Bitcoin is not anonymous.
Ways to reduce disclosure.

Section 1 · Why Bitcoin isn't anonymous

Every Bitcoin transaction is published to a public ledger that anyone can read. Addresses are long random-looking strings, which gives pseudonymity: your name isn't attached to the address on-chain. But pseudonymity is not anonymity. As soon as one address is linked to your identity, because you bought it on a KYCKnow Your Customer (KYC)Identity checks that banks, brokers and regulated Bitcoin exchanges must run under anti-money-laundering rules, collecting your name, address, date of birth, an ID number and often a photo ID. Buying through a KYC exchange links your identity to the bitcoin you buy and the addresses you withdraw it to.Full definition exchange, because you reused it publicly, because you accepted a donation with it, every other address you have interacted with can be analyzed in relation to it.

Chainalysis, Elliptic, and TRM Labs are the three largest commercial chain-analysis firms^[3]. They sell tools and services to exchanges (for KYC/AML), law enforcement (for investigations), and governments (for sanctions screening). Their databases associate billions of addresses with known entities. If your coins came from an exchange, the exchange knows which coins they sold you; if they shared that information, or were subpoenaed, chain-analysis can follow those coins forward.

What they cannot see, at first, is whose addresses those are. Chain-analysis firms like Chainalysis, Elliptic, and TRM Labs earn hundreds of millions per year by closing that gap. They do it by combining subpoenaed exchange KYC records, clustering heuristics (common-input ownership, change-address detection, address-reuse leaks), and voluntary data from wallet providers. One known address often compromises everything that address ever touched. Privacy is not about hiding crime. It is about not handing every past and future counterparty a full portfolio statement.

Section 2 · Threat model first

Privacy is a tradeoff against convenience, fees, and time. Before you pick tools, answer:

• How much do you hold? $500 and $500,000 have different threat profiles.
• Who are you hiding from? Thieves? Ex-partners? Aggressive civil litigants? A state? The tools vary.
• What's your jurisdiction? Capital controls, tax enforcement, or political persecution change the calculus.
• What do you give up with each tier? Convenience, occasional extra fees, some setup time.

Most users do not need Level 3. Most users do need Level 1, which costs almost nothing. The middle tier is where significant holders should land.

Level 1 · Basic hygiene (everyone)

This is free, takes minutes, and covers 80% of the real-world privacy failures. Every Bitcoin holder should do this.

• Never reuse addresses. Modern wallets generate a fresh receive address for every incoming transaction automatically. This is the single biggest privacy practice. Reusing one address for donations or repeated receives tells everyone which coins are yours.
• Don't publish addresses. Do not post your receive address on social media, a blog, or a public forum. If someone needs to pay you, send them the address privately.
• Withdraw to self-custody promptly. Every day coins sit on an exchange is another day the exchange maps your balance, your patterns, and your withdrawal addresses.
• Separate wallets and labels by context to reduce accidental linkage. Combining inputs, address reuse, counterparties and later disclosures can still associate activity across wallets.^[1]

Level 2 · Intermediate (significant holders)

For anyone with a stack worth hiding from commodity threats (theft, litigation, neighbors). Costs: one afternoon of setup, a small hardware investment, and a modest learning curve on Sparrow. These tools break the common heuristics that chain analysts rely on. They require a bit of setup and pairing support on both ends.

• A wallet connected to your own node avoids asking a third-party wallet server about its addresses. It does not hide public transactions or make network traffic unobservable; assess network privacy separately.^[1]
• Use Sparrow with coin control. You pick which UTXOsUnspent Transaction Output (UTXO)A piece of bitcoin you received and have not yet spent, like a separate bill in a wallet. Your balance is the total of your UTXOs. Spending uses up whole UTXOs and creates new ones, usually including change sent back to you, and each UTXO carries its own history, which matters for privacy.Full definition to spend instead of the wallet choosing automatically. This matters enormously: spending without coin control can merge your KYC coins with your non-KYC coins in a single transaction, linking them permanently. Sparrow Wallet, paired with a Coldcard, Trezor, or Passport, lets you control which UTXOs you spend and labels them in a local file. No third party sees the labels. No cloud backup leaks the addresses.
• Label every UTXO by source. "River-DCA-2024-01", "Kraken-2023-11", "p2p-2024-03", "mining-ckpool". Sparrow's label system makes this trivial. Labels stay in your wallet file and never hit the network.
• Never combine KYC and non-KYC UTXOs in the same transaction. If you spend a KYC UTXO alongside a non-KYC UTXO, chain-analysis assumes both belong to the same entity. Don't do it. Keep KYC coins (exchange withdrawals tied to your name) in a wallet that never touches your non-KYC coins (P2P purchases, gifts, earned payments). Mixing them in a single transaction links the histories forever.
• Tor can reduce exposure of your ordinary IP address to peers. It does not erase public transaction relationships or guarantee protection from every network observer.^[1] Sparrow, most hardware wallet companion apps, and Start9 support Tor natively.
• BIP47 payment codes. A reusable identifier that derives a fresh address for every payment without reusing one on-chain. You share a single payment code, your counterparty's wallet derives unique addresses in private. Sparrow supports it; Samourai Wallet, which popularized payment codes as PayNyms, was shut down in April 2024.^[4] The "silent payments" work (BIP352) is a newer approach with the same goal.^[5] For a static address or tip jar, see Advanced Bitcoin Privacy and Silent Payments.

