Crypto privacy: what the chain shows, what the exchange keeps, and what the law bans

What each chain lets a stranger read

Bitcoin.org's privacy page calls Bitcoin probably the most transparent payment network in the world, and says it can still give acceptable privacy when it is used carefully. Careful, on that page, means a fresh address, no address posted on a website, and Tor if the worry is the IP of the computer that announces the transaction. It does not mean a second, private ledger. How a name gets joined to that public history, and what CoinJoin actually changes, is the Bitcoin page.

Privacy Guides' criterion for a recommendation is that the cryptocurrency provides private transactions by default. Monero is the one they recommend under that rule. The same page says mass surveillance of the Bitcoin kind is unlikely, that targeted tracing tools are a real possibility, and that severe bugs have been found and patched. The ring, the remote node, and the view key are the Monero page. This one only needs the difference: you do not opt in, and the sender's protection is the part they refuse to call settled.

Zcash's own getting-started page says the currency enables both private and transparent transactions, and that Bitcoin and most other cryptocurrencies allow only the transparent kind. A wallet marked shielded by default is the one they tell you to use if the history has to stay confidential. A wallet that only does transparent payments is a public chain with a different ticker. Monero vs Zcash is where that wallet, the shielded pool, and Monero's lack of a public mode are actually compared.

Bitcoin's habits, or Monero

You already bought bitcoin in your own name

Use a new address for each payment, keep that address off websites and social accounts, and use Tor if the computer announcing the transaction is the thing you need to hide. Those steps stop the easy joins. They leave the old history on the chain. A mixing service, on the same page, is something you hand the coins to: you trust the operator not to steal them and not to keep a log, legality varies by country, and larger amounts get harder to mix. The cases against people who ran that kind of service, knowing the coins were criminal proceeds, are on the Bitcoin page. For an ordinary holder, the habits above are the ones that match the documents. A mixer is the step that page hedges most: you hand over the coins, and you trust the operator.

The payment itself has to stay off a public ledger

Monero. Privacy Guides calls it the strongest candidate, and in the next breath says the claims are not settled. Read the leaks that are not on the chain before you treat a withdrawal as the end of the problem. Zcash belongs in this row only when the wallet shields by default. Their page says a transparent address makes the financial information public. A wallet that offers the choice will sometimes be used on the public side, including by the person who meant not to.

An EU firm has to hold the coins for you

That is the path the listing rule and, from 10 July 2027, the account rule are written to close. The detail is in the legal map below. Self-custody is what those articles leave open. Leaving the coins on the exchange means the company has the name and the balance, and the cryptography is not in the path.

If the worry is the browser, the mail account or the messenger, the coin is the wrong layer. The privacy-tools page picks one program for each of those jobs, with the audit or the court record it used.

Are privacy coins legal in the US, the EU and the UK?

The instruments that actually speak bind the firm. A person keeping coins in a wallet they control is outside the sentences those instruments use. Mixing, and a business moving other people's coins, is a different record.

FinCEN says it withdrew the two proposals after reading the comments, as part of a deregulatory agenda, so that digital-asset rules are "fit-for-purpose".

The operating rules of the trading platform for crypto-assets shall prevent the admission to trading of crypto-assets that have an inbuilt anonymisation function unless the holders of those crypto-assets and their transaction history can be identified by the crypto-asset service providers operating a trading platform for crypto-assets.

Article 143(3) let a crypto-asset service provider that was already serving clients under national law before 30 December 2024 continue until 1 July 2026, or until it was granted or refused authorisation, whichever came first. A member state could drop that permission or shorten it. The outer date in the article was 1 July 2026. That date has passed. The "unless" in article 76(3) is the test a platform's rules have to meet: if it cannot identify holders and history, it does not admit the coin.

Article 79(1) of the AML regulation prohibits credit institutions, financial institutions and crypto-asset service providers from keeping anonymous crypto-asset accounts, and from keeping any account that anonymises the holder or increases the obfuscation of transactions, including through anonymity-enhancing coins. The regulation defines those coins as crypto-assets with built-in features designed to make transfer information anonymous, either systematically or optionally. Monero is the systematic case. Zcash, on its own page, is the optional one. Existing anonymous crypto-asset accounts have to go through customer due diligence before they are used again. Crypto-asset service providers are on the 10 July 2027 date.

