Crypto Privacy & Personal Safety: How Privacy-by-Design Cryptocurrencies Work in 2026
An educational primer on cryptographic privacy in cryptocurrencies — how Monero’s protocol works, why data minimization protects you from breach-driven physical attacks, and how to set up a self-custody wallet safely.
By Marcus Richardson, Privacy Research & Content Lead at AceChange
|
Published
|
Updated
|
11 min read
📖 What this article covers — and what it doesn’t
This is an educational primer. Its purpose is to help everyday cryptocurrency users understand (a) how privacy-by-design cryptocurrencies such as Monero work at the protocol level, (b) why the rise in exchange data breaches and breach-driven physical attacks has made personal data protection a meaningful security topic, and (c) how to set up a non-custodial wallet using widely-recommended open-source software.
It does not provide transaction strategy, tax advice, or any kind of step-by-step guidance for moving funds. Users remain solely responsible for compliance with applicable tax, AML and financial-services law in their jurisdiction. For regulated services on AceChange, all AML and KYC obligations are discharged by our licensed partner services as described in our AML/KYC Disclosure.
A new physical-risk landscape for crypto holders.
Data breaches are no longer just a privacy problem. They are increasingly a personal-safety problem.
Through 2024 and 2025, several documented cryptocurrency-sector data breaches exposed customer identities, home addresses and account-balance information at scale. The most prominent recent example is the Coinbase incident disclosed in the company’s SEC Form 8-K of 14 May 2025, with 69,461 customers affected per the breach notification filed with the Maine Attorney General’s office. Stolen records reportedly included names, home addresses, phone numbers, last-four SSN digits, masked bank data and government-ID images.
In parallel, public datasets of physical attacks against crypto holders — most notably Jameson Lopp’s open dataset — record a sharp year-over-year increase. France’s Interior Ministry confirmed in April 2026 (Paris Blockchain Week, 16 April 2026) that the country recorded 41 crypto-related kidnappings and home invasions in the first 3.5 months of 2026 alone, and Minister-delegate Jean-Didier Berger publicly cited leaked KYC data as one driver.
The conclusion drawn by privacy researchers and the broader cybersecurity community is straightforward and is grounded in a long-standing principle: data minimization. Under GDPR Article 5(1)(c) and the equivalent principle in most modern privacy regimes, personal data should be limited to what is necessary for a clearly-defined purpose. The same principle applies to personal cybersecurity: data that an organization never collected cannot be leaked, sold, or stolen from that organization.
This article walks through how privacy-by-design cryptocurrencies (primarily Monero) implement this principle at the protocol level, why that design choice was made, and how individual users can apply general personal-cybersecurity best practices to reduce their own attack surface — within the constraints of all applicable law.
How Monero’s Cryptography Works
Monero (XMR) is an open-source cryptocurrency launched in 2014 and audited by independent cryptographers ever since. Unlike Bitcoin, where every transaction is publicly visible on the blockchain by design, Monero implements three cryptographic primitives at the protocol level — meaning every Monero transaction is private by default, with no opt-in or configuration required.
Ring signatures (sender privacy)
When a Monero transaction is signed, the cryptographic signature mathematically references the real spender plus 15 decoy outputs (ring size 16, active since the Fluorine Fermi hard fork on 13 August 2022). An external observer studying the blockchain cannot determine which of the 16 references was the actual spender — only that one of them was.
Reference: getmonero.org/resources/moneropedia/ringsignatures.html
Stealth addresses (recipient privacy)
Even when a user publishes a Monero address, every payment to that address is actually credited to a unique, one-time on-chain address derived from the published address and a transaction-specific shared secret. The mathematical link between the published address and the one-time address is only knowable to the recipient (via their private view key). To an outside observer, two payments to the same Monero user appear at two entirely unrelated on-chain addresses.
Reference: getmonero.org/resources/moneropedia/stealthaddress.html
RingCT (amount privacy)
Introduced in January 2017, Ring Confidential Transactions use Pedersen commitments and range proofs (since Bulletproofs in 2018, Bulletproofs+ in 2022) to mathematically prove that no Monero is created or destroyed in a transaction — without revealing the actual transferred amount on the blockchain.
Reference: getmonero.org/resources/moneropedia/ringCT.html
Dandelion++ (network-layer privacy)
At the peer-to-peer layer, Monero implements Dandelion++ — a probabilistic propagation protocol that obscures which network node originally broadcast a transaction. Without this protection, a well-positioned network observer could correlate transactions with IP addresses even when on-chain data is hidden.
