Privacy coins explained: how on-chain privacy works, its limits and the law

Privacy coins and privacy tools use cryptography to hide who paid whom, and how much, on a blockchain that would otherwise be public. They protect ordinary people as well as businesses, but every design leaves some things visible, and the legal and exchange picture is tighter than for most crypto.

Why on-chain privacy matters

Bitcoin and Ethereum keep a permanent public record of every transfer. Your wallet address is not your name, which is why these networks are described as offering pseudonymity rather than anonymity. Once a single address is tied to you, though, anyone can follow money in and out of it for years.

That link is easy to make. Buying through an exchange that verified your ID, paying a friend, or posting a donation address online can all reveal who controls an address. Blockchain analytics firms then group addresses that seem to belong to the same person, for example coins spent together in one transaction, and build a picture of balances and habits.

There are plenty of lawful reasons to want less exposure:

• Payroll: an employer paying staff from one public address shows everyone's salary to anyone who looks.
• Business confidentiality: suppliers, margins and cash reserves become visible to competitors.
• Donations: people may give to causes they would rather not have tied to their name.
• Personal safety: a visible balance can make someone a target for theft, extortion or physical "wrench attacks," where criminals threaten a holder in person.

Privacy and secrecy from the law are different things. Privacy tools hide details from the public; they do not remove your legal duties, and some offer ways to show records to an auditor or tax preparer when you need to.

The main privacy techniques

"Privacy coin" covers several very different designs. Some hide data on their own chain, some add an optional private lane, and some sit on top of Ethereum or protect your internet traffic rather than your transactions. Here are the main approaches as of October 2026, with links to our coin profiles.

Ring signatures, stealth addresses and RingCT

Monero combines three tools on every transaction. A ring signature mixes the coin you are really spending with decoys drawn from the chain, so observers can't tell which member of the group signed. A stealth address means the sender creates a fresh one-time address for each payment, so your published address never shows up on-chain. RingCT (Ring Confidential Transactions) hides the amount; the Monero project says it has been mandatory since September 2017.

A Monero upgrade in 2022 raised the ring size from 11 to 16 members. Projects such as Beldex build on similar ideas, and Zano says every transaction on its chain is private by default, including the amounts, addresses and asset types involved.

zk-SNARK shielded pools

Zcash uses a type of zero-knowledge proof called a zk-SNARK. A shielded transfer proves it follows the rules without revealing the addresses or amount. Zcash also has transparent addresses that work much like Bitcoin, and users can move funds between the two kinds.

Zcash's documentation notes that even fully shielded transactions still show on the chain as having happened, along with the fee paid. A viewing key lets an owner give read-only access to someone such as an auditor, without handing over spending power. Pirate Chain uses zk-SNARKs too but makes shielded transactions mandatory.

Mimblewimble

Mimblewimble hides amounts with cryptographic commitments and lets the network combine and prune transaction data, which also keeps the chain small. Grin and Beam are built on it. Litecoin added an optional version, MWEB (Mimblewimble Extension Blocks), which the Litecoin Foundation announced had activated as a soft fork in May 2022. MWEB works like a side lane: you move coins in for confidential amounts and balances, then back out to the regular chain.

CoinJoin and mixing

CoinJoin bundles payments from several people into one transaction so it is harder to say which input paid which output. Dash builds an optional CoinJoin feature into its wallet; its docs say it is off until you start it and it runs four rounds by default. Decred uses a protocol called CoinShuffle++ with fixed-size amounts, and its documentation is candid that amounts remain public and that change outputs need careful handling to avoid linking mixed and unmixed coins.

Lelantus Spark

Firo uses Lelantus Spark, a protocol it announced in 2021 and switched on for its mainnet in January 2024. Firo says Spark needs no trusted setup, hides how much a Spark address holds, and offers incoming and full view keys so owners can share records selectively.

