Monero, Wasabi, and what mixers actually do in 2026.

What changed in the last two years

Three structural shifts have reshaped the operational picture for cryptocurrency privacy since 2024.

The first is the regulatory weight on mixers. Tornado Cash sanctions in August 2022 set the precedent. The 2023 indictments of Samourai Wallet’s founders and the 2024 indictments around the Wasabi Wallet ecosystem extended the pressure. Custodial mixing services have largely been pushed out of the legitimate operator space. Non-custodial CoinJoin implementations remain technically operational but with narrower coordinator infrastructure. The framework that worked in 2021 is structurally diminished in 2026.

The second is the maturation of chain-analysis tooling. Chainalysis, TRM Labs, Elliptic, and a tier of smaller competitors now produce attribution graphs that connect on-chain activity to identified exchange accounts with high confidence. The graphs are sold to law enforcement, financial institutions, and increasingly to compliance teams at every regulated crypto business. The gap between “your transaction is on the blockchain” and “your transaction is attributed to your name” has narrowed substantially.

The third is the de-listing of privacy coins from major exchanges. Monero, Zcash, and Dash have been delisted from Binance, Kraken (in some jurisdictions), and most regulated US-facing exchanges. The on-ramp into privacy coins has narrowed to peer-to-peer marketplaces, decentralized exchanges, and a handful of smaller venues that retain listings. The on-ramp friction is now the operational bottleneck.

Monero, what it does and does not do

Monero’s protocol uses ring signatures, stealth addresses, and confidential transactions to hide the sender, the receiver, and the amount of every transaction. The on-chain visibility of a Monero transaction is limited to the existence of the transaction. The participants and amounts are not exposed to chain analysis at the protocol level.

The protocol itself works as designed; what it does not cover are the patterns at the edges where coins enter and leave. If you bought your Monero from an exchange that knows your name, the exchange has a record of the purchase. If you sold your Monero back to an exchange that knows your name, the exchange has a record of the sale. The privacy lives in the path between purchase and sale. The path is private; the endpoints are not. Reconstructing those endpoints from open sources is a routine OSINT exercise, broken down step by step in our piece on what an OSINT investigator pieces together about you in thirty minutes.

The clean Monero use pattern: peer-to-peer purchase from someone who does not know your real identity, hold the Monero in a wallet that you control, spend it directly to a recipient who is also receiving Monero (rather than converting back to identifiable currency). The pattern is operationally restrictive. The privacy holds in proportion to how completely the discipline is followed.

Wasabi, JoinMarket, and what is left of CoinJoin

Bitcoin’s CoinJoin technique combines multiple users’ transactions into a single transaction that obscures which input paid which output. Wasabi Wallet was the most-used implementation. The 2024 enforcement actions against Wasabi’s coordinator created discontinuity. Wasabi 2.0 still exists; the coordinator changed; the use base contracted significantly.

JoinMarket, the older and more decentralized CoinJoin protocol, continues to operate. The user experience is meaningfully more difficult than Wasabi’s. The privacy properties are similar in principle. A smaller user base means a smaller anonymity set, which translates directly into less practical privacy even though the underlying technique still functions.

The thing CoinJoin does not solve: the on-ramp and off-ramp. CoinJoin obscures the link between a previous Bitcoin holding and a subsequent Bitcoin holding within the same protocol. It does not change that the on-ramp and off-ramp exchanges still know your name on both ends of the transaction. The chain-analysis tools include heuristics that detect CoinJoin participation and flag it for compliance teams. Use of CoinJoin is, in some institutional postures, itself a flag for elevated scrutiny.

The legal frame in 2026

Three categories of legal posture matter, with very different practical effects.

Operating a custodial mixer is, in the US under FinCEN guidance and in most EU member states under AML directives, a money transmission activity that requires licensing. Unlicensed operation is criminally prosecutable, as the Tornado Cash and Samourai indictments demonstrated. The risk profile for operators is high.

