Privacy coins: complete list, history and global regulation

Privacy coins hide the things a public blockchain normally broadcasts — who paid, who was paid, and how much. This guide catalogues every meaningful privacy asset still trading in 2026, explains the cryptography behind each one, traces four decades of digital-cash history, and summarises where each major jurisdiction now stands.

What makes a coin a privacy coin

Bitcoin is pseudonymous, not private. Every transaction it has ever settled is public, permanent, and trivially linkable: chain-analysis firms cluster addresses, attach them to exchange deposits, and reconstruct a spending history that no bank statement would ever expose to the public.

A privacy coin breaks at least one of the three links a transparent ledger publishes — the sender, the receiver, and the amount — using cryptography rather than a promise. The strongest designs break all three by default, so every user contributes to everyone else's anonymity set; weaker designs make privacy optional, which shrinks that set to whoever bothers to opt in.

How to judge one

• Is privacy on by default?

  An optional shielded pool is only as private as the number of people using it. Mandatory privacy means the whole supply is the anonymity set.

• What exactly is hidden?

  Amounts, addresses, and the transaction graph are separate problems. Some chains hide amounts but leak the graph; mixnets hide network metadata but not the ledger.

• Is there a trusted setup?

  Early zk-SNARK systems required a multi-party ceremony whose toxic waste, if kept, could forge coins. Newer proof systems (Halo 2, Bulletproofs) removed that requirement.

• Can you prove a payment when you need to?

  View keys and disclosure proofs let a holder reveal a specific transaction to an auditor, accountant, or exchange without deanonymising the rest of their history.

• Is it auditable at the supply level?

  Fully shielded supplies make inflation bugs hard to detect. Monero's ring signatures and Zcash's turnstile design both address this differently.

The five privacy technologies

Almost every asset in the list below is built from one of five cryptographic families. Knowing which one a coin uses tells you more about its real-world privacy than its marketing does.

1. 1.Ring signatures, RingCT and stealth addresses

   A spend is signed by one real key hidden among decoys, amounts are hidden by Pedersen commitments proved with Bulletproofs, and each payment lands on a one-time stealth address derived from the recipient's public key.

   Used by: Monero, Beldex, Zano, Dero

2. 2.Zero-knowledge proofs (zk-SNARKs / Halo 2)

   The spender proves in zero knowledge that a valid, unspent note exists and is being consumed correctly, without revealing which note, whose it is, or its value. Halo 2 removed the trusted-setup requirement in 2022.

   Used by: Zcash, Iron Fish, Aleo, Namada, Penumbra, Railgun

3. 3.CoinJoin and mixing protocols

   Several users combine inputs into one transaction with uniform outputs, so an outside observer cannot match inputs to outputs. It is bolted onto a transparent chain, so quality depends on liquidity and on the coordinator.

   Used by: Dash (PrivateSend), Decred (CoinShuffle++), PIVX, Particl

4. 4.MimbleWimble

   There are no addresses and no scripts: transactions are blinded commitments that can be merged and pruned, so the chain stores far less and reveals far less. Interactive transaction building is the trade-off.

   Used by: Grin, Beam, Litecoin MWEB, Epic Cash

5. 5.Confidential compute and network-layer privacy

   Rather than shielding a payment, these networks shield the data or the traffic around it — secure enclaves, encrypted contract state, threshold cryptography, or a mixnet that hides who is talking to whom.

   Used by: Secret Network, Oasis, Phala, Nillion, NYM, Orchid

Complete list of privacy coins (2026)

Every asset below either shields transaction data on its own chain or provides privacy infrastructure for other chains. Assets marked with a link have a live Monivo price page and can be swapped without an account. Market standing changes constantly — treat the status column as context, not as investment advice.

Notable failures and retirements

• • Haven Protocol (XHV) — synthetic private assets; the project wound down after an exploit and the collapse of its peg mechanism.
• • Tornado Cash — an Ethereum mixer, not a coin. Sanctioned by OFAC in August 2022 and delisted from the SDN list in March 2025 after a federal appeals court found immutable contracts are not sanctionable 'property'.
• • Samourai Wallet and Wasabi 1.0 coordinators — Bitcoin CoinJoin coordinators that shut down in April 2024 amid US enforcement action.
• • Bytecoin (BCN) — the original CryptoNote implementation Monero forked away from in 2014, effectively abandoned.

A short history of private digital money

Privacy coins did not appear with Bitcoin. They are the continuation of a cryptography argument that started in the early 1980s, and every major design in the table above is a response to a specific failure that came before it.

1. 1983

   Chaum's blind signatures

   David Chaum publishes the blind-signature scheme that makes untraceable electronic cash mathematically possible — a bank can sign a note without seeing it.

2. 1990

   DigiCash

   Chaum founds DigiCash and ships eCash. It works, but it needs a bank in the middle; the company files for bankruptcy in 1998.

3. 1997–2004

   Hashcash and b-money

   Adam Back's hashcash and Wei Dai's b-money supply the proof-of-work and distributed-ledger ideas Bitcoin later combines.

4. 2008–2009

   Bitcoin

   Satoshi Nakamoto solves double-spending without a central party. The whitepaper recommends a new address per payment — an early admission that the public ledger is a privacy problem.

5. 2011–2012

   The pseudonymity myth breaks

   Academic clustering work and the first commercial chain-analysis tools show Bitcoin addresses can be linked and attributed at scale.

