CoinJoin is a way for several Bitcoin users to combine their payments into a single transaction so that outside observers cannot tell which sender funded which recipient. Every participant keeps control of their own coins the entire time. The blockchain records one large transaction with many inputs and many outputs, and without extra information, no one watching from outside can match them up. Here is how CoinJoin works in practice, from the mechanics of a single round to the mistakes that quietly undo the privacy it provides.
The Mechanics of a Single Transaction
Bitcoin tracks ownership through Unspent Transaction Outputs, or UTXOs. Each UTXO is a specific chunk of coin sitting in your wallet. If you received 0.5 BTC in one transaction and 0.3 BTC in another, your wallet holds two separate UTXOs, not a merged balance of 0.8 BTC. When you spend, the blockchain shows exactly which UTXOs you consumed and where those funds went. Anyone can follow that trail.
A CoinJoin transaction changes the picture by pooling inputs. Several people each contribute one or more UTXOs, and those inputs feed into a single transaction that produces many outputs. The total value in equals the total value out, minus the network mining fee that every Bitcoin transaction pays. What the blockchain shows is one event with many starting points and many ending points, and no built-in indication of which input paid which output.
The safety of the arrangement rests on cryptographic signatures. Every input must be signed by its owner before the combined transaction is valid. Nothing broadcasts until every participant has signed off. That means no coordinator, no other participant, and no attacker can redirect your funds to a different address. Your private keys never leave your device during the round.
Why Equal-Value Outputs Are the Whole Point
The privacy of a CoinJoin depends on one detail: the output amounts. If five people put in different amounts and get back different amounts, an observer can often reconstruct who paid whom just by matching numbers. When the transaction instead produces multiple outputs of identical denomination, that arithmetic breaks down.
Suppose five participants each receive an output of exactly 0.01 BTC. Someone examining the blockchain sees five identical outputs and has no way to know which one belongs to which contributor. Privacy researchers call the group of indistinguishable outputs an “anonymity set.” Larger anonymity sets mean more possible interpretations of who owns what, and the tracing problem grows harder.
That is why denomination is a core design choice for every CoinJoin tool. Smaller denominations pull in more participants but may require breaking a large UTXO across many rounds. Larger denominations mix more value per round but shut out users with smaller balances. Most implementations manage the tradeoff automatically, splitting funds across rounds as needed.
How Participants Find Each Other
CoinJoin implementations differ mainly in how users assemble a round. There are two general models.
Centralized Coordinators
In the coordinator model, a central server runs the logistics. It collects registered inputs, assigns output addresses, and puts together the unsigned transaction for participants to review and sign. A well-designed coordinator never takes custody of anyone’s funds, and it uses cryptographic blinding so it cannot itself link a specific input to a specific output. Its role is logistical.
The weakness is a single point of failure. When zkSNACKs, the company behind Wasabi Wallet, shut down its coordinator in June 2024, users of that wallet lost their default CoinJoin functionality overnight. The wallet still works for ordinary Bitcoin transactions, and the underlying protocol (called WabiSabi) allows connection to third-party coordinators, but users have to configure that themselves.
Peer-to-Peer Maker-Taker
The alternative removes the coordinator entirely. JoinMarket pioneered a maker-taker system: “makers” keep their wallets online and offer liquidity for CoinJoin rounds in exchange for a small fee, and “takers” pay that fee to initiate a mix when they want one. Maker fees on JoinMarket are extremely low, often around 0.001% to 0.002% of the transaction amount. Because no central party runs the system, none can be shut down or pressured into logging user data. The tradeoff is a steeper learning curve.
What a Round Looks Like Step by Step
The details vary by software, but the shape of a round is consistent. You start by selecting which UTXOs from your wallet you want to mix. Coin selection matters here, for reasons the next section covers. Your wallet registers those UTXOs with a coordinator, or posts an offer on the peer-to-peer market.
Then you wait for enough other participants to join. Depending on demand, that waiting period runs from a few minutes to several hours. Once the round fills, your software assembles the combined transaction. You review it, verify that your outputs appear correctly, and sign. The transaction stays invalid until every participant has signed.
When all signatures are in, the completed transaction goes out to the Bitcoin network. Miners process it like any other transaction. You end up with new UTXOs in your wallet, now carrying the privacy benefit of having been mixed with other participants’ funds. Many implementations automatically re-queue your mixed outputs for additional rounds, compounding the effect over time.