Reference: arxiv.org/abs/1805.11060 (Fanti et al., “Dandelion++: Lightweight Cryptocurrency Networking with Formal Anonymity Guarantees”, 2018)
Future protocol direction — FCMP++
A further protocol upgrade called Full-Chain Membership Proofs Plus Plus (FCMP++) has been running on a public alpha stressnet since 3 October 2025 and is tentatively targeted for mainnet activation in mid-to-late 2026. FCMP++ extends the anonymity set from the current ring size of 16 to the entire history of the Monero chain — a significant cryptographic improvement that has been peer-reviewed by Monero Research Lab contributors and external cryptographers.
What about claims that “Monero was traced”?
The US Internal Revenue Service awarded contracts of up to $1.25 million to Chainalysis and Integra FEC in 2020 with the stated aim of producing techniques against Monero. No cryptographic break was ever publicly produced. Every publicly documented case where Monero-related activity was attributed to a person — including the leaked Chainalysis presentation that circulated in September 2024 — has relied on metadata correlation (IP addresses, exchange-side KYC records, server logs) rather than on a break of ring signatures, RingCT or stealth addresses. This is a meaningful distinction: Monero’s on-chain privacy properties remain intact; what can fail is off-chain operational hygiene, the same way email content can leak through compromised endpoints even when the email protocol itself is secure.
Bitcoin vs Monero: A Privacy Comparison
The two best-known cryptocurrencies represent two different design philosophies on transaction visibility. Neither is “better” — they serve different purposes. The comparison below summarizes what an external observer of each blockchain can see by default.
On-chain visibility — Bitcoin vs Monero
Bitcoin (BTC)
Sender: Visible on blockchain
Receiver: Visible on blockchain
Amount: Visible on blockchain
Linkability to identity: Possible via heuristics + KYC data
Monero (XMR)
Sender: Hidden (ring signatures)
Receiver: Hidden (stealth addresses)
Amount: Hidden (RingCT)
Linkability to identity: Not from on-chain data alone
It is worth emphasizing what the comparison does not say. Monero is not “invisible”. Like every cryptocurrency, it interacts with the off-chain world — wallet software, exchange interfaces, internet service providers, devices — and the security of any cryptocurrency in practice depends as much on the off-chain environment as on the protocol itself. Blockchain-analysis firms openly market services that combine on-chain data with off-chain intelligence, KYC records and behavioral patterns. This is why personal cybersecurity hygiene matters even for users of privacy-by-design coins.
Bitcoin’s transparency, by contrast, is a feature for many use cases — public proof-of-reserves, auditability, programmable transparency. Different users have different needs.
Setting Up a Non-Custodial Wallet — Cake Wallet on iPhone
For readers who do not yet hold a non-custodial wallet, this section walks through installing and configuring Cake Wallet — a widely-used open-source, multi-currency, non-custodial wallet — on an iPhone. This is general personal-cybersecurity content: wallet setup, PIN configuration, seed backup. It is not transaction guidance.
Screenshots taken on iPhone 16 Pro running iOS 18 and Cake Wallet 4.x. The flow is nearly identical on Android and on earlier iOS versions. Cake Wallet is an independent open-source project; AceChange has no commercial relationship with Cake Wallet.
1. Install Cake Wallet from the App Store.
2. Welcome screen — tap Set a PIN to secure the app.
⚠️ Critical security tip
Use a different PIN than your phone unlock code. If someone gains physical access to your device, a separate wallet PIN provides an additional layer of defense. This is general best practice for any sensitive application, not specific to cryptocurrency.
3. Tap Create New Wallet to generate a fresh wallet.
💡 Why use a fresh wallet
A newly-generated wallet has no prior transaction history. Restoring an old wallet imports its existing transaction history and on-chain identity. For most users setting up self-custody for the first time, a fresh wallet is the right starting point.
4. Select Monero (XMR) at the top, then tap Next. Cake Wallet also supports Bitcoin, Ethereum, Litecoin, Solana and others — choose whichever currency you wish to learn to self-custody.
5. Name your wallet (we used “test” for this tutorial), keep Polyseed (16 words), tap Next.
💡 About seed formats & wallet name
Monero supports multiple seed formats: the original 25-word legacy seed and the newer 16-word Polyseed. Polyseed 16 is the modern recommended standard — shorter, with built-in error correction and an encoded wallet creation date.
The wallet name is stored only on your device and is for your own organization. Pick something neutral that doesn’t describe contents.
