Research home
Privacy analysis

Stablecoin privacy: what remains visible with USDT and USDC

An ordinary USDT or USDC transfer on a public blockchain leaves transaction records. A privacy service may change how those records can be connected while creating records of its own. Assess a claim by naming the observer, the information available to them and the limits of the evidence.

What a public transaction can reveal

A block explorer can expose the sending and receiving addresses, token identifier, amount, transaction hash and block time. Those records can exist without a person’s name. Public transaction data and a confirmed legal identity are different kinds of evidence.

An Ethereum USDT transfer can be examined through an Ethereum explorer such as Etherscan; a TRON USDT transfer needs a TRON explorer such as TRONSCAN. Use the explorer for the actual network. An exchange order number is not necessarily a blockchain transaction hash.

A record of a successful transfer does not establish that a service credited it, that the asset reached the intended network or that its owner can recover it. Visibility answers what was recorded, not every question about the payment.

Who can connect an address with a person?

Different observers have different information. A public-chain observer can inspect the ledger; a service with an account or order relationship may have information that the ledger does not show. A privacy claim must say whose view it addresses.

  • A counterparty may know which address you used because of your transaction with them.
  • An exchange may link activity to account, order or screening records it holds.
  • A wallet application or service may receive device or connection data, depending on its design and policy.
  • A mixer operator may hold deposit, payout, support or access records even when those links are absent from a public interface.

What a no-logs claim needs to explain

“No logs” needs a definition. Check whether it covers IP addresses, order records, deposit identifiers, payout instructions, support messages and analytics. Then ask when each category is deleted and whether a hosting, analytics or other provider retains its own records.

No registration and no logging are separate claims. A service can omit an account form while still processing connection or transaction records. A deletion promise also needs to distinguish routine retention from records retained under stated legal obligations.

A policy describes what an operator says it does. Stronger evidence would need to identify the system examined, the review date, the method and any exclusions. Neither a badge nor a single successful payout demonstrates the absence of logs.

A new address does not erase earlier activity

Wallet separation can help organize funds, but an ordinary transfer between addresses adds a ledger record. Changing addresses, swapping tokens, delaying an output or dividing it into several payouts does not erase the transactions that came before it.

Amounts, timing and interaction history can provide context for analysis. How strong a proposed link is depends on the available evidence; a service cannot turn that uncertainty into a universal “untraceable” guarantee.

Privacy and issuer controls are also separate. Using a mixer does not establish that USDT or USDC is exempt from issuer action, nor that a receiving platform will accept the funds without questions. Keep source-of-funds records appropriate to your obligations and check the recipient’s current terms.

For a lawful privacy need, identify the information you want to protect and the party from whom you want to protect it. Then compare the tool’s documented behavior with that need, including the information the tool itself would receive.

Sources and further reading

Check the scope and date of the linked document. This page’s source review was refreshed on 25 September 2026; a source about a token or network does not verify a particular provider.