RapTor
Cryptocurrency Privacy: What a Stranger Can Actually See, and What Changes It
Cryptocurrency privacy is not the same question as cryptocurrency legality, and most of what ranks for this search conflates the two — a page explaining which countries restrict privacy coins is not a page explaining how a transaction actually gets traced. This one starts with the mechanics: what a stranger holding one of your addresses can see, what blockchain analysis explained plainly actually involves, how an analytics firm turns crypto transaction privacy into a name, and what genuinely changes the picture versus what only feels like it does.
What a stranger holding your address can actually see
On Bitcoin and nearly every other non-privacy chain, anyone — not just a subpoena-holding investigator, literally anyone with an internet connection — can look up an address on a public block explorer and see every transaction it has ever sent or received, the exact amount, the timestamp, and every other address it has ever interacted with.Chainalysis Nothing about that requires special access or law enforcement authority; it's the same public ledger a compliance analyst, a journalist, or a curious stranger who obtained your address from anywhere at all can read. What a stranger with just an address cannot do immediately is attach a legal name to it — that step is a separate process, covered next — but the entire transaction graph around that address is already visible to anyone who bothers to look, from the moment you first use it.
How an analytics firm gets from an address to a person
Not through breaking any cryptography — through pattern recognition applied to the public ledger, plus one crucial off-chain data source. The core on-chain technique is clustering: when a transaction spends from multiple input addresses at once, the standard heuristic assumes all of those inputs are controlled by the same wallet, since a normal transaction can only combine inputs its owner actually holds the keys for. Applied repeatedly across the whole blockchain's history, that heuristic groups thousands of addresses into a single cluster representing one entity's likely total holdings, well before anyone knows who that entity is. A second common giveaway is the change output: when you spend part of a UTXO, the leftover "change" typically returns to a new address you control in the same transaction, and it's often distinguishable from the actual payment output by its position, amount pattern, or address-reuse behavior — this is what the Bitcoin privacy community calls "toxic change," a change output with a detectable, deterministic link back to the transaction that created it.Bitcoin Optech None of that clustering produces a name on its own. The name comes from the one place identity and blockchain data legitimately meet: a regulated exchange's KYC records, obtained by investigators through a subpoena once a cluster's funds are traced to a specific exchange deposit address tied to a verified account.Chainalysis The chain does the grouping; the exchange does the naming.
The privacy cost of buying on a verified exchange
Buying on a KYC exchange and withdrawing to your own wallet is not a privacy-neutral action — it's the single most common way a cluster of otherwise-pseudonymous addresses gets permanently tied to a real identity. The exchange knows exactly which withdrawal address received your purchase, at what time, for what amount, tied directly to your verified account. Everything that address does afterward is, from an investigator's perspective, one subpoena away from being attributed to you by name — which is exactly the chokepoint that TRM Labs and Chainalysis both describe as the deciding factor in essentially every major darknet market prosecution.Chainalysis This doesn't mean never use a regulated exchange — for most people, it's the only realistic acquisition path — it means the withdrawal itself is the moment your on-chain activity and your legal identity get linked, and everything downstream inherits that link unless you deliberately break it, which is what coinjoin and privacy coins are for.
Is a coinjoin worth doing?
A coinjoin is a transaction where multiple participants combine their coins into one transaction with multiple outputs, so an outside observer can no longer determine which input paid which output — the protocol traces back to a 2013 proposal by Bitcoin developer Gregory Maxwell, and has gone through several implementation generations since, from early broken attempts through JoinMarket's maker-taker model to Wasabi Wallet's more automated, coordinator-based approach.Bitcoin Optech Done correctly, it's a genuine improvement on Bitcoin's default transparency — it breaks the simple clustering heuristic described above for the specific coins that go through the mix. It is not, however, equivalent to Monero's default privacy: a coinjoin's privacy is only as good as the number and diversity of other participants mixing at the same time, a poorly implemented mix can produce exactly the "toxic change" problem coinjoin is supposed to eliminate, and the mixed output itself can attract additional scrutiny simply for having passed through a known coinjoin coordinator, since using one is itself a visible, on-chain fact. Worth doing if you're committed to using Bitcoin specifically and understand its limits; not a substitute for using a privacy coin by default if privacy is the actual priority, which is why the Monero guide exists as a separate page rather than folding into this one.
