<p>I find that claim (tracing the IP address of a transaction) highly suspect as transactions don't have an IP address associated with them. Once a transaction has been broadcast, it is incredibly difficult to figure out what IP address first sent the address. To do so requires that you have a connection to every single node and wallet and determine the IP address by seeing which node first broadcast a transaction. Otherwise you cannot figure out what IP address a transaction originated from.</p>

<p>The person you met may have meant that he traced the Bitcoin addresses in a transaction to figure out who spent created the transaction. That is far easier to do and far less expensive as you only need a copy of the blockchain to do so.</p>

CC BY-SA 3.0
2017-07-15T04:58:29.977Z
2017-07-15T04:58:29.977Z
Ava Chow
<p>Actually <a href="http://www.blockchain.com" rel="nofollow noreferrer">www.blockchain.com</a> used to have this at the bottom for each address:</p>
<blockquote>
<p>&quot;These IP addresses were the first to relay a transaction involving the selected address. It does not necessarily mean they are the transaction's owner.&quot;</p>
</blockquote>
<p>I think what they did is to simply record what IP the txid came from, and having many nodes could give you a good guess. But never 100%</p>

CC BY-SA 4.0
2023-03-06T23:15:52.213Z
2023-03-07T00:36:23.233Z
2023-03-07T00:36:23.233Z
Eva4684
<p>Thats not 100% accurate it all depends on the platform and device along with many other variables like for a quick example if on the victim device and it was there coinbase account that was compromised then yes it is very possible to trace the IP plus there are other ways as well they may be long and tedious but like my momma always told me use the internet as you would talk to god because its there for people to see forever don't really know why she said that never went to church lol I don't think I've found anything yet that trully is anonymous the ones running this circus would never let privacy ever happen they know that when were not distracted and gather in groups in private we share knowledge and are not so blind and if we see things for what they really are we are a threat everything is just a security blanket so you feel safe just like Delete/Format is a joke anything can be recovered  how many of you read the privacy policy really good for the default keyboard on your cell phone just your default onscreen keyboard thats just the tip lmao oh and thats old stuff were in the age of A.I. in everything</p>

CC BY-SA 4.0
2022-05-19T18:49:57.803Z
Welcome to [bitcoin.se]! I feel like your answer would be a lot better if you cut down on the fluff ...
Glorfindel
CC BY-SA 4.0
2022-05-19T01:51:12.993Z
2022-05-19T01:51:12.993Z
Rainbow Bag Bob
<p>If an entity runs a large amount of relay nodes on the network, they could figure out which of their nodes was the first to see a transaction, and which peer that transaction came from.  That does not necessarily tell them the originating IP, as it could have been a a node relaying a transaction rather than sending one.</p>

<p>This leaves a large amount of uncertainty in the trace.  Due to the decentralized nature of Bitcoin, no single entity is likely to be in control of the majority of relay nodes.  Let's say, for arguments sake, that there is a company that runs 40% of all relay nodes.  They have a very good chance that a wallet sending a transaction is directly connected to one of their nodes, and therefore they can work out the originating IP.  But what about the other 60% of nodes?  Can they ever say for sure that a transaction didn't bounce around the other 60% for a few hops before they saw it?  No, and odds are petty high that just that happens often.  And to my knowledge, no single entity runs that many nodes.</p>

<p>Point is, the more relay nodes there are, the less possible it is to trace an originating IP address.</p>

CC BY-SA 3.0
2018-03-05T10:45:57.583Z
And that's without beginning to consider the effect of onion routing if the originating node is using [Tor](https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor).
Willtech
CC BY-SA 3.0
2017-07-15T14:46:06.730Z
2017-07-15T14:46:06.730Z
Jestin
<p>I recently met a person who helped police track the <strong>IP address</strong> of a Bitcoin transaction. I wanted to learn more about it but he didn't have time to discuss about this topic in the meet.</p>

<p>I am curious in understanding how cryptocurrency transactions can lead to trace back of the <strong>IP address</strong> from which the transaction originated.</p>

<p>How does this stuff work?</p>

<p><strong>EDIT</strong></p>

<p><strong>IP address</strong> is bold because I do not mean wallet transaction address.</p>

