What "Private Money" Actually Means

“Private money” sounds like a single idea. It’s actually four ideas wearing a trench coat.

Before you can judge whether anything — cash, Bitcoin, a Venmo balance, Zcash — is private, you need to know what privacy even decomposes into. Otherwise you’ll fall for the oldest trick in the book: hiding one thing loudly and leaking three things quietly.

The four properties of financial privacy

Before you read — take a guess

Guess before reading: how many independent things does a payment leak about you?

Two — who paid and how much movedThree — sender, receiver, and amountOne — the amount, the rest is privateFour — sender, receiver, amount, and links

A payment leaks information along four independent axes. Real privacy means covering all four. Miss one and the others can often be reconstructed.

Sender anonymity. Who paid is hidden. An observer can’t tell which party’s money moved out.
Receiver anonymity. Who got paid is hidden. The destination of the funds is unknowable.
Amount confidentiality. How much moved is hidden. No exact figure, no rough size, nothing.
Unlinkability. Distinct transactions of the same user can’t be tied together, and payments to or from the same party can’t be correlated into one story.

That fourth one is the sneaky overachiever. Even if individual payments hide something, if an observer can stitch them into a graph — “these 40 transactions all belong to the same wallet” — they can de-anonymize you through patterns alone. Unlinkability is what stops the dots from connecting.

The sealed envelope

Picture a payment as a tamper-evident envelope dropped in the mail. Outsiders can’t see the sender, the recipient, or the amount sealed inside — yet the postal system can still confirm the envelope is genuine and not a forgery. “Verify without opening” is the whole magic trick, and it has a name: zero-knowledge proofs. We get to those soon.

Now lock in the names before they blur together — pick the right one for each.

Name the four properties of financial privacy.

Pick the right option for each blank, then check.

Hiding who paid is anonymity; hiding who got paid is anonymity; hiding how much moved is amount ; and stopping observers from tying your payments into one graph is .

So what does Bitcoin hide?

Before you read — take a guess

Bitcoin is often called 'anonymous money.' Guess: at the protocol level, how many of the four properties does it actually hide?

None — all four are on the ledgerThree — only the amount stays publicAll four — sender, receiver, amount, linksTwo — sender and receiver are hidden

Here’s the part that surprises people. Bitcoin is often called “anonymous money.” At the protocol level, Bitcoin hides none of the four properties.

Every transaction is broadcast to a public, permanent ledger. Addresses, amounts, and the links between them are right there for anyone to read.

Property	What Bitcoin does	Hidden?
Sender	Sending address is published	Revealed
Receiver	Receiving address is published	Revealed
Amount	Exact value is published	Revealed
Unlinkability	Transaction graph is public; wallets get clustered	Highly linkable

The one thing Bitcoin does obscure is the mapping from an address to your legal identity. And that mapping is brittle. Reuse an address, buy coffee with a KYC’d exchange withdrawal, or post a donation address on your public profile — and one leak cascades across every transaction that address ever touched. Forever. The ledger doesn’t forget.

Pseudonymity ≠ anonymity

Bitcoin gives you a pseudonym: a stable, hideable handle. That is not anonymity. Anonymity means being indistinguishable inside a crowd. A pseudonym is a single, traceable thread; the moment it’s tied to you, the whole spool unravels.

So which details does Bitcoin actually expose, and which does it merely blur? Sort them.

Sort each detail by whether Bitcoin publishes it on-chain or obscures it.

Place each item in the right group.

Sending address
Receiving address
Exact amount
The transaction graph (who paid whom)
The link from an address to your legal identity

Anonymity sets: privacy is a crowd

Before you read — take a guess

Guess: if you're the only person in your 'crowd,' how much privacy do you have?

Zero — everything points back to youHalf — the encryption covers the restGrows as you make more transactionsTotal — nobody else is in the way

You are private only to the degree that you blend in. The group of users you’re indistinguishable from is your anonymity set — your crowd.

A crowd of 1 (just you) means zero privacy. Everything points back to you.
A crowd of 1,000 means an observer sees a transaction but can only say “it was one of these thousand people.”
A bigger crowd is strictly better. More indistinguishable members, more cover.

This reframes the goal. Privacy isn’t “be a secret.” Privacy is “be one of many.” Cash works this way — one twenty-dollar bill looks like every other twenty-dollar bill, so the crowd is enormous.

A pseudonym is a fixed label that follows you across transactions. It doesn’t put you in a crowd — it builds a dossier. Each new transaction under the same handle shrinks uncertainty about who you are instead of growing it. Anonymity sets need fresh, interchangeable identities, not one sticky name.

Lock the term down — pick the right option.

Finish the definition.

Pick the right option for each blank, then check.

The group of users you are indistinguishable from is your , and a one means more privacy.

Where Zcash is headed

Before you read — take a guess

Guess: a fully shielded Zcash transaction (z-address to z-address) hides how many of the four properties?

Just the amount, sender stays publicAll four — sender, receiver, amount, linksNone — it works exactly like BitcoinSender and receiver, amount is public

We’ll unpack the machinery in later lessons, but here’s the destination. A fully shielded Zcash transaction (z-address to z-address) hides all four properties at once: sender, receiver, and amount are all concealed, and even the attached memo field is encrypted. Fresh notes plus nullifiers provide the unlinkability so payments can’t be stitched into a graph.

And privacy can be selective. Privacy doesn’t have to mean “secret from literally everyone, including your accountant and the tax authority.” With viewing keys you choose who’s allowed to look inside the envelope — an auditor, a counterparty, yourself. (More on that later.) Hidden by default, revealable on your terms.

Three myths, busted

“Confidential amounts alone = privacy.” No. Hide only the amount and the transaction graph still leaks who-paid-whom. You need all four properties.
“Privacy means secrecy from everyone.” No. Privacy can be selective — viewing keys let you grant sight to chosen parties.
“Anonymity is just pseudonymity.” No. A hideable handle is not the same as being indistinguishable in a set.

Match each idea to what it actually means — including a couple you met earlier.

Pick a term, then click its definition.

Check yourself

Here’s the whole lesson in one picture — the four properties, what Bitcoin does with them, and where Zcash lands.

Big picture

Private money in one picture

Private money
- Four properties
  - Sender anonymity
  - Receiver anonymity
  - Amount confidentiality
  - Unlinkability
- Bitcoin
  - Hides none of the four
  - Only a fragile pseudonym
- Anonymity set
  - Privacy is a crowd
  - Bigger crowd, more cover
- Zcash shielded
  - Hides all four
  - Selective via viewing keys

Question 1 of 50 correct

Which set of properties must ALL hold for a payment to be genuinely private?

Unlinkability alone — the other three follow from itSender anonymity, receiver anonymity, and amount confidentialitySender, receiver, amount, and unlinkabilityConfidential amounts plus a hidden legal identity

Check your answer to continue.

Up next

Now that you can name what privacy is, we’ll look at how people have actually tried to build it: coin mixers that shuffle Bitcoin in a crowd, Monero’s always-on approach, and Zcash’s shielded pool. Spoiler — they make very different trade-offs, and only some of them cover all four properties.