Change Address

Change address is the address to which a Bitcoin wallet returns the surplus when the coins it spends are worth more than the amount being paid. Bitcoin's UTXO model does not allow partial spends: a transaction consumes whole unspent outputs and creates new ones. So when you pay 0.03 BTC from a 0.1 BTC coin, the wallet builds two outputs — 0.03 to the recipient and roughly 0.07 (minus fees) back to a fresh address you control. Modern hierarchical-deterministic wallets derive a new change address automatically for every transaction along a dedicated internal keychain, so users rarely see them. Invisible or not, change handling is one of the most consequential mechanisms in on-chain privacy.

Why change exists at all

Think of a UTXO like a banknote: you cannot tear a corner off a hundred to pay for coffee — you hand over the note and take change. The wallet's coin-selection algorithm picks which "notes" to spend, and whatever exceeds the payment plus miner fee must go somewhere the sender controls. Sending it back to the same address it came from would work technically, but it would permanently link the old and new coins, which is why well-designed wallets always derive a fresh internal address instead — the same reasoning that makes address reuse a privacy failure.

How analysts fingerprint change

If a chain-surveillance firm can tell which output is change and which is the real payment, it can extend the cluster of addresses attributed to the sender and follow the money forward. Several heuristics attempt exactly this. The change output is usually a never-before-seen address, while payments often go to addresses with history. If one output matches the script type of the inputs and the other does not, the matching one is probably change. Round payment amounts give the game away too: in a transaction paying exactly 0.05 BTC, the output with a long tail of decimal places is almost certainly the change — the signal catalogued in the round-amount heuristic. Each correct guess tightens the surveillance net around every future spend.

Defending your change

Good wallets and disciplined users blunt these heuristics. Matching the script type of all outputs removes the mismatch tell. Avoiding conspicuously round payment amounts weakens amount-based detection. Never reusing change addresses is table stakes. Coin-control features go further, letting you choose exactly which UTXOs fund a payment and label change so you do not later co-spend outputs from unrelated contexts — the merge that silently links two halves of your financial life in one transaction. Reviewing and labeling change is a habit worth building on day one.

Change and self-custody discipline

Change also interacts with fees and coin hygiene. Wallets will not create change smaller than the dust threshold; a would-be sliver of change gets absorbed into the miner fee instead, which is why a spend occasionally costs slightly more than the sum of payment plus quoted fee. Heavy wallet use accumulates many small change UTXOs over time, and each future transaction that must gather them pays for the privilege by size — so experienced users consolidate change deliberately during low-fee periods, weighing the fee savings against the privacy cost of visibly linking those outputs together in one consolidation transaction.

Two operational notes matter. First, change belongs to your wallet only if the change address was derived from your seed — always verify large change outputs on the screen of a hardware wallet, since malware that swaps the change address steals everything above the payment. Second, when restoring from backup, change lives on the internal derivation path; a sloppy recovery that scans only receiving addresses can miss it. Treating change as a first-class concern — verified, labeled, never reused — is part of mature self-custody, not an optional refinement.