Privacy Coins

02 September 2026

Privacy coins are cryptocurrencies designed to conceal transaction details - sender, receiver, and amount - from public view. Unlike Bitcoin, where every payment is recorded on an open ledger anyone can analyze, privacy coins use cryptographic techniques to break the link between addresses and hide financial data. They exist because transparent blockchains create permanent, publicly accessible records of who paid whom and how much. For some users, that is a feature. For others, it is a surveillance risk they want to avoid.

This page maps how privacy coins work, what tools exist to use them, where they face restrictions, and what common misunderstandings surround them. Each section leads to a dedicated article that answers a specific question in full.

How privacy coins hide transactions

Privacy coins achieve their goals through different cryptographic mechanisms. Monero and Zcash are the two dominant projects, and they take fundamentally different approaches.

Monero makes every transaction private by default using three interconnected technologies. Ring Signatures mix a real sender's cryptographic signature with decoy signatures from past transactions, so an observer cannot tell which participant actually signed. Stealth Addresses create a unique, one-time destination address for each payment, preventing anyone from linking incoming transactions to a single wallet. Confidential Transactions use Pedersen commitments to hide the amount being sent, while still allowing the network to verify that no coins are created out of thin air. These three together are called RingCT, and they form Monero's core privacy layer.

For a full explanation of how ring signatures obscure the real sender, see How Ring Signatures Hide the Sender in Monero Transactions. For how stealth addresses break the link between transactions, read How Stealth Addresses Break Transaction Linkability in Monero. And for how amounts stay hidden, see How Confidential Transactions Hide Monero Payment Amounts.

Zcash works differently. It offers users a choice between transparent transactions (visible on the public ledger, like Bitcoin) and shielded transactions that use zero-knowledge proofs. A zero-knowledge proof lets the network confirm that a transaction is valid - correct amounts, no double-spending - without revealing who sent it, who received it, or how much moved. Zcash's shielded pools use a technology called Sapling (and more recently Orchard) that compresses these proofs into a practical size. The tradeoff is that if you choose the transparent pool, you get no privacy at all.

For a detailed walkthrough of how Zcash shielded transactions verify without revealing data, see How Zcash Shielded Transactions Use Zero Knowledge Proofs.

CoinJoin is a different approach, used on Bitcoin rather than on a dedicated privacy coin. Multiple users pool their coins in a single transaction that mixes inputs and outputs, making it harder for an external observer to match senders with recipients. Wasabi Wallet and Samourai Wallet are the most common CoinJoin implementations. But CoinJoin has limits: the mixing is optional, the anonymity set is bounded by the number of participants in a round, and sophisticated heuristics can sometimes untangle the outputs. It is not the same as default-on privacy.

Read How CoinJoin Works for Bitcoin Privacy and Where It Falls Short for a complete comparison.

Choosing between privacy models

Monero and Zcash represent two distinct philosophies. Monero mandates privacy for every transaction. Zcash makes it optional. That difference has practical consequences for speed, regulatory exposure, and user experience.

Monero's mandatory privacy means every transaction - even a small one - uses ring signatures, stealth addresses, and confidential transactions. There is no "transparent mode" you can accidentally fall into. But it also means Monero transactions are larger than Bitcoin transactions, and the blockchain is heavier (roughly 200 GB for a full node as of 2025). Zcash's shielded transactions are more compact, but if you send to a transparent address, your privacy is gone. The choice between default and optional privacy affects how easily regulators target the coin, which we will cover in the section on restrictions.

For a direct comparison of these two models, see Monero vs Zcash Privacy Models Default vs Optional Shielding. For guidance on when to use Zcash transparent versus shielded transactions, read Zcash Transparent vs Shielded Transactions Speed and Privacy.

Running nodes and managing wallets

How you connect to the network and store your keys directly affects your privacy. The most important decision is whether to run a full node or use a remote node.

