On this page
How regulators push back (beyond Tornado Cash)
- Exchange delistings: Binance, Kraken, and others delisted Monero, Zcash, and Dash from various jurisdictions under AML/Travel Rule pressure. Availability varies by region.
- FATF Travel Rule: VASPs must pass originator and beneficiary information with transfers; privacy coins complicate this and some regulators have effectively required their delisting.
- EU MiCA: doesn't ban privacy coins outright but requires CASPs to comply with AML rules that effectively constrain their offering.
- Indictments of operators: the founders of Samourai Wallet (2024) and the Tornado Cash developer Alexey Pertsev (sentenced 2024 in the Netherlands) were prosecuted for facilitating money laundering — a parallel track to the sanctions track.
Sanctioning or prosecuting the publishers of smart-contract code raises a First Amendment question: is publishing code a form of protected speech, like publishing cryptographic research or a recipe? Advocates argue yes — the code is a tool, and tools are neutral. Prosecutors argue the intent and structure of these tools is to facilitate laundering, and that publishing + operating + marketing them together crosses the line. The Tornado Cash delisting didn't resolve this; it sidestepped it on the narrower ground that immutable contracts aren't property. The “code as speech” question remains live and is likely to reach higher courts.
The privacy-vs-tracing tradeoff: who wins?
Privacy tech and chain analysis are in an arms race. Privacy coins and mixers raise the cost of tracing; chain-analysis firms (Chainalysis, TRM Labs, Elliptic) build heuristics and probabilistic attribution to lower it again. The policy question isn't whether tracing is possible — it's what the default should be, who bears the burden of proof, and how to balance legitimate privacy (medical payments, dissidents, ordinary financial privacy) against AML, sanctions, and law-enforcement needs. Most jurisdictions have landed on a regulated-VASP model with privacy coins squeezed to the margins.
How this connects to the rest of NodeScholar
This unit is the privacy counterpart to the Tracing unit and the Trace the Funds lab. The Policy Timeline tracks the Tornado Cash sanction/delisting and related enforcement chronologically, and the Regulation by Country page covers where each jurisdiction lands on privacy coins.
Key takeaways
A one-page summary of Privacy Coins & Surveillance. Print it for quick reference.
- Bitcoin and Ethereum are pseudonymous, not anonymous: every transaction is public and linkable to an address, which KYC ties to a real identity at the on/off-ramp.
- Privacy coins (Monero, Zcash) hide sender, recipient, and/or amount at the protocol level using ring signatures, stealth addresses, or zk-SNARKs.
- CoinJoin and mixers break common-input-ownership heuristics at the transaction level — but mixers that re-consolidate funds at a KYC’d exchange still leave a traceable off-ramp.
- Regulators have responded to privacy tech with sanctions (Tornado Cash, 2022), exchange delistings of privacy coins, and Travel Rule obligations on VASPs.
- The March 2025 Tornado Cash delisting (after a November 2024 court ruled immutable contracts aren’t "property" under IEEPA) is a landmark on the limits of crypto sanctions — but mixer use still carries compliance risk.
- The privacy-vs-tracing debate is a policy choice, not purely a technical one. This is educational, not legal advice.
Unit check
80% to complete this unitPass the unit check (4 of 5) to complete this unit.