6. Read the warning, then tap “I understand. Show me my seed”.
🚨 How to store your seed safely
Write it on paper. Two copies. Two physical locations. This is the consensus best practice from Bitcoin and broader self-custody communities going back over a decade.
Do not: photograph, screenshot, type into your phone, or save in any cloud service (iCloud, Google Drive, Dropbox, Notes app, password managers that sync to the cloud, email drafts). Any seed that touches an internet-connected device should be considered exposed.
For meaningful amounts: consider a fireproof metal seed plate (Cryptosteel, Billfodl, SafePal Cypher and similar) and split storage across geographically separate locations.
7. Your seed phrase — write every word in the exact numbered order shown.
🚨 The single most important step — read carefully
Word order matters absolutely. Each position (1, 2, 3…) is part of the mathematical derivation of your wallet’s keys. If a word is written in the wrong position, you will derive a different wallet on recovery — and your funds will be inaccessible.
Paper is fine for learning and small amounts. For long-term storage of meaningful value, durable backup media — fireproof and waterproof metal plates — are widely recommended in the self-custody community.
Never digital. Never online. No screenshots, no photos, no cloud services, no notes apps, no email. Treat the seed phrase with the same care as a physical key to a vault.
Best practice: two copies, two physically separate locations (e.g., a home safe plus a bank deposit box or trusted family member). Maintain operational secrecy about the location.
8. Verify your seed phrase. Cake Wallet will ask you to confirm specific word positions.
💡 Why the app asks multiple times
The app cross-checks your written backup at random positions. If you can’t answer, your backup is incomplete — go back and rewrite carefully before continuing.
9. Seed Verified. Tap Open Wallet — your new wallet is ready.
✅ Good to know
You can view the seed again from Menu → Security and Backup → Show key/seeds. Only do so in a private setting with no cameras, screen recorders, or other people present.
10. Wallet is live. A new, empty wallet with no history.
11. The Receive screen shows your wallet’s public address and QR code.
💡 Address verification — always
Whenever you copy or paste any cryptocurrency address, always check the first 6 and last 6 characters match what you expected. Clipboard-hijacker malware is a known and ongoing threat — it silently replaces copied wallet addresses with the attacker’s address.
🎭 How Monero’s stealth addresses appear in practice
Notice the banner at the bottom of the Receive screen: “Your receive address will rotate every time you receive a transaction.” This is the stealth address protocol in action. The public address you share is a static “view” that the protocol uses to derive a fresh on-chain destination for each incoming transaction — a cryptographic property of the protocol, not a user setting.
12. Adding a second wallet for another cryptocurrency
Cake Wallet supports multiple independent wallets in the same app. You can add a Bitcoin, Ethereum, Solana, Litecoin or other wallet alongside Monero — each is fully independent.
13. Pick the cryptocurrency for the new wallet. Repeat steps 5–9 to generate and back up the seed for this wallet too.
🔐 Non-custodial wallet options beyond Cake Wallet
Cake Wallet is one of many reputable non-custodial wallets. For larger holdings or different use cases, the broader self-custody community typically recommends:
- Hardware wallets (Ledger, Trezor, SafePal S1, Coldcard) — keys stay on a dedicated offline device, considered best practice for significant amounts
- Desktop wallets (Electrum, Sparrow, Bitcoin Core, official Monero GUI) — more advanced features, suitable for technically-comfortable users
- Other mobile wallets (BlueWallet, Phoenix, Trust Wallet) — convenient for everyday use; appropriate for smaller amounts
For meaningful long-term holdings, the consensus recommendation across security researchers, exchanges and wallet developers is the same: use a hardware wallet, store the seed offline in two physically separated locations, and minimize how much identifying information about your holdings exists online.
Personal Security: Reducing Your Exposure to Targeted Attacks
Cryptographic privacy at the protocol level is one part of personal security; off-chain operational hygiene is the other. The following are general personal-security practices recommended across the cybersecurity, self-custody and personal-protection communities — not crypto-specific and not transaction-specific.
🤐 Maintain privacy about financial holdings
Discussing your holdings — to friends, family or publicly — increases your personal risk profile. This is true of all wealth, not just cryptocurrency. The kidnapping of Ledger co-founder David Balland (Cher, France, 21 January 2025) is a documented case where a public role was a contributing factor; multiple 2025 victims were initially identified through social-media disclosures.
📍 Avoid real-time location disclosure
Real-time location sharing (geotagged photos, live-streamed travel, public check-ins) gives information about either where you are or where you are not. Posting travel photos after returning home is a long-standing personal-safety recommendation.