Trusted execution environments

A trusted execution environment (TEE) is a sealed area inside a processor that keeps code and data hidden even from the computer's operator. Secret Network runs private smart contracts inside TEEs, Oasis offers a confidential EVM chain called Sapphire, and Phala runs AI agents and other workloads in TEE hardware. The trade-off: you are trusting chip makers' hardware, which researchers have attacked before, and Oasis itself publishes material on how it handles TEE weaknesses.

Zero-knowledge app chains

Newer networks bring zero-knowledge privacy to general apps, not just payments. Aleo is a layer-1 chain for private applications and payments. Aztec describes itself as a privacy-first layer 2 on Ethereum, where private functions run and are proven on the user's own device. Midnight focuses on "selective disclosure," letting apps reveal only the data that is actually needed.

Fully homomorphic encryption

Fully homomorphic encryption (FHE) lets a computer work on data while it stays encrypted. Zama says its protocol uses FHE to keep amounts and balances encrypted even while they are processed, and that it can run on existing layer-1 and layer-2 chains rather than a new one.

Network-level privacy

Even a perfectly private transaction can be exposed by the internet connection that sends it. Nym runs a mixnet that wraps traffic in layers of encryption, shuffles it through several nodes and adds decoy "cover traffic" to hide patterns. It protects metadata such as your IP address; it does not hide anything recorded on a blockchain.

Shielded pools on Ethereum

Railgun is a set of smart contracts on Ethereum and several other chains that lets users hold and use tokens privately with zero-knowledge proofs. Its docs say the RAIL token is only staked to secure the protocol, is not itself a privacy coin, and is not needed to use the system. Tornado Cash was the best-known Ethereum mixer; its legal history is covered below.

How the approaches compare

The limits: what privacy coins can't do

No privacy system makes you invisible. These are the weak points to understand before you rely on one.

• Small crowds: privacy depends on the anonymity set, the group of users you could plausibly be. When privacy is optional and few people use it, the group is small and each private transfer stands out.
• Entry and exit points: moving coins into or out of a shielded pool, especially in an unusual amount, can link the two sides.
• Timing: withdrawing soon after depositing, or sending at the same time every week, gives analysts patterns to match.
• Metadata: your IP address, the wallet app's servers and the device you use can leak information that the chain itself hides.
• Exchange records: if you bought through an exchange that checked your ID under KYC rules, that exchange knows who you are and what you withdrew.
• User error: reusing addresses, mixing private and public funds, or posting a transaction ID online can undo the protection.

Research has found real flaws in older designs. A 2018 study published in the Proceedings on Privacy Enhancing Technologies reported that about 62% of Monero transaction inputs with one or more decoys could be traced by a process of elimination, and that decoys could often be told apart from real coins by their age. Monero now picks decoys using a statistical method meant to match real spending patterns and has since enlarged its rings, but the study shows why privacy claims need independent testing.

The legal picture as of October 2026

United States

Owning and using a privacy coin is legal in the US. Chainalysis, a blockchain analytics firm, summarizes it plainly: in the US these coins are legal, though several other large economies restrict them. The legal risk has centered on people who run mixing services, not people who hold coins.

• FinCEN's mixer rule was withdrawn. In October 2023 FinCEN proposed treating international crypto mixing as a "primary money laundering concern," with extra reporting for financial institutions. On October 6, 2026 it withdrew that proposal, citing commenters' concerns that the broad definition could chill legitimate activity and burden institutions. FinCEN said it would keep monitoring mixing activity.
• Tornado Cash sanctions were imposed, then lifted. The Treasury's OFAC sanctioned Tornado Cash in August 2022. Treasury removed those sanctions on March 21, 2025, while saying it remained concerned about North Korean hacking and money laundering.
• The Roman Storm case is ongoing. Prosecutors say Tornado Cash moved more than $1 billion in criminal proceeds. On August 6, 2025 a jury found co-founder Roman Storm guilty on one count, a conspiracy charge tied to running an unlicensed money transmitting business, while deadlocking on the money laundering and sanctions counts. Storm has asked the judge to acquit him on the conviction, and a retrial on the two unresolved counts was moved to April 26, 2027, according to crypto.news.
• Samourai Wallet's founders pleaded guilty. Keonne Rodriguez and William Lonergan Hill pleaded guilty on July 30, 2025 to a conspiracy charge over a money transmitting business that, according to the Justice Department, carried criminal proceeds. In November 2025 a judge gave Rodriguez five years and Hill four.

