No account. No fee. No permission.

• Every address that sent money in, and every address it went to.
• Every amount, down to the last unit.
• The time of each payment, to the second.
• The balance, right now and on any past day.
• The fee, which often hints at the wallet app that sent it.

Now read it like an analyst.

Two inputs were spent together, so they very likely belong to the same person. One output is a round 0.50 BTC. The other is an odd 0.0497 BTC. The odd one is almost certainly the change going back to the sender, often to a brand-new address the sender just revealed.

No hacking. No warrant. Just reading.

bitcoin.org itself puts it bluntly: Bitcoin is one of the most transparent payment networks in the world, and data that's hard to trace today may be easy to trace tomorrow.

A quick comparisonIs crypto more traceable than cash or a bank?

Than cash, yes. Than a bank, it's different rather than worse.

A bank knows your name but keeps your payments from the public. Bitcoin shows your payments to the public but doesn't know your name.

The worst of both? A coin that left an ID-checked exchange. The payments are public and the name is on file.

"Blockchain analysis" sounds like something only a government lab can do. (Here's what blockchain analysis really is, start to finish.)

It isn't. Most of it rests on a few plain rules, applied millions of times by software.

Here they are.

Rule 1Coins spent together have one owner

To spend from an address you need its key. So when one transaction spends from addresses A and B, whoever signed it held both keys.

Bitcoin's own white paper says multi-input transactions necessarily reveal that their inputs were owned by the same owner. And the rule chains: A with B, then B with C, and now A, B and C are one owner.

Rule 2The change goes home

Bitcoin spends whole coins, like paying with a banknote. Pay 0.50 from a 0.55 coin and the rest comes back to you as change, usually to a new address. Spot the change (an odd amount, a fresh address, the same address type as the inputs) and that address joins your group.

Rule 3One address, one person

Reuse an address and every payment to it sits in one public file. On account chains like Ethereum and Tron, one address carries your whole history by design, so there's nothing to group: it's already grouped.

Rule 4Small clues add up

The Bitcoin Wiki's privacy page lists the rest: round amounts, matching times, the habits of a particular wallet app, and peel chains, where a big coin is spent down in small payments with the change hopping to a new address each time. Each clue is weak. Stack enough of them and they point one way.

The evidenceHow well do these rules work?

"Very accurate" is easy to say. So here's what was actually measured.

In 2013, a team of researchers bought goods and services from Bitcoin businesses 344 times, and tagged 1,070 addresses by hand. Then they let the rules loose on the whole ledger.

The result? Those hand-tagged addresses grew into 2,197 named groups covering over 1.8 million addresses.

They also measured their own mistakes. The first version of the change rule was wrong 13% of the time. After refinements, including waiting a week to see if an address was used again, it was wrong 0.17% of the time.

And that was 2013. Analysis has had more than a decade of data and better software since.

Case studyThe Colonial Pipeline ransom, hop by hop

In 2021 a ransomware attack hit Colonial Pipeline, and the company paid about 75 bitcoins in ransom.

Here's what happened next, in the Justice Department's own description.

"By reviewing the Bitcoin public ledger, law enforcement was able to track multiple transfers of bitcoin."US Department of Justice, 7 June 2021

The transfers led to one address, and the FBI had the key for it. Result: 63.7 bitcoins seized, then worth about $2.3 million.

Notice what the release doesn't mention: breaking any cryptography. The ledger did the work.

Why it mattersThe trail never goes cold

Time doesn't erase a ledger. Two more cases from the same department make the point.

• Bitfinex. 119,754 bitcoins were stolen in a 2016 hack. In 2022 the department seized more than 94,000 of them, then worth over $3.6 billion, after years of moves through fake identities, automated transactions and hops into other coins.
• Bitcoin Fog. A service that mixed people's bitcoin together ran from 2011 to 2021 and moved over 1.2 million bitcoins. In 2024 a jury convicted its operator, after what the department calls painstaking tracing through the blockchain.

Bottom line: a trail that looks cold today can be read years from now, with better tools.

Want the Bitcoin side in full, with every rule drawn and all three cases? Read can Bitcoin be traced?

Here's the most important idea in this guide:

Your name almost never comes from the blockchain. It comes from the edges, the places where a wallet touches the real world.

