Definition
Chain analysis is the discipline — and the industry — of mining Bitcoin's public, permanent ledger to link addresses, build wallet clusters, and follow the flow of funds. Because every transaction is visible forever, surveillance firms such as Chainalysis and Elliptic can apply statistical heuristics at scale to convert millions of pseudonymous addresses into a map of who-paid-whom, then sell that intelligence to exchanges, law enforcement, and regulators.
The Core Heuristics
Two assumptions do most of the work. The common-input-ownership heuristic treats all inputs of a transaction as belonging to one entity, enabling broad address clustering. Change-detection heuristics — fresh-address, round-number, and cluster-growth rules — guess which output is the spender's change so a wallet can be tracked across many hops. External data is the multiplier: a single KYC record, a reused address tied to a name, or a leaked shipping detail anchors an entire cluster to a real identity.
Where It Fails
None of these heuristics offer certainty; naive clustering has been measured with error rates above 60%. Collaborative and privacy-preserving constructions — CoinJoin, PayJoin, CoinSwap — deliberately violate the assumptions chain analysis depends on, and PayJoin does so invisibly. For the sovereign Bitcoiner, understanding chain analysis is the first step to defending against it: good coin control, fresh addresses, and a personal node keep your footprint small.
Learn the defenses in our entries on CoinJoin and the Common-Input-Ownership Heuristic.
In Simple Terms
Chain analysis is the discipline — and the industry — of mining Bitcoin’s public, permanent ledger to link addresses, build wallet clusters, and follow the…