CoinJoin is a privacy technique for Bitcoin where multiple users combine their inputs into a single transaction with multiple outputs, breaking the on-chain link between specific inputs and specific outputs. Implemented in: Wasabi Wallet (with the Zerolink protocol), Samourai Wallet (Whirlpool, with the founders prosecuted in 2024 on money-laundering conspiracy charges), Sparrow Wallet (manual CoinJoin coordination), JoinMarket (peer-to-peer market for CoinJoin liquidity).
What it means in practice
CoinJoin is the privacy retrofit for Bitcoin. Every Bitcoin transaction is public on the blockchain by default; CoinJoin reduces the heuristic confidence with which forensic tools can link a specific input to a specific output. The privacy is statistical rather than absolute: a single CoinJoin transaction reduces traceability, repeated CoinJoin rounds compound the protection, and the resulting on-chain history is harder to deanonymize. The 2024 prosecutions of Samourai Wallet developers (charged with conspiracy to operate an unlicensed money-transmitting business and conspiracy to commit money laundering) shifted the legal posture: CoinJoin coordination services in the US face structural prosecution risk, while the underlying technique remains legal in most jurisdictions for individual users. Wasabi Wallet’s coordinator stopped accepting US users in 2024 in response.
Where it shows up
Used by: Bitcoin users seeking transactional privacy on the public ledger, journalists and activists in adversarial jurisdictions where on-chain surveillance is a threat, and (in the chain-analysis framing) by criminals laundering proceeds of theft and ransomware. The dual-use tension is the same as Tornado Cash: the privacy use case is real, the misuse cases drive the regulatory response, and individual users face exchange-compliance friction when CoinJoin-output coins arrive at major exchange deposits. Many exchanges flag or freeze CoinJoin-output deposits depending on the chain-analysis confidence score; the flag may resolve through KYC review or may result in confiscation in some compliance regimes.
What you can change today
If your threat model justifies Bitcoin privacy, three considerations. First, Monero is the structurally simpler answer for most threat models that do not specifically require Bitcoin; the privacy is by-default rather than retrofit and the operational friction is lower. Second, if you must use Bitcoin for the privacy use case, Wasabi Wallet (for non-US users since 2024) and Sparrow Wallet (for manual CoinJoin) remain available, with the operational discipline of repeated rounds to compound privacy and the awareness that exchange deposit friction may follow. Third, separate operational wallets from personal wallets, never let CoinJoin-output coins flow to exchanges where you have KYC identity, and assume the regulatory landscape around CoinJoin will continue tightening through 2026 and beyond.