Beware of impersonators - only trust emails from @cryptoassetrecovery.com. Report impersonator

Crypto Asset Recovery
← Knowledge center
Password Recovery

Can Crypto Be Traced? How It Works and Where It Stops

Most crypto can be traced, but tracing a wallet isn't the same as naming its owner or getting money back. How tracing works, who does it, and its limits.

By · Published

Can Crypto Be Traced? How It Works and Where It Stops

Yes. Bitcoin, Ethereum and most other cryptocurrencies run on public ledgers, so every transaction is recorded where anyone can see it, permanently. If you know one transaction hash or address, you can follow where the money went next.

What you can't see on the ledger is who owns each address. Getting from "these funds went to this address" to "this person has them" usually takes a record held off the blockchain, most often an exchange's customer files. That gap is why crypto is very traceable and still hard to recover once it's stolen.

What the blockchain shows, and what it doesn't

For Bitcoin and other transparent chains, the public record shows:

  • every address that sent or received funds
  • the amount of each transfer
  • when each transaction was confirmed
  • how transactions link together, so you can follow coins from one address to the next

It doesn't show names, emails, phone numbers or IP addresses. A Bitcoin address is a string of characters, and nothing in it identifies a person. Crypto is often called pseudonymous for this reason: it isn't anonymous, but the identities are held off the blockchain.

How crypto tracing works

A trace starts from something known, usually a transaction hash or an address, and follows the money forward or backward. TRM Labs, one of the big blockchain analytics firms, describes the basic workflow in a few steps:

  1. Follow the flows. Each transfer points to the next address. A block explorer shows this hop by hop.
  2. Group addresses. Analytics tools cluster addresses that probably belong to the same person or service, for example addresses spent together in a single transaction.
  3. Label known services. The tools tag addresses that belong to exchanges, payment processors, mixers and known scams.
  4. Find where the trail touches a business. The useful endpoint is an address controlled by a company that knows its customers, such as an exchange deposit address or a stablecoin issuer.
  5. Document it. A good report separates what the blockchain shows for certain from what the analyst inferred.

Step 4 is where a trace becomes useful to a theft victim. An exchange that received stolen funds knows which customer account they went to, and it can freeze them or hand over records when law enforcement or a court asks.

Who can trace crypto?

Almost anyone can follow a simple trail with a free block explorer like Etherscan for Ethereum or mempool.space for Bitcoin. The harder work, linking clusters of addresses and knowing which ones belong to which exchange, is done with commercial analytics tools from firms like Chainalysis, TRM Labs and Elliptic. Those tools are used by:

  • Law enforcement agencies, which can also compel exchanges to identify account holders.
  • Exchanges' compliance teams, which screen deposits for links to theft, scams and sanctioned addresses.
  • Private investigators and forensic firms, which trace funds for victims, lawyers and companies.

Only law enforcement and courts can force an exchange to reveal who owns an account. A private investigator can show where the money went, but private recovery companies can't issue seizure orders. Victims usually find out who controls an account through police or a civil lawsuit.

What makes crypto harder to trace

Mixers

Mixers pool many users' coins and pay them out in a way that breaks the obvious link between deposit and withdrawal. Analysts can sometimes still find leads, but a trail through a mixer is weaker than a direct one. The legal status of mixers is still shifting. The US Treasury sanctioned Tornado Cash, the best-known Ethereum mixer, in 2022, then removed it from its sanctions list in March 2025. In August 2025, a jury convicted its co-founder Roman Storm of conspiring to operate an unlicensed money-transmitting business, but couldn't reach a verdict on the money-laundering and sanctions charges.

Bridges and chain-hopping

Thieves often swap funds between blockchains, for example from Ethereum to Bitcoin to Tron, through bridges and swap services. In a July 2025 report, Elliptic estimated that $21.8 billion in illicit funds had moved this way, and that a third of the complex cross-chain cases it examined spanned more than three blockchains. Each hop has to be followed separately, which takes time, but it doesn't erase the trail.

Privacy coins

Monero is built to hide the sender, the recipient and the amount, using ring signatures, RingCT and stealth addresses. Tracing funds once they've been converted to Monero is far harder than tracing Bitcoin or Ethereum. Identities can still leak through exchanges and other off-chain records.