🔐 Segment your devices and accounts
A dedicated device for sensitive activity reduces blast radius if any one device is compromised. This is general IT-security advice and applies broadly. See our Privacy Guides for more.
🏠 Keep your home address out of online profiles where possible
Where any service legitimately requires a mailing address, consider using a PO Box, virtual mailbox, or registered office address instead of your home address — within the constraints of applicable AML/KYC rules. Recent exchange data breaches (Coinbase 2025, Waltio 2026) have demonstrated that home addresses in customer records can be exposed in incidents outside the user’s control.
🚫 Avoid publicly demonstrating wealth from crypto
Portfolio screenshots, milestone announcements, luxury lifestyle posts linked to crypto — all of these increase a person’s profile to anyone studying social media for targets. Security researcher Jameson Lopp’s standing advice is widely quoted: “Don’t talk about Bitcoin, at least not while using your real name or face.”
🔑 Cold storage for meaningful holdings
For long-term holdings, consensus best practice is hardware wallets with seeds stored offline. Multi-signature setups, time-locked vaults and geographically-separated backup locations are appropriate for very significant amounts. A small everyday-use wallet, separate from cold storage, reduces the value of a successful coercion attempt.
Recent Incidents — Why This Matters
Physical attacks against cryptocurrency holders have increased measurably. Jameson Lopp’s open dataset records a roughly 75% year-over-year rise in 2025. France’s Interior Ministry announced at Paris Blockchain Week on 16 April 2026 that 41 crypto-related kidnappings or home invasions were recorded in the country in the first 3.5 months of 2026 alone, and minister-delegate Jean-Didier Berger cited exposed KYC data as one driver.
The cybersecurity lesson is consistent: data collected by third parties can be lost by those third parties — through breaches, insider compromise, or operational failure — regardless of how trustworthy the original collector was. Personal cybersecurity hygiene includes minimizing how much identifying information about one’s holdings is collectible in the first place, while remaining fully within the bounds of applicable law (including KYC obligations on regulated services).
⚠️ Verified Real-World Incidents
Kidnapped with his wife from their home near Vierzon; rescued by France’s GIGN unit on the night of 22 January. The alleged mastermind was reportedly arrested in Morocco in June 2025.
Italian trader held for 17 days in a rented Manhattan townhouse by two suspects; escaped and flagged law enforcement. Both defendants pleaded not guilty and are held without bail.
Held at gunpoint for five days; approximately $15M in crypto extorted.
Per the Maine Attorney General breach notification, 69,461 customers were affected. Compromised data reportedly included names, home addresses, phone numbers, last-four SSN, masked bank data and government-ID images. Remediation cost estimated by Coinbase at $180M–$400M.
Approximately 50,000 customer records exposed, including 2024 tax reports listing crypto holdings.
Attempted home invasion at David Prinçay’s residence in Val-de-Marne; he was not present.
The recurring pattern: data collected by a third party leaks; criminals use that data to identify holders; the holder is targeted physically. Data that was never collected cannot leak. This is the practical, legitimate cybersecurity argument for caring about data minimization — and for using only the personal-data services genuinely needed for any given activity.
FAQ
Is using privacy-by-design cryptocurrencies legal?
In most jurisdictions, holding and using privacy-by-design cryptocurrencies such as Monero for lawful personal purposes is legal. Monero is legal to own and use in the US, UK and most countries. In the EU, Article 79 of the EU AMLR (Regulation 2024/1624) will restrict EU crypto-asset service providers from holding anonymous accounts or servicing privacy coins from 10 July 2027 — but it does not criminalize personal privacy-tool use by individuals. As always, users must comply with all applicable tax reporting and AML obligations in their jurisdiction.
How does Monero’s cryptography differ from Bitcoin’s?
Bitcoin’s blockchain publishes every transaction openly: sender address, receiver address and amount are all visible. Monero applies three cryptographic primitives by default — ring signatures (sender hidden among 15 decoys), stealth addresses (one-time destination address per payment), and RingCT (amounts hidden via range proofs). These are protocol-level properties, not optional features.
Why is data minimization important for crypto holders?
Recent exchange data breaches — including the 2025 Coinbase incident affecting 69,461 customers — have shown that personal data linked to crypto holdings can be exposed and used by criminals to plan physical attacks. Data minimization (GDPR Article 5(1)(c)) is both a legal principle and a practical security measure: data that was never collected cannot be leaked, sold, or stolen.
Is Monero traceable?
