Privacy coins (Monero, Zcash)

Privacy coins (Monero, Zcash) are cryptoasset systems that reduce information exposed on a public ledger. Their privacy mechanisms are not the same. Monero uses ring signatures, stealth addresses and confidential transaction techniques by default. Zcash supports shielded transactions using zero-knowledge proofs, alongside transparent activity. A transfer's technical privacy does not establish that it is illicit or state-directed.

These protocols also differ from Bitcoin and permissionless cryptoasset networks, where transaction histories are public but addresses are pseudonymous. Blockchain analytics platforms (Chainalysis, Elliptic, TRM) can analyse public graph relationships, yet technical uncertainty and off-chain identity remain. Privacy features can reduce observable links, but endpoint data, wallet security, operational mistakes and regulated intermediaries may still expose participants.

The regulatory control point usually lies at the virtual-asset service provider rather than inside the protocol. Exchanges can decide whether to list an asset, apply customer due diligence, monitor deposits and withdrawals, or restrict transactions under national law. Crypto exchanges as chokepoints (fiat on/off-ramps) connect a permissionless network to bank money and identifiable accounts. Delisting affects liquidity and access without erasing the underlying network.

FATF's targeted update of 26 June 2025 assessed implementation of its standards for virtual assets and service providers. Its report addressed regulatory adoption and risk, not a finding that every privacy-enhancing transaction is criminal. On 3 March 2026, FATF published a targeted report on stablecoins and unhosted wallets. Stablecoins, privacy coins and unhosted wallets are distinct objects, even where policy discussions group them under virtual-asset risk.

Strategic uses can include covert finance, evasion or resilience against financial surveillance. Those possibilities require evidence of actor, route and intent. A privacy protocol is not itself Cryptocurrency mixers and tumblers (Tornado Cash, Blender.io), which receives deposits and returns other assets through a service or contract mechanism. Nor does privacy establish a sanctions breach. Legal status depends on jurisdiction, parties and conduct.

Substitutability is medium. Users can shift among privacy coins, mixers, chain hopping, cash, intermediaries and informal settlement, but each option has different liquidity, security and detection risks. Authorities can regulate businesses and investigate endpoints, while complete protocol suppression may be difficult. The relevant Economic statecraft lies in an evidenced restriction, regulated-intermediary response or state financing operation, not in the code alone.

The field remains contested because privacy has legitimate uses and can obstruct investigations. Entry-level assessment must separate protocol function, observed transaction, analytic inference, administrative action and adjudicated violation.

Evidence quality varies across those layers. Protocol specifications establish how a transaction can be constructed. Chain observations establish recorded activity under an analytic method. A service-provider filing or law-enforcement action may link activity to an account or person. Only the competent legal process establishes a violation. Collapsing these steps can convert a technical limitation into an unsupported attribution.

Sources

• FATF, targeted update on virtual assets and VASPs, 26 June 2025
• FATF, targeted report on stablecoins and unhosted wallets, 3 March 2026
• Monero Research Lab
• Zcash protocol specification