HMRC's definition of a cryptoasset is a digital representation of value that relies on a cryptographically secured distributed ledger. That covers a ledger which hides amounts and one which does not. The manual's legality sentence is about cryptoassets as a class. What a UK firm must do on an unhosted-wallet transfer is regulation 64G: it decides whether to ask, using its risk assessments, the purpose and value of the transfer, how often the customer transacts, and how long the relationship has lasted. The hard edge is the refusal. Information requested and not received means the cryptoasset stays unavailable to the beneficiary.

PriFi's access page, checked between 13 and 20 October 2026, colours 73 jurisdictions and links each one to the instrument it used. The three columns above are the US, the EU and the UK. Algeria's entry on that page says buying, selling, using or holding any cryptocurrency is barred. That is a different rule from any column in this table.

Why an exchange drops a privacy coin

Kraken's Europe notice is the delisting that comes with a clock. The page was last updated on 31 March 2025.

After thorough consideration, and exploration of all viable alternatives, we concluded we have no choice but to delist Monero (XMR) in the European Economic Area (EEA) due to regulatory changes.

Kraken halted EEA trading on 31 October 2024. Article 76(3)'s regulation applies from 30 December 2024. Article 79 applies from 10 July 2027. The notice says regulatory changes. It does not name either article. What it does describe, for anyone who missed the December deadline, is a private balance turned into bitcoin inside the exchange's books. That bitcoin is on the public chain the first table describes.

Privacy Guides' buying note says Monero is not available in every jurisdiction Kraken operates in, and points at this Europe page. The notice closes an on-ramp for EEA clients. What a remote node can still see, after a withdrawal, is unchanged, and it is the Monero page.

Kraken's "no choice" comes down to the "unless" in article 76(3). Admission is prevented where the platform cannot identify holders and their history. A coin built so that an outside observer cannot do that fails the test. From July 2027 the account rule reaches every crypto-asset service provider, not only a trading platform, and the definition of an anonymity-enhancing coin includes features that hide transfer information optionally as well as on every payment. Article 76(3) still has its exception: a platform that can identify holders and history may admit the coin. That claim has to be true in the operating rules. On a transparent Zcash payment the history is public, so a platform can at least argue the "unless". Monero is the coin Kraken said it had no alternative but to delist.

How to buy crypto anonymously, and what you still hand over

Buying crypto without KYC is what people look for once a familiar exchange has closed the market. You can skip that exchange's identity check. You still pay someone, and that someone can learn your name.

They also point at Monero.com, an associated site, where you can buy without installing the app and the coins are sent to an address you choose. The KYC sentence they actually wrote is attached to the in-app purchase, not repeated as a promise about that website. A country and an amount can still turn "usually not" into a request for documents. "Most counterparties" on RetoSwap is not "every counterparty".

The same page opens with a warning that many, if not most, cryptocurrency projects are scams, and that the page is not legal or financial advice. They tell you to check a professional for whether a given route is legal where you are. A no-ID purchase of bitcoin still lands on the public ledger in the first table. Skipping the passport photo does not hide the payment you make next.

What a KYC exchange knows after you withdraw

The signup already has your name. The withdrawal adds the address they paid, the amount, and the time. What they can see after that is the chain.

Malta's Financial Intelligence Analysis Unit, in a notice that adopts the European Banking Authority's travel-rule guidelines and reproduces them, says those guidelines apply from 30 December 2024. Where the other end of a transfer is a self-hosted address, the guidelines say the crypto-asset service provider collects the originator or beneficiary information from its own customer. At or above EUR 1,000, valued at the exchange rate at the time and ignoring fees, the provider assesses whether that customer owns or controls the address. The methods they list include a small payment the firm sets, sent between the address and the firm's account, a message signed with the key for that address, a remote identity check, or another technical means the firm is satisfied it can rely on. One method can be too weak on its own, in which case they combine them. Once the firm is satisfied, it may whitelist the address and skip the repeat, until the risk or the ownership looks different. The withdrawal is not the moment the file closes. It is the moment the file gains an address, and above that amount a check that the address is yours.

