Common-Input-Ownership Heuristic

The Common-Input-Ownership Heuristic (CIOH) is the single most important assumption in Bitcoin blockchain analysis. It holds that whenever a transaction spends multiple inputs, those inputs are all controlled by the same entity. The logic is intuitive: an ordinary wallet that needs more coins than any one UTXO holds will pull additional UTXOs from its own keychain to cover the amount. Apply this across the entire chain and millions of pseudonymous addresses collapse into identifiable wallet clusters.

Origins and Reliability

The idea was noted in Satoshi Nakamoto's whitepaper and first formalized for analysis in Reid and Harrigan's 2011 study of the Bitcoin transaction graph. Firms such as Chainalysis and Elliptic use it as a foundational building block for clustering and fund-flow tracing. But it was never a law — only a heuristic. Researchers have measured naive error rates exceeding 60%, and the assumption breaks down entirely for collaborative transactions.

How clustering compounds

CIOH rarely works alone; its power comes from composition with other heuristics. Change detection guesses which output of a transaction returned funds to the sender — betting on the non-round amount, the address type matching the inputs, or an address never seen before — and folds that output into the same cluster. Address reuse welds clusters together instantly whenever the same address appears in two contexts. Each merge is a ratchet: one exchange withdrawal to a clustered address, one KYC data point, one public donation address, and the entire cluster — past and future — acquires a name. This is why a single consolidation transaction that sweeps many small UTXOs into one can retroactively link years of otherwise separate history: the heuristic reads that merge as a confession of common ownership.

Practical hygiene against it

Defending against CIOH is mostly about not feeding it. Avoid merging UTXOs from unrelated contexts in one spend — coins with different histories (an exchange withdrawal, a mining payout, a private sale) should not appear as co-inputs unless you accept them being linked forever. Use coin control to choose inputs deliberately rather than letting the wallet auto-select, never reuse addresses, and treat consolidation as a privacy decision, not just a fee optimization — if you must consolidate, do it within a single context, not across them. Running your own node matters here too: querying balances through someone else's server leaks the very address grouping that CIOH tries to infer. Miners have a specific stake in this: pool payouts arrive as a stream of small UTXOs on a schedule, an on-chain pattern that is easy to recognize, so how and when mining income gets consolidated is one of the more consequential privacy decisions a home miner makes. The same caution applies to unsolicited dust: tiny amounts sent to your addresses by an analyst are bait, valuable only if you later co-spend them with your real coins and hand CIOH the link — coin control lets you freeze them instead. None of this hygiene requires new tools, only the discipline to remember that every multi-input transaction you sign is a public statement about what you own.

How It Is Defeated

Any construction that places inputs from multiple independent parties into one transaction contradicts CIOH: CoinJoin, CoinSwap, PayJoin, and many multisig spends all do this. PayJoin is especially corrosive because it is indistinguishable from a normal payment, so an analyst cannot even know when the heuristic has failed — every ordinary-looking transaction becomes slightly less trustworthy as evidence. As these tools see more use, the reliability of input clustering steadily erodes, and false-positive merges (a heuristic wrongly welding two strangers' wallets together) contaminate the downstream analysis silently.

This heuristic is the linchpin that privacy tools target. See our entries on CoinJoin and PayJoin to understand how each one breaks it.