The coffee shop on the corner of Fifth and Main had become Maya’s unofficial second office. She didn’t like the predictability—same time, same place, same corner booth—but the WiFi was fast, the owner didn’t ask questions, and the coffee was cheap enough that a single coin could buy her a month’s worth of caffeine.
She’d been sitting there for two hours, nursing a lukewarm latte and staring at the blockchain explorer on her laptop. The transaction she’d made—the one Dex had told her not to make—glowed on the screen like a warning flare.
Sender: Her stealth address.
Recipient: The landlord’s property management company.
Change: A brand new address she’d never seen before.
She clicked on the change address. The explorer showed a balance of 1.8 coins—the remainder of the 2.3-coin donation after the rent payment. The wallet software had created it automatically, a digital ghost that now followed her everywhere.
Anyone watching the landlord’s address can see that someone paid rent, she thought. And anyone watching that change address can see that it’s linked to the stealth address. Two addresses, one owner.
Her phone buzzed. Dex.
You at the coffee shop again?
Yes.
Stop. Too predictable. Move to the library.
She sighed, closed the laptop, and packed her bag. The barista gave her a knowing look—the regular who always left in a hurry. Maya forced a smile and walked out into the gray morning.
The library was six blocks away. She took a circuitous route, crossing streets at random, doubling back twice. Old habits from the first weeks after she’d fled. They felt ridiculous now—if the Analyst wanted to find her, he wouldn’t do it by watching her walk. He’d do it by watching her spend.
Scene 1: The Analyst’s Clustering Heuristics
Three hundred miles away, in a glass-walled office on the forty-second floor of a financial surveillance firm, the Analyst leaned back in his ergonomic chair and studied his screens.
His name didn’t matter. To his colleagues, he was just another data scientist running clustering algorithms. To his employers, he was a specialist in tracing privacy coins—one of the best. To Maya, he was the reason she couldn’t sleep.
He had three monitors arranged in a semicircle. The left showed a live feed of blockchain transactions, scrolling past at a rate of hundreds per second. The center held his primary investigation dashboard—a tool he’d built himself over years of hunting targets. The right displayed his notes on “Target C,” the emergency housing cluster he’d been tracking for six weeks.
He clicked into the Target C workspace.
Wallet Cluster: Target C (Emergency Housing)
- Addresses identified: 7 stealth addresses, 3 change addresses, 1 main address (inactive)
- Total funds received (estimated): 52,000–58,000 coins
- Active spenders: 1 (unidentified)
- Risk level: Medium
- Linkability confidence: 34%
Thirty-four percent. Not enough to act on. Not enough to identify. But enough to know he was close.
The Analyst pulled up a training document he’d written for junior staff—Clustering Heuristics for Privacy Coins—and skimmed his own words.
Common Spend Heuristic: If two addresses are inputs to the same transaction, they likely belong to the same person. (Note: Privacy coins with ring signatures break this heuristic.)
Change Address Heuristic: When a person spends from an address, any “change” returned to a new address is controlled by the same person. (Note: This heuristic is highly reliable for standard transactions.)
Timing Analysis Heuristic: Transactions that occur at the same time, from the same device, or in close temporal proximity often belong to the same entity.
Memo Field Heuristic: Identical or similar memos across multiple transactions suggest common ownership.
Behavioral Clustering: Recurring spending patterns (same merchants, same amounts, same times) link addresses regardless of cryptographic protections.
The Analyst smiled grimly. Stealth addresses break the common spend heuristic, he thought. But they can’t break the rest.
He zoomed in on the transaction that had caught his attention two days ago—the one where Target C had paid a property management company. He’d found it by monitoring merchant addresses known to serve domestic violence shelters. Landlords. Security companies. Grocery wholesalers. Any business that appeared in the spending patterns of similar clusters.
The transaction was simple. A stealth address—one of Target C’s—had sent 0.5 coins to a property management company called Harbor Properties. The blockchain showed the stealth address as the input. It showed two outputs: the Harbor Properties address, and a change address.
Change address, the Analyst thought. That’s my way in.
