💡 The Plain-English Definition
Payjoin — also called Pay-to-EndPoint, or P2EP — is a privacy technique where both the sender and the receiver contribute inputs to a transaction. That breaks the foundational chain-analysis assumption that all inputs in a transaction belong to the same person — and it does so without any coordination with strangers.
🤔 But Why Though?
The common-input-ownership heuristic (the chain-analysis assumption that all inputs in a transaction share one owner) underlies most Bitcoin surveillance. CoinJoin (which combines several independent users’ transactions) breaks that assumption deliberately, but it needs coordination with strangers, special software, and often a waiting period. Payjoin gets the same privacy gain with only two parties — the sender and receiver, who are already in contact for an ordinary payment.
Here’s the mechanism. Instead of the sender building a transaction with only their own inputs, the receiver adds one of their own inputs too. The combined transaction now has inputs from two different people, which shatters the common-input-ownership assumption. An analyst watching it can’t tell which inputs belong to which party, what the payment amount was, or which output is the payment and which is the change.
The privacy gain is substantial: the transaction not only breaks clustering, it also defeats change-output analysis — because both parties contributed inputs and both may receive outputs, the usual rules of thumb for spotting the change fail completely.
Payjoin does need the other side to support it — the recipient’s software has to help build the transaction. The protocol is standardised as BIP78, and support (as of 2026) includes BTCPay Server (the open-source payment processor), Wasabi Wallet, Sparrow Wallet, and a growing number of others.
🌍 The Real-World Analogy
When paying at a till, instead of handing over your exact banknote and getting change, imagine you and the shopkeeper each put some notes into a shared envelope, then each take out the right amount — you walk away having paid correctly, they walk away with the right revenue, but an outsider watching the envelope can’t tell who put in what or what the transaction was worth. Payjoin is that shared-envelope payment in Bitcoin form.
⚡ So What?
Payjoin is the most elegant privacy tool in Bitcoin’s current kit: the same two-party interaction as a normal payment, dramatically better privacy, no coordinating with strangers, no waiting for a CoinJoin round. The limiting factor is adoption — both sides need compatible software. Merchants using BTCPay Server already have it. For individuals, the practical step is using a wallet that supports BIP78. As adoption grows, Payjoin could become the default transaction for privacy-conscious users — real privacy with no change to how paying feels.