On this ladder, running your own node is a Level 2 step, not Level 1; see Running a Node for Start9, Umbrel, and bare Bitcoin Core setups.

Level 3 · Advanced (serious threat models)

For users in hostile jurisdictions, journalists, privacy absolutists, or very large stacks where forensic follow-on is a credible risk. Costs: significant time, some extra on-chain fees, real learning curve. These tools carry more operational load and, in 2024-2026, more regulatory uncertainty. They are worth the effort for users with specific threats: journalists, activists, high-net-worth holders, or anyone who has been doxxed.

• CoinJoin via Wasabi or JoinMarket. Wasabi Wallet's WabiSabi protocol lets multiple users pool their UTXOs in a single transaction so observers cannot determine which input funded which output^[6]. Note: zkSNACKs, the company behind Wasabi, shut down its own coordinator in June 2024.^[7] Samourai was seized. JoinMarket remains, as does Joinstr. CoinJoin is functioning but operator pool has thinned.
• CoinJoin (reduced availability since 2024). The situation changed in 2024. The US DOJ indicted Samourai Wallet's founders on April 24, 2024.^[8] Wasabi (zkSNACKs) announced in spring 2024 that it would block US users and eventually sunset its coordinator.^[7] Remaining options include JoinMarket (self-hosted, advanced) and any wallet whose coordinator still operates. Sparrow removed its CoinJoin client in April 2024.^[9] For which CoinJoin tools still run, see CoinJoin in 2026 After Samourai Shutdown.
• Payjoin (BIP78). Payjoin breaks chain-analysis heuristics more elegantly than CoinJoin because the receiver contributes an input. It looks like a normal transaction but poisons common-input-ownership assumptions^[2]. Increasingly supported in Sparrow, BTCPay Server, and others. Supported by Sparrow, BTCPay Server, and Wasabi.
• Lightning for small payments. Lightning payments settle off-chain through private channel updates. Only channel opens and closes touch the base chain. For day-to-day spending this gives you meaningful privacy and sub-second settlement. See Lightning Practical.
• Acquire non-KYC Bitcoin. Peer-to-peer platforms like Bisq, Robosats, and HodlHodl let you buy and sell Bitcoin without identifying yourself to a centralized service. Premiums over spot are often 3–5%; treat it as the privacy tax. Keep them in a wallet that never interacts with an exchange withdrawal. Every time the two sides touch, the non-KYC premium evaporates.
• Air-gapped signing. Hardware devices like Coldcard, Passport, and SeedSigner never physically connect to an internet-capable machine. PSBTs travel via SD card or QR. Your signing keys never meet an online device.

Section 3 · KYC taint explained

Bitcoin you buy on a KYC exchange is tagged with your identity at the point of purchase. That does not mean you cannot use it; it means the exchange, and anyone with access to the exchange's records (subpoena, breach, government request), can follow those specific coins forward through the public blockchainBlockchainA public transaction ledger, grouped into blocks that each link to the one before. Every Bitcoin full node checks each block itself and follows the valid chain with the most accumulated proof of work. Recent blocks can occasionally be replaced (a reorganization); the number of computers does not decide validity.Full definition.

Privacy tools do not erase exchange records. CoinJoin or Payjoin can complicate some on-chain ownership inferences, but do not guarantee that a past or future transaction cannot be associated with you. Peer-to-peer swaps do not delete the original KYC purchase record either. This is risk reduction, not guaranteed anonymity; keep lawful tax records and obey applicable rules.^[1][2]

This matters for two reasons: long-term jurisdictional risk (a future government may retroactively scrutinize large Bitcoin holders), and transaction deanonymization (if you send Bitcoin to a merchant, the merchant can see that your coins came from Kraken, which tells them something about you).

Section 4 · What a realistic Level 2 setup looks like