Why privacy?

Fungibility: why money that can be traced is bad money

Cash doesn't remember its past

The banknote in your pocket may have passed through anyone's hands ten years ago. You don't care: it's worth exactly its face value, and a shop accepts it like a new one. This property is fungibility: any unit of money equals any other.

A transparent blockchain breaks this. Every Bitcoin has a full history of movements. Exchanges and chain-analysis companies assign coins "risk scores", and if a coin was ever near a suspicious address it can be frozen at a recipient who did nothing wrong. Two coins of the same denomination start to be worth different amounts.

What you risk when everything is visible

• Everyone you have ever paid or been paid by can see your balance. The coffee shop learns how much money you have.
• Your history is visible forever. The blockchain never forgets, and analysis methods only get better.
• Business secrets: competitors see whom you pay and how much you earn. Your employer sees where your salary goes.
• Physical safety: a person with a large visible balance is a target.

Why privacy must be for everyone at once

Some cryptocurrencies make privacy optional: you may send a transparent transaction or a hidden one. In practice, only a minority uses the hidden ones, and that is exactly why they stand out. The smaller the crowd, the easier it is to find someone in it.

In Monero all transactions are private, always. Every transaction looks like every other. This is the core design idea: your privacy depends on everyone else looking the same as you.

But what about verifiability?

A natural question: if nothing is visible, how do we know nobody prints money? The answer is cryptography. Every Monero transaction contains proofs:

• that real, existing outputs are being spent (ring signature);
• that no output is spent twice (key image);
• that inputs equal outputs plus fee (Pedersen commitments);
• that no amount is negative (Bulletproofs+).

Every node checks all these proofs for every transaction. The network knows that the rules were followed without knowing who or how much.