Is crypto traceable? What can and cannot be followed on a blockchain

Is Bitcoin anonymous or traceable?#

Traceable, with a privacy layer that is thinner than many people assume. Bitcoin.org describes Bitcoin as probably the most transparent payment network in the world and says all Bitcoin transactions are public, traceable, and permanently stored in the Bitcoin network ^[1]. What hides identities is that the ledger records addresses, not names.

The original white paper describes that model directly: privacy comes from keeping public keys anonymous, so the public can see that someone is sending an amount to someone else, but without information linking the transaction to anyone ^[2]. The word to remember is pseudonymous: every payment is visible, but each party appears only as an address. For how addresses are derived from keys, see public keys, private keys and addresses.

How does a tracer follow coins from one address to another?#

Every Bitcoin input points back to an earlier output by its transaction identifier (txid) and an output index number ^[3]. That chain of references is what makes following money possible: starting from one transaction, an analyst can walk forwards to where the outputs were spent, or backwards to where the inputs came from. The UTXO model explains why Bitcoin coins move as discrete outputs rather than account balances.

Two habits of wallets make the walk easier. First, most transactions include a change output that returns the surplus to the spender ^[3], so one of the outputs often belongs to the sender. Second, the white paper notes that some linking is still unavoidable with multi-input transactions, which necessarily reveal that their inputs were owned by the same owner ^[2]. Analysts call grouping addresses this way clustering.

From a public payment to a named person

How does an address get linked to a real person?#

Through information outside the chain. Bitcoin.org notes that since users usually have to reveal their identity in order to receive services or goods, Bitcoin addresses cannot remain fully anonymous, and that once addresses are used, they become tainted by the history of all transactions they are involved with ^[1]. An exchange that verified your identity, a shop that shipped you a parcel or a public post with your address are all ways a pseudonym can be connected to a name.

The record is also permanent. Bitcoin.org warns that something not traceable currently may become trivial to trace in the future ^[1] — an address that is unlinked today can be linked later if new data appears. The white paper adds that if the owner of a key is revealed, linking could reveal other transactions that belonged to the same owner ^[2].

Do governments actually trace crypto?#

Yes, and they publish blockchain identifiers as part of that work. The US Treasury's Office of Foreign Assets Control says it may add digital currency addresses to its sanctions list to alert the public of specific identifiers associated with a blocked person, and that its listings are not likely to be exhaustive ^[4]. Companies that find related wallets are expected to block the digital currency and report it ^[4].

Stablecoins add another lever because they have an issuer. The US GENIUS Act defines a lawful order as one that can require a person to seize, freeze, burn, or prevent the transfer of payment stablecoins issued by the person ^[5]. Bitcoin has no issuer that can freeze coins, so tracing there depends on finding where the coins meet a regulated service.

For victims, the FBI's guidance shows how central on-chain identifiers are: it says the most important information to provide is transaction details, including cryptocurrency addresses, amount and type of cryptocurrency, date and time, and transaction ID (hash) ^[6]. Our guide to using a block explorer shows where to find those details.

Each item is something the blockchain or your own records already contain; none of it requires paying a 'recovery' service.

Where does tracing stop being reliable?#

Tracing rests on inferences, and inferences can fail. Grouping addresses assumes common ownership that may not be true in every transaction, and labels for exchanges are built by data providers: Glassnode says its reported exchange balances can largely be considered lower bounds of the true balance ^[7]. Off-chain activity — trades inside an exchange's own database, or payments over second layers — is not visible on the base chain at all. Our article on the limits of on-chain data goes through each gap.

1. Separate facts from inferences

   Amounts, times and addresses are facts on the chain; ownership groups and labels are conclusions drawn from them.

2. Ask what links the address to a person

   If the answer is 'a heuristic', treat it as a lead, not proof.

3. Check for off-chain hops

   Coins that enter an exchange stop being traceable on-chain until they leave again.

4. Remember the record is permanent

   A link that is missing today can appear later if new data surfaces.

What mistakes do beginners make here?#

• Assuming Bitcoin is anonymous

  Addresses and amounts are public forever. Pseudonymous is not the same as anonymous.

• Treating a cluster as proof of identity

  Address grouping relies on assumptions about wallet behaviour that do not hold in every transaction.

• Paying someone to 'trace and recover' stolen coins

  The FBI warns that recovery offers may be another scam. Report to the authorities with your transaction details instead.

• Reusing and publishing addresses

  Bitcoin.org advises using a new address for each payment and not publishing addresses if you want privacy.

Frequently asked questions#

The bottom line#

Crypto is far more traceable than its reputation suggests. On Bitcoin, every amount, time and address is public and permanent; what the ledger lacks is names, and those arrive from outside data such as exchange records, published addresses and lawful requests.

Tracing is powerful but built on inferences, so treat clusters and labels as evidence to be checked. If you have lost money, record the transaction details and report them — and ignore anyone who promises to recover the coins for a fee.

Sources#