Is Bitcoin traceable? What the public ledger actually reveals
Bitcoin is pseudonymous, not anonymous. The ledger is permanent and public, and the gap between an address and a name is closed by clustering plus a subpoena. Three US cases show how, and where tracing stops.
Published · 10 min read
Yes. Bitcoin is traceable, and it is the most traceable form of money most people will ever touch. Every transaction since 2009 sits in a public ledger that anyone can download and read forever. Bitcoin is pseudonymous, not anonymous: your name is not attached to an address, but everything that address ever does is permanent and visible.
What is actually public on the Bitcoin blockchain?
The whole payment history. For every transaction ever made you can see the sending addresses, the receiving addresses, the amount, the fee and the block it landed in.
What you cannot see from the ledger alone is who owns an address. That is the entire gap, and the business of blockchain analysis is closing it.
If addresses are just numbers, how do investigators link them to people?
Two methods, used together.
The first is clustering. Spending from several addresses in one transaction proves the same person controlled all of them, because you need every key to sign. Repeat that logic across millions of transactions and you can group addresses into wallets without knowing whose they are.
This is not new or secret. Sarah Meiklejohn and colleagues published the method at the 2013 Internet Measurement Conference in a paper titled "A Fistful of Bitcoins: Characterizing Payments Among Men with No Names". The technique that underpins the modern analytics industry has been in the open academic literature for more than a decade.
The second method is the edges. A cluster becomes a name the moment it touches a regulated business. Exchanges, custodians and payment processors collect identity documents, and they respond to subpoenas. One known deposit address is enough to attach a name to an entire cluster behind it.
Has anyone actually been traced this way?
Repeatedly, and the public record is specific.
In November 2022 the US Attorney for the Southern District of New York announced the seizure of approximately 50,676.17851897 bitcoin from James Zhong, who had stolen roughly 50,000 bitcoin from Silk Road in September 2012 by triggering over 140 rapid transactions through about nine accounts he had created to hide his identity.
He never spent it. The coins sat for nearly a decade and were still found, on a circuit board in the bottom of a popcorn tin in his home. At the time it was the largest cryptocurrency seizure in the history of the Justice Department.
“Thanks to state-of-the-art cryptocurrency tracing and good old-fashioned police work, law enforcement located and recovered this impressive cache of crime proceeds.”
The other case is larger and more instructive. In February 2022 the Justice Department announced the arrest of Ilya Lichtenstein and Heather Morgan over the laundering of 119,754 bitcoin stolen from Bitfinex in 2016 by a hacker who initiated more than 2,000 unauthorised transactions. About 25,000 of those coins had been moved out over five years. More than 94,000 remained in the original wallet, and were recovered, valued at over $3.6 billion.
Does tracing alone let the government take your coins?
No, and the Bitfinex case is the clearest illustration of the limit.
Agents could watch the stolen coins on the chain the whole time. What let them seize the money was a search warrant on an online account belonging to Lichtenstein, in which they found the private keys to the wallet.
So tracing identifies. Keys control. Those are separate problems, and in that case the second one was solved by ordinary police work on a cloud account, not by cryptography.
Is there an official list of traced bitcoin addresses?
Yes, and it is free. The US Treasury's sanctions list carries bitcoin addresses as identifiers, sitting alongside passport numbers and dates of birth under the heading "Digital Currency Address".
We counted them: 262 bitcoin addresses attributed to 65 named people and entities. The list is published as a CSV that anybody can download. Our breakdown of who is on the sanctions list goes through the names and the programmes they fall under.
That list is proof of the general point. Governments do not merely suspect which addresses belong to whom. They publish the attribution.
Do mixers and privacy tools break the trail?
They make it harder and more expensive. They do not reliably make it impossible, and using them now carries its own risk.
Mixing services, CoinJoin implementations and cross-chain bridges all work by breaking the direct link between an input and an output. Analysts respond with timing analysis, amount matching and volume heuristics. The result is a contest, not a solution.
The bigger change is legal rather than technical. Several mixing services have been sanctioned or prosecuted, and funds that have passed through one are often refused by exchanges whether or not the holder did anything wrong. Privacy tooling has become a compliance flag in itself.
Monero is a different case, because its privacy is built into the protocol rather than added on top. That is why the Treasury sanctions list carries hundreds of bitcoin and Ethereum addresses and only a handful of Monero ones.
What about Lightning payments and transfers inside an exchange?
Both sit outside the main ledger, and both swap one kind of visibility for another.
A Lightning payment moves balances inside a payment channel. Only the opening and closing transactions are written to the blockchain, so the individual payments in between are not public in the way an ordinary transaction is. What you gain in chain privacy you partly hand to the nodes that routed the payment and to whoever runs them.
A transfer between two accounts at the same exchange never touches the chain at all. There is nothing for an analyst to find, because the exchange simply edits two numbers in its own database. That database is the least private place your balance can sit: it is held by a company that knows your name, keeps records and hands them over when asked. Holding coins yourself changes that trade-off, which is why self-custody is a privacy question as well as a security one.
Can someone find out it was me from a transaction?
It depends entirely on what else they know.
A stranger looking at one transaction sees two strings and an amount. An exchange that holds your identity documents and your withdrawal history can connect your name to every address you have ever withdrawn to, and to everything those addresses did next.
Three habits leak identity more than anything technical. Reusing one address across many payments builds a public profile of all of them. Publishing an address, for donations or on a profile, ties it to a name permanently. And withdrawing from a verified exchange account to an address you then use for everything else connects your legal identity to the whole cluster.
Does the tax authority see my transactions?