What AML and the Travel Rule mean for you personally
Anti-money-laundering rules and the Financial Action Task Force's Travel Rule are obligations imposed on regulated financial businesses — exchanges, custodians, payment processors — not directly on an individual holding cryptocurrency. In practice, that means the exchange you use must verify your identity, monitor your transactions for patterns it's required to flag, and, above a certain transaction size, share your identifying information with the receiving institution when you send funds to another regulated platform. For you personally, the practical effect is what's already covered above: every regulated on-ramp and off-ramp you touch creates a durable, subpoena-accessible record tied to your name, regardless of what you do with the funds in between. None of this makes holding or using cryptocurrency privately illegal on its own — it makes the specific act of moving funds through a regulated institution inherently identity-linked, which is a different and narrower claim than "privacy is illegal."
Does Tor or a VPN help when you broadcast a transaction?
Partially, and only for one specific thing. Broadcasting a Bitcoin transaction over Tor or a VPN hides the IP address associated with the moment you broadcast it — useful, because early Bitcoin network analysis has shown that the first node to relay a transaction can sometimes be linked back to the broadcasting IP address, which is itself a deanonymization vector independent of anything visible on the blockchain. What Tor or a VPN does nothing about is the transaction's content once it's on the chain: the amount, the addresses involved, and their position in the broader cluster graph are exactly as visible and exactly as traceable as if you'd broadcast from your home connection in plain sight. Network-layer privacy and ledger-layer privacy are two separate problems with two separate solutions — Tor Browser and a wallet's own broadcast settings address the first; Monero or a well-executed coinjoin address the second, and neither substitutes for the other.
Hiding who you are versus hiding what you sent
These are genuinely different properties, and conflating them is where a lot of confused privacy advice comes from. Anonymity, in this context, means an observer can't tie a transaction to your real-world identity — the problem Tor, a fresh wallet, and never touching a KYC exchange address together are aimed at. Confidentiality of amounts is a separate property: even a fully pseudonymous Bitcoin transaction still broadcasts the exact amount sent, in plain sight, forever. Monero solves both simultaneously by design — RingCT hides transaction amounts while ring signatures obscure which of several possible signers actually authorized the spend, so no outside party can determine the true signer among the groupgetmonero.org — which is precisely why it's treated differently from Bitcoin-plus-coinjoin throughout this site: Bitcoin's privacy tools mainly attack the identity-linkage problem, while Monero attacks both problems by default, for every transaction, without you having to opt into a specific privacy step each time.
Can an already-exposed transaction history be undone?
No. Once an address has been linked to your identity — through an exchange KYC record, a data breach, or simply reusing the same address somewhere identifying — that link doesn't expire and can't be revoked; the blockchain's history is permanent, and so is whatever correlation an investigator, a data broker, or anyone else has already recorded connecting that address to you. The only real mitigation going forward is to stop using the exposed cluster entirely: move remaining funds to a genuinely fresh wallet, through a route — Monero conversion, a careful coinjoin, at minimum a non-KYC acquisition path for future funds — that doesn't recreate the same link, and treat everything already tied to the old address as permanently associated with your name from that point forward. There is no service, tool, or technique that retroactively un-links a transaction history that's already been correlated; prevention, not cleanup, is the only real lever here.
Is wanting financial privacy itself legal?
In most jurisdictions, yes — holding or using a privacy-preserving cryptocurrency is not, on its own, a criminal act, and neither is declining to use identity-linked payment rails for lawful activity. What the current rules actually restrict is narrower and more specific: certain regulated exchanges have delisted privacy coins to stay compliant with local AML supervision, some jurisdictions impose extra reporting or licensing requirements on businesses that handle them, and using any payment method — private or not — to facilitate an underlying illegal transaction remains illegal because of what it's paying for, not because of the payment method's privacy properties. This site is not able to give jurisdiction-specific legal advice — see the disclaimer — but the general shape holds broadly: privacy is a property of a tool, and the law generally cares what the tool was used for.
For the acquisition and wallet-setup side of actually using a privacy coin, the Monero guide picks up directly from here. For keeping the rest of your financial and browsing habits from undoing what privacy you do build, see the OPSEC guide and the hardware wallet guide. And if the reason any of this matters to you is a specific purchase on a darknet market, the payment-privacy mechanics above are exactly what determines whether that purchase can be traced back to you months or years later — read this page in full before you fund anything, not after. RapTor's home page sets out the same standard this page holds itself to: every figure dated and attributed, nothing invented to fill a gap.