He clicked on the change address. A new window opened, showing its transaction history. So far, it had only one transaction—the incoming 1.8 coins from the rent payment. But the moment that change address spent anything, or received anything from another address, the cluster would grow.
He added the change address to the Target C cluster. Now there were eight stealth addresses and four change addresses. Twelve total. Still not enough to identify a person, but enough to see a pattern.
He ran a timing analysis on all twelve addresses. The results were consistent: most spending occurred between 6 PM and 9 PM, on weekdays, with occasional weekend activity. The spender—whoever they were—had a day job or a schedule that kept them busy until evening.
Evening spender, he noted. Possibly employed. Possibly a student.
He ran an amount analysis. The spending amounts clustered around $50–$200 for daily expenses, with occasional larger payments ($500–$2,000) for rent or security deposits. No huge spikes. No obvious patterns except one: every Tuesday at approximately 8 PM, there was a small transaction to a grocery store chain.
Tuesday night grocery shopping, he thought. Consistent. Reliable. Predictable.
He added a note to the Target C file: Behavioral pattern detected. Target shops for groceries on Tuesdays at 8 PM. Recommend monitoring grocery store locations within 5-mile radius of shelter.
The Analyst leaned back and stretched. He didn’t know Target C’s name. He didn’t know their face. But he knew their habits. And habits were easier to track than addresses.
Scene 2: Maya’s Spending Patterns
The library was quiet—the kind of quiet that made every keyboard click feel like a gunshot. Maya had found a carrel in the back corner, hidden between stacks of legal reference books that no one had touched in years.
Dex sat across from her, hunched over his own laptop. He’d shown up unannounced, claiming he “didn’t trust her not to make another mistake.” She couldn’t argue with that.
“Show me your transaction history,” he said. “The last thirty days.”
Maya pulled up her wallet’s spending log. The screen filled with rows of transactions—most of them small, most of them to predictable merchants. The hardware store. The grocery chain. The laundromat. The landlord.
Dex studied the list in silence. Then he pointed at the grocery transactions.
“Every Tuesday at 8 PM,” he said. “You’re not even trying to hide.”
“It’s when the store restocks. The discounts are better.”
“The discounts don’t matter if you’re dead.” Dex’s voice was sharp. “Look at this from the Analyst’s perspective. He sees a wallet that buys groceries at the same time every week. He sees a wallet that pays rent to a property management company. He sees a wallet that buys security hardware from a store that sells to shelters. What does that tell him?”
Maya swallowed. “That it’s a safe house.”
“Not just a safe house. A safe house with a predictable routine. A safe house that can be watched. A safe house that can be found.” Dex pulled up a mapping tool on his laptop. “Give me the addresses of the stores you use.”
“I’m not giving you that.”
“Then give me the cross streets. I’m not going to find you. But the Analyst will.”
Maya hesitated. Then she typed the grocery store’s location into a chat window—just the intersection, not the full address. Dex entered it into the mapping tool. A radius appeared.
“He’ll monitor every grocery store within ten miles of the shelter,” Dex said. “He’ll look for the one that gets a transaction from your cluster every Tuesday at 8 PM. Once he finds the store, he’ll watch the parking lot. He’ll watch the security cameras. He’ll wait for a face.”
“That’s insane. He can’t do all that.”
“He can if his firm has the resources. And they do.” Dex closed the map. “You need to change your patterns. Shop at different stores. Different times. Different amounts. Pay with cash when you can. If you use crypto, wait until we’ve implemented ring signatures.”
Maya nodded. “Okay. Different stores. Different times. What else?”
“Stop paying the landlord directly from your wallet. That address is now poisoned. Anyone watching it knows it’s connected to a shelter. We need to find a new way to pay rent—maybe through a trusted intermediary, maybe with physical cash.”
“The landlord won’t accept cash. They want a paper trail.”
“Then we create a paper trail that doesn’t lead to you.” Dex pulled out his notebook and scribbled a few lines. “I know a lawyer who works with nonprofits. She can set up a trust account. You send crypto to the trust, the trust pays the landlord. The chain of custody is broken.”
