Both are ordinary Zcash transactions on the same chain. A transparent one publishes the sender and the receiver, along with the amount, exactly as Bitcoin does. A shielded one publishes only that a valid payment happened. You pick per transaction, and roughly 3 in every 4 ZEC currently sit on the transparent side.
The part that trips people up is that two separate choices are at work, not one. Your wallet picks a side when it sends, and the person receiving picks a side when they give you an address. What an outsider sees depends on the pair, not on you alone. That is why two people can both believe they used Zcash privately and still leave a readable trail.
So the useful question is which combination you are actually using, and what it costs to change it.
What each side actually publishes
A Zcash transaction has a sending side and a receiving side, and each can be transparent or shielded. That gives four combinations rather than two, and the four behave very differently in public. This is the model worth carrying, because it explains outcomes that the simple two-way split does not.
| Path | What anyone watching the chain can see |
|---|---|
| Transparent to transparent | The sending address, the receiving address, and the amount |
| Transparent to shielded | The sending address and the amount moving to the private side |
| Shielded to shielded | That a valid payment happened. No readable sender, receiver or amount, provided both sides sit in the same shielded pool |
| Shielded to transparent | The receiving address and the amount arriving from the private side |
Only the third path hides everything. The two mixed paths publish the amount crossing between sides.
The rule underneath is short: a shielded address keeps your financial information private, and a transparent address makes it public (source: Electric Coin Co.). Everything else follows from which one sits at each end. The two mixed paths are the ones that surprise people, because they feel private and are not. The amount is visible on the way in and on the way out. That is deliberate rather than a flaw: because every movement across the boundary is public, anyone can add up how much sits on the private side in total, even though no individual balance is readable. That boundary is commonly called a turnstile. By itself it only makes the totals checkable, and a separate consensus rule rejects any block whose pool balances fall out of range. That check covers value crossing the boundary, not everything that could go wrong inside a pool.
If you have read our guide to crypto privacy basics, the same idea applies here. Privacy is a property of a whole transaction rather than a switch on one wallet.
Which matters less than it sounds until you know which side your own coins are sitting on.
Your coins are probably transparent right now
If you bought ZEC on an exchange and moved it to a wallet, that withdrawal almost certainly landed on a transparent address. You were never asked. Most venues do not offer the shielded option at all, and where it exists it sits behind an advanced setting, so the side you are on was settled before you thought about it.
That is worth checking rather than assuming, and the quickest tell is the address itself rather than a lookup: your wallet will usually label which kind it is handing you, and a shielded address is markedly longer than a transparent one.
If you want to confirm it on chain, paste the address into a block explorer (source: Zcash Block Explorer). A transparent address returns a readable balance and a full transaction list. A shielded address returns a page that explicitly marks the balance as private. What you should not do is treat an empty result as proof of privacy: a transparent address that has never received anything also looks empty, and it is not private at all.
The split across the whole supply is lopsided in the same direction: roughly three quarters of all ZEC sits transparent, with the remaining quarter shielded (source: Electric Coin Co.). The cause is structural rather than a preference for publicity: exchanges hold and move a great deal of it, and they operate transparently.
Take the usual path end to end. You buy ten ZEC and withdraw it, then check the explorer out of curiosity. You can see the amount that arrived and the address it came from, plus every movement since. So can anyone your address has ever been shared with, including the person you last paid. Nothing has gone wrong here; this is simply what a transparent address does, and it is the same exposure our guide to how private Bitcoin really is describes.
The practical consequence is that shielding is not a default you keep, it is an action you take. That framing matters, because an action has a price.
What shielding costs you
Moving to the shielded side is not free. Crossing costs a little more in fees and takes a moment of work on your own device. It also depends on software support at both ends. None is large alone, and none is a reason to avoid shielding, but together they explain why so much of the supply never moves.
| Cost | What it means in practice |
|---|---|
| Fee | Nothing extra while you stay on one side. Crossing between the two sides costs about half as much again |
| Time to build | Your device does cryptographic work before the transaction can be sent, so it takes a moment rather than being instant |
| Wallet support | Your wallet has to support shielded sending, and not every wallet does |
| Recipient support | The person receiving has to be able to accept a shielded payment, which is the cost people notice last |
The fee deserves a precise answer, because the common intuition is only half right. Zcash does not charge a premium for privacy as such: the rule is explicit that the fee should not discriminate against transactions involving any particular pool, and it scales with how many actions a transaction contains rather than with which side it touches (source: Zcash Improvement Proposals). A straightforward shielded send and a straightforward transparent send land on exactly the same minimum.
What costs more is crossing between the two sides. Moving funds from the transparent side to the shielded side, or back, adds actions, and in practice that lands about fifty percent above the minimum. So the fee is not a privacy tax, it is a boundary toll, and it is charged on the move rather than on the destination. Staying put on either side is the cheap option.
The wallet constraint is the real one. Shielded support takes engineering, and a wallet serving many chains often ships the transparent path first. That is not a criticism of those wallets, and support has broadened over time, so check your own rather than assuming.
One of those costs surprises people more than the others.
