
Report says public ledgers expose sanctioned citizens, corporate treasuries and wealthy holders; enforcement works at the fiat off-ramp, the report argues.
ChangeNOW, a non-custodial crypto platform, and CoinRabbit, a digital asset management platform, published a report arguing that crypto privacy tools perform "essential protective functions," restoring a measure of financial privacy that conventional banking has always offered. Titled "Financial Privacy in the Digital Age," the paper builds on data from TRM Labs, Chainalysis, RAND Corporation and the two platforms' internal research.
Confidentiality is the default at any bank. A public ledger gives that up, and the report argues the industry has not counted the cost of the trade. The report's case rests on what a public ledger shows. Wallet activity is readable by anyone. The report details what that means for sanctioned citizens and for companies holding crypto on their balance sheets. Individual holders, it argues, face a separate set of threats that extend from scams to robbery.
The report's first example is Iran. When the country was cut off from SWIFT, ordinary citizens lost the ability to receive foreign payments or collect family remittances, while the political class kept alternative rails, the authors write. Sanctions, the authors argue, fall hardest on the people least able to influence the conduct being punished. Treasury Secretary Scott Bessent has said Operation Economic Fury seized about $1 billion in Iranian crypto, including a single $344 million USDT freeze on Tron.
Corporate treasuries face a quieter version of the same exposure. Anyone holding a company's wallet address can reconstruct vendor relationships, payment frequencies, estimated payroll and supply chain dependencies, data that stays confidential at any bank. Statista research cited in the paper puts the share of board members worried about internal data becoming public at 36%. The average breach costs $4.44 million, that research found.
The sharpest personal risk is physical. CertiK counted 52 verified wrench attacks in the first half of 2026, so-called because thieves coerce victims into handing over keys or funds under threat of violence. The attacks exposed $124.1 million, nearly 12 times the H1 2025 figure. France accounted for 33 of them. Breaches at France Travail and ANTS let attackers match home addresses to suspected crypto holdings, and French prosecutors have since charged 88 people, more than 10 of them minors.
Walter Barrett, chief strategy and growth officer at CoinRabbit, said, "Public blockchain transparency lets anyone audit your net worth in real time, turning private wealth into public information."
CoinRabbit's own survey work found that roughly half of high-net-worth holders had faced a targeted social engineering attempt within three years. Thirty percent use data-broker removal services to break the link between their identity and their on-chain activity.
The report does not dismiss the criminal use of privacy tools. TRM Labs data cited in the paper puts total illicit crypto inflows at $158 billion for 2025, up 145%. Chinese-language escrow and laundering networks accounted for more than $100 billion of that total. Pig-butchering fraud caused $75 billion in losses between 2020 and 2024, and 84% of verified fraud and scam inflows now move over stablecoin rails.
Secrecy from investigators is not the authors' goal. The decisive enforcement vulnerability, they contend, "lies at the fiat off-ramps," where crypto becomes spendable currency, "not within the upstream transactional privacy infrastructure."
Albert Quehenberger, founder of AQ Forensics, said privacy "may increase the complexity of an investigation." It "rarely determines whether a criminal can ultimately be identified," he said. Attribution, he said, comes from on-chain analysis, KYC records, exchange cooperation and stablecoin issuer intervention, rather than "relying on blockchain transparency alone."
The report presents ChangeNOW's private transfer routing and CoinRabbit's custodial model as examples of privacy-preserving architecture. "The privacy debate starts from the wrong assumption that ordinary users must prove they have nothing to hide by exposing everything," said Pauline Shangett, ChangeNOW's chief strategy officer. She called for the crypto industry to "build systems where access is justified, targeted, and lawful, not universal by default."
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.