Bitcoin Privacy Cost Calculator: CoinJoin, PayJoin & Mixing Fees

What Does Bitcoin Privacy Actually Cost?

Bitcoin transactions are pseudonymous, not anonymous. Every payment leaves a permanent trail on a public ledger, and chain analysis firms routinely link addresses to real-world identities. Gaining meaningful financial privacy on Bitcoin requires active effort, and that effort has a price: coordinator fees, mining fee overhead, pool entry costs, and time spent waiting for remix rounds.

This reference breaks down the real cost of each major Bitcoin privacy technique so you can compare methods side by side. All costs are calculated at a moderate fee environment of 10 sat/vB unless otherwise noted.

Privacy Techniques at a Glance

The following table summarizes the six primary approaches to Bitcoin transaction privacy, their fee structures, and what kind of protection each provides.

Cost by UTXO Amount

Privacy costs hit small UTXOs much harder than large ones. The following table shows the approximate total cost (service fees plus mining overhead) of a single mixing round for each technique at 10 sat/vB. Whirlpool figures use the closest matching pool denomination.

Wasabi's community coordinators charge 0% coordinator fees as of mid-2026, making cost purely a function of mining fees. Whirlpool's 5% entry fee is steep but covers unlimited free remixes afterward. JoinMarket's maker fees scale with amount but remain well under 1%. PayJoin adds only the cost of one extra input (~68 vB) to a standard transaction.

Wasabi Wallet WabiSabi CoinJoin

Wasabi 2.x uses the WabiSabi protocol to create large CoinJoin rounds with 70 or more concurrent participants. Each round produces dozens of outputs across 79 standard denominations, creating substantial anonymity sets in a single transaction.

The original coordinator (zkSNACKs) shut down on June 1, 2024, citing regulatory pressure following the Samourai Wallet arrests. Community-run coordinators now handle CoinJoin coordination, with the most active seeing 70+ concurrent participants per round. Wasabi's client removed the coordinator fee mechanism entirely: users pay only their share of mining fees.

A typical WabiSabi round with 150+ inputs produces a transaction of 50,000-70,000+ vB. At 10 sat/vB, the total mining fee reaches ~500,000-700,000 sats, but split among 70+ participants, each pays roughly 7,000-10,000 sats. Users can configure a maximum fee rate (default: 150 sat/vB) and maximum coordinator fee (default: 0%) to prevent overspending during fee spikes.

Note: Remixes in Wasabi are free of coordinator fees and require only mining fees. Larger anonymity sets per round mean fewer rounds are needed compared to Whirlpool.

Whirlpool via Ashigaru

Whirlpool uses fixed-denomination pools where every CoinJoin round has exactly 5 inputs and 5 outputs, all of identical value. The original Samourai Wallet implementation was shut down in April 2024 when its founders were arrested and servers seized. An anonymous team forked the codebase into Ashigaru and relaunched Whirlpool in June 2025 with a redesigned coordinator.

Ashigaru currently offers two pools:

• 0.25 BTC pool: 0.0125 BTC entry fee (5%)
• 0.025 BTC pool: 0.00125 BTC entry fee (5%)

The fee structure uses a Tx0 preparation transaction that splits your input into equal-denomination premix UTXOs, a coordinator fee output, and a change output (often called "toxic change" because it retains links to your original UTXO). After the initial entry, all subsequent remixes are free and unlimited. Ashigaru requires a personal Bitcoin node (Dojo) and runs Whirlpool through its desktop Terminal application.

The 5-input, 5-output structure means each round is approximately 747 vB. New entrants (premixers) pay the mining fee for the round, while remixers pay nothing. At 10 sat/vB, that adds ~7,470 sats on top of the entry fee for the first mix.

JoinMarket: Decentralized Market-Based Mixing

JoinMarket takes a fundamentally different approach: instead of a central coordinator, it operates as a peer-to-peer marketplace. Makers provide liquidity by keeping coins available for CoinJoin and earn small fees. Takers initiate CoinJoins, selecting makers from the order book and paying their fees plus mining costs.

Typical maker fees range from 0.01% to 0.03% of the mixed amount per maker. A standard CoinJoin round involves 4-8 makers, bringing the total maker fee to 0.04-0.24% per round. JoinMarket's tumbler script automates a sequence of 10-20 rounds with different makers each time, achieving strong unlinkability at a total cost typically under 0.5% in maker fees plus mining.

The September 2026 release of JoinMarket-NG (v0.39.0) introduced fee quantization: makers set fees on a shared grid of standardized values so that being on the same fee as other makers increases the maker's own anonymity set. No fixed pool denominations are required, and there is no Tx0 preparation step.

PayJoin: Privacy at Near-Zero Cost

PayJoin (BIP 78 and the newer asynchronous BIP 77) adds privacy to ordinary payments by having the receiver contribute one of their own UTXOs as an input. The resulting transaction looks identical to a normal payment on-chain: 2 inputs, 2 outputs, no distinctive pattern. This breaks the common input ownership heuristic that chain analysis depends on.

