Crypto privacy in 2026: what's actually visible onchain, and which tools help

Most people assume crypto is either fully anonymous or fully traceable. Neither is right. Public blockchains are pseudonymous: your name is not written onchain, but every transaction from your address is public forever, and it only takes one link between that address and you to unlock your whole history.

This guide covers three things: what is visible by default, how addresses get tied to people, and which tools in 2026 change that picture, with their real trade-offs side by side.

Short version: a normal wallet shows your balance, every payment, and every counterparty to anyone. Privacy tools either hide you inside a shared pool (Zcash, Monero, Railgun, Privacy Pools) or break the link by routing through a third party (instant exchanges and cross-chain swap services). Each trades privacy against trust, cost, or compliance friction.

What anyone can see on a public chain

On Bitcoin, Ethereum, Solana and almost every other major chain, the following is public for every transaction:

• Sender and receiver addresses.
• Amount and asset.
• Time (block timestamp) and fees paid.
• Full history of each address, including every token, NFT, and app interaction.
• On smart-contract chains, what you did: which DeFi app, which swap, which vote.

Block explorers such as Etherscan or mempool.space make this readable to anyone in seconds. Nothing about this requires special access.

How a wallet gets linked to you

Researchers and analytics firms such as Chainalysis and TRM Labs combine onchain data with offchain data. The most common links are:

1. Exchanges with KYC. When you withdraw from a regulated exchange to your wallet, the exchange knows that address is yours, and it shares data with authorities when legally required. This is the single biggest link for most people.
2. Address reuse and clustering. On Bitcoin, spending several coins in one transaction suggests they belong to the same owner (the “common-input-ownership” heuristic described in the original Bitcoin paper, section 10). Change outputs and timing patterns add more clues.
3. Public posts. Sharing an address, an ENS name, or a screenshot of a transaction ties it to your online identity.
4. Network metadata. The wallet app or RPC node you use can see your IP address alongside the addresses you query. Running your own node, or using a wallet that routes over Tor, reduces this.
5. Merchants and counterparties. Anyone you pay can see your address and, from there, your balance and history.

The two main ways tools add privacy

1. Shielded pools: hide inside a crowd

Coins go into a pool shared by many users. Zero-knowledge proofs (or ring signatures, in Monero’s case) let you prove you own part of the pool without revealing which deposit was yours.

Your privacy depends on how big and active the pool is. This is called the anonymity set.

• Strengths: fewer trust assumptions, because you keep your keys and the math enforces privacy. Still check admin keys and upgradeability: some pools can be paused or upgraded by a small multisig.
• Weaknesses: small pools give weak privacy; deposits and withdrawals are still visible at the edges; some pools have admin controls or compliance screening that can block or delay withdrawals.

2. Routing services: break the link through a third party

Instant exchanges and cross-chain swap services take coins in on one address and send different coins out to another, often on another chain.

An outside observer sees two unrelated transactions.

• Strengths: simple to use, works across many chains and assets, no new wallet needed.
• Weaknesses: the operator (and any exchange it routes through) can usually see both sides, so you are trusting it not to log or share. Most run risk checks and can ask for identity verification or pause a transaction.

3. Intent and solver networks: a trust model of their own

Intent networks such as NEAR Intents let you state what you want (“swap X on chain A for Y on chain B”) and independent solvers compete to fill it. Funds sit in a smart-contract ledger rather than a company wallet, but assets from other chains depend on bridge operators, and the contract’s governance can intervene.

• Strengths: competitive pricing, many chains, no exchange account.
• Weaknesses: you rely on bridges and governance; privacy modes, where offered, are usually access control by an operator rather than cryptography.

4. Mixers

An older category, mixers like Tornado Cash, works like a shielded pool with fixed amounts. It is technically simple but carries the heaviest legal history (see below).

Comparison: privacy tools in 2026

Figures are the latest public data we could find as of 30 October 2026; self-reported numbers are marked. “Visible” means what an outside observer can still see.

Scroll the table sideways to see all columns.

How to read the table

• Top rows hide data with cryptography and do not need anyone to hold your funds.
• Middle rows trade some trust for convenience across chains.

