Anonymity Set

Anonymity set is the count of indistinguishable possibilities among which your activity hides. If an observer knows a payment came from one of 50 equally plausible senders, your anonymity set is 50; if something narrows it to 3, your protection has collapsed regardless of what any tool promised. In a Bitcoin CoinJoin, the anonymity set of your mixed coin is roughly the number of equal-denomination outputs in the transaction, because an outside observer cannot tell which of those identical outputs is yours. It is the fundamental unit of account for privacy: not "am I anonymous?" but "among how many?"

How the set grows

A single mixing round caps your set at the number of participants sharing your output denomination — an equal-output CoinJoin with 50 identical outputs gives each one a set of about 50. Cascading rounds multiplies the possibilities: if a coin from a 32-output round enters another 32-output round, an analyst tracing backward faces branching histories, and three such rounds can theoretically blend a coin among tens of thousands of plausible paths. Remixing is therefore the cheapest way to deepen protection. The same arithmetic governs other privacy systems: a Tor circuit hides you among that relay's concurrent users; a Fedimint ecash note hides you among all notes of that denomination the federation has issued. In every case the set is other people — which is why privacy is a team sport, and why using privacy tools routinely, rather than only when it matters, strengthens everyone's set including your own.

How the set shrinks

The nominal set is an upper bound; the effective set is what survives an adversary's side information, and it only ever gets smaller. Amount correlation: unusual denominations or a distinctive total that reappears downstream can single a coin out of a crowd. Timing: mixing at 3 a.m. in a quiet round, then spending minutes later, correlates entry and exit. Address reuse and identity links: sending mixed coins straight to a KYC exchange account converts your anonymity set to one. The most common self-inflicted wound is consolidation — merging mixed outputs with each other or with identified UTXOs in a later spend, which lets an analyst collapse the carefully separated histories back into a single cluster. This is where post-mix spending discipline and rigorous coin control do the real work: the mix buys the set; your subsequent behavior decides how much of it you keep.

A probabilistic measure, not a guarantee

Anonymity set is a heuristic, and an honest one only if you treat it as such. Adversaries do not merely count possibilities — they weight them, using every available prior to make some candidates likelier than others; researchers formalize this as the effective anonymity set, which is always smaller than the headline number. Sybil attacks bite here too: if an adversary quietly supplies half the participants in your round, your true set is half what you believed, and you cannot detect it. The sober posture: treat the number as a ceiling, assume some erosion, and let your threat model decide how much margin you need — hiding pocket change from advertising surveillance and hiding savings from a targeted adversary call for very different set sizes.

Why it matters

For a sovereign Bitcoiner, the anonymity set is what restores fungibility — the property that one coin is as good as any other because no observer can attach a story to it. Bitcoin's ledger is permanently public; the anonymity set is the measure of how little that ledger says about you. Count it honestly, grow it deliberately, and above all, stop shrinking it by accident.