There are six of them.

"Crypto" isn't one thing. Some coins show everything. One shows almost nothing.

Here's what each chain shows to anyone with a block explorer.

The verdictsThe coins people ask about most

Bitcoin: fully public, and the best-studied chain for tracing. Private only with careful habits.

Ethereum: fully public, and harder to keep apart in one way: there's no change and no new address per payment unless you make one, so one address tends to hold everything.

USDT: as public as the chain it runs on, plus an issuer. Tether's terms let it freeze and blacklist any address holding USDT, and report to authorities without telling you first. On Tron, the TRX you need to pay transfer fees leaves a second trail back to whoever funded the wallet. Here's how USDT gets traced and frozen, in full.

Monero: private by default. It hides the sender with ring signatures, the receiver with stealth addresses and the amount with RingCT, on every payment.

Zcash: private only on shielded addresses. Send from a transparent address and it's as public as Bitcoin.

"Can they see it?" depends entirely on who "they" are.

Here's the view from each seat, for an ordinary Bitcoin or USDT wallet.

Notice where the "Yes" under your name comes from. It's never the chain. It's always a company or a person at the edge.

PoliceCan police trace crypto?

Often, yes. They read the ledger like anyone else, usually with paid analysis software. Then they ask an exchange for its records with legal process. That request is where most names come from, which is exactly why the FATF rules require exchanges to verify customers and keep records.

TaxesCan the IRS see my crypto?

It sees what US brokers report. Brokers file Form 1099-DA for sales from 1 January 2025, and every Form 1040 asks whether you received or disposed of digital assets.

You don't need to do everything on this list.

But do it in this order. Each step closes a bigger door than the one below it.

Step #1Break the link to ID-checked accounts

This is the big one. The wallet you want private should never receive coins straight from, or send straight to, an exchange that knows your name.

The simplest way: swap with no account into a fresh wallet. The new coins arrive from the swap, in the coin you choose, and no ID-checked account sits between the two ends. That's what the desk at the end of this guide does.

Step #2One wallet per purpose

Savings, spending and anything public each get their own wallet. A leak in one stays in one.

Step #3A fresh address for every payment

Never hand out the same receiving address twice. Most wallets make a new one for you each time; just don't reuse the old one out of habit.

Step #4Don't mix sources in one payment

Spending coins from two addresses together tells the world they're both yours. That's Rule 1 from chapter 2.

Step #5Hide your IP

Connect your wallet over Tor, or run your own node and point the wallet at it. Your addresses stop arriving next to your home IP.

Step #6Mind the timing and the amounts

Let time pass between moves, and don't send out exactly what just came in. Stealth picks the day your coins land for you, from tomorrow to 30 days out.

Step #7Use a private coin where it fits

For payments that should stay private, Monero hides sender, receiver and amount by default. Many people swap into Monero to pay, then out again when they need another coin. For the full routine, start to finish, read how to send crypto anonymously.

Privacy is rarely lost to clever analysis. It's lost to small slips.

These are the ones that matter most.

1. Funding a fresh wallet straight from an exchange

   The wallet is new, but its first line is a withdrawal the exchange has on file with your name.

2. Sweeping everything into one address

   Consolidating coins from several sources in one payment tells the world they all belong to you.

3. Reusing a receiving address

   Everyone who ever paid that address can see everyone else who did.

4. Posting screenshots with addresses in them

   A cropped balance with the address still visible ties it to your account for good.

5. Moving the same amount in and out

   Exactly 0.5 out, exactly 0.5 in, ten minutes apart. No shared address needed.

6. Treating a VPN as privacy

   A VPN hides your IP from your wallet's server. It does nothing about what the ledger records or what an exchange knows.

7. Trying to clean an old wallet

   History doesn't change. If an address is tied to your name, start fresh rather than moving coins around inside the same web.

Reading about leaks is one thing. Checking your own wallet is another.

Here are the six links from chapter 3, as six questions about a wallet you actually use. Answer honestly. Nothing leaves this page, and there's no box for your address on purpose.

The wallet people bought their first coins with usually has the first link open, because the coins came straight from an exchange. That's normal, and it's why the usual fix is a fresh wallet rather than a cleanup.

Now it's your turn. Step one of the playbook takes about a minute, and the desk is right below.