A privacy coin is a cryptocurrency built so that people watching the blockchain cannot read the sender, the receiver or the amount of a transfer. Bitcoin and Ethereum work the other way: if you have only used public chains, every transfer from every game wallet you have funded is publicly visible to anyone who looks up the address. This page explains how Monero and Zcash hide that information and takes you through a first private transfer without handing your recovery phrase to a phisher. It also covers the part of your privacy that the cryptography does not protect.

One idea: who can read the ledger

Every cryptocurrency keeps a shared record of transfers, the blockchain. On a public chain that record is readable by anyone. Suppose you cash out $200 of game tokens to an address and later pay a friend from it. Anyone who knows that address can see the $200 arriving, see the payment leaving and follow the money from there. A privacy coin keeps the shared record but makes the sensitive fields unreadable to outsiders. The network can still confirm that nobody spent coins twice.

The two coins most people mean by "privacy coin" get there by different routes, according to crypto.news's 2026 comparison:

  • Monero (XMR) hides sender, recipient and amount on every transfer by default. A ring signature mixes your signature in with others, so an observer cannot tell which participant actually spent. A stealth address is a one-time address generated for each payment, so only the recipient knows the money is theirs. RingCT (Ring Confidential Transactions) hides the amount.
  • Zcash (ZEC) uses zk-SNARKs, a type of zero-knowledge proof. The proof lets the network check that a transaction is valid without seeing who sent what to whom. The privacy is optional. Zcash has transparent addresses that behave like Bitcoin and shielded addresses that use the proofs, and you are only private when you use the shielded ones.

A third family mixes instead of hiding. CoinJoin bundles many users' transactions together so individual trails are harder to follow. Dash offers it as an optional feature called PrivateSend, per CoinLaw.io. Dash also activated a shielded pool built on Zcash's Orchard design on its mainnet on July 17, 2026.

The difference between "on by default" and "on if you choose" is the one idea to hold on to. It decides how private a given transfer is, which exchanges will list the coin, and which mistakes a beginner can make. The rest of this page follows from it.

Before you start

  • A decision: Monero or Zcash

    Monero is private on every transfer. Zcash is private only from shielded addresses, but it has kept far more exchange and brokerage access.

  • An account at an exchange that lists the coin where you live

    Per crypto.news, Monero is still on KuCoin, MEXC, Kraken (outside the EEA), Gate.io and TradeOgre. Zcash has retained European listings and mainstream brokerage access.

  • A self-custody wallet that supports that specific coin

    Self-custody means you hold the keys, not the exchange. Check the coin is supported before you install or buy anything.

  • Paper and a pen for the recovery phrase

    The recovery phrase (seed phrase) is the list of words that rebuilds your wallet. It belongs on paper or on the device. It never goes on a website or in an email reply.

  • A test amount you can afford to lose

    Neither the coins nor the transfers can be reversed.

On cost: the sources behind this page don't give current exchange trading fees or network fees for either coin, so check the fee schedule on the exchange you pick before you buy. The coins themselves are expensive and volatile. 24/7 Wall St. had ZEC at $1,530 on September 26, 2026, up from $407 on June 29, 2026. Monero was then about 30% below its January 2026 peak near $798. You don't need a whole coin. A small fraction is enough to learn how the wallet works, and that fraction is all you should risk the first time.

On the wallet: you can use a phone or desktop wallet that supports the coin. A hardware wallet keeps the keys on a separate device, which removes the most common way new holders lose money: typing a recovery phrase somewhere it should not go. Hardware wallet makers' customers are targets themselves (see the Trezor phishing campaign below), and the device only helps if you never type its phrase anywhere else. Confirm the model supports Monero or Zcash before you buy one.

A first private transfer, in seven steps

The first real result is a small amount of a privacy coin sitting in a wallet you control, at an address only you can spend from. Buying is not the result. Coins left on an exchange are the exchange's record, not your private balance.

  1. Type the exchange address by hand

    Don't click a search result or a sponsored link to reach the exchange. Malwarebytes found at least 28 lookalike domains for a single crypto payment service, pushed up through poisoned search results and dressed up with character substitution and Punycode (addresses beginning xn--). It worked if the address bar shows the exact domain you typed, with no swapped letters.

  2. Buy a small amount

    Buy the test amount of XMR or ZEC. Remember that the exchange knows who you are and what you bought. That record exists no matter what the coin does afterward. It worked if the balance shows on the exchange.

  3. Install the wallet from its official source

    Install a wallet that supports the coin, from the publisher's own site or official app store listing, not a link sent to you. It worked if the wallet opens and offers to create a new wallet.

  4. Write the recovery phrase on paper

    Create the wallet and copy the phrase onto paper. Don't photograph it, paste it, or type it into anything other than the wallet or device itself. It worked if the wallet confirms the phrase when it quizzes you, and the phrase exists nowhere online.

  5. Copy a receiving address of the right type

    On Monero, every receive is private by design. On Zcash, pick the shielded address. A transparent Zcash address is as public as a Bitcoin one. It worked if you can name which address type you copied.

  6. Withdraw a fraction first

    Send part of the test amount to that address and check the first and last several characters before you confirm. It worked if the amount appears in your wallet after the network confirms it.

  7. Withdraw the rest

    Once the fraction has landed, send the remainder. It worked if the exchange balance is zero and the wallet holds everything, minus fees.

You now hold a privacy coin in self-custody. Notice what is still public. The exchange has your identity, the purchase and the address it sent to. The coin hides what happens after that point, not the withdrawal itself.