6. 2013

   CryptoNote and Zerocoin

   The CryptoNote whitepaper introduces ring signatures and stealth addresses; Johns Hopkins researchers publish Zerocoin, the first practical way to break the transaction graph with cryptography.

7. 2014

   Monero and Darkcoin

   Bytecoin's controversial launch prompts a fork that becomes Monero in April 2014. Darkcoin (later Dash) ships masternode-coordinated CoinJoin the same year.

8. 2016

   Zcash and Zcoin

   Zcash launches in October with zk-SNARKs and the first large multi-party trusted-setup ceremony. Zcoin (now Firo) ships the first live Zerocoin implementation.

9. 2016–2017

   RingCT and MimbleWimble

   Monero makes confidential amounts mandatory with RingCT in January 2017. The anonymous MimbleWimble paper, posted to an IRC channel in 2016, inspires Grin and Beam.

10. 2018

    The first regulatory wave

    After the Coincheck hack, Japan's FSA presses exchanges to drop anonymous coins; Coincheck delists XMR, DASH and ZEC. Bulletproofs cut Monero fees by roughly 80% later that year.

11. 2019

    FATF Recommendation 16

    The Financial Action Task Force extends the 'travel rule' to virtual assets, requiring originator and beneficiary data to travel with transfers — a rule that is structurally incompatible with shielded transactions. Grin and Beam launch in January.

12. 2020–2021

    Delistings spread

    South Korea's amended Special Financial Information Act forces licensed exchanges to drop 'dark coins' in March 2021. Bittrex Global, ShapeShift and others remove privacy assets. Firo ships Lelantus; Secret and Oasis bring privacy to smart contracts.

13. 2022

    Tornado Cash sanctions and Halo 2

    OFAC sanctions the Tornado Cash contracts in August — the first time code addresses are added to the SDN list. Zcash activates Orchard with Halo 2, eliminating the trusted setup.

14. 2023–2024

    Exchange retreat and the EU rulebook

    Binance delists Monero globally in February 2024 after regional removals. Dubai's VARA rulebook bars licensed firms from anonymity-enhanced coins. In May 2024 the EU adopts the AML package, including a 2027 ban on servicing anonymity-enhancing coins.

15. 2025

    Courts push back

    OFAC removes Tornado Cash from the SDN list in March 2025 following the Fifth Circuit's ruling that immutable smart contracts are not sanctionable property — the first significant legal win for privacy tooling.

16. 2026

    Privacy moves off the order book

    With centralised listings thinner than at any point since 2017, most privacy-asset volume now clears through non-custodial swaps, atomic swaps and peer-to-peer markets rather than through exchange accounts.

Regulation around the world

Two things are worth separating. Almost nowhere is it illegal for an individual to hold or spend a privacy coin. What regulators restrict is the regulated intermediary — the exchange, custodian or payment firm — because that is where the travel rule and anti-money-laundering obligations bite. The global driver is FATF Recommendation 16, adopted for virtual assets in 2019: originator and beneficiary information must accompany a transfer, which a shielded transaction cannot supply.

What this means in practice

• • Owning, running a node for, or spending a privacy coin is legal in most of the world — the compliance burden falls on regulated firms.
• • Expect fewer centralised listings, not fewer coins. Delistings have repeatedly shifted volume to non-custodial and peer-to-peer venues instead of reducing it.
• • Selective disclosure is becoming the compromise: view keys, payment proofs and 'proof of innocence' systems let a user prove one transaction without opening their whole history.
• • Tax obligations do not disappear with privacy. A shielded swap is still a disposal in most tax systems — see our crypto swap tax guide.
• • None of this is legal advice. Rules change quickly and vary by state, province and licence category; check your local position before you transact.

Where privacy coins stand in 2026

The 2019–2026 regulatory cycle did not kill privacy coins; it moved them. Monero remains the deepest privacy market despite losing its largest exchange listings, and the newer zero-knowledge chains — Zcash's Orchard pool, Namada's shared shielded pool, Aleo's private execution — are growing precisely because privacy is being designed in rather than bolted on.

The second shift is architectural. Privacy is increasingly a layer rather than a coin: shielded pools on general-purpose chains, confidential rollups, and metadata protection at the network level. That makes the category harder to delist and harder to define, which is exactly why the EU's 2027 rule targets 'anonymity-enhancing' functionality rather than a list of tickers.

For an ordinary holder the practical consequence is simple: the account-based route into privacy assets keeps narrowing, and the non-custodial route keeps widening.

How to swap privacy coins without an account

Monivo is a non-custodial aggregator. You send from your own wallet, the provider with the best rate settles the trade, and the output goes straight to an address you control — there is no Monivo account, no identity check, and no balance held on your behalf.

1. 01

   Pick the pair

   Choose what you are sending and what you want to receive. Rates from every connected provider are compared in one quote.

2. 02

   Paste your receiving address

   For Monero use your own wallet's primary or subaddress; for Zcash prefer a unified or shielded address so the funds land in the shielded pool.

3. 03

   Send and wait

   Deposit within the quote window. Most privacy-coin swaps settle in ten to thirty minutes depending on confirmations.

Popular privacy routes

This article is general information, not legal, tax or investment advice. Privacy-asset rules differ by country, state and licence type and change frequently — confirm your own position before transacting.