Change addresses receive leftover Bitcoin when users spend UTXOs exceeding their payment amount, functioning like receiving coins back after paying with a large bill. In Bitcoin’s UTXO model, transactions cannot partially spend outputs – if you hold 10 BTC in one UTXO and...

Investigators track cryptocurrency through smart contracts by analyzing transaction logs, decoding function calls, monitoring token transfers, and mapping wallet interactions with deployed contract addresses.

Transaction timestamps reveal operational patterns, geographic locations, behavioral fingerprints, and coordination between criminal actors through temporal analysis of blockchain data.

Last Updated: February 2026 Transaction batching patterns identify exchange operations through distinctive multi-output transactions consolidating dozens of user withdrawals into single on-chain payments. Professional investigators recognize exchange hot wallets by analyzing...

UTXO patterns reveal wallet ownership, spending behavior, transaction timing, and coin management strategies through forensic analysis of Bitcoin transaction inputs and outputs.

CoinJoin transaction analysis identifies collaborative mixing transactions on blockchain networks by detecting distinctive patterns in input-output structures, then applies demixing algorithms to trace fund flows despite privacy obfuscation attempts.

Dusting attacks send tiny cryptocurrency amounts to thousands of wallet addresses to compromise user privacy and enable wallet de-anonymization.

Transaction graphs transform blockchain data into visual network maps where nodes represent cryptocurrency addresses or entities and edges represent fund flows between them.

Address clustering is a blockchain forensics technique that groups multiple cryptocurrency addresses under common ownership by analyzing transaction patterns, spending behaviors, and on-chain fingerprints.

Consolidation transactions occur when cryptocurrency users combine multiple small UTXOs (Unspent Transaction Outputs) into larger amounts by sending funds to themselves in a single transaction.