Yes, Bitcoin is traceable. Every transaction is recorded on a public blockchain that anyone can read. The record is permanent, and it shows which addresses sent how much to which other addresses. The ledger does not hold names. So the real question is whether an address can be linked to a person. That happens often: through the services where people buy bitcoin, through patterns in how wallets spend, and through the network connection a transaction is sent from. bitcoin.org's own privacy guide puts it plainly: "All Bitcoin transactions are public, traceable, and permanently stored in the Bitcoin network."
What is public, and what is not
Bitcoin is pseudonymous, not anonymous. Section 10 of the Bitcoin whitepaper explains the original design. Transactions have to be announced publicly, so privacy rests on keeping public keys anonymous. Observers can see that an amount moved from one key to another, but nothing on the chain says who holds those keys. The paper compares this to stock exchange tape data, which shows the time and size of trades without naming the parties.
On the chain, anyone can see:
- every address that has received or sent bitcoin;
- the balance and full history of each address;
- the amounts and timing of every transaction;
- which inputs were spent together in one transaction.
What is not on the chain is the identity behind an address. That link comes from outside data or from analysis.
How Bitcoin is traced
Linking addresses to one owner
The whitepaper itself names the main weakness. Transactions with several inputs "necessarily reveal that their inputs were owned by the same owner". If one key is ever tied to a person, other transactions by that person can be linked too. Analysts call this the common-input-ownership heuristic. The Bitcoin Wiki describes it as widely used by surveillance firms.
Researchers tested how far this goes in "A Fistful of Bitcoins" (Meiklejohn et al., Internet Measurement Conference 2013). The team used two techniques: grouping addresses that appear as inputs together, and identifying "change" outputs that send leftover value back to the payer. Starting from addresses they had collected by transacting with services themselves, they could attribute large clusters of addresses to known entities.
Change outputs and address reuse
A Bitcoin payment usually spends more than it needs and returns the remainder to the sender as change. If an analyst can tell which output is change, the sender's wallet grows by one more linked address. The Bitcoin Wiki lists the clues: reused addresses, round payment amounts, wallet fingerprints and unnecessary inputs. On reuse it says: "Addresses being used more than once is very damaging to privacy."
Identity checks at regulated services
Most people first get bitcoin from a regulated service that verifies their identity under anti-money-laundering rules. As the Bitcoin Wiki notes, that personal data "is then linked with the bitcoin addresses and transactions that are later used." A custodial wallet operator can also see all of a user's addresses and transactions. For investigators, a request to the service that verified an account often turns a pseudonym into a name.
Network-level data
Bitcoin is a peer-to-peer network, so transactions are relayed between nodes. bitcoin.org warns that "it is possible to listen for transactions' relays and log their IP addresses." The Bitcoin Wiki adds that an observer who sees a transaction come from your node, when it did not reach your node from elsewhere first, can know "with near-certainty" that you created it.
How easily can your bitcoin be linked to you?
Answer four questions about where your coins came from and how you spent them to see which documented tracing method applies first.
Did these coins come from, or pass through, a service that verified your identity or held them in a custodial wallet?
- Yes → Linked through identity records
- No → next question
Have you received more than one payment to the same address, or published an address that later sent funds to your other addresses?
- Yes → Linked through address reuse
- No → next question
Has your wallet ever spent coins from several of your addresses together as inputs in one transaction?
- Yes → Linked through common inputs
- No → next question
Did you broadcast your transactions from your own node or connection without hiding your IP address, for example with Tor?
A regulated service that verified you holds personal data linked to the addresses and transactions you later use, and a custodial operator can see all of your addresses. A request to that service often turns the pseudonym into a name.
The Bitcoin Wiki calls using an address more than once very damaging to privacy, and bitcoin.org warns that funds moved from a published address carry its public history to your other addresses.
The whitepaper says multi-input transactions necessarily reveal that their inputs had the same owner. Analysts group such addresses and add identified change outputs, so one known key can expose the rest of the cluster.
Transactions are relayed between nodes, and bitcoin.org warns that relays can be logged with IP addresses. An observer who sees a transaction leave your node first can know with near-certainty that you created it.
None of the main documented links applies on your answers, but every transaction stays public and permanent. bitcoin.org notes that data hard to trace today may be easy to trace later as analysis improves.
This covers only the public, documented tracing methods in the article; it cannot check your actual wallet history, does not cover other analysis firms' techniques or the legal risk of mixing services, and is not legal advice.
Recent developments
- Mixing services prosecuted (November 2025). On 19 November 2025 the US Attorney's Office for the Southern District of New York announced sentences for the founders of Samourai Wallet. Keonne Rodriguez, the CEO, got five years in prison (sentenced 6 November 2025). William Lonergan Hill, the CTO, got four years (sentenced 19 November 2025). Both took part in a conspiracy to operate a money transmitting business that knowingly transmitted criminal proceeds. Prosecutors said the service facilitated over $237 million in illegal transactions. Two of its features were named. Whirlpool "coordinated batches of Bitcoin exchanges between groups of Samourai users". Ricochet let users add "additional and unnecessary intermediate transactions."
- Earlier mixer case (November 2024). On 8 November 2024, Roman Sterlingov, operator of Bitcoin Fog, was sentenced to 12 years and six months in prison. A jury had convicted him in March 2024 of money laundering conspiracy and related charges. US authorities said the service processed over 1.2 million bitcoin, worth about $400 million when the transactions took place.
- EU ban on anonymous crypto accounts (applies from 10 July 2027). Article 79 of Regulation (EU) 2024/1624 bars credit institutions, financial institutions and crypto-asset service providers from keeping "anonymous crypto-asset accounts." It also bars any account that allows "the anonymisation or increased obfuscation of transactions, including through anonymity-enhancing coins." Under Article 90(2), the Regulation applies from 10 July 2027.
- Encrypted node connections (April 2024). Bitcoin Core 27.0 was released on 2 April 2024. In that version, BIP324 v2 transport, which encrypts traffic between nodes, became the default. This does not hide what is on the blockchain. It makes passive watching of traffic between nodes harder.
What limits tracing
The whitepaper recommends using "a new key pair" for each transaction so transactions cannot be tied to a common owner. bitcoin.org's guide gives the same practical advice: "You should use a new Bitcoin address each time you receive a new payment." Most modern wallets generate a fresh receiving address automatically.
Other measures described in Bitcoin's own documentation:
- Keep addresses private. bitcoin.org warns that funds moved from a published address to your other addresses carry that public history with them.
- Separate wallets by purpose, so one context cannot be linked to another.
- Hide your IP address. bitcoin.org suggests a tool such as Tor so your IP address "cannot be logged."
- Static addresses without reuse. BIP 352 (Silent Payments) defines "static payment addresses in Bitcoin without on-chain linkability of payments." It is a complete specification, though wallet support varies.
These measures reduce linkage. They do not remove it. The blockchain is permanent, so bitcoin.org notes that data hard to trace today may be easy to trace later as analysis improves. Mixing services carry their own legal risk: the cases above show US prosecutors treating some of them as unlicensed money transmitting businesses.
Bottom line
Every Bitcoin transaction can be followed from address to address. Whether it can be followed to a person depends on where the coins came from, how the wallet spends them, how the transaction was broadcast, and what records regulated services hold. Bitcoin offers pseudonymity, and that pseudonymity breaks easily when addresses are reused or tied to a verified account.
Limitations: this article covers public, documented tracing methods and US and EU legal sources. It is not legal advice, and rules differ by jurisdiction.
