Tainted Coins

Tainted coins is the informal label for bitcoin that blockchain-analysis firms or exchanges have flagged because their transaction history links them — directly or several hops back — to activity considered illicit: theft, ransom payments, darknet markets, or sanctioned addresses. Taint analysis is the practice of tracing those flows across the public ledger and assigning a risk score to specific coins or addresses. The term carries no formal legal definition; it is a product of commercial surveillance heuristics, not a property of the protocol. At the protocol level, every satoshi is identical — taint exists in databases about Bitcoin, never in Bitcoin.

How coins get flagged

Because every transaction is permanently recorded on a public ledger, chain-analysis companies cluster addresses using heuristics like common-input ownership, follow value from UTXO to UTXO, and brand outputs that pass within some distance of a flagged point. Custodial exchanges, under pressure to demonstrate AML compliance, screen incoming deposits against these scores. The methodological problems are real: scoring is probabilistic, vendors disagree with each other, there is no appeal process, and "taint" dilutes arbitrarily — if stolen coins pass through an exchange's hot wallet, millions of downstream users have technically touched them. A user can receive flagged coins entirely innocently and later find a custodial deposit delayed, frozen, or questioned, guilty by graph proximity. See wallet clustering for the heuristics doing the work.

The fungibility problem

Fungibility means every unit of a money is interchangeable with every other unit of equal value — a property cash has and bank money mostly preserves. Tainting attacks it directly: if some bitcoin are treated as dirtier than others, identical coins no longer trade at par, and everyone must ask where has this money been? before accepting it, which is corrosive to money as such. Bitcoiners therefore treat taint scoring as a threat to the monetary properties of the system rather than a neutral compliance fact. Privacy techniques such as CoinJoin exist specifically to break the clustering assumptions that make tainting possible — restoring a larger anonymity set — though some custodians respond by flagging the privacy technique itself, which rather proves the Bitcoiners' point.

The regulatory arc matters for context. Deposit screening hardened through the 2010s as agencies fined exchanges for AML lapses, and the 2022 sanctioning of a privacy tool's smart-contract addresses — later narrowed by U.S. courts — marked the high-water mark of treating code and coins, rather than actors, as sanctionable. Policy keeps moving in both directions, which is why hard-coding today's screening logic into one's mental model of Bitcoin is a mistake: the protocol's treatment of coins is permanent; the intermediaries' treatment is a snapshot of current pressure. Practically, anyone who must interact with custodians should assume screening exists and prefer withdrawal to self-custody as the default state.

The miner's angle

Mining occupies a special place in this debate: freshly minted coins from a coinbase transaction have no history at all — no prior hops, no proximity to anything. That historical cleanness has occasionally been marketed at a premium, which is itself a symptom of broken fungibility: in sound money, no unit should command more than another. For a sovereign miner, earning coins at the coinbase and holding them in self-custody is the position least exposed to taint regimes — no deposit screen, no custodian's risk model, no third party's database between you and your money. The practical exposure begins where custody does.

This entry is educational and not legal advice; screening practices vary by jurisdiction and institution. For the compliance frameworks driving the practice, see KYC (Know Your Customer) — and remember the asymmetry: the protocol treats every coin the same, and it is only the intermediaries who do not.