Criminals Thought Bitcoin Was the Perfect Hiding Place, but They Thought Wrong

Companies have popped up to help cops identify suspects who use Bitcoin, and savvy criminals are moving to other currencies.

A notice to people using Bitcoin for illicit purposes: you can run, but it’s getting a lot harder to hide. Law enforcement officials are using Bitcoin’s public ledger, called the blockchain, to follow the digital money and track down suspected criminals using it.

As the most popular cryptocurrency, Bitcoin has helped fuel the rise of ransomware attacks—extortion schemes, like the recent WannaCry cyberattack, in which hackers hold the contents of a victim’s computer hostage until they get paid. Criminals can use Bitcoin to collect ransoms easily and without having to reveal their identities. The currency has also been associated with online drug sales, money laundering, and sex trafficking.

But while Bitcoin users can withhold their identities, they can’t avoid revealing other information that can be useful to investigators. Every Bitcoin transaction is recorded on its blockchain, a publicly accessible record of all transactions made using the currency. Blockchains “provide a really useful source of truth,” says Jonathan Levin, cofounder of Chainalysis, which develops software tools for analyzing blockchain data. Its products can help investigators draw inferences about how people are using the currency.

Chainalysis combines its analysis with other publicly available information to identify users through the unique strings of numbers they use on the blockchain, called addresses, and then map how they move funds around. This technique can be used to do things like identify the Bitcoin exchanges where the users of a gambling site are converting their bitcoins into dollars (see “Mapping the Bitcoin Economy Could Reveal Users’ Identities”).

Chainalysis’s tools are clearly valuable to criminal investigators. Since 2015, the company has supported investigations by the U.S. Internal Revenue Service, the Federal Bureau of Investigation, the Securities and Exchange Commission, the Drug Enforcement Administration, Immigration and Customs Enforcement, and Europol. In most cases, says Levin, investigators turn to Chainalysis when they already have some kind of lead, like a Bitcoin address they found among a suspect’s possessions. If they can determine that a suspect is using a particular exchange, they can use a court order get more information from that exchange.

The government is also interested tracking the flow of funds on the blockchain to determine whether merchants that accept Bitcoin are reporting it and paying proper taxes, says Danny Yang, founder of BlockSeer, which also develops Blockchain analytics tools and supports law enforcement investigations.

Cryptocurrency exchanges are becoming customers of analytics firms too. In many places it’s unclear the degree to which exchanges are required by law to know their customers and make sure they aren’t laundering money, as is required of traditional banks. But it’s difficult for exchanges to open bank accounts if they don’t understand who their customers are. And if the government is able to see that criminals are using certain exchanges, the exchanges want to be able to see that too, says Yang.

The news isn’t all good for law enforcement, though. There are ways to confuse investigators, such as using so-called mixing services, which take bitcoins from many users and mix them up before sending them back out to different addresses at different times. More important, some newer cryptocurrencies, prominently Zcash and Monero, are designed to conceal the information that Chainalysis, BlockSeer, and others use to follow the money.

Savvy criminals are already migrating to these untraceable systems. Last month, Chainalysis confirmed that WannaCry hackers were able to convert a portion of their ransom payouts from Bitcoin to Monero before the service they were using blacklisted their addresses.

Bitcoin Is Worse Is Better

2011 essay on how Bitcoin’s long gestation and early opposition indicates it is an example of the ‘Worse is Better’ paradigm in which an ugly complex design with few attractive theoretical properties compared to purer competitors nevertheless successfully takes over a niche, survives, and becomes gradually refined.

 

The genius of Bitcoin, in inventing a digital currency successful in the real world, is not in creating any new abstruse mathematics or cryptographic breakthrough, but in putting together decades-old pieces in a semi-novel but extremely unpopular way. Everything Bitcoin needed was available for many years, including the key ideas.

However, the sacrifice Bitcoin makes to achieve decentralization is—however practical—a profoundly ugly one. Early reactions to Bitcoin by even friendly cryptographers & digital currency enthusiasts were almost uniformly extremely negative, and emphasized the (perceived) inefficiency & (relative to most cryptography) weak security guarantees. Critics let ‘perfect be the enemy of better’ and did not perceive Bitcoin’s potential. However, in an example of ‘Worse is Better’, the ugly inefficient prototype of Bitcoin successfully created a secure decentralized digital currency, which can wait indefinitely for success, and this was enough to eventually lead to adoption, improvement, and growth into a secure global digital currency.

Radically Simple & Powerful Bitcoin Wallet

What you can do with BlueWallet

Besides receiving, sending and storing Bitcoin, you can do a lot more…

download bitcoin wallet for ios

Watch-only Wallets

Easily connect to your hardware wallet and manage your cold storage.

download bitcoin wallet for ios

Multisig Vaults

The best security available on the Bitcoin protocol. Create wallets with multiple keys.

download bitcoin wallet for ios

Lightning Wallets

Unfairly cheap and blazing fast transactions on Bitcoin.

download bitcoin wallet for ios

Notifications

Get notified of all transactions you are sending or receiving.

download bitcoin wallet for ios

Plausible Deniability

Create multiple storages or fake ones in case of a forced disclosure.