01The anonymity set
An anonymity set is the group of possible matches for a given transaction. If a pool has one deposit and one payout, the set has one member and privacy is zero. If a pool has thousands of deposits and payouts in a similar window, the set is larger and the link is weaker.
Set size is not published by most services, and it changes over time. A busy service at a quiet hour may offer a smaller effective set than its marketing suggests.
An anonymity set can look large on paper and shrink to a handful of candidates once amounts and timing are applied. Treat the set as a starting point, not a result.
- A larger pool improves the set.
- A longer delay spreads the window.
- Split outputs complicate amount matching.
- Your post-payout behavior can collapse the set.
02Private, anonymous, and full privacy: what the words promise
Private, anonymous, and full privacy are marketing words, not technical standards. "Private" usually means a stated data policy and fresh payout addresses. "Anonymous" usually means no account. "Full privacy" usually means both, plus a delay and split outputs. None of the three has a definition a service must meet.
A prominent listing, an ad, or a top position in Google or Yandex does not make a private stablecoin mixer more private. Read the service's own policy before treating a label as a guarantee.
The same limits apply to USDC routes: the chain is public, the issuer can act on a contract, and a payout address can be linked through behavior. Changing the token does not change the ledger.
03What reduces anonymity
Anonymity is easier to lose than to build. The list below covers the common ways a user undoes a mix without realizing it.
| Behavior | Effect | Why |
|---|---|---|
| Reusing the payout address | Links payout to identity | The address inherits history |
| Immediate consolidation | Rejoins mixed and unmixed funds | The graph reconnects |
| Depositing to a KYC exchange | Attaches identity to the payout | The exchange records the source |
| Round-number amounts | Strengthens amount matching | Easy to spot in a pool |
| Very short delay | Strengthens timing matching | Deposit and payout pair up |
04How to judge an anonymity claim
Use the same criteria for every service. A claim that cannot be tied to a mechanism is marketing, not privacy engineering.
| Criterion | Good sign | Warning sign |
|---|---|---|
| Set size | Pool described with realistic volume | "Untraceable" with no mechanism |
| Delay | Randomized, stated window | "Instant" as a privacy feature |
| Outputs | Configurable splits | Single fixed payout |
| Data policy | Defined retention | No policy page |
| Claims | Specific and bounded | Absolute guarantees |
05Risks and limitations
The biggest mistake is treating a mix as a reset button. The ledger keeps the deposit and the payout, the issuer keeps freeze authority, and your later behavior keeps creating links.
The privacy limits are structural: a mix changes the graph between addresses, not the existence of the transactions. A service that presents those limits as solved is describing marketing, not mechanism.
There is also counterparty risk: a service that holds your funds can fail or act against you, and an anonymous operator is harder to pursue.
06Levels of privacy
The table frames realistic levels rather than binary anonymity.
| Level | What it resists | What it does not |
|---|---|---|
| Direct transfer | Nothing | Any graph analysis |
| Basic mix | Casual observers | Determined analysts |
| Mix plus delays and splits | Timing and amount heuristics | Off-chain identity |
| Mix plus behavior discipline | More of the graph | Issuer policy and law |
07What is observed, claimed, and unknown
Anonymity is measured against an observer. The ledger gives you one view; the service's set size and your own behavior decide the rest.
Visible on a public ledger or in documentation.
- The public ledger shows deposits and payouts after any mix.
- Address reuse and consolidation are visible on-chain.
- A service's stated delay and output policy can be read.
Stated by a service or vendor, not independently verified.
- A service's anonymity set is as large as its marketing suggests.
- The mix resists a specific analyst's heuristics.
- Absolute anonymity is achievable with the right service.
No reliable public answer.
- The real anonymity set at a given hour.
- The threat model and resources of a specific observer.
- Whether future analysis will connect a payout to a deposit.
The labels follow the guide's evidence scale. Methodology explains how facts, claims, and unknowns are separated.
This guide explains mechanics and does not operate a mixing service. Use mixing for lawful privacy only; sanctions and AML rules apply regardless of the tool. Read Responsible use and Methodology.