Increasingly, through the platforms rather than the chain. In the United States brokers now report digital asset transactions on Form 1099-DA, which brings crypto sales into the same reporting architecture as stock sales.
Internationally, the financial action task force's travel rule requires exchanges to pass identifying information about senders and recipients alongside transfers above set thresholds, in the same way banks do for wires.
The practical effect is that the regulated edges of the system are now wired for reporting, so the question is no longer whether an address can be identified. It is how long the identification takes. We looked at when a crypto tax bill is actually triggered separately.
What is the honest summary?
Bitcoin was never anonymous. The 2008 design made the ledger public on purpose, because a public ledger is how a network with no trusted authority agrees on who owns what.
The practical position in 2026 is that bitcoin offers privacy from your neighbours and essentially none from a well-resourced investigator with a subpoena and ten years of patience. Zhong held coins untouched for a decade and was still found.
If you want privacy, the thing that matters is not clever transaction routing. It is understanding that the ledger is permanent, that address reuse is the main leak, and that anything you ever hand an exchange is a permanent link between your name and your coins.
This article is information, not financial or legal advice.
Frequently asked
Is Bitcoin traceable?
Yes. Every bitcoin transaction since 2009 is recorded in a public ledger that anyone can download, showing the sending and receiving addresses, the amount and the fee, permanently. What the ledger does not show is who owns an address. That gap is closed by clustering addresses into wallets and then matching a wallet to a name at the point it touches a regulated exchange or custodian, which holds identity documents and responds to subpoenas.
Can police trace bitcoin back to me personally?
They can if your addresses ever touched a business that knows who you are. An exchange that holds your identity documents can link your name to every address you have withdrawn to, and analysts can then follow those addresses onward. Tracing is far easier when someone reuses one address, publishes an address publicly, or sends coins from a verified exchange account into a wallet they use for everything else.
Is Bitcoin anonymous or pseudonymous?
Pseudonymous. Addresses are strings of characters rather than names, so the ledger does not state who you are. But every action an address takes is public and permanent, so once a single address in a cluster is attributed to a person, the rest of that cluster becomes attributable too. Anonymity means nobody can work out who you are. Pseudonymity means nobody has worked it out yet.
How do blockchain analytics firms identify wallet owners?
Mostly by clustering and by the edges of the system. Spending from several addresses in one transaction proves one party held all the keys, which groups addresses into a wallet. The wallet gets a name when it deposits to or withdraws from a regulated exchange, custodian or payment processor that collects identity documents. The clustering method was published openly in 2013 by Sarah Meiklejohn and colleagues.
Do bitcoin mixers make transactions untraceable?
They make tracing harder and more expensive rather than impossible. Mixers and CoinJoin implementations break the direct link between an input and an output, and analysts respond with timing analysis, amount matching and volume heuristics. The larger problem now is legal: several mixing services have been sanctioned or prosecuted, and exchanges frequently refuse funds that have passed through one, whatever the holder was doing.
How long can stolen bitcoin stay hidden?
Not indefinitely, and the public record is unforgiving on this point. James Zhong stole roughly 50,000 bitcoin from Silk Road in September 2012, never spent it, and was still identified. Law enforcement searched his home in November 2021 and seized about 50,676 bitcoin, found on a circuit board in the bottom of a popcorn tin. The ledger does not expire, so a trail can be picked up years later.
Does tracing bitcoin let the government seize it?
No. Tracing identifies where coins are, but moving them requires the private keys. In the Bitfinex case the Justice Department could see more than 94,000 stolen bitcoin sitting in a wallet, and the seizure only became possible after a search warrant on an online account belonging to Ilya Lichtenstein turned up the private keys. Identification and control are separate problems.
Which cryptocurrencies are harder to trace than bitcoin?
Monero is the main one, because its privacy is built into the protocol rather than bolted on, so an outside observer cannot follow payments by reading the chain. The effect is visible in enforcement data: the US Treasury sanctions list carries hundreds of bitcoin and Ethereum addresses and only a handful of Monero ones. Being harder to trace is not the same as being legal to use for anything.
Can the tax authorities see my crypto transactions?
Through the platforms more than through the chain. In the United States brokers report digital asset transactions on Form 1099-DA, which puts crypto sales into the same reporting system as share sales. Internationally, the travel rule requires exchanges to pass identifying information about senders and recipients alongside transfers above set thresholds, as banks do for wire payments.
What is the best way to keep bitcoin transactions private?
Understanding the permanence of the ledger matters more than any tool. Address reuse is the single biggest leak, because it builds a public profile of every payment you have made. Publishing an address anywhere ties it to your name forever. And anything you hand an exchange creates a durable link between your legal identity and your coins. Nothing you do later removes a link already written to the chain.
Sources, and what is behind them
- U.S. Attorney announces historic $3.36 billion cryptocurrency seizure and conviction in connection with Silk Road dark web fraud, US Attorney's Office, Southern District of New York (November 7, 2022)Press report
- Two arrested for alleged conspiracy to launder $4.5 billion in stolen cryptocurrency, US Department of Justice, Office of Public Affairs (February 8, 2022)Press report
- A Fistful of Bitcoins: Characterizing Payments Among Men with No Names, Meiklejohn, Pomarole, Jordan, Levchenko, McCoy, Voelker, Savage, Internet Measurement Conference 2013 (October 23, 2013)Paper
- Specially Designated Nationals and Blocked Persons list, full SDN.CSV export, US Department of the Treasury, Office of Foreign Assets ControlDataset
- About Form 1099-DA, digital asset proceeds from broker transactions, Internal Revenue ServiceDocumentation
- Digital assets, Internal Revenue ServiceDocumentation