The recipient has to be able to receive it
You cannot send a shielded payment to someone who cannot accept one. Privacy on Zcash is a property of the pair, so if the person you are paying gives you a transparent address, your payment takes a mixed path and the amount becomes visible on arrival no matter how carefully you set up your own side.
Work through what that looks like. You hold ZEC on the shielded side and you want to pay a friend privately. They open a wallet that supports only transparent addresses and send you one. Wallet support is uneven enough that the Zcash Foundation maintains its own client work partly to keep the shielded side reachable (source: Zcash Foundation). You now have three options, and none of them is the outcome you wanted: send anyway and publish the amount and their address, ask them to install a different wallet, or give up on the private route. Most people pick the first, because it is the only one of the three that does not depend on somebody else doing something. That is how a shielded holding quietly becomes a visible payment, through the path of least resistance at the moment of paying rather than through any mistake. Your friend never notices the difference, since the payment arrives exactly as expected. The amount simply sits on the chain for anyone who cares to look.
The visibility that results is narrow but real: an observer learns nothing about who you are, while still seeing value move out of the private side and land somewhere public (source: CoolWallet). This is the piece that turns Zcash privacy from a setting into a coordination problem. It also explains the shape of real usage: a lot of ZEC sits shielded and moves transparently, because sitting still requires nobody else's cooperation and moving does.
Which is why most real Zcash usage is a mix rather than a clean choice.
Moving between the two sides
You can move funds in both directions, as often as you like, and the mechanics are ordinary. Sending from a transparent address to a shielded one is usually called shielding. Sending the other way is usually called deshielding. Both are just transactions, and your wallet may do them in a single step without using either word.
Staying put is cheap and quiet. Crossing is where both the fee and the visibility land.
What matters is what stays visible afterwards, and the diagram above already gives it: each crossing publishes its own amount. Neither erases anything that was already on the chain, so if your transparent address has a readable history, shielding today protects what you do next and leaves that history exactly where it was.
That forward-only quality is the single most misunderstood thing about the whole feature. It is the same logic as reusing an address on any other chain: once information is public, later caution does not retract it.
One piece of folklore is worth handling carefully here, because the correction is easy to overstate. You will read that mining rewards must be paid to a transparent address. Strictly that is no longer the rule: rewards have been allowed to go to a shielded address since the Heartwood upgrade.
The privacy gain is close to nil, though, and that is the part worth knowing. It does spare the miner a separate shielding step, but it does not hide the payout. Those rewards are required to be readable by anyone, using a publicly known key, so a shielded mining payout is publicly viewable by design. The address type changed; the visibility did not. Newly issued ZEC is effectively public whichever side it lands on. Plenty of older guides still state the old rule, which is a good reminder to check the date on anything you read about this chain.
Modern wallets blur the distinction on purpose: many now hand out one address that the sending wallet resolves to whichever side both ends support, which our guide to Zcash address types covers properly (source: Zcash Improvement Proposals). What matters for the decision here is the side effect: you may be taking a more private path than you realize, or a less private one, without ever choosing.
Some deposit addresses are built to receive only from the transparent side. Sending to one from shielded funds still works, but the wallet does it in two steps and the amount becomes visible in the process. That is the point that matters here: the receiving side decides what the public sees, whatever you chose.
None of which tells you when to pick which.
When to choose each
There is no universally right answer, and anyone selling you one is simplifying. The choice turns on two things: how much a permanent public record would tell somebody about you that you would rather keep to yourself, and whether the person on the other side can cooperate with a private route at all.
Transparent is the reasonable default when you are moving coins between your own accounts, sending to an exchange that only accepts transparent deposits, paying someone whose wallet cannot receive shielded funds, or dealing with amounts and counterparties you have no reason to keep private. It is also the right answer when the alternative is asking a non-technical recipient to change wallets to accommodate you.
Shielded is worth the cost when your address would tell the other party more than the payment does. Paying an individual is the clearest case, since a transparent address hands them everything else it has ever done. Receiving income is the second. A business is the third, because a supplier list reconstructed from the ledger is competitive information whether or not anybody meant to publish it.
Shielded is what you want for simply holding. Sitting on the shielded side needs nobody else's cooperation, and it means the next thing you do starts from a private position rather than a public one. If you take one action after reading this, that is the one with the best ratio of effort to benefit.
One caveat, and it is live rather than theoretical. Zcash upgraded its shielded machinery in 2026, and funds parked in the older arrangement have to be moved across. The move publishes the amount, for the same reason every crossing does (source: Zcash Improvement Proposals). Our guide to Zcash shielded pools walks through why the upgrade happened; here the decision-relevant part is simply that the migration shows.
That applies only to funds in the specific arrangement the upgrade retired rather than to shielded funds generally, and a meaningful share of shielded ZEC sits elsewhere and is untouched. The practical instruction is narrow: if you have held shielded ZEC across that upgrade, check whether your wallet is prompting a migration, and expect that step to be visible when it happens.
There is a fungibility argument too. Coins carrying a visible history can be treated differently from coins without one, which is a property of the ledger rather than of the coin. Our explainer on why fungibility matters covers the general case.