Running a full node means you download the entire blockchain, validate every transaction yourself, and broadcast your own transactions directly to the network. A remote node sends your transaction data to someone else's server, which then broadcasts it. That server can see your IP address and, depending on the wallet software, potentially correlate your transaction with your wallet. Remote nodes are convenient - no multi-day sync, no disk space commitment - but they introduce a trust assumption.

Monero's official GUI wallet defaults to "Simple mode," which connects to a remote node automatically. "Advanced mode" lets you run your own node. The tradeoff is explained in detail in Monero Full Node vs Remote Node Privacy and Trust Tradeoffs.

For mobile versus desktop choices: Cake Wallet supports Monero alongside other coins on iOS and Android. Monero GUI Wallet is the official desktop client, giving you full control over node selection, ring size, and transaction construction. Feather Wallet is a lighter desktop alternative that prioritizes usability. For Zcash, Zecwallet Lite and Nighthawk Wallet provide shielded transaction support on mobile. The choice between mobile convenience and desktop control is covered in Cake Wallet vs Monero GUI Mobile Convenience or Desktop Control.

Hardware wallets add another layer. Ledger and Trezor both support Monero and Zcash, but with limitations. For example, Ledger's Monero app cannot display your transaction history on the device itself, and some hardware wallets do not support Zcash's Orchard shielded pool. See Hardware Wallet Support for Privacy Coins What Works and What Does Not.

Costs, errors, and practical gotchas

Privacy coins impose specific costs and friction that transparent blockchains do not.

Monero has a 10-block waiting period (roughly 20 minutes) after you receive funds before you can spend them. This prevents double-spending attacks that rely on chain reorganizations. During that window, your wallet will show the balance as "unlocked" versus "locked." Attempting to spend locked funds produces the error Insufficient unlocked balance.

Transaction fees on Monero are dynamic, based on byte size and network congestion. A standard transaction with a ring size of 16 typically costs a fraction of a cent, but transactions with many outputs (for example, sweeping an entire wallet in one go) can become large and trigger the error Transaction too large. Zcash shielded transactions cost more than transparent ones because the zero-knowledge proof generation requires computation. The default Zcash fee is 0.0001 ZEC, but during network congestion it can rise.

CoinJoin introduces its own costs. Wasabi Wallet charges a 0.3% coordinator fee per coin mixed. You also pay Bitcoin on-chain fees for the CoinJoin transaction itself, which all participants split. If not enough peers are available, you will see Failed to get mixable outputs.

Common errors across privacy coins include: - Double spend attempt detected - submitting two conflicting transactions. - Daemon failed to start - the blockchain node cannot initialize, often due to corruption or insufficient disk space. - Wallet is not connected to daemon - the remote node is unreachable or the local node hasn't finished syncing. - Transaction rejected by network - a consensus rule was violated, such as an invalid ring signature.

For a thorough guide to resolving a stuck Monero transaction, see Monero Transaction Stuck Unconfirmed How to Fix and Avoid It.

Where privacy coins are restricted

Privacy coins face growing regulatory pressure. The primary driver is anti-money laundering (AML) and counter-terrorism financing (CTF) compliance. Exchanges that operate in regulated jurisdictions must collect sender and receiver information for transactions above certain thresholds. Privacy coins make that impossible by design.

As a result, many centralized exchanges have delisted privacy coins. As of 2025, OKX, Kraken, and several other major platforms have removed Monero trading pairs. Binance has restricted Monero withdrawals in multiple jurisdictions. Japan and South Korea have effectively banned privacy coins by prohibiting exchanges from listing them. The United Arab Emirates has similarly restricted their use.

The Travel Rule, a requirement that virtual asset service providers (VASPs) share customer information when transferring funds above a threshold, creates a further compliance problem. Privacy coins cannot comply with the Travel Rule without breaking their fundamental privacy guarantees. This is why most regulated exchanges no longer offer privacy coin withdrawals or require extensive KYC documentation before allowing them.

For a jurisdiction-by-jurisdiction breakdown, see Where Privacy Coins Are Restricted or Banned by Jurisdiction. For the regulatory logic behind exchange delistings, read Why Exchanges Delist Privacy Coins and What Regulations Drive It.

