Definition
Output linking resistance is the property that lets a recipient accept many payments to one logical identity while a public observer is unable to tell that those outputs share a destination. It is the privacy goal behind reusable payment schemes: a static, shareable identifier that nonetheless produces on-chain outputs which look mutually unrelated.
How protocols achieve it
BIP352 silent payments are a clean example. Several mechanisms combine to defeat linkage: a per-transaction input_hash derived from the spending inputs makes every shared secret unique, so two payments to the same address yield unrelated-looking outputs; an incrementing counter k distinguishes multiple outputs within one transaction; and the absence of any notification transaction means there is no on-chain breadcrumb connecting payer and payee. The result is that outputs to a given recipient are computationally indistinguishable from ordinary single-key outputs.
Why it matters
Address reuse is the single biggest privacy leak in Bitcoin, collapsing an entire history into one fingerprint that chain-analysis firms and the common-input-ownership heuristic exploit. Output linking resistance restores fungibility by ensuring that publishing one identifier does not expose a running balance or a transaction graph. For a sovereign Bitcoiner this is self-defense: the recipient gives up no convenience, yet a surveillant gains no foothold to cluster or deanonymise.
The leading implementations of this property are silent payments and the payment code (BIP47) family, while the attacks it defends against are surveyed under transaction fingerprinting.
In Simple Terms
Output linking resistance is the property that lets a recipient accept many payments to one logical identity while a public observer is unable to tell…