Maya felt a flicker of hope. “How long will that take?”
“A week. Maybe two. Until then, don’t pay any more rent from your wallet. Let me front the money if you have to.”
“I can’t ask you to do that.”
“You didn’t ask. I’m offering.” Dex’s expression was unreadable. “My mom’s shelter didn’t have someone to help them. Yours does.”
Scene 3: The Demonstration Transaction
Dex pulled his laptop closer. “I’m going to show you what happens when you spend from a stealth address without protection. Not your wallet—a demo wallet I control. Watch.”
He opened a blockchain explorer and created a fresh test wallet. The wallet had a single stealth address with a balance of 1.0 coin—fake money on a test network, but the mechanics were identical to the real blockchain.
“Here’s my stealth address,” Dex said, pointing at the screen. “Now I’m going to spend 0.3 coins to a merchant—in this case, a fake bookstore address.”
He entered the transaction and clicked confirm. The blockchain explorer refreshed.
Transaction ID: abc123def456
Input: Stealth Address A (Dex’s wallet)
Output 1: Bookstore address (0.3 coins)
Output 2: Change Address B (0.7 coins)
“See the change address?” Dex said. “The wallet created it automatically. Now the blockchain shows that Stealth Address A and Change Address B are controlled by the same person. Anyone watching can add Change Address B to my cluster.”
Maya watched as the explorer’s clustering algorithm automatically grouped the two addresses. A little note appeared: Likely same owner.
“That’s bad,” she said.
“It gets worse.” Dex performed another transaction—this time spending 0.2 coins from Change Address B to a different merchant.
Input: Change Address B
Output 1: Coffee shop address (0.2 coins)
Output 2: Change Address C (0.5 coins)
The explorer now showed three addresses linked together: Stealth Address A, Change Address B, and Change Address C. A chain of links, each one strengthening the cluster.
“Every time I spend, I create a new change address,” Dex explained. “And every new change address is linked to the previous one. After ten transactions, I have a chain of ten addresses that all belong to me. Anyone watching can follow that chain from the first transaction to the last.”
Maya thought of her own spending. Dozens of transactions over the past few months. Dozens of change addresses, each one linked to the next. The Analyst could follow her spending trail like a roadmap.
“How do you break the chain?” she asked.
“Ring signatures. But we’ll get to that.” Dex closed the demo. “For now, the important thing is to understand that every transaction you make creates new links. Those links are permanent. They cannot be erased. The only way to protect yourself is to make the links meaningless—to create so many possible paths that no one can tell which one is real.”
He looked at her directly. “You made a mistake when you paid the landlord. You created a link between your stealth address and a change address. Now the Analyst has that change address. He’s watching it. He’s waiting for you to spend from it.”
“What if I never spend from it?”
“Then it’s a dead end. But you also can’t spend the 1.8 coins that are sitting there. They’re trapped. If you move them, you link the change address to whatever you move them to.”
Maya felt a surge of frustration. “So I just… lose that money?”
“For now. Later, when we set up ring signatures, you might be able to spend it safely. But not yet.” Dex’s voice softened. “I know it’s hard. I know you need the money. But every coin you spend carelessly is a bread crumb leading back to you.”
Scene 4: The Analyst Narrows In
The Analyst’s evening shift had just begun. His office was empty except for the hum of servers and the distant sound of janitorial staff vacuuming carpets. He preferred working at night—fewer distractions, cleaner data, and a certain quiet satisfaction that came from hunting alone.
He pulled up the Target C cluster and ran an update. The change address from the rent payment—Address C-4, as he’d labeled it—had not moved. No new transactions. No new links.
Patient, he thought. Or scared.
He ran a different analysis: merchant clustering. He took every merchant address that had received funds from Target C and mapped them by category.
- Property management: Harbor Properties (1 transaction)
- Hardware/security: Ace Locks & Alarms (2 transactions)
- Grocery: FreshMart (6 transactions, each Tuesday at 8 PM)
- Laundry: Spin City Laundromat (4 transactions, irregular)
- Miscellaneous: Various small merchants (coffee, bus passes, phone refills)
The FreshMart transactions caught his attention. Six Tuesdays in a row, almost exactly at 8 PM. That wasn’t a coincidence—it was a habit. And habits could be exploited.
