Crypto Basics
What Are Privacy Coins? Monero, Zcash, and Restrictions
Privacy coins are cryptocurrencies with protocol-level features that hide sender, receiver, or amount by default. Monero hides with ring signatures and stealth addresses. Zcash hides with zero-knowledge proofs. Several jurisdictions restrict how exchanges may service them. This page explains the mechanics and the rules, with sources.
The definition
A privacy coin hides transaction details in its own protocol. The hiding sits in the base layer. It ships with the coin itself. It is not a service on top. It is not a wallet setting. The formal name for the class is anonymity-enhanced cryptocurrency.
Monero describes itself, in its own words, as the leading coin for private and censorship-resistant transactions [1]. The project’s summary names three technologies. Stealth addresses. Ring signatures. RingCT. Together they hide the sender, receiver, and amount of every single transaction [1]. Those are the issuer’s words. This page quotes them. It does not adopt them.
Zcash takes the second major design path. The contrast between the two projects is documented too. Monero calls itself the only major coin where every user is anonymous by default. It names Zcash as a selectively transparent alternative [1]. Default versus optional is the axis. Each project describes the other well enough for the distinction to stand.
How Monero hides
Ring signatures obscure the sender. A ring signature is a digital signature. Any member of a group can perform it. Each member has keys. Moneropedia states the security property in its own words. It should be computationally infeasible to determine which of the group members’ keys was used [2].
The decoys in the ring come from the blockchain itself. The wallet pulls public keys as outputs. It selects them via a gamma distribution method [2]. In a ring of possible signers, all ring members are equal and valid. An observer cannot find the real signer. The entry calls this plausible deniability [2].
Stealth addresses handle the receiver. The project’s summary is plain. Only the sender and receiver can determine where a payment was sent [1]. RingCT covers the amount. All three run by default.
The issuer extends this into a fungibility claim. Every transaction is private, Monero cannot be traced, and holders need not worry about blacklisted or tainted coins [1]. That is positioning. It is recorded here as the issuer’s position, not as neutral fact.
How Zcash hides
Zcash encrypts transactions with zero-knowledge proofs. The acronym expands to zero-knowledge succinct non-interactive argument of knowledge. The proof shows possession of information, such as a secret key [3]. It reveals nothing about it. No interaction between prover and verifier is needed.
Zcash’s own words on the key property: shielded transactions can be fully encrypted on the blockchain. Yet they can still be verified as valid under the network’s consensus rules [3]. The network confirms a transaction follows the rules. It does not learn the transaction.
The May 2022 network upgrade brought the Orchard shielded protocol on the Halo 2 proving system [3]. It removed the trusted setup that earlier versions needed. Zcash also calls itself the first widespread use of this proof technology [3]. An issuer’s first is recorded as an issuer’s first.
Mixers are not privacy coins
The United States Treasury draws the same line this page keeps. It sanctioned Tornado Cash as a mixer. Treasury’s words: a tool that indiscriminately facilitates anonymous transactions by obfuscating their origin, destination, and counterparties [4]. A mixer is a service on top of existing assets. A privacy coin is a protocol with privacy in the base layer. The difference is not a technicality. The enforcement record on the books targets the service category.
That record is a dated arc. Both ends are primary. On 8 August 2022, Treasury designated Tornado Cash. The release alleged the mixer laundered more than $7 billion in virtual currency since 2019. It counted over $455 million stolen by the Lazarus Group, a North Korean state-sponsored hacking group [4].
On 21 March 2025, Treasury announced the delisting. It had exercised its discretion to remove the sanctions. The release cited novel legal and policy issues raised by sanctions in evolving technology. It stayed deeply concerned about North Korean laundering. It cautioned United States persons before engaging in risky transactions [5].
The arc is why this page never states sanctions status in bare present tense. The status changes. The dates are the claim.
Where they are restricted
Dubai’s Virtual Assets Regulatory Authority bans the class outright. The rulebook’s operative sentence can be quoted whole. The issuance of Anonymity-Enhanced Cryptocurrencies and all VA Activity(ies) related to them are prohibited in the Emirate [6]. That is regulator text, read directly, from the current rulebook. No interpretation is needed.
The European Union passed a money-laundering regulation in 2024. It brings crypto-asset service providers into scope. It bans anonymous crypto-asset accounts. It bans servicing of these coins. The regulation’s official summary and secondary legal analyses carry that reading. The full operative text was not readably retrievable in this site’s research pass. So this page cites the regulation by number and effect. It states no article numbers. It notes the reported application date of July 2027 for service providers.
