Silent Payments

💡 The Plain-English Definition

Silent payments let anyone send bitcoin to a published address without the payment appearing publicly linked to that address — and without the recipient ever reusing addresses. Each payment automatically lands in a fresh, unique address that only the recipient can find.

⤢ Enlarge

🤔 But Why Though?

Bitcoin’s address-reuse problem is well known: share one address publicly and every payment to it is permanently linkable to every other, building a complete public financial history for that address. The obvious fix — a fresh address for each sender — needs coordination: the recipient has to hand out a new address each time, which is impractical for public uses like a donation button, a business payment address, or a bio on social media. An earlier solution, stealth addresses (BIP47), improved on this but required an extra on-chain “notification transaction” before any payment could arrive — a cost and complexity that held back adoption.

Silent payments (formalised as BIP352, proposed by Ruben Somsen and Josie Bake in 2023) solve this with no prior notification at all. Here’s the idea. The sender takes the recipient’s published public key (the shareable counterpart to their private key) and their own transaction inputs, and from those two ingredients mathematically works out a unique address to pay. The recipient then scans the blockchain with their private key to find the payments meant for them — something they can do on their own, with no interaction with the sender.

Because each sender uses different inputs and different randomness, every payment lands in a completely different address, even when many senders use the same published key. And nobody watching the blockchain can link two silent payments to the same recipient without that recipient’s private key.

Wallet support has grown a lot through 2025–2026. As of early 2026, Cake Wallet, Bitcoin Keeper, and several others can send and receive silent payments. The main cost falls on the recipient: scanning the blockchain to find your payments means processing every block, which is more demanding than simply watching one known address.

🌍 The Real-World Analogy

Think of silent payments like a P.O. box that generates a new box number for every sender, automatically, with no arrangement needed. You publish one permanent address (the P.O. box location). Each sender works out a unique box number from that location using their own details. When you check your mail, you know which boxes are yours because you hold the master key — but nobody else can connect the boxes to you, or to each other.