Before you act on any of that, be clear about what shielding does not do.
What choosing shielded leaves unchanged
Shielding hides less than most people assume. Your past stays readable. The exchange you bought on still knows you. The fact that you used it shows on the chain, and the recipient's wallet still decides half the outcome. Each of those four gaps costs somebody money or privacy every day.
Each row puts the belief against what the chain does, and each carries a consequence the table has no room for.
| What people believe | What the chain actually does |
|---|---|
| Shielding hides my past | It applies from the moment you do it, not backwards |
| Withdrawing shakes off the exchange | The venue already knows who you are and which address it paid |
| Nobody can tell I used it | A shielded transaction is visibly a shielded transaction, and every crossing shows its amount |
| My own setup is enough | The receiving wallet decides half of every outcome |
The first is the forward-only quality described earlier, put as the belief it breaks: if your goal is erasing something already published, this is not the tool.
The second surprises people most: a withdrawal feels like the end of a relationship, and the identity checks our guide to identity checks at exchanges describes do not lapse when the coins leave.
The third reads as a contradiction until you split it in two: the content of a payment is concealed, while the fact that a payment of that kind happened is separate, and public.
The fourth is the only one you cannot fix alone, which is what makes it costly: your own careful setup is not sufficient.
Shielding also removes no reporting or tax obligation, and changes nothing about how a venue treats the asset. Some exchanges restrict privacy assets or send withdrawals only to transparent addresses, a compliance decision that can change with little notice. If you hold in size that affects how easily you can exit, which is a reason to consider holding your own keys; our guide to custody choices for investors covers the trade.
One limit sits outside the transaction altogether. The protocol specification says plainly that information leaking from a transaction's structure is beyond what it covers (source: Zcash Protocol Specification), and so is everything around it, including how a payment reaches the network. Our guide to Zcash metadata and network leaks covers it.
From BloFin's own vantage, this decision is one most holders inherit rather than make: coins arrive transparent from most venues, so the default is public until somebody acts. It is not universal: at least one regulated exchange has supported withdrawals straight to a shielded address (source: Electric Coin Co.). If you are trading rather than holding, the question mostly does not arise, because a position on a derivative like spot versus perpetual futures never touches a Zcash address. From where BloFin sits, the practical advice is narrow: settle which side you want before the withdrawal, not after the coins have published where they landed.
For the fuller comparison, how Zcash compares with Monero covers a mandatory design against an optional one, and view keys on Monero the equivalent disclosure tooling.
On the Bitcoin side, privacy tools for Bitcoin is the closest comparison: no shielded side exists there at all, so privacy is a question of address management.
Frequently asked questions
Is a shielded transaction slower?
Slightly, and the delay sits on your device rather than on the network. Your wallet does cryptographic work before it can broadcast, which is noticeable on a phone and usually not on a laptop. Once broadcast, it confirms like any other Zcash transaction. Two things make it feel slower. A wallet closed for a while usually has to catch up with the chain before it can spend, and that catching up is often what someone is really waiting for. The work also happens before anything moves on screen, so the pause lands when you press send.
How do I tell whether my wallet actually supports shielded sending?
Three checks, in rough order of how much each one proves. First, whether the wallet will hand you a shielded receiving address at all, since plenty only issue transparent ones. Second, whether it shows your balance split across the two sides rather than as a single number, which a wallet handling one side has no reason to do. Third, whether it offers you a choice of side at the moment of sending. The third is the one worth trusting, and if you cannot find it, plan for the transparent path and confirm on an explorer afterwards.
Should I move everything at once or in pieces?
Neither choice is free, and the article body does not resolve it. Moving one large amount publishes one large number. Moving many small amounts publishes several smaller numbers plus a pattern of timing. Which is worse depends on what you are protecting: a single figure that identifies you by size, or a rhythm that identifies you by behavior. Most people who care about this move in irregular amounts at irregular times, which costs more in fees than a single transfer.
Do I have to choose the same way every time?
No. The choice is per transaction, not per wallet or per account. You can hold shielded, pay a merchant transparently because that is all they accept, receive income shielded, and top up an exchange transparently, all from the same wallet on the same day. Many wallets make the choice for you based on the address you paste in, which is convenient and also why people often do not realize which path they used.
Does using shielded cost me anything at an exchange?
It can, and it varies by venue rather than being a property of Zcash. Some exchanges accept deposits only from transparent addresses, some will only send withdrawals to transparent addresses, and a few do not support the asset at all. None of that is visible from the chain, so check the specific venue's current policy before you plan a route that depends on it.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Primary sources are the Zcash Improvement Proposals repository and Electric Coin Co. All facts independently verified against cited documentation current as of August 2026. Protocol claims were checked against the live chain as well as against the specifications, because a proposal's status field records intent rather than deployment. Venue policies are article-time facts that change, so verify the current position with your own exchange before relying on it.
This article is for educational purposes only and is not financial advice. Cryptocurrency is volatile and you can lose money. Regulatory treatment of privacy assets differs by jurisdiction and changes over time. Do your own research before making any decision.