Not cryptographically. Monero uses ring signatures (ring size 16), stealth addresses, RingCT and Dandelion++ on every transaction by default. The IRS awarded up to $1.25M to Chainalysis and Integra FEC in 2020 to attempt to break Monero; no cryptographic break has been publicly produced. Every publicly documented Monero investigation case has relied on metadata (IP addresses, exchange-side KYC records, server logs) — not on a break of the cryptography itself.
How private is Bitcoin?
Bitcoin is pseudonymous, not private. Every transaction is permanently recorded on a public blockchain. Blockchain-analysis firms (Chainalysis, TRM Labs, Elliptic) trace Bitcoin routinely. If a Bitcoin wallet has ever interacted with a KYC exchange, its transaction history can be linked to a real identity through that exchange’s records.
How can I protect myself from crypto-related physical attacks?
Limit publicly-linkable information about your holdings and identity: don’t share holdings publicly, avoid real-time location data, use separate devices for sensitive activity, keep your home address out of online profiles where lawful and feasible, and store significant holdings in hardware wallets with seeds backed up offline in two physically separate locations. Jameson Lopp maintains an ongoing public dataset of physical attacks against crypto holders.
What is a non-custodial wallet?
A wallet where you alone hold the private keys controlling your funds. No third party can move funds without that key. The trade-off: lose the key (and seed backup) and recovery is impossible. Common open-source non-custodial options in 2026: Cake Wallet (mobile, multi-coin), Electrum and Sparrow (Bitcoin desktop), the official Monero GUI, and hardware wallets such as Trezor and Ledger.
Should I use a VPN or Tor for general internet privacy?
If you choose to use privacy tools for general internet activity, use default configurations and don’t stack unusual combinations. The Tor Project documents that non-standard combinations can make a user easier to fingerprint, not harder. This is general digital-hygiene advice — not specific to any transaction type.
Continue Learning
Explore more educational content on cryptographic privacy, self-custody best practices, and personal cybersecurity in our Privacy Guides library.
Browse Privacy Guides →About the Author
Marcus Richardson
Privacy Research & Content Lead at AceChange
Marcus Richardson is a privacy and digital-security researcher specializing in personal data protection, identity safety online, and education about cryptographic privacy technologies. Throughout his career he has worked at international companies including IBM, Palantir Technologies and KPMG, focusing on data analysis, investigations and security strategies.
His work focuses on helping individuals understand how their personal data can be exposed through breaches, social-media disclosure and metadata leakage — and the practical, lawful steps they can take to reduce that exposure within applicable regulations.
He currently contributes to digital-security education initiatives supporting Ukraine, helping develop practical standards that strengthen the protection of individuals and sensitive information online.
🔗 Further Reading
Editorial scope. This article is an educational primer on cryptographic privacy technologies and general personal-cybersecurity practices. It is intended to help individual users understand the technologies and the risk landscape — particularly the recent increase in physical attacks against crypto holders driven by exchange data breaches.
Not advice. Nothing in this article is financial, tax, legal or transaction advice. The article does not recommend or describe any specific transaction strategy. Users are solely responsible for compliance with all applicable laws — including tax reporting, AML obligations and any other financial-services regulations — in their jurisdiction.
Lawful use only. Privacy is a recognized fundamental right (GDPR; ECHR Article 8; UN Universal Declaration of Human Rights Article 12). This article is written for individuals seeking lawful protection of their personal data and assets against criminal activity such as data breaches, identity theft and physical attacks. It is not intended to assist any unlawful activity. Where AceChange’s swap interface routes orders through licensed partner services, all AML, KYC, sanctions screening, Travel Rule and transaction-monitoring obligations are discharged by those partners under their own regulatory frameworks — see our AML/KYC Disclosure for full details.
AceChange does not custody user funds. Always verify current terms, fees and applicable restrictions on the official website before using any service.
Sources: getmonero.org · monero.observer · Moneropedia · arXiv:1805.11060 (Dandelion++) · US Department of the Treasury · IRS Criminal Investigation public records · Coinbase SEC Form 8-K (14 May 2025) · Maine Attorney General breach notifications · Jameson Lopp public physical-attacks dataset (github.com/jlopp/physical-bitcoin-attacks) · French Ministry of the Interior (Paris Blockchain Week, 16 April 2026) · EU Regulation 2023/1113 (TFR) · EU Regulation 2024/1624 (AMLR) · Tor Project documentation · Privacy Guides.
First published: 17 March 2026. Last updated: — refocused as educational primer; updated 2026 incident data; updated schema.org markup; responsive-grid fixes.