Japan and Korea are recorded as sourced events. Regulator pressure built there in 2018 and 2019. Japanese exchanges delisted privacy-oriented coins. Japan’s Financial Services Agency proposed revised exchange guidelines in June 2019. Korean exchanges warned of delistings as travel-rule rules took hold. Press reports and a 2023 Chainalysis account carry the record [7]. The primary instruments behind both records were not reachable in this pass. This page states the events, sourced and dated. It does not state that either country banned privacy coins as law.
In the United States, this pass found no federal ban on holding or trading privacy coins. The documented federal actions target services. The mixer designation and delisting above are that record. State-level rules were outside this pass. Absence of a found ban is a finding about this pass, scoped. It is not legal advice about any country.
Exchange actions round out the record. None of these is a statute. They are company decisions, not laws. Bittrex announced removal of popular privacy coins in January 2021. Kraken delisted Monero for United Kingdom customers. Huobi removed seven privacy tokens, citing new financial rules. The dated Chainalysis account carries each [7]. Dates are in the record.
The perception debate, sourced
The belief that privacy coins exist for crime is common. The sources that note it also complicate it. The 2023 Chainalysis account notes the perception. As it reports, many believe privacy coins serve mainly laundering, hacking, and terrorist financing. The same account records the counterpoint. Most criminals still use Bitcoin, citing liquidity, referencing a RAND report [7].
A Perkins Coie legal analysis, carried by the same account, argued these coins pose no more inherent risk to AML duties than other cryptocurrencies [7].
This page’s own voice stays definitional. Who believes what is reported as who believes what. The mechanics above are issuer and spec text. The status records are regulator text. The perceptions are sourced to their holders. A perception with no name attached is just an assertion.
How this page was checked
Seven sources, four tiers, kept distinct. Issuer and spec text carries the mechanics. Monero’s own pages carry ring signatures. Zcash’s own explainer carries the proofs. Regulator text carries every legal claim it can. The VARA rulebook was read directly. Both Treasury releases were read directly. The 2023 Chainalysis account is the attribution tier. It carries perceptions, exchange actions, and the Japan and Korea event records. Each is labeled as such. The research pack behind this page records the confidence ladder for every country row. It names which primaries were blocked. The page wording mirrors that ladder rather than smoothing it.
What would change the answer
The mechanics move slowly, at protocol-upgrade speed. The Orchard upgrade of May 2022 is the newest one carried. The legal record moves faster. The European Union regulation is reported to apply from July 2027. Its full text should replace this page’s summary once read. Japan and Korea upgrade from attributed events to verified law if the primary instruments are recovered. The sanctions arc changes on Treasury action, as 2025 showed. The dated claims are the contract. The re-check cadence for the legal sections is annual, plus event-driven updates for enforcement actions.
Where this page sits
The regulation page covers how governments treat crypto-assets. The scam page covers fraud patterns. The wallet page explains the keys underneath. The cryptocurrency introduction defines the asset class. The hub frames the cluster.
Frequently asked questions
What are privacy coins?
Cryptocurrencies whose own protocols hide transaction details by default. Monero hides the sender, receiver, and amount of every transaction. It names stealth addresses, ring signatures, and RingCT as the three technologies. Zcash encrypts transactions selectively, using zero-knowledge proofs. A different design for the same goal.
Are privacy coins illegal?
Nowhere that this site's research verified bans holding them. The verified restrictions govern services. Dubai's regulator prohibits issuing or servicing them in the Emirate. Japan and Korea saw exchanges delist them after regulator pressure, per reporting. United States federal actions on record target services, not holdings.
What is the difference between Monero and Zcash?
Default versus optional. Monero calls itself the only major cryptocurrency where every user is anonymous by default. Zcash encrypts selectively. Monero obscures who signed, among a ring. Zcash proves a transaction is valid without revealing the transaction.
Is Tornado Cash a privacy coin?
No. The United States Treasury's own designation calls it a mixer. A mixer is a service that hides transactions on top of existing assets. A privacy coin is a protocol with the hiding built in. The difference matters. The documented sanctions record targets the service category.
Can law enforcement trace privacy coins?
Chain-analysis firms work on it. The firms describe the methods as fairly nascent and highly technical for courts, in TRM wording carried by a 2023 Chainalysis account. That is an industry characterization, attributed. It is not a settled capability claim either way.
Do criminals prefer privacy coins?
The belief is common. The evidence points elsewhere. The same 2023 Chainalysis account notes the perception, then notes that most criminals still use Bitcoin, citing liquidity. Perception claims on this page stay attributed to who holds them.
Why did some exchanges stop listing them?
Identity and travel-rule rules made anonymous-by-default assets hard to service. Documented actions include Bittrex removals in January 2021 and Huobi citing new financial rules. Each is an attributed, dated company action. None is a law.
Last verified