Silent Payments

💡 The Plain-English Definition

Silent payments allow anyone to send Bitcoin to a published address without the payment appearing publicly linked to that address — and without the recipient ever reusing addresses. Each payment automatically lands in a fresh, unique address that only the recipient can find.

🤔 But Why Though?

Bitcoin’s address reuse problem is well-documented: sharing the same address publicly means every payment to it is permanently linkable to every other payment, creating a complete public financial history for that address. The naive solution — generate a new address for each sender — requires coordination: the recipient must provide a fresh address each time, which is impractical for public-facing use (donation buttons, business payment addresses, social media bios). Earlier solutions like stealth addresses (BIP47) improved on this but required an extra on-chain “notification transaction” before any payment could be received — an added cost and complexity that limited adoption.

Silent payments (formalised in BIP352, proposed by Ruben Somsen and Josie Bake in 2023) solve this without requiring any prior notification. The mechanism uses a shared-secret derivation: the sender uses the recipient’s published public key and their own transaction inputs to derive a unique payment address mathematically. The recipient scans the blockchain using their private key to find payments addressed to them — a computation they can do silently without any interaction with the sender. Because each sender uses different transaction inputs and different randomness, every payment produces a completely different address, even when multiple senders use the same published public key. Nobody observing the blockchain can link two silent payments to the same recipient without the recipient’s private key.

Wallet support for silent payments has grown significantly through 2025–2026. Cake Wallet, Bitcoin Keeper, and several others support sending and receiving silent payments as of early 2026. The main computational cost is on the recipient side — scanning the blockchain to find payments requires processing each block, which is more demanding than simply watching a known address.

🌍 The Real-World Analogy

Think of silent payments like a P.O. box that generates a new box number for every sender, automatically, without anyone having to arrange it. You publish one permanent address (the P.O. box location). Each sender calculates a unique box number from that location using their own details. When you check your mail, you know which boxes are yours because you have the master key — but nobody else can connect the boxes to you or to each other.