Notes on each tool

Monero

Monero is the strongest default privacy of any major coin, because every transaction is private, not just opt-in ones. It still can’t hide your IP address or timing patterns on its own; use Tor or your own node if that matters. The trade-off is access: many regulated exchanges have delisted it, so getting in and out is harder.

Zcash

Zcash has a shielded pool that, by one community tracker, held close to 30% of all ZEC in mid-October 2026. Privacy only applies if both sides use shielded addresses; transparent Zcash addresses work like Bitcoin.

Railgun

Railgun brings a shielded pool to Ethereum and several layer-2s, and is the largest onchain privacy system on EVM chains by value locked, about $109M per L2BEAT. Its wallets run a “Private Proofs of Innocence” check that is meant to keep funds from known hacks out of the pool.

Privacy Pools

Privacy Pools, by 0xbow, is built around the idea in a 2023 paper co-authored by Vitalik Buterin: users prove their funds are not part of a set of bad deposits. Version 2 went live on Ethereum and six more chains in October 2026 (0xbow). It is much smaller than Railgun (see L2BEAT for current value locked), deposits wait for approval, and the contracts are upgradeable by a 2-of-4 multisig with no timelock.

Aztec

Aztec is a privacy-focused Ethereum layer 2 where proofs are made on your own device, so senders, receivers and amounts of private transactions are hidden. It is in Mainnet Alpha and its docs say to expect bugs.

NEAR Intents

NEAR Intents is the largest cross-chain swap network with a confidential option, processing hundreds of millions of dollars a week according to NearStats. Funds sit in a smart-contract ledger controlled by your keys, not in a company wallet, but assets from other chains depend on bridge operators and an MPC network, screening applies, and the contract’s DAO role can lock accounts (docs). Confidential mode runs on a permissioned private chain: private from the public, not from its validators (how it works).

HoudiniSwap

HoudiniSwap is a swap aggregator that breaks the link between the sending and receiving wallet by routing through two partner centralised exchanges and a temporary intermediary coin, across many chains (docs). Partner exchanges hold funds during the swap (Houdini itself holds none), and a partner can hold, request KYC, refund or freeze flagged funds. Houdini keeps a record linking both legs, shared on legal request: private from the public, not from the operator.

Cloak

Cloak is one of several new Solana privacy pools. You hold your notes, and sends are submitted by Cloak’s relayer (docs); whether the operator can block exits is not verified. Like other small pools, amount and timing matching can link many exits, so read the docs before depositing.

Tornado Cash

Tornado Cash was sanctioned by the US Treasury in 2022; the sanctions were lifted in March 2025 after a court ruling, but its developers have faced criminal cases and many services still treat funds that touched it as high risk. Expect exchanges to ask questions.

Simple habits that matter more than any tool

• Use a new receiving address for each payment where your wallet supports it (Bitcoin wallets do this by default).
• Keep a separate wallet for anything public, such as donations or an ENS name, and don’t move funds between it and your main wallet directly.
• Assume your exchange knows every address you withdraw to.
• Watch your network layer: use a wallet that supports your own node or Tor if IP privacy matters to you.
• Avoid round amounts and immediate timing when moving funds in and out of a pool; matching amounts and times is the easiest way to undo privacy.
• Keep records of where your funds came from. Privacy from the public is legitimate; exchanges and tax authorities may still ask, and good records make that painless.

Is using privacy tools legal?

In most countries, yes. Privacy is a normal need, and holding Monero or using a shielded pool is not a crime.

But rules are tightening. The EU’s anti-money-laundering package will bar regulated providers from handling “anonymity-enhancing” coins and accounts from July 2027 (Regulation (EU) 2024/1624), and services that knowingly launder funds have been shut down, such as the eXch exchange seized by German police in 2025.

The bottom line

A normal crypto wallet is a public diary. You can make it private in two broad ways:

• Hide inside a shared pool you control. Stronger guarantees, but chain-specific and sometimes small.
• Route through a service you trust. Convenient and cross-chain, but requires trust and can involve checks.

Whatever you choose, the biggest gains come from habits: fresh addresses, separate wallets, and not linking your identity in the first place.

Next up: a step-by-step comparison of how Railgun, Privacy Pools and Zcash shielded transactions actually work, and what each costs.