Cash-outs outside regulated exchanges

Funds that go to peer-to-peer trades, over-the-counter brokers or exchanges that ignore legal requests can leave a visible trail that nobody is able to act on.

Traced isn't the same as identified, frozen or returned

This is the part most "crypto recovery" ads skip. Each of these is a separate step, and a case can stall at any of them:

  1. Traced: you know where the funds went.
  2. Identified: a custodian or court has tied an address to a person.
  3. Frozen: an exchange or issuer has locked the funds.
  4. Returned: a court or prosecutor has sent the money back to victims.

Even fast, expert tracing doesn't guarantee the later steps. After the $1.46 billion Bybit hack in February 2025, Elliptic says it labeled the thieves' first addresses within 18 minutes of Bybit confirming the theft. By the time Elliptic wrote it up in early March, the exchange freeze it described came to about $150,000. And in a 2026 English High Court case over roughly €2.5 million in stolen Bitcoin, the court noted that an exchange hadn't complied with an earlier disclosure order. A court order only helps if the company holding the funds obeys it.

How to follow a transaction yourself

You don't need special software to see where your own funds went.

  1. Find the transaction hash in your wallet's activity list or your exchange's withdrawal history.
  2. Paste it into a block explorer for the right network: Etherscan for Ethereum and its tokens, mempool.space for Bitcoin, Tronscan for Tron, Solscan for Solana.
  3. Note the receiving address, then click through to see where it sent the funds next.
  4. Watch for labels. Explorers often tag exchange deposit addresses by name, and that tag is the most useful thing you can bring to the exchange and the police.

For Ethereum addresses, our free scam checker shows whether an address has been reported for scams and lists its recent transfers. It's a quick screen, not a full trace, and an address with no reports isn't necessarily safe.

If the funds were stolen from you, start with our guide on how to recover stolen crypto and the checklist for the first days after a crypto scam or hack. Crypto Asset Recovery doesn't trace stolen funds ourselves. Our work is getting people back into wallets they own but can't open.

Frequently asked questions

Can police trace crypto?

Yes. Police and federal agencies trace crypto routinely with the same analytics tools private firms use, and unlike private firms, they can legally require exchanges to identify account holders and freeze funds.

Can a crypto wallet be traced to its owner?

Not from the blockchain alone, because addresses don't carry names. A wallet gets tied to a person when it interacts with a service that knows its customers, such as an exchange, or when the owner reveals it some other way. Law enforcement can request those records. Individuals usually can't.

Is crypto untraceable?

Bitcoin and Ethereum are very traceable, because every transaction is public and permanent. Privacy coins like Monero are much harder to trace, and mixers and cross-chain swaps make tracing slower and less certain. No major cryptocurrency is truly anonymous once it touches a regulated exchange.

Can Bitcoin be traced back to me?

If you bought it on an exchange that verified your identity, that exchange can link your account to the addresses you withdrew to, and it shares records with authorities when legally required. In the US, brokers report digital-asset sales to the IRS on Form 1099-DA, starting with sales made in 2025.

Does the IRS know if I sold crypto?

Often, yes. US brokers, including exchanges, report digital-asset sales to the IRS on Form 1099-DA starting with sales made in 2025, and the IRS can request records from exchanges. Transactions on the blockchain are public, so the trail stays visible long after the trade.

Can a Trust Wallet be traced?

Yes, in the same way as any self-custody wallet. Trust Wallet doesn't hide your addresses: every transaction they make is public on the blockchain. The app doesn't collect your identity, but an address can be linked to you if it sends to or receives from an exchange account in your name.

Can stolen crypto be traced after it goes through a mixer?

Sometimes, but less reliably. Analysts can find leads through timing, amounts and how funds leave the mixer, but they can't promise a clean trail through every mixing pool.

How long does crypto tracing take?

It depends on how far the money moved. A simple trail to an exchange can be mapped quickly. Cases that cross many chains, mixers or countries can take weeks or months, and court action after the trace adds more time.

Wallet recovery guidance, in your inbox.

Occasional practical notes from the team that helps people get back into their wallets.

By subscribing, you agree to our privacy policy. Unsubscribe anytime.