Bitcoin's blockchain is permanently public. That alone isn't what gets people tracked — it's the small habits that connect a pseudonymous address to a real identity. Here are the seven most common mistakes, and how to fix each one.
1. Reusing the Same Address
Every time you reuse a receiving address, you make it trivial for anyone to see every payment you've ever received at that address in one place. Generate a fresh address for every transaction — nearly every modern wallet does this automatically if you let it.
2. Sending KYC Withdrawals Straight to a Fresh Wallet
Withdrawing from a KYC exchange to a wallet you then reuse for everything else links your entire on-chain history to your verified identity. Analytics firms like Chainalysis are built specifically to follow this exact pattern — see how Chainalysis tracks your wallet for the mechanics.
3. Ignoring Dust Attacks
Tiny, unsolicited amounts of BTC sent to your address aren't free money — they're often used to link your address to others you control once you unknowingly spend the dust together with your real funds. Learn how dust attacks work and how to detect them.
4. Broadcasting Transactions Without Tor
Your IP address is exposed to the Bitcoin network every time you broadcast a transaction, unless your wallet routes through Tor. This is one of the most overlooked leaks because it happens at the network layer, invisible in your wallet's UI. See how to use Tor with Bitcoin.
5. Not Managing Your UTXOs
Combining unrelated UTXOs in a single transaction — even accidentally — tells an outside observer that both almost certainly belong to the same person. Coin control, offered by wallets like Sparrow and Electrum, lets you choose exactly which UTXOs to spend. Read what a Bitcoin UTXO is and why it matters.
6. Posting Your Address Publicly
Sharing a donation address, tip address or personal address on social media permanently and publicly links that identity to every transaction that address ever makes — past and future. Use a dedicated address you never reuse elsewhere for any public purpose.
7. Using Custodial or Web Wallets
If you don't hold the private keys, you don't have a private wallet — the custodian does, and they can see, freeze or report every transaction. Self-custodial wallets are non-negotiable for real privacy.