The UK version does not set EUR 1,000 as an automatic ownership test. The firm may ask. The factors are its risk assessment, the purpose and value, linked transfers, how often you move coins through them, and how old the relationship is. If it asked and you did not provide the information, it must not hand the cryptoasset to the beneficiary. The £800 figure is a narrower hook: when you are the person receiving, and the transfer reaches that value together with linked ones, the firm may also request the fuller set of details about the originator. A withdrawal, where you are the sender, is not that hook. The refusal power still is.

Once a Bitcoin address has been used, anyone can see its balance and every payment, and moving coins from a known address to another one taints the destination with that history. The exchange is inside that "anyone", and the name is already on its account.

Privacy Guides' reading of Monero, after the coins have left, is that the seller knows the purchase happened and is not in a position to read the balance you keep or the places you pay later. The IP of the computer that broadcasts the transaction, and a remote node that sees what you send, sit outside that reading. Leaving the coins on the exchange skips the sentence entirely. There is no withdrawal, and the company holds the balance under the name it already has.

A Zcash withdrawal to a transparent address publishes the wallet and the payments. A withdrawal into a wallet that shields by default is the payment their page calls private. The exchange still recorded the fact of the withdrawal, the amount it sent, and the address it sent to, under the travel-rule rules above. Shielding changes what a stranger reads on the chain afterwards. It does not delete the exchange's copy of the payout.

Do you still owe tax on privacy coins?

A ledger that hides the amount from the public does not hide a disposal from the revenue agency. The US and UK pages that say so are written for cryptoassets as a class. Neither one carves out a coin because the chain is hard to read.

The IRS treats digital assets as property, not currency. Its definition, which it ties to the Infrastructure Investment and Jobs Act, is any digital representation of value recorded on a cryptographically secured distributed ledger or similar technology. The examples on the page are convertible virtual currencies such as Bitcoin, stablecoins, and NFTs. The definition is the ledger. It does not add "unless the amounts are hidden".

The question on the federal return asks whether, at any time in the year, you received a digital asset as a reward, award, or payment, or sold, exchanged, or otherwise disposed of one. You can answer no if you only held the coins, if you bought them with real currency and did not sell, or if you moved them between wallets you control. Paying the transfer fee in the coins counts as a transaction, so moving coins between your own wallets is a "no" only when you did not pay that fee in the asset. A sale, an exchange for another digital asset, or spending them is a yes, and you report the transaction whether or not there is a taxable gain or loss. The records they name are the type, the date and time, the number of units, the fair market value in dollars, and the basis. A private chain does not fill those boxes in. You do.

Custodial brokers have to report gross proceeds for transactions on or after 1 January 2025, on Form 1099-DA, and basis for certain transactions on or after 1 January 2026. The same page says the final regulations do not impose that reporting on brokers that do not take possession of the coins, the ones commonly called non-custodial. An exchange that held the coins may send you a form for what passed through it. A wallet you run does not become that broker. The duty to report your own disposal stays on the return either way.

HMRC's selling guidance, last updated 5 October 2026, says you may owe Capital Gains Tax when you dispose of cryptoasset tokens by selling them, exchanging them for a different cryptoasset, spending them, or giving them away. A gift to a spouse, a civil partner, or a charity is the exception they name. You report and pay when the total gain for the tax year, 6 April to 5 April, is above the Capital Gains Tax allowance. The records they list are: for each pool of tokens, the type, the date, the number disposed of, the number left, the value in pounds, bank statements, and the pooled cost before and after. Wallet addresses are something you may also keep. An exchange's report can help, and they say it is not a tax calculation and it will not track your pooled costs. You keep your own records. From the 2024 to 2025 tax year, the Self Assessment return has a cryptoasset section.

If you withdrew Monero and later spent it, the exchange's export stops at the withdrawal, and the chain will not show an inspector the amount. HMRC still wants the sterling value, from notes you took when you spent. Article 79 does not set a tax rate and does not waive one. A person in the EU files under their own country's rules.

Bitcoin, Monero, or a different layer

Your coins are Bitcoin

Is Bitcoin anonymous? covers how a payment is tied to a person, what CoinJoin changes, and the mixer prosecutions.

You are weighing Monero

Is Monero traceable? covers the ring, the node, and which Monero app keeps the keys. A cold wallet, Electrum, and a node over Tor are where the key sits once you hold any coin.

The coin is not the weak point

The browser, mail and messenger you pay from are on the privacy tools page. Hiding the connection that announces a transaction starts with Tor Browser.