He opened a new tab and searched for FreshMart locations within a 25-mile radius of the city’s domestic violence shelters. There were twelve. He flagged all of them for surveillance—nothing active, just a note for future monitoring.
Then he looked at Ace Locks & Alarms. Two transactions, three weeks apart, for approximately $150 each. Security hardware. Deadbolts, maybe. Or cameras.
Someone is fortifying a location, he thought. Someone is scared.
He added a note: Target C has spent $300+ on security hardware in past month. Suggest physical surveillance of Ace Locks locations.
The Analyst leaned back and stretched. He didn’t have enough to identify Target C—not yet. But he had something better. He had behavior. And behavior was just a pattern waiting to be broken.
He glanced at the clock: 11:47 PM. Almost midnight. Time for one more check before bed.
He ran a dust tracking script—a background process that monitored thousands of addresses for tiny transactions. The script flagged an alert: the change address from Target C’s rent payment had just received a dust transaction.
0.00005 coins from an unknown wallet.
The Analyst smiled. He hadn’t sent that dust—not this one. But someone had. And if Target C ever spent that dust, the link would be forged.
He added the dust transaction to the file and went home.
Tomorrow, he would send his own dust.
Scene 5: Maya Realizes the Danger
Dex had gone home an hour ago, but Maya stayed at the library until closing time. She sat in the same carrel, staring at her transaction history, seeing it now through the Analyst’s eyes.
Every Tuesday at 8 PM. Every week. Same store. Same amount. Same predictable, stupid pattern.
She thought about the security hardware she’d bought—the deadbolts, the motion sensors, the window locks. She’d paid with crypto because she thought it was private. But the merchant address was public. Anyone could see that someone had bought security hardware. Anyone could guess what it was for.
He doesn’t need to know it’s me, she realized. He just needs to find the safe house. Once he finds the money, he follows the money to the place. And then…
She couldn’t finish the thought.
Her phone buzzed. A text from an unknown number.
I know you bought locks. I know you’re scared. I know you’re running out of time.
She deleted it without responding. Then she opened her wallet software and looked at the change address—the one from the rent payment. The 1.8 coins sat there, untouched, waiting.
She would never spend them. She couldn’t. Not until Dex taught her how to do it safely.
But the Analyst knew she had them. And he was patient.
The library lights flickered—closing time. Maya packed her laptop and walked out into the cold night. The streets were empty, the streetlights casting long shadows that seemed to move when she wasn’t looking.
She took a different route home. Three left turns, a right, a shortcut through a parking lot, then another left. Unpredictable. Random. Or as random as she could manage at 10 PM in a city she barely knew.
When she finally reached her apartment, she checked her old wallet—the one she’d abandoned. The dust transaction was still there. 0.0001 coins from an address she didn’t recognize.
He sent it to the old wallet, she thought. He wants me to panic. He wants me to move it. He wants me to link my old life to my new one.
She closed the wallet and didn’t open it again.
That night, she dreamed of chains—long, glowing chains of addresses, each one linked to the next, stretching across the blockchain like a leash around her throat. At the end of the chain stood the Analyst, smiling, holding the other end.
She woke up gasping at 3:00 AM.
Her phone was glowing on the nightstand. A new message.
You can run, but you can’t hide from the ledger. Every transaction is forever. I will find you.
She blocked the number, rolled over, and didn’t sleep again.
Table of contents:
Introduction
Chapter 1: The Public Ledger
Chapter 2: A Glass House
Chapter 3: The Stealth Protocol
Chapter 4: The View Key
Chapter 5: The Linkability Flaw
Chapter 6: The Stalker’s Trace <<<<<< NEXT
Chapter 7: The Ring Signature
Chapter 8: A Decoy Mix
Chapter 9: The Tracing Resistance
Chapter 10: Anonymous, Not Invisible
