Bitcoin privacy basics: coin control, no-KYC, and silent payments
Most Bitcoin privacy comes from a few habits that any wallet user can learn.
Bitcoin is public: anyone can follow coins from address to address, and your privacy depends on keeping those addresses from being linked to you. The basics are a fresh address for every payment, your own node instead of a public server, labels and coin control so coins from different sources never mix, and buying without KYC where you can. Silent payments, payjoin, and CoinJoin add more, with trade-offs and, for CoinJoin, legal risk you should understand first.
What anyone can see on the blockchain
Every transaction shows its inputs, its outputs, and the amounts. The Bitcoin whitepaper describes the privacy model: the public can see that someone is sending an amount to someone else, but not who, as long as the public keys stay unlinked to people.
The same section names the main leak: a transaction that spends several inputs shows that one owner held all of them. Chain analysis firms build on that heuristic, plus a few others: guessing which output is change, spotting round payment amounts, and watching reused addresses. Once one address in a cluster is tied to your name, often through an exchange withdrawal, everything linked to it is too.
Your network traffic is the other leak. When your wallet asks a server about your addresses, that server learns your addresses, your balance, and your IP address.
The basics, in order of impact
- 1Use a new address for every payment you receive. The whitepaper recommends a new key pair for each transaction. Most modern wallets do this by default, so the main rule is never to hand out the same address twice.
- 2Run your own node, or connect to a private Electrum server on it. Sparrow's documentation warns that public servers see your balance and your IP address. My node guide covers what to buy.
- 3Route wallet traffic over Tor. Sparrow has Tor built in, and Bitcoin Core can run behind a Tor proxy and create its own onion service. My Tor guide explains what Tor does and does not hide.
- 4Label every coin when it arrives. A label like "exchange withdrawal" or "P2P buy" tells you later which coins are tied to your identity.
- 5Use coin control when you spend. Choose the exact coins for each transaction, and never combine KYC coins with no-KYC coins. Sparrow also lets you freeze a coin so it is never spent by accident.
- 6Buy without KYC where you can, through peer-to-peer markets like Bisq, RoboSats, or Hodl Hodl. See my no-KYC exchange list and my anonymous wallet guide.
Coin control and UTXOs
Your wallet balance is a set of separate coins, called UTXOs, each with its own history. When you pay someone, your wallet picks some of those coins as inputs. If it picks a coin from an exchange withdrawal and a coin you bought privately, that transaction tells the world the same person owns both, and the link is permanent.
Coin control means you pick the inputs yourself instead of letting the wallet decide. It also matters for fees: many small coins cost more to spend, which tempts people to consolidate them into one, and consolidation links every coin involved. My UTXO guide covers when consolidating is worth it.
Silent payments (BIP352)
Silent payments solve the reused-address problem for anyone who wants one public address, such as a donation page. You publish a single static address that starts with sp1. Each sender's wallet combines your address with keys from its own transaction to create a brand-new Taproot output that only you can find and spend. BIP352 states the goal: transactions cannot be linked to a silent payment address by an outside observer, and no notification transaction is needed.
The cost falls on the receiver. Your wallet has to scan blockchain data to find incoming payments, which BIP352 calls generally feasible for full nodes and a challenge for light clients. The addresses are also long, at least 116 characters.
BIP352 is marked Complete. Sparrow added sending to silent payment addresses in version 2.3.0 in October 2025 and silent payment receiving wallets in 2.5.0 in May 2026, including with air-gapped hardware wallet signers. Wasabi Wallet can send to silent payment addresses and lists receiving as coming soon.
CoinJoin and payjoin
A CoinJoin is one transaction built together by many people, each putting in coins and taking out equal-sized outputs. An observer can no longer tell which output belongs to which input, so the coin history breaks.
The original JoinMarket repository is now archived. JoinMarket NG is an independent, MIT-licensed implementation that is wire-compatible with the original, and it has no central coordinator: no single service schedules rounds, picks participants, or holds funds. Wasabi Wallet still runs CoinJoin under its WabiSabi protocol, but zkSNACKs, the company behind it, stopped running its own coordinator on June 1, 2024, so users now pick a third-party coordinator in settings.
Payjoin, defined in BIP78, has the person receiving a payment add one of their own inputs, which breaks the assumption that all inputs belong to the sender while the transaction still looks like an ordinary payment. Sparrow has supported BIP78 payjoin since 2020, but both sides need wallets that support it.
| Technique | What it hides | Trade-off |
|---|---|---|
| Fresh addresses | Links between your payments | None. Do it always. |
| Own node over Tor | Your addresses, balance, and IP from server operators | Hardware and setup time |
| Coin control and labels | Links between coins from different sources | Discipline at every spend |
| Silent payments | Which payments went to your public address | Receiver must scan the chain; limited wallet support |
| Payjoin | Who owned which input | Receiver must support it |
| CoinJoin | Coin history before the join | Fees, time, coordinator risk, and legal scrutiny |
The legal context
Everything in the basics section above is ordinary wallet practice. CoinJoin services have drawn prosecutions, though, so know the facts before using one.
On April 24, 2024, federal prosecutors in New York charged the founders of Samourai Wallet, which ran the Whirlpool CoinJoin service. In November 2025 they were sentenced to five and four years in prison after pleading guilty to conspiring to operate a money transmitting business that knowingly transmitted criminal proceeds. As of November 2026, the Justice Department's clemency list shows no pardon or commutation for either founder. The Justice Department says more than $237 million in criminal proceeds moved through the service, and that one founder marketed it on a darknet forum to people asking how to "clean dirty BTC."
About a week after those charges, zkSNACKs announced it would stop running its Wasabi coordinator from June 1, 2024, and said Wasabi would keep working as a regular Bitcoin wallet. Privacy tools exist to protect people from hackers, data leaks, and physical threats. Using any of them to move the proceeds of a crime is money laundering, and nothing in this guide is advice on avoiding law enforcement. If you are unsure how your local law treats CoinJoin, ask a lawyer before you use one.
Frequently asked questions
What is CoinJoin?
A CoinJoin is a single Bitcoin transaction built by many users at once, each contributing coins and receiving equal-sized outputs. Because the outputs look the same, an observer cannot tell whose coins went where. JoinMarket NG and Wasabi Wallet with a third-party coordinator are the main ways to do it today.
Is CoinJoin legal?
It depends on where you live. In the US, running a CoinJoin service has led to prison: the Samourai Wallet founders were sentenced in 2025 after pleading guilty to conspiring to operate a money transmitting business that knowingly transmitted criminal proceeds. Check your local law, and ask a lawyer if you are unsure.
What are silent payments in Bitcoin?
Silent payments, defined in BIP352, let you publish one reusable address starting with sp1. Each payment to it lands in a fresh output that outside observers cannot link to that address. The receiver's wallet has to scan the blockchain to find payments.
Which wallets support silent payments?
Sparrow supports sending since version 2.3.0 and receiving since 2.5.0, including with air-gapped hardware signers. Wasabi Wallet supports sending, with receiving listed as coming soon. Support is still spreading, so check your wallet's release notes.
Does a VPN make bitcoin private?
A VPN hides your IP address from the server your wallet connects to, but that server still sees your addresses and balance, and the blockchain is still public. Your own node over Tor protects more, and only coin control keeps your coins from being linked on-chain.
Can I make exchange-bought bitcoin private?
You can stop the leak from spreading. Label those coins, keep them separate with coin control, and never combine them with coins bought without KYC. The exchange will always know the address you withdrew to.