Four mistakes newcomers make

1. Treating Zcash as private by default. It isn't. Shielded use has grown fast: crypto.news puts it at 86.5% of transactions as of June 2026. Another crypto.news report, measuring a different way, had shielded transactions at 59.3% of network activity in February 2026 and 30% of the supply held in shielded addresses. Either way, a meaningful share of Zcash still moves in the open. How to tell: the address you sent from or to was transparent. What to do: move the coins to a shielded address and use shielded addresses from then on. Transfers already made from a transparent address stay public.

2. Confusing protocol privacy with operational privacy. crypto.news's phrase for it: "Protocol privacy doesn't equal operational privacy." The cryptography can be sound while you still leak through exchange records, address reuse, bridging coins across chains, or the IP address your wallet connects from. How to tell: you can draw a line from your identity to the coins without breaking any cryptography. What to do: assume anything that touched an identity-verified exchange is linked to you, and judge your privacy from there.

3. Typing the recovery phrase into a "security alert". In September 2026, an attacker got into the email platform Brevo through a single sign-on flaw and sent a phishing email to 347,000 Trezor newsletter subscribers. The email warned of an invented "STM32 Entropy Bug" affecting "1 in 4 devices" and asked readers to enter their recovery phrase. BitBox and CoinTracking customers were targeted in the same campaign. The email used invented technical language and came from a sender list people had trusted. How to tell: you entered your phrase anywhere other than the wallet or device itself. What to do: create a new wallet and move everything to it immediately. Treat the old phrase as burned.

4. Connecting a wallet to a "compliance check". Fake anti-money-laundering (AML) checkers imitate services like AMLBot. They play a "verifying compliance" progress bar, then either ask for a top-up fee or slip in a transaction that drains the wallet. Real AML checkers need only a public address and never a live wallet connection. Malwarebytes named five domains: amlbot-clear[.]com, audittrust[.]shop, bitget-aml[.]com, search-aml[.]net and swapstoken[.]app. How to tell: a site asked you to connect or approve something just to look up an address. What to do: disconnect, revoke any approvals you don't recognize, and if you entered a recovery phrase, move to a new wallet.

After the first transfer

The next skill is judging a privacy coin as an asset as well as a tool. Ask three questions of any coin before you put real money in it.

Can you get in and out? Monero has been delisted by 73 centralized exchanges, up from 51 in 2023. Binance started the wave in February 2024 and OKX followed that year. Invezz argues that licensed exchanges find delisting "the cheaper answer", because Monero's design makes tracing the origin of funds impossible. Demand has held up anyway, with trading concentrated on fewer venues. Zcash's optional privacy gives regulated venues a way to comply, so Zcash has kept its listings and gained US spot ETFs holding nearly $996 million in net assets as of September 25, 2026. A coin you can't sell easily in your country carries a cost that doesn't show on the price chart.

Has the cryptography been tested, and what happened when it failed? On May 29, 2026, researcher Taylor Hornby used AI-assisted auditing to find a critical flaw in the circuit behind Zcash's Orchard shielded pool. The flaw had been there since Orchard launched in May 2022. Patches shipped June 1 to 2, and the Ironwood upgrade (NU6.3) closed the Orchard pool on July 28, 2026. Monero's FCMP++ upgrade, in a second beta stress test since May 6, 2026, would replace ring signatures with membership proofs covering 150 million blockchain outputs. That would make the crowd any one spender hides in much larger. Look for whether problems get found and patched in public; a coin with no reported flaws may simply not have been examined closely.

Is the privacy default or optional? This is the idea from the top of the page again, and it drives both of the other questions. Mandatory privacy protects everyone on the network and costs exchange access. Optional privacy keeps the listings, and only users who choose shielded addresses get the privacy.

The mechanics behind that trade-off, including how ring signatures and zk-SNARKs compare on anonymity and how each fails, are covered in our Monero and Zcash technical comparison.

Picked a coin? Compare the privacy under the hood

Ring signatures against zero-knowledge proofs, default against optional privacy, and what each leaks in practice.

Read Monero vs Zcash

Questions people ask at this stage

Yes. CoinLaw.io found no US federal coin-level ban, and no jurisdiction it studied bans personal holding. The restrictions fall on exchanges and custodians, which is why buying can be harder than owning. FinCEN's 2023 proposed rule on mixing was still a proposal, not a final rule, at the time of that report.

Monero makes every transfer private, so you can't get the setting wrong, but it is harder to buy since 73 exchanges have dropped it. Zcash is easier to buy and has US ETFs, but it is only private if you use shielded addresses. Choose by whether you trust yourself to use shielded addresses every time or would rather the coin make that choice for you.

No. Grayscale's ZCSH, which launched on NYSE Arca on August 25, 2026, gives you exposure to ZEC's price through a brokerage account. You hold fund shares, not coins in a shielded address, so you get none of the privacy. crypto.news also notes the fund is not registered under the Investment Company Act of 1940.

Only on the chain. The exchange you bought from still has your identity and withdrawal record, and address reuse, bridging and your IP address can all leak information. Think of the coin as hiding the transfers, not hiding you.

No. The FBI's IC3 logged nearly 61,000 complaints about government-impersonation scams between January 2025 and July 2026, with losses above $1.6 billion, and many involved crypto kiosk payments. Its alert states that authorities "will never contact members of the public by telephone or text message to demand any form of payment." Hang up, verify through an official number you look up yourself, and report it at [IC3](https://www.ic3.gov/PSA/2026/PSA260917).