The overhead is minimal: one additional input adds approximately 68 vB to the transaction compared to a standard 1-input payment. At 10 sat/vB, that is 680 extra satoshis. The receiver effectively consolidates a UTXO in the process, so the marginal cost is shared.

BIP 77 (PayJoin v2) removes the requirement for both parties to be online simultaneously by using an asynchronous relay. Wallet support is growing: Bull Bitcoin added full BIP 77 send and receive in December 2024, Cake Wallet followed in May 2025, and BTCPay Server supports both BIP 78 and BIP 77 for merchant receivers. Sparrow Wallet supports BIP 78 PayJoin sending.

For a deeper comparison of PayJoin implementations, see our PayJoin implementation comparison.

Coin Control: Free but Limited

Coin control is a wallet feature that lets you manually select which UTXOs fund each transaction. It costs nothing: no extra fees, no additional on-chain footprint. The limitation is that it is purely defensive. It prevents you from merging UTXOs with different privacy contexts (a KYC exchange withdrawal and a no-KYC purchase, for example) but does not break existing links or create new anonymity sets.

Effective coin control requires labeling every UTXO with its source, segregating UTXOs by privacy context, and never combining coins from different buckets. Wallets like Sparrow, Wasabi, Bitcoin Core, and Electrum all support manual UTXO selection. Sparrow's freeze feature is especially useful for preventing accidental selection of sensitive UTXOs.

Coin control is the baseline hygiene practice that complements every other privacy technique. Even after mixing, spending mixed outputs alongside unmixed "toxic change" undoes the privacy gained. For more on address clustering risks, see our Bitcoin privacy tools comparison.

Lightning Network Privacy

The Lightning Network provides privacy as a side effect of moving transactions off-chain. Payments are routed through onion-routed channels where each intermediate node sees only the previous and next hop, not the sender, receiver, or full path.

Routing fees are negligible: a median base fee of roughly 0.4 sats plus a proportional fee rate typically ranging from 6 to 143 parts per million. For a 100,000-sat payment, total routing fees are usually under 50 sats. The primary on-chain costs are channel opening and closing transactions (each ~141 vB for a standard P2WPKH channel).

Privacy limitations exist: research shows that near-deterministic least-cost routing can reduce anonymity sets, single-hop payments expose both parties to the intermediary, and channel open/close transactions remain publicly visible. BOLT12 offers with blinded paths improve receiver privacy by hiding the destination node behind encrypted hops.

Spark takes a different approach to Bitcoin-layer privacy. As a protocol built on statechains and operated off-chain, Spark transactions do not appear on the Bitcoin base layer, avoiding the public transaction graph entirely. Combined with USDB stablecoin support, Spark offers both privacy and dollar-denominated value transfer without the per-transaction costs of on-chain mixing.

How Many Remix Rounds Do You Need?

There is no universally agreed minimum. The answer depends on the technique and your threat model.

Wasabi WabiSabi rounds include 70+ participants, so a single round already creates a substantial anonymity set. Additional remixes increase forward-looking anonymity as your mixing peers also continue to remix. Two to three rounds provide strong practical privacy for most users.

Whirlpool's 5-input rounds provide a smaller per-round anonymity set, but the backward-looking set grows as each UTXO traces back through a chain of prior mixes to the pool's genesis. Community guidance recommends allowing outputs to remix multiple times before spending. Since remixes are free, leaving UTXOs in the pool costs nothing beyond the initial entry fee.

JoinMarket's tumbler script typically runs 10-20 transactions with 4-8 different makers per round. Each round with different counterparties increases the anonymity set multiplicatively. The critical rule across all methods: never combine mixed outputs with unmixed coins in the same transaction, as this collapses the privacy gained.

Fee Sensitivity to Network Congestion

Mining fees dominate the cost of on-chain privacy techniques during periods of high network congestion. A Wasabi CoinJoin participant paying ~7,000 sats at 10 sat/vB would pay ~70,000 sats at 100 sat/vB. Whirlpool's Tx0 and initial mix costs scale similarly.

Whirlpool entry costs are dominated by the 5% coordinator fee, so mining fee fluctuations affect the total less. Wasabi and JoinMarket costs are almost entirely mining fees, making them highly sensitive to congestion. PayJoin overhead remains trivial in all conditions. For real-time fee tracking, see our Bitcoin fee estimator.

Legal Status of Privacy Tools (2026)

The legal landscape shifted dramatically after the April 2024 arrest of Samourai Wallet's founders. Both pleaded guilty in July 2025 and were sentenced to 4-5 years in prison, marking the first time non-custodial crypto tool developers were convicted under money transmission statutes.

The Tornado Cash OFAC sanctions were lifted in March 2025 after the Fifth Circuit ruled that immutable smart contracts cannot be sanctioned, though co-founder Roman Storm was separately convicted of operating an unlicensed money transmitting business. In response, the bipartisan Promoting Innovation in Blockchain Development Act of 2026 was introduced to clarify that money transmission laws target custodial entities, not open-source software developers.

