‹ CHAPTER 14, ALL LESSONS

MASTER · CHAPTER 14 · LESSON 4 OF 5

Privacy

CoinJoin and PayJoin

How can a transaction break the link between who paid and who received? 6 min

CoinJoin

In a CoinJoin, many people build one transaction together. Each brings inputs and receives outputs of the same standard amount. From the outside, all equal outputs look alike: an observer cannot tell which output belongs to which input. Each participant signs only their own inputs, so nobody can steal from the others.

Most CoinJoins use a coordinator to gather participants. The coordinator cannot take funds but sees some metadata, and coordinators have faced legal pressure: some well known services shut down in 2024. Some exchanges also refuse coins with a CoinJoin in their recent history.

PayJoin

PayJoin is quieter. When you pay someone, the receiver also adds one of their own inputs to the transaction. It looks like an ordinary payment, but the common input ownership heuristic now gives a wrong answer, and the amount really paid is hidden. Both wallets must support it.

What to remember

  • CoinJoin: many users, one transaction, equal outputs.
  • Participants sign only their own inputs.
  • PayJoin: the receiver adds an input, breaking a key heuristic.

Quick check

Why can't a CoinJoin coordinator steal the participants' funds?

What does PayJoin break?