uga has three ways into the garden. There's the gate, which is wide and obvious and the one she uses when I'm watching. There's the gap behind the shed, which she thinks is a secret. And there's the wall, which she only uses when she's in a hurry and doesn't care who sees.

Here's the thing she hasn't worked out: all three doors lead to the same garden. Where she goes once she's inside is the same either way. What changes is who knows she came in, and at what time, and from which direction.

Buying bitcoin works the same way. The coins are identical regardless of the door. What differs is the paper trail you leave on the way in — and most new buyers don't realise they're making that choice at all, because the easiest door is also the most documented one.

Let me lay out what's actually true, because this topic attracts a lot of nonsense from both directions.

1. The default door is a fully identified one, and that's not a scandal

If you buy bitcoin on a regulated exchange, you hand over your name, your address, a photo of your ID, and usually a selfie. Your bank transfer links your legal identity to the exchange account. The exchange knows which withdrawal address you sent your coins to.

That means a permanent record exists linking you to a specific address on a public ledger.

People say this with a lot of drama. I'll say it flatly: this is how regulated financial services work everywhere, for everything. Your bank knows your salary. Your broker knows your trades. Your supermarket loyalty card knows your diet. The exchange knowing you bought bitcoin is not uniquely sinister.

What is different is the public ledger on the other side. Your bank's record of your balance is private to your bank. The blockchain's record of your address is readable by anyone, forever. So the exchange record is a key, and the key opens a door that never closes.

That's the actual asymmetry. Not the KYC. The permanence of what the KYC attaches to.

2. What someone can actually learn, in practice

Say an address of yours becomes known. What follows?

They see every transaction that address ever made or will make. Amounts, timestamps, counterparties' addresses.

They can often follow the money forwards. If you spend from that address, the change usually goes to another address you control. Chain analysis software is quite good at spotting this pattern. One known address frequently unravels into a cluster of dozens.

They can follow it backwards. Where did the coins come from? Who paid you?

They cannot see your total holdings if your coins sit in wallets that were never touched by the known one. This is the single most important limit, and it's the basis of nearly every sensible privacy practice.

What they get, then, is not "your whole financial life". It's a connected component of a graph — and you have a surprising amount of control over how large that component is.

3. The other doors exist, and they're legal, and they're worse in other ways

There are ways to acquire bitcoin without an exchange account tied to your name. Peer-to-peer trades. Being paid in bitcoin for work. Buying from someone you know. Mining, if you're that sort of person.

These are lawful in most places. They are not a way out of your tax obligations — in nearly every jurisdiction, gains are gains regardless of how you acquired the asset, and a quieter purchase does not make an unreported gain legal. If you think it does, you have misunderstood something expensive. Talk to an accountant in your country, not to a forum.

And the practical costs are real:

Price. P2P trades routinely carry a 2–8% premium over the exchange price. You are paying for privacy, in cash, at a measurable rate.

Counterparty risk. The exchange, whatever else you think of it, will complete the trade. A stranger might not. Escrow helps. It doesn't eliminate.

Physical risk. Meeting strangers to exchange cash for a bearer asset is a category of risk with a long and unhappy history. If you do it, do it in daylight, in public, for small amounts, and tell someone where you are.

Effort. It's slow. It doesn't scale. Most people try it twice and go back to the exchange.

So the honest summary is: the quiet door is slower, pricier, and riskier in ways that have nothing to do with surveillance. For many people it's simply not worth it.

4. The thing that actually helps most people

Here's the practical insight that I think matters more than the whole KYC debate: the privacy cost of a documented purchase is mostly determined by what you do afterwards.

A few things that are cheap, legal, and effective:

Don't reuse addresses. Your wallet generates a new receive address for every deposit. Use that feature. It's free and it's the single biggest improvement available.

Separate your stacks by purpose. Coins you bought to hold long-term should not live in the same wallet as the coins you use for spending. Not because of secrecy theatre — because once one address is known, everything that touched it becomes legible together.

Be careful with consolidation. If you sweep ten small deposits from an exchange into one transaction, you've just publicly announced that all ten belong to the same person. Sometimes you need to do this (fees, tidiness). Just know what you're announcing.

Think before you post. More holdings have been de-anonymised by someone sharing a screenshot than by any chain-analysis firm. Tuga's secret gap behind the shed stopped being a secret the moment she started using it while the neighbour was in the garden.

None of this requires special tools, questionable services, or breaking any rule. It's just not reusing the same door over and over while someone's watching.

5. The uncomfortable half

I've described privacy as a reasonable thing to want, and I believe that. But I'd be writing propaganda if I stopped there.

Privacy and plausibility are in tension, and that cuts against you too. If you ever need to prove the provenance of your coins — to a tax authority, to a bank accepting your sale proceeds, to an insurer, to a court in a divorce or inheritance — a clean, documented purchase history is an asset. Exchange records are boring, and boring is exactly what you want when someone official asks where your money came from. People who optimised hard for opacity sometimes discover, years later, that they cannot easily demonstrate they acquired their coins honestly. That is a genuinely bad position and it is not hypothetical.

Most privacy advice online is sold to you. There is an industry of tools, services, and coins whose marketing runs on the fear I've just described. Some of it is good engineering. Some is a fee extraction mechanism with a privacy-shaped story, and some will get you flagged by the very institutions you eventually need to deal with.

And the threat model matters more than the technique. "I don't want my purchases in a marketing database" and "I am a journalist in a hostile state" require completely different answers. Most of the loudest advice is written for the second case and consumed by people in the first — who then pay real costs for protection against a threat they do not face.

So the question isn't "KYC or not". It's: who, specifically, do I not want to know this, and what will it cost me to stop them? Answer that honestly and the rest becomes straightforward.

Tuga uses the gate when it's open, because she isn't being chased. The gap behind the shed is for when she is. Knowing which situation you're actually in is most of the skill. 🐾⚡