Overview
Output linking refers to a set of heuristics and analytical techniques used to connect Bitcoin transaction outputs to real-world identities or to cluster multiple outputs as belonging to the same entity. Because Bitcoin transactions are publicly visible on the blockchain, the patterns in how they are constructed can reveal information about the parties involved, even though addresses are pseudonymous.
Output linking is one of the core techniques employed in chain analysis. While no single heuristic is perfectly reliable, combining multiple heuristics can build a surprisingly detailed picture of a user's transaction history, spending habits, and total holdings. Understanding these heuristics is essential for any Bitcoin user who values financial privacy.
Common Heuristics
Heuristic 1: Common Input Ownership
────────────────────────────────────
If inputs A and B appear in the same transaction,
they likely belong to the same person.
Inputs: Outputs:
├── 0.3 BTC (addr X) ├── 0.5 BTC (payment)
└── 0.4 BTC (addr Y) └── 0.18 BTC (change)
Conclusion: addr X and addr Y belong to the same entity.
Heuristic 2: Change Detection
────────────────────────────────────
One output is the payment, the other is change returned
to the sender. Several sub-heuristics identify which is which:
┌─────────────────────────────────────────────────────┐
│ Sub-heuristic │ Indicator │
├───────────────────────┼─────────────────────────────┤
│ Round number │ 0.1 BTC = payment, │
│ │ 0.0734 BTC = change │
│ Address type match │ Change uses same addr type │
│ │ as inputs │
│ Wallet fingerprint │ Change index, sequence, etc. │
│ Reuse with sender │ Change addr seen in future │
│ │ tx as input with sender addrs│
└───────────────────────┴─────────────────────────────┘
Heuristic 3: Temporal Analysis
────────────────────────────────────
Transaction timing can reveal time zones, activity
patterns, and correlations with off-chain events.
Heuristic 4: Amount Analysis
────────────────────────────────────
Tracking specific amounts through a series of
transactions, accounting for fees at each hop.
How Output Linking Builds Identity Graphs
Chain analysis firms combine these heuristics to construct identity graphs — networks of addresses linked to known entities:
Step 1: Exchange tags address E as "User Alice" (KYC data)
Step 2: Address E appears as input alongside address F
→ F belongs to Alice (common input ownership)
Step 3: Transaction from F has change output to address G
→ G belongs to Alice (change detection)
Step 4: Address G later appears as input alongside address H
→ H belongs to Alice (common input ownership)
Result: Addresses E, F, G, H all clustered as "Alice"
Her full transaction history is now visible.
This cascading linkage means that a single point of identity attachment (such as a KYC exchange withdrawal) can potentially expose an entire wallet's history.
Defenses Against Output Linking
Bitcoin users employ several techniques to resist output linking:
- CoinJoin: Multiple users combine their transactions, creating ambiguity in input-output relationships. Equal-denomination outputs make it impossible to determine which input funded which output.
- PayJoin: Both sender and receiver contribute inputs, breaking the common input ownership assumption in a way that is indistinguishable from a normal transaction.
- Coin Control: Manually selecting UTXOs prevents the wallet from combining outputs from different contexts (e.g., exchange withdrawals with peer-to-peer receipts).
- Avoiding address reuse: Using a fresh address for every transaction prevents trivial linking.
- Lightning Network: Moving payments off-chain removes them from the public transaction graph entirely.
Limitations of Output Linking
While output linking is powerful, it is not infallible:
- False positives: The common input ownership heuristic fails for CoinJoin, PayJoin, and any transaction where multiple distinct entities contribute inputs
- Ambiguous change: Change detection heuristics can be fooled by careful wallet construction or privacy-aware software
- Off-chain activity: Transactions that occur on the Lightning Network or via ecash systems are invisible to on-chain analysis
- Heuristic decay: As privacy tools become more widely adopted, the reliability of traditional heuristics decreases
Related Concepts
- Chain Analysis — the broader surveillance discipline that output linking is part of
- CoinJoin — the primary on-chain defense against output linking
- Change Address — the output most commonly targeted by linking heuristics
- Coin Control — manual UTXO management to prevent unintended linking
- Fungibility — the property that output linking undermines