Most blockchains are public ledgers, which makes cryptocurrency unusually traceable: every transaction is visible forever. This method follows funds from a wallet address across the chain and works toward the real-world points — exchanges — where identity can attach.
What you'll need
- A starting wallet address or transaction hash
- Block explorers and analysis tools from the Cryptocurrency category
- Dataset sources from the Data Acquisition category for tagged addresses
Steps
- Start from a known artifact. Take the wallet address or transaction hash you have and open it in a block explorer for the relevant chain to see its full transaction history.
- Follow the flow. Trace funds forward (where they went) and backward (where they came from), transaction by transaction, noting amounts, timing, and the addresses involved.
- Cluster related addresses. Use heuristics and analysis tools to group addresses likely controlled by the same entity — for example, inputs spent together in one transaction usually share an owner.
- Identify service addresses. Recognise exchange, mixer, and merchant addresses. Funds reaching a regulated exchange are the point where an identity may be attached through that exchange's records.
- Enrich with off-chain data. Search the address as a string — people paste wallet addresses in forums, social posts, and donation pages, directly linking an address to a person or cause.
- Attribute carefully. Build attribution from the weight of clustered, corroborated evidence, and label what is proven versus inferred. On-chain analysis shows flows; tying them to a person usually needs an off-chain anchor.
Common pitfalls
- Assuming pseudonymity is anonymity. Addresses are public, but attribution to a person needs corroboration.
- Over-trusting clustering heuristics. They are probabilistic — treat clusters as strong leads, not proof.
- Losing the trail at mixers. Note where funds enter obfuscation services rather than fabricating a link across them.
Verify your result
You have traced the transaction when you can present the path of funds, the clusters and services involved, and any off-chain link to an identity — each step reproducible in a public explorer and labelled by confidence. Screenshot the explorer views so the trail can be independently followed.