Direct answer_
How it works
A custodial mixer takes control of your coins and later pays from a pool the operator holds, so completion depends on that operator. A CoinJoin is one transaction signed by several participants for their own inputs: custody stays with each participant, but the round needs peers and its commonly equal outputs make it recognisable.
What it doesn't change
The two approaches leave different traces and expose different risks — and neither custody model is a legal shield: the founders of Samourai Wallet, whose Whirlpool feature is the best-known CoinJoin implementation, were arrested in April 2024 and charged over $2 billion in unlawful transactions.
The custody difference
The first difference is control of the coins, before any privacy question begins.
A custodial mix starts with a handover. You send coins to an operator-controlled deposit address, and the later payout comes from the operator's pool.
Between deposit and payout, the operator controls the outcome. Your deposit has happened; the payout has not.
A CoinJoin has no deposit. Participants sign their own inputs in one transaction, so the reliance on a single operator becomes reliance on a group of peers and a coordinator.
How a CoinJoin transaction is built
A CoinJoin uses ordinary Bitcoin transaction mechanics with several signers at once.
Bitcoin has no account balance in the usual sense. A balance is a set of unspent outputs from earlier transactions, and a payment consumes whole outputs and creates new ones.
The record does not label change. An observer has to infer which new output went back to the sender.
A CoinJoin uses the same machinery with several signers. A coordinator assembles a draft, each participant checks it and signs only their own inputs, and the completed result broadcasts as one transaction. Custody stays with each owner.
The issue is knowledge rather than custody. Coordination needs peers, and a coordinator can see which inputs came from which signer unless the implementation hides that link.
Equal outputs make value matching harder, but they create a recognisable transaction shape. An observer loses one signal and gains another.
What you contribute
- What you bring: your own inputs, and your signature on those inputs only.
- What you need: peers for the round, and a coordinator to assemble the draft.
What gets published
- What gets published: one transaction whose inputs came from different people.
What you keep
- What you keep: custody throughout, since spending authority never leaves the owner of the coins.
Side-by-side comparison
The same six questions make the differences easier to see.
The questions do not all carry the same weight. If you will not hand coins to someone else, custody decides the comparison. If you are assessing what an observer can still connect, the record left after the operation decides it.
A custodial mixer and a CoinJoin, compared by mechanism
Scroll horizontally to compare all columns_
| Question | Custodial mixer | CoinJoin |
|---|---|---|
| Who holds the coins during the operation? | The operator, from the moment your deposit arrives until a payout reaches your address | Each participant throughout; nobody hands custody to the coordinator |
| Who can stop it completing? | The operator, who can delay, freeze or stop paying while the coins sit with it | Any participant who declines to sign, or a round that never gathers peers |
| What does an observer of the ledger see? | A deposit into the operator's pool and, later, a payout out of it | One transaction with inputs from several signers and, commonly, outputs of equal size |
| Is the result recognisable as what it is? | No fixed shape, but timing is data: an unusual or unique delay setting is itself a pattern an observer can use | Commonly yes: equal outputs make the transaction recognisable as a CoinJoin, and that recognition is itself a signal |
| Who do you have to find or trust before it works? | A single operator, who holds your coins for the duration of the mix | Peers for the round, plus a coordinator who can see which inputs belong to which signer unless the implementation hides it |
| What does a failure cost? | The coins are already with the operator, and the risk that the operator stops paying out is one the user carries | Nothing was deposited, so an unfinished round leaves every participant's coins under their own control |
What each method changes, and what it does not
The two methods leave different marks on the record, and both still leave public transactions behind.
In a custodial mix, timing does some of the work. The payout falls inside a window rather than directly after the deposit, and both transactions show timestamps shaped by that choice.
A CoinJoin leaves one joint transaction with your inputs visible. Equal outputs make value matching harder, while the shared shape shows that the coins took part in a CoinJoin.
Neither method changes Bitcoin's underlying arithmetic. Payments consume outputs and create new ones, and the ledger does not label change. The difference is how much inference an observer needs, not whether inference exists.
Cost also has two layers: a network fee paid to miners and any charge added by a service. A quoted total needs to say which layers it includes.
Both methods leave transactions in the ledger: a deposit and payout for the custodial route, or a joint spend for CoinJoin.
Frequently asked questions
Is a crypto tumbler the same as a CoinJoin?
The labels are often used loosely, but they are not strict synonyms. Tumbler and mixer commonly describe an arrangement where an operator takes coins and pays out later. A CoinJoin differs on custody: no operator receives the coins, and each participant signs their own inputs in one shared transaction. The custody model matters more than a front-page label.
Which is safer?
Neither approach is universally safer. A custodial mixer puts coins under an operator's control, so the risk of no payout travels with custody. CoinJoin keeps coins in your hands but needs peers; a coordinator may see which inputs are yours, and equal outputs make the transaction recognisable. The important trade-off depends on your situation.
Does a CoinJoin hide the amount?
No. The transaction publishes every input and output with its amount. Equal outputs make matching one input to one output by value harder, but they do not hide the amounts. Ownership remains an inference, and the uniform sizes also identify the transaction as a CoinJoin.