<p>I know originating wallet address can be traced back with blockchain.</p>

CC BY-SA 3.0
2017-07-15T14:28:35.033Z
I have no doubt that the person claimed they were tracing the IP address...but like with Andrew's answer, I'm skeptical.
Jestin
<traceability><tracking><ip-address>
Understanding IP address tracing via Bitcoin Transaction
GypsyCosmonaut
# Understanding IP address tracing via Bitcoin Transaction

(Asked by: username_0 on 2017-07-15)

I recently met a person who helped police track the **IP address** of a Bitcoin transaction. I wanted to learn more about it but he didn't have time to discuss about this topic in the meet.

I am curious in understanding how cryptocurrency transactions can lead to trace back of the **IP address** from which the transaction originated.

How does this stuff work?

**EDIT**

**IP address** is bold because I do not mean wallet transaction address.

I know originating wallet address can be traced back with blockchain.

**Tags:** traceability, tracking, ip-address

> **Comments:**
> **username_1**: I have no doubt that the person claimed they were tracing the IP address...but like with Andrew's answer, I'm skeptical.  

---

## 4 answers

### Answer by username_1 on 2017-07-15. Score: 6 | Accepted answer

If an entity runs a large amount of relay nodes on the network, they could figure out which of their nodes was the first to see a transaction, and which peer that transaction came from. That does not necessarily tell them the originating IP, as it could have been a a node relaying a transaction rather than sending one.

This leaves a large amount of uncertainty in the trace. Due to the decentralized nature of Bitcoin, no single entity is likely to be in control of the majority of relay nodes. Let's say, for arguments sake, that there is a company that runs 40% of all relay nodes. They have a very good chance that a wallet sending a transaction is directly connected to one of their nodes, and therefore they can work out the originating IP. But what about the other 60% of nodes? Can they ever say for sure that a transaction didn't bounce around the other 60% for a few hops before they saw it? No, and odds are petty high that just that happens often. And to my knowledge, no single entity runs that many nodes.

Point is, the more relay nodes there are, the less possible it is to trace an originating IP address.

> **Comments:**
> **username_6**: And that's without beginning to consider the effect of onion routing if the originating node is using [Tor](https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor).  

---

### Answer by username_2 on 2017-07-15. Score: 6

I find that claim (tracing the IP address of a transaction) highly suspect as transactions don't have an IP address associated with them. Once a transaction has been broadcast, it is incredibly difficult to figure out what IP address first sent the address. To do so requires that you have a connection to every single node and wallet and determine the IP address by seeing which node first broadcast a transaction. Otherwise you cannot figure out what IP address a transaction originated from.

The person you met may have meant that he traced the Bitcoin addresses in a transaction to figure out who spent created the transaction. That is far easier to do and far less expensive as you only need a copy of the blockchain to do so.


---

### Answer by username_3 on 2023-03-06. Score: 0

Actually [www.blockchain.com](http://www.blockchain.com) used to have this at the bottom for each address:

> "These IP addresses were the first to relay a transaction involving the selected address. It does not necessarily mean they are the transaction's owner."

I think what they did is to simply record what IP the txid came from, and having many nodes could give you a good guess. But never 100%


---

### Answer by username_4 on 2022-05-19. Score: -1

Thats not 100% accurate it all depends on the platform and device along with many other variables like for a quick example if on the victim device and it was there coinbase account that was compromised then yes it is very possible to trace the IP plus there are other ways as well they may be long and tedious but like my momma always told me use the internet as you would talk to god because its there for people to see forever don't really know why she said that never went to church lol I don't think I've found anything yet that trully is anonymous the ones running this circus would never let privacy ever happen they know that when were not distracted and gather in groups in private we share knowledge and are not so blind and if we see things for what they really are we are a threat everything is just a security blanket so you feel safe just like Delete/Format is a joke anything can be recovered how many of you read the privacy policy really good for the default keyboard on your cell phone just your default onscreen keyboard thats just the tip lmao oh and thats old stuff were in the age of A.I. in everything

> **Comments:**
> **username_5**: Welcome to [bitcoin.se]! I feel like your answer would be a lot better if you cut down on the fluff ...  

---