These cases turned on what prosecutors say the founders knew about criminal funds flowing through services they ran. They are not cases against people who simply hold or use privacy coins. For the wider rulebook, see our laws and regulations guide.

European Union

The EU's Anti-Money Laundering Regulation, (EU) 2024/1624, defines "anonymity-enhancing coins" as crypto-assets with built-in features to make transfer information anonymous, "either systematically or optionally." From July 10, 2027, regulated crypto-asset service providers in the EU may not keep accounts that allow anonymization or increased obfuscation of transactions, including through those coins. The regulation says the ban does not cover providers of self-hosted wallets that have no access to or control over users' wallets.

Exchange delistings

Exchanges have been pulling back ahead of these rules. Binance delisted Monero in February 2024. Kraken halted Monero trading for customers in the European Economic Area on October 31, 2024, citing regulatory changes, and converted any balances left after the withdrawal deadline into bitcoin. Kraken also stopped XMR trading for Canadian clients in September 2025 and has halted XMR, DASH and ZEC for clients in India.

US tax: privacy coins are taxed like any crypto

The IRS treats digital assets as property, not currency, and that applies to privacy coins exactly as it does to bitcoin. Selling one for dollars, swapping it for another coin or spending it can trigger a capital gain or loss, and coins you earn are income. You still need records of what you paid (cost basis) and when.

Privacy tools can make your own record-keeping harder, so keep exports from your wallet and, where available, use features such as viewing keys to produce statements. Our crypto tax guide covers the forms and rules in detail.

Buying and holding privacy coins safely

Access is the first hurdle. As of October 2026 many privacy coins are not available on major US exchanges, and our coin pages show a "Not on major US exchanges" warning where we could not confirm a US listing. That often pushes people toward offshore platforms or instant swap services, which brings extra risks:

• Swap services can freeze funds pending checks, quote poor rates or disappear. Check how long a service has operated and send a small test transaction first.
• Fake wallets are common, especially for smaller coins. Download wallets only from links on the project's official site or code repository, and be wary of app-store lookalikes and ads.
• Self-custody means the seed phrase is your only backup. Learn the basics in our wallets guide before moving funds.
• Offshore exchanges may not be licensed to serve US customers and may offer little help if something goes wrong.

How to evaluate a privacy project

Use the same discipline as with any project (see how to evaluate a crypto project), plus these privacy-specific questions:

1. Default or optional? Default privacy usually means a bigger anonymity set. Optional privacy can work, but check how many people actually use it.
2. What exactly is hidden? Sender, receiver, amount, contract data, or only your IP address? Read the project's own docs rather than its slogans.
3. Audit and research history. Look for independent audits, published papers and how the team responded to past flaws.
4. Trust assumptions. Does it need a trusted setup, special hardware or a small group of operators?
5. Development activity. Recent releases and active code repositories matter more for privacy software than for most crypto, because attacks keep improving.
6. Access and rules. Can you buy, sell and report it lawfully where you live, and is it likely to face delistings?

Browse the full list on our privacy coins category page, where each profile explains what the coin hides, what stays visible and where it can be bought.

Updated October 20, 2026 by Dave McNaught. Educational content, not financial, legal or tax advice. Spot an error? Request a correction.

About the author

Dave McNaught

Dave McNaught has worked in IT since 1999 and founded All Business Technologies (ABT) in 2003, a Boston-area firm providing Managed IT, Cybersecurity, Managed AI, Web Design and App Development. He publishes The Crypto Guide.

Full bio