The trend is toward compliance-friendly privacy approaches: PayJoin (steganographic, indistinguishable from normal transactions), coin control (user-side hygiene), and off-chain protocols like Lightning and Spark that avoid creating public on-chain patterns. For background on how wallet fingerprinting works, see our Bitcoin privacy landscape analysis.

Choosing the Right Privacy Technique

If you are mixing large amounts and want the lowest percentage cost: Wasabi CoinJoin or JoinMarket. Both charge under 0.1% for amounts above 0.1 BTC, with Wasabi offering larger anonymity sets per round and JoinMarket offering decentralization without a coordinator.

If you want "set and forget" privacy with unlimited remixes: Whirlpool via Ashigaru. The 5% entry fee is high, but once paid, your UTXOs can remix indefinitely at no additional cost.

If you want everyday payment privacy at minimal cost: PayJoin. It adds less than 700 sats of overhead per transaction and leaves no on-chain fingerprint. Combine with coin control for the best results.

If you want privacy without on-chain exposure: Lightning or Spark. Both move transactions off the base layer entirely, avoiding the public transaction graph. Spark's off-chain architecture eliminates the per-transaction cost of mixing while providing native support for USDB stablecoin transfers.

For a broader overview of available tools and their tradeoffs, see our CoinJoin implementations comparison.

Frequently Asked Questions

How much does a Bitcoin CoinJoin cost?

It depends on the implementation and current fee rates. Wasabi WabiSabi CoinJoins through community coordinators charge 0% coordinator fees, making cost purely a function of mining fees (roughly 7,000 sats per round at 10 sat/vB). Whirlpool via Ashigaru charges a one-time 5% pool entry fee plus mining costs. JoinMarket charges 0.01-0.03% in maker fees per round plus mining. In all cases, higher network congestion increases the mining fee component proportionally.

Is PayJoin cheaper than CoinJoin?

Yes, significantly. PayJoin adds approximately 68 vB to a standard transaction (about 680 extra sats at 10 sat/vB), while a CoinJoin round costs 3,000-130,000+ sats depending on the implementation. However, PayJoin and CoinJoin serve different purposes: PayJoin breaks the common input ownership heuristic for a single transaction, while CoinJoin creates a large anonymity set across many participants. They are complementary rather than substitutes.

Are CoinJoin transactions legal?

CoinJoin transactions themselves are standard Bitcoin transactions and are not illegal. However, operating a CoinJoin coordination service may carry legal risk under money transmission laws, as demonstrated by the Samourai Wallet prosecution in 2024-2025. Users face no criminal liability for participating in CoinJoins in most jurisdictions, though some exchanges may flag or restrict accounts that interact with known mixing services. The legal landscape is evolving: the Promoting Innovation in Blockchain Development Act of 2026 aims to clarify that open-source developers are not money transmitters.

How many CoinJoin rounds do I need for good privacy?

For Wasabi WabiSabi (70+ participants per round), one to three rounds provide strong practical anonymity for most threat models. For Whirlpool (5 participants per round), more remixes are recommended since each round's anonymity set is smaller. The key rule is to never spend mixed outputs alongside unmixed coins, as this collapses the anonymity set regardless of how many rounds you completed.

What happened to Samourai Wallet and Whirlpool?

Samourai Wallet's founders were arrested in April 2024 and its servers were seized, taking the original Whirlpool coordinator offline. Both founders pleaded guilty in July 2025 and received sentences of 4-5 years. An anonymous team forked the codebase into Ashigaru and relaunched Whirlpool with a new coordinator in June 2025, offering two pools (0.25 BTC and 0.025 BTC) at 5% entry fees. Ashigaru requires a personal Bitcoin node to operate.

Does Lightning Network provide privacy?

Lightning provides partial privacy. Payments are off-chain and onion-routed, so intermediate nodes cannot see the full payment path. However, channel open/close transactions are on-chain and visible, channel capacities are public, and research has shown that deterministic routing can reduce effective anonymity sets. BOLT12 offers with blinded paths improve receiver privacy. For stronger privacy guarantees without on-chain exposure, off-chain protocols like Spark avoid the public transaction graph entirely.

What is the cheapest way to get Bitcoin privacy?

Coin control costs nothing and should be practiced by every Bitcoin user. Beyond that, PayJoin adds less than 700 sats of overhead per transaction and is the cheapest active privacy technique. Lightning routing fees (typically under 50 sats per payment) provide inexpensive off-chain privacy for regular spending. For mixing, CoinJoin through Wasabi's community coordinators is the most cost-effective option for large amounts, with costs under 0.1% for UTXOs above 0.1 BTC.

This tool is for informational purposes only and does not constitute financial or legal advice. Fee data is approximate and based on publicly available information as of September 2026. Mining fees, coordinator policies, and tool availability change frequently. Privacy techniques may carry legal implications depending on your jurisdiction. Always verify current fees and legal status before making decisions.