Minimum amounts vary. Wasabi Wallet 2.0 set its minimum at 5,000 satoshis (0.00005 BTC), low enough that most users can participate. JoinMarket’s minimums depend on what makers are currently offering. You always pay the standard Bitcoin network mining fee, and in maker-taker systems the taker pays a small additional fee to the makers providing liquidity.
Toxic Change and How Privacy Quietly Fails
The gains from a CoinJoin round can be undone in seconds by careless spending afterward. The most common way this happens involves what privacy researchers call “toxic change.” When your input UTXO doesn’t divide evenly into the round’s denomination, the leftover comes back to you as a change output. That change is not mixed. It is directly linked to your original pre-mix UTXO and carries no privacy benefit.
If you later create a transaction that spends both a mixed output and a toxic change output together, you have effectively told the blockchain that the same person controls both. An analyst can use that link to unravel the mixing entirely, connecting your mixed coins back to your original identity. This is the single most common way CoinJoin privacy fails in practice.
The rules for holding on to your privacy after a round are straightforward:
- Never combine mixed and unmixed UTXOs in the same transaction. That includes toxic change, exchange-linked coins, and anything else tied to your identity.
- Avoid merging different mixed outputs together unless you have to. Spending two mixed outputs at once tells an observer that the same person participated in both rounds.
- Use deliberate coin selection. Wallets like Sparrow and JoinMarket’s Jam interface let you choose specific UTXOs to spend. Use that feature instead of letting the wallet pick automatically.
- Know your change before spending. Track which UTXOs are mixed, which are toxic change, and which have never been through a round. Label them if your wallet supports tagging.
Wasabi Wallet 2.0 addresses part of this problem by setting its minimum CoinJoin amount at 5,000 satoshis, so most change outputs above that threshold get automatically registered for a future round rather than sitting in your wallet as a liability.1Wasabi Docs. Change Coins
What Is Actually Available Now
The CoinJoin software landscape shifted sharply in 2024. Two of the most popular tools effectively lost their mixing capabilities, and what remains asks more of the user.
- Wasabi Wallet still functions as a Bitcoin wallet, and its WabiSabi protocol technically supports third-party coordinators. After zkSNACKs discontinued its own coordinator in June 2024, users have to find and configure an alternative manually.
- Samourai Wallet’s Whirlpool mixing service is no longer operational. The U.S. Attorney’s Office for the Southern District of New York brought charges against Samourai’s founders in April 2024 for unlicensed money transmission and conspiracy to commit money laundering. Both founders pleaded guilty by late 2025.
- JoinMarket, the decentralized maker-taker implementation, remains operational. It requires running your own Bitcoin node and is more complex to set up, but its peer-to-peer design means no central entity can be shut down. It pairs with the Jam web interface for a friendlier experience.
- Sparrow Wallet is a desktop Bitcoin wallet that has incorporated CoinJoin functionality and offers detailed coin control features useful for managing mixed and unmixed UTXOs.
Hardware wallets from major manufacturers can pair with some of these desktop wallets, letting you sign CoinJoin transactions while keeping your keys on a dedicated device. Which hardware wallets work with which CoinJoin software changes often, so check the documentation for your setup before committing funds.
Legal and Tax Posture in the United States
Using CoinJoin software to mix your own Bitcoin on your own device is not illegal under federal law. FinCEN’s 2019 guidance drew a line between operating an anonymizing service, which is money transmission and requires Bank Secrecy Act registration, and merely providing anonymizing software, which is not.2Financial Crimes Enforcement Network. FIN-2019-G001 Application of FinCEN Regulations to Certain Business Models Involving Convertible Virtual Currencies The legal exposure concentrates on people who run coordinators, collect fees, and maintain infrastructure, not on individual users. That said, exchanges and custodial services increasingly flag or reject deposits with CoinJoin activity in their history. If you plan to move mixed coins back to a regulated exchange later, some platforms may freeze or close the account.
On taxes, the IRS treats digital assets as property and has not directly addressed CoinJoin.3Internal Revenue Service. Frequently Asked Questions on Digital Asset Transactions Transferring digital assets between wallets you own is generally a non-taxable event, except to the extent you pay fees. A CoinJoin where you send yourself the same value you started with arguably fits that description. But the IRS also says that exchanging digital assets for property “differing materially in kind or extent” triggers a capital gain or loss, and whether receiving different UTXOs of the same total value counts as materially different is an open question. The conservative approach is to carry the cost basis of your original UTXOs forward to the outputs you receive, and to report any value difference (after fees) on Form 8949.4Internal Revenue Service. Instructions for Form 8949 Any network or coordinator fees increase your basis in the resulting outputs. Keep records of every round.