The alternative is peer-to-peer acquisition. Bisq is a decentralized exchange that supports Monero and Zcash without KYC. LocalMonero was a peer-to-peer platform that shut down in 2024 after regulatory pressure. Using a decentralized exchange avoids the risk of a KYC exchange freezing your account after a privacy coin withdrawal, but introduces counterparty risk and lower liquidity. These tradeoffs are examined in KYC Exchange vs P2P Acquisition for Privacy Coins Compliance and Risk.

Security risks specific to privacy coins

Privacy coins inherit the standard cryptocurrency risks - lost private keys, phishing, exchange hacks - and add several of their own.

Clipboard malware is a particular threat. Attackers modify the clipboard content when you copy a stealth address, replacing it with their own address. On Monero, where addresses are 95 characters long, a casual visual check is difficult. The result: you send funds to the attacker and they are unrecoverable. See Clipboard Malware and Privacy Coin Address Swapping Attacks for prevention methods.

Dusting attacks involve sending tiny amounts to many addresses, then watching for those outputs to be spent. If the recipient spends the dust alongside other coins, the attacker can cluster addresses. Monero's decoy selection algorithm is designed to resist this, but it is not foolproof.

Remote node spying is a privacy risk specific to users who do not run their own full node. A malicious remote node can record your IP address and correlate it with your transaction. Using Tor with your wallet mitigates this, but not all wallets support Tor out of the box.

View keys are a Monero feature that allows read-only auditing. You can give someone a view key - without your spend key - so they can see your transaction history but cannot move funds. This is useful for tax reporting or accounting, but it introduces risk if the view key is leaked alongside wallet metadata. For how to use them safely, read How Monero View Keys Allow Auditing Without Spending Authority.

Common Misconceptions

Several persistent myths surround privacy coins.

"Monero is completely untraceable" is false. Monero provides strong privacy, but it is not absolute. Timing analysis, output age selection bias, and malicious remote nodes can degrade privacy. The decoy selection algorithm matters, and the network's ring size (currently enforced at 16) sets a floor, not a ceiling, for anonymity. See Monero Ring Size 16 Why the Default and What Changing It Does.

"All privacy coins are illegal" is also false. Monero and Zcash remain legal to use in most jurisdictions, including the United States and European Union. The restriction is on exchanges listing them, not on individual possession or use.

"Zcash is private by default" is incorrect. Zcash transactions default to transparent in many wallets unless the user explicitly selects the shielded pool. Nighthawk Wallet auto-shields incoming transparent funds, but many other wallets do not.

"CoinJoin makes Bitcoin as private as Monero" overstates CoinJoin's capabilities. CoinJoin only mixes coins within a round; it does not hide amounts, and the anonymity set is limited by the number of participants. Sophisticated chain analysis can often untangle CoinJoin outputs using passive heuristics. Monero's default-on privacy covers amounts, senders, and receivers in every transaction.

"Privacy coins are only used by criminals" ignores legitimate use cases: journalists protecting sources, activists under repressive regimes, businesses protecting supplier relationships, and ordinary individuals who do not want their financial history permanently visible to anyone with an internet connection.

For a full examination of these and other myths, the individual spoke articles address each claim with evidence.

Where to go next

If you are new to privacy coins, start with the mechanism articles that match your interest: ring signatures, stealth addresses, confidential transactions, zero-knowledge proofs, or CoinJoin. Each explains one building block from scratch.

If you are deciding between Monero and Zcash, read the comparison article first, then the full node versus remote node guide and the hardware wallet support article. These will give you the practical information you need to choose and set up a wallet.

If you are concerned about regulatory risk, read the delisting and jurisdiction articles. If you are troubleshooting a specific problem - stuck transaction, wallet sync failure, clipboard malware - the spoke pages address each error scenario directly.

Privacy coins are not a single technology or a single community. They are a set of cryptographic tools for solving a specific problem: financial privacy on public blockchains. Understanding how they work, where they differ, and what risks remain is the foundation for using them responsibly.