Direct answer_
How it works
Bitcoin publishes every payment you send and receive, with amounts, timestamps and counterpart addresses, in a ledger anyone can read — and that surveillance is not theoretical: clustering-based analytics has helped convict mixer operators, and Treasury estimates North Korea's Lazarus Group alone has stolen over $2 billion in digital assets tracked through it. An address is a pseudonym, not a shield: the gap between it and your name lasts only until outside information closes it.
What it doesn't change
Services are one of several places where that link can form.
What the public ledger exposes by default
Normal wallet use writes a public history as you go. Visibility does not require wrongdoing.
An ordinary week can include one payment in, two out and a balance left in the same wallet. None of that ties your name to an address by itself, but the public record still answers most questions an observer would ask.
Every payment names the other side. An inquiry starting at a counterparty address can run back through the same public map to yours.
What the ledger records
- Every payment you sent, next to the address that received it.
- Every payment you received, next to the address that sent it.
- The amount of each of those payments, exactly, in a list anyone can open.
What stays connected
- The moment each one happened. Every transaction carries a timestamp that puts your activity on a public calendar.
- Your counterparties. Every address you paid or were paid by appears in your record, and yours appears in theirs.
What it does not establish
- The change output. When a payment does not consume your balance exactly, part of the value returns to you, and an observer who spots that return can keep following the same wallet into the next payment.
What anonymity would require, and what Bitcoin actually gives you
Anonymity would require no observation to connect an action to you. Bitcoin gives you a placeholder address instead.
The chain records behaviour, not names. A name arrives only when someone connects the behaviour to information learned elsewhere.
One verified account or published address can make that connection. The tie then applies to all readable history of the address.
After the first link, the map grows through inference. It can miss wallets you control or claim wallets you do not.
Repeated patterns give those inferences more material. Reducing repetition is where practical privacy begins.
The practical layers of Bitcoin privacy
Privacy has three separate surfaces: the ledger, what you publish elsewhere and what a service sees when you connect.
Start with reuse. Repeating an address lets clustering repeat the same inference across your history.
Treat a published address as already linked to you. An address under your name, on an invoice or in a forum post closes the gap pseudonymity gave you, and clustering can move outward from it.
The third surface is outside the chain. A service sees your connection arriving, and that observation never appears in a block explorer.
Different heuristics work on different surfaces. Spending two outputs together and guessing change concern a single transaction. Address reuse is a habit across transactions. Timing can pair an on-chain event with another event at the same hour, and address habits do not remove that signal.
A first identity link can come from a verified account, merchant record, published address or observed connection. These happen off chain, so working one surface cannot close the others.
Privacy layers: what each one actually hides, and what it leaves open
Scroll horizontally to compare all columns_
| Layer | What it actually hides | What stays open |
|---|---|---|
| Chain-side habits: no address reuse | The repeating pattern clustering infers from, so one address stays a single data point | The full history of any address already tied to you |
| Publishing care: no address under your name | The first link between an address and you, which is the link clustering walks outward from | What the ledger records about that address, readable either way |
| Routing through Tor or a proxy | Your IP address at the network layer of a service you connect to | The ledger record; the route you used to reach a service does not alter it |
| A custodial mix | The direct line between your deposit and your payout, for one payment | Custody: the operator can delay or stop paying while it holds the coins |
| A CoinJoin | Custody, since nobody hands their coins to a coordinator | Coordination needs peers, and a coordinator can still learn whose inputs are whose |
Where mixing fits
Mixing changes one part of the chain record for one payment at the time it is made.
Two surfaces remain outside its reach. A link made off chain stays made, and a service still observes the connection that reaches it.
The two common arrangements differ on custody: one holds your coins while it runs, the other does not.
Neither replaces basic habits. A payment still leaves from an address with a history and reaches a service that sees the connection.
Mixing is one moment in a coin's history. The rest depends on what happens before and after it.
Frequently asked questions
Is Bitcoin anonymous?
No. Your transactions are published with inputs, outputs, amounts and timestamps. An address is a pseudonym that becomes linked to you when outside information connects it to your name. Exchange verification, merchant records or an address you published can create that first link, and clustering can extend it, sometimes wrongly.
Can someone see my whole balance?
Once an address is connected to you, its balance is as public as its history. A Bitcoin balance is a set of unspent outputs, and anyone can read the outputs at an address and the payments that created them. An observer can follow outputs as you spend them. Which new output is change remains a guess, and that guess can be wrong.
Does using a mixer make me private?
Not by itself. A custodial mixer changes one payment on the chain: you send coins to an operator-controlled address, then receive a payout from a pool it holds. The operator can delay or stop paying while it holds the coins. The service also sees connection metadata and submitted addresses. Routing tools only change that network layer; service wording changes neither layer.
Does Tor make my Bitcoin activity private?
It changes one of the three surfaces: a service sees an exit address rather than your own IP address. The ledger remains public, with every payment's amount and timestamp. A published address stays tied to you no matter which route you used to reach the service. Routing is one habit, not the full privacy picture.
Why does address reuse matter so much?
Clustering works by repetition. Analytics firms use heuristics such as common input ownership, change detection, address reuse and timing. Reusing an address gives those heuristics a pattern to repeat; each repetition adds weight. The result is probability, not proof, and it can be wrong.