What is a Privacy Coin?

The one-line definition

A privacy coin is a cryptocurrency that hides one or more of the three things that identify a transaction — the amount, the sender, and the receiver — by default, using cryptography baked into the protocol.

That "by default" matters. A coin where privacy is technically possible but practically opt-in (and rarely used) doesn't really deliver on the promise.

Why most crypto isn't private

Bitcoin, Ethereum, Litecoin, and almost every other major chain are pseudonymous, not anonymous. Addresses aren't tied to a name on-chain, but every balance, every transaction, every amount is recorded permanently in public. Once one address is linked to a real identity — through a KYC exchange withdrawal, a doxxed donation, a leaked database — that identity is linked to the entire history of that address forever.

Specialised firms (chainalysis-style companies) make a business of de-anonymising public chains. They cluster addresses, link wallets via behavioural patterns, and sell that intelligence to exchanges, law enforcement, and anyone who pays. On a transparent chain, financial privacy is the exception, not the rule.

The three things a privacy coin can hide

The amount. How much was transferred? Solved by confidential transactions, range proofs, or homomorphic encryption.
The sender. Whose coins were spent? Solved by ring signatures (Monero) or shielded note pools (Zcash).
The receiver. Who received the coins? Solved by stealth addresses (XELIS, Monero), one-time output keys, or shielded notes.

A coin only hiding one of these (e.g. mixers that hide just the sender link) is a partial solution. A real privacy coin hides all three by default.

The major privacy coins

Monero (XMR)

The most established privacy coin. Uses ring signatures to hide the sender among decoys, RingCT to hide amounts, and stealth addresses to hide receivers. Privacy is mandatory — every transaction is private. Large user base, mature, but transactions are big and exchange delistings are increasingly common in regulated markets.

Zcash (ZEC)

Pioneered zk-SNARKs for blockchain privacy. Supports both transparent (t-address) and shielded (z-address) transactions. The shielded pool is cryptographically strong, but most Zcash activity has historically been transparent — which weakens the anonymity set for the people who do shield. Improvements like NU5 and Orchard are pushing more shielded usage.

XELIS (XEL)

A newer Layer 1 using homomorphic-encrypted balances + zero-knowledge proofs. Every balance is encrypted on-chain, every transaction is confidential, every receive address is a one-time stealth address. Mandatory privacy by default. Adds view keys for voluntary auditability and is designed with a smart-contract roadmap. See what is XELIS.

Dash, Verge, and friends

Dash's "PrivateSend" is essentially CoinJoin — an optional mixer, not protocol-level privacy. Verge attempted to use Tor/I2P for IP-layer privacy but its on-chain ledger remains transparent. These are not real privacy coins by the working definition above, despite marketing that says otherwise.

How to tell genuine privacy from theatre

Is privacy mandatory or optional? Mandatory is dramatically stronger because the anonymity set is the whole user base.
What's hidden — amount, sender, receiver, or all three? Partial privacy is partial.
Where does the privacy come from — protocol or add-on tools? Add-ons (mixers, CoinJoin) require active use and are easier to surveil.
Has the cryptography been peer-reviewed? Published research, open code, formal audits matter.
How big is the anonymity set? Privacy depends on hiding in a crowd. Small networks offer less protection.

Privacy coin techniques, side-by-side

Technique	Coin	Hides	Trade-off
Ring signatures + RingCT	Monero	Sender, amount	Larger transactions
zk-SNARK shielded pool	Zcash	Sender, receiver, amount (when shielded)	Optional, low adoption
Encrypted balances + ZK proofs	XELIS	Amounts, balances, receivers	Newer ecosystem
CoinJoin / mixers	Bitcoin (add-on)	Sender link (partial)	Add-on, opt-in, small set
PrivateSend	Dash	Sender link (partial)	Not protocol-level

For a deep head-to-head between XELIS and Monero specifically, see XELIS vs Monero.

Why privacy coins matter

Financial privacy isn't about hiding bad behaviour. It's about treating money the way we treat the rest of life. You don't broadcast your bank balance to every cashier. You don't publish your salary on the front of your house. Cash gives you that privacy by default; transparent crypto removes it. Privacy coins restore the baseline.

Real use cases:

Salary privacy. Your employer doesn't need to publish your income to everyone you'll ever pay.
Charitable giving. Donations without a public record of who gives what.
Business operations. Suppliers can't see each other's pricing. Competitors can't read your runway.
Personal safety. Anyone who knows your address shouldn't be able to scrape your net worth from a block explorer.
Censorship resistance. Private payments are harder to block at the protocol level than transparent ones.

The honest objections — and replies

"Privacy coins enable crime"

Most measured analyses show illicit activity makes up a tiny fraction of privacy-coin usage — and cash, the original privacy money, dwarfs crypto in absolute illicit flow. Privacy is a property normal users want for normal reasons. Treating every privacy user as suspicious is the same logic that treats every cash transaction as suspicious.

"Regulators will ban them"

Some jurisdictions have restricted privacy coins on regulated exchanges; few have banned holding or using them. The trend in 2026 is regulation focused on intermediaries (exchanges, custodians), not protocols. View keys (XELIS, Zcash) let users voluntarily prove transactions to regulators or auditors without breaking on-chain privacy for everyone else — likely the long-term equilibrium.

"If amounts are encrypted, how do you audit supply?"

Cryptography enforces the conservation invariant on every block. The chain proves "no extra coins were created" without revealing individual balances — see confidential transactions for the math.

Frequently asked questions

Are privacy coins legal?

In most jurisdictions, yes — holding and using privacy coins is legal. Some regulated exchanges have delisted them to simplify compliance, but the coins themselves are not banned in major markets. Always check your local rules.

Is Bitcoin a privacy coin?

No. Bitcoin is pseudonymous but fully transparent — every transaction and balance is public forever. Add-on tools like CoinJoin can improve privacy, but the base layer is the opposite of private.

What's the difference between optional and mandatory privacy?

Optional privacy (like Zcash shielded transactions) means users must opt in. In practice most don't, which shrinks the anonymity set. Mandatory privacy (Monero, XELIS) means every transaction is private by default, so the anonymity set is the entire user base.

Can privacy coins be traced?

Well-designed privacy coins resist on-chain tracing. But privacy is layered — your IP, exchange KYC records, and endpoint security all matter. No coin gives you privacy if you broadcast everything from a doxxed exchange account.