What is CoinJoin?

A collaborative Bitcoin transaction in which several people combine inputs and take equal-sized outputs, so no observer can say which output belongs to which participant.

The idea was proposed publicly in 2013 and requires no protocol change. It is an ordinary Bitcoin transaction that happens to have many participants, which is precisely what makes it work: nothing on chain distinguishes it from any other multi-input transaction except the tell-tale equal output sizes.

Unlike a custodial mixer, nobody takes possession of the coins. Every participant signs only a transaction that pays them their own output, so the transaction fails rather than steals if someone drops out.

How it works

The mechanism attacks the common-input-ownership heuristic directly. Chain analysis assumes that several inputs spent together belong to one owner. A CoinJoin makes that assumption false, and because an observer cannot tell which transactions are joins and which are ordinary, it weakens the heuristic generally rather than only for the participants.

Equal output sizes are the essential detail. If five people each contribute funds and each takes an output of exactly the same amount, the outputs are interchangeable and no amount-based matching works. Unequal change outputs remain linkable, which is why implementations handle change carefully and why repeated rounds are used to increase the anonymity set.

A coordinator arranges each round, collecting inputs and output addresses and assembling the transaction. It never holds funds, but it is the weak point: a coordinator that records which input supplied which output quietly undoes the privacy participants were paying for. Implementations use blind signatures so the coordinator learns less, with varying degrees of success.

Exchanges treat post-CoinJoin coins as high risk and have frozen deposits and closed accounts over them, which is the practical cost of using it.

Example

Illustrative. Five participants each contribute inputs and each receives an output of exactly 0.1 BTC, plus separate change. An observer sees one transaction with, say, eight inputs and five identical 0.1 BTC outputs. Any of the five outputs could belong to any of the five participants, so the observer's best guess is one in five for each. Repeating with a second round of five participants raises that to one in twenty-five, which is how anonymity sets compound across rounds.

Why it matters when you buy

If you buy on a regulated exchange, your coins already have a documented origin tied to your identity, and passing them through a CoinJoin does not remove that record. It does change how the coins look on their next deposit, which can trigger a hold or an account closure at the receiving venue. Screening practice varies, and the exchange pages record licensing and jurisdiction.

Related terms

mixer — the custodial alternative with counterparty risk; coin control — choosing which outputs enter a join; chain analysis — the heuristics a join defeats; utxo — the equal outputs a round produces; privacy coin — chains where this is built in.

Questions

Is CoinJoin legal?

It is a Bitcoin transaction, and using one is not in itself an offense in the jurisdictions RampAtlas tracks. That is separate from how an exchange treats the resulting coins, which is a private commercial decision the exchange makes under its own risk policy.

Does it make my coins untraceable?

No. It raises the cost of attribution by producing a set of outputs an observer cannot distinguish between. Larger anonymity sets and repeated rounds raise it further, and careless handling afterwards, such as consolidating a joined output with a labeled one, undoes it.

Why do exchanges flag it?

Their screening software labels the transaction pattern as high risk because it is designed to break attribution. The flag reflects the pattern, not any finding about your coins specifically.