Using a privacy tool to enhance the privacy of your own legitimate transactions is, in most jurisdictions, lawful. The use of Monero, the use of Wasabi or JoinMarket, the use of self-custody wallets, and the use of decentralized exchanges are not, by themselves, illegal in the US, the EU, the UK, or most other developed jurisdictions. The privacy use case is protected speech and protected commercial activity.

Using a privacy tool in the commission of an offense (laundering proceeds of a separate crime, evading sanctions, financing terrorism) brings the underlying offense into play. The privacy tool does not create the offense; it can be a factor in sentencing or in proving knowledge. The framework around what becomes producible in those cases is the same one we cover in when law enforcement requests your client communications.

When privacy coins are the right answer

The clean use cases.

Donations to politically sensitive recipients. Journalists’ funding from international sources. Protest movement support across borders. The transactions need to clear; the names of the participants would attract retaliation if attached. Privacy coins solve a real problem that public-ledger crypto cannot.

Operational expenses for activities that are legal in the jurisdiction where the activity happens but problematic in the jurisdiction where the funder lives. Reproductive health support across state lines, harm-reduction services in jurisdictions where the activity is criminalized, end-of-life support in places where it is not legally available. The private channel is not for evasion; it is for the legitimate confidentiality of personal medical and ethical decisions.

Routine commercial privacy for high-value or high-sensitivity counterparties who do not want their business relationships exposed in a public ledger. The same operational logic as paying a contractor in cash for work that is legitimate but private.

When privacy coins are the wrong answer

Two categories where the friction is not worth the reward.

Routine commerce that does not require privacy. Buying coffee, paying for streaming services, sending money to family. The ergonomic cost of the privacy stack is high. The marginal privacy benefit over a debit card or a regular bank transfer is low for these use cases. Use the right tool for the situation.

High-stakes transactions where you cannot maintain the discipline at the endpoints. The privacy properties of the protocol are not enough if the on-ramp or the off-ramp leaks. For users who cannot or will not source coins from genuinely uncorrelated sources and spend them to genuinely uncorrelated recipients, the protocol-level privacy is theatrical. The framework for thinking about whether your operational discipline matches the protocol’s privacy claim is the same one we walk through in why your security setup fails in the field.

Frequently asked questions

Is buying Monero legal in the US?

Yes. Holding, sending, and receiving Monero is legal in the US for civilians. The transactions you conduct with Monero are subject to the same tax and reporting obligations as any other property transaction (the IRS treats cryptocurrency as property for tax purposes; gains are taxable, conversions are taxable events). Specific jurisdictions have considered restrictions; none have implemented blanket bans as of 2026.

Should I use Zcash instead of Monero?

Zcash supports two transaction types: transparent (similar to Bitcoin in privacy properties) and shielded (similar to Monero). The shielded pool is the privacy-relevant feature. The shielded pool’s anonymity set has been smaller than Monero’s for most of Zcash’s history, which weakens the practical privacy. Recent improvements (Halo 2, the unified addresses introduced in 2022 and refined since) have shifted the dynamic. For most use cases in 2026, Monero’s larger anonymity set still produces stronger practical privacy. Zcash with shielded transactions is a reasonable secondary option for users who specifically prefer Zcash’s other properties.

What about Lightning Network for Bitcoin privacy?

Lightning Network improves Bitcoin’s privacy properties for the participants in a channel by keeping the actual payments off-chain. The on-chain footprint is the channel opening and closing transactions, which are visible. The privacy gains are real; they do not match Monero’s protocol-level privacy. Lightning is a meaningful improvement for routine payments, not a substitute for privacy coins for high-sensitivity use cases.

What is the cleanest on-ramp for privacy coins in 2026?

For Monero specifically: Bisq (a peer-to-peer decentralized exchange that supports Monero), some atomic-swap implementations between Bitcoin and Monero, and direct peer-to-peer purchase from people you already know. Each has higher friction than buying from a centralized exchange. The friction is the price of the on-ramp privacy. There is no exchange-grade frictionless on-ramp that preserves the privacy properties; the design space has not produced one.

---

There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.