3

I am pretty new to this crypto currency. My question is that what all information can be found, if we only know a malicious user's Monero wallet address?

  1. Can I check this Monero wallet balance? If so, how?
  2. Can I check who (wallet address) deposited to this wallet address? if so, how?
  3. Can I track to which wallet the owner withdraw the monero from this wallet address? if so, how?

@JollyMort, Adding one more question:

  1. Today all these Ransomware attacks ask the ransom in the form of Bitcoin. In this case authorities can trace to which exchange this bitcoins are ending up (justing using the wallet address of the attacker) . So are you saying that if the ransomeware people ask for Monero coins instead of Bitcoin, authorities are in trouble? That the authorities cannot track in which exchange the ransom (Monero) coins ended up?

Thank you so much,

Improve this question

2 Answers 2

Reset to default
3

  1. No.

  2. No. Naturally, you can only know about what you sent to that address. You can't know whether that address ever received anything else from the side. When the target spends what you sent to them, you won't be able to tell if it was your target who did the spending or someone else who just happened to include output of your TX as his "decoy" input (look up how ring signatures work) - you can only make a guess, with no way of telling if it's right. However, if the target combined what you sent to it together with something which came from someone else in the same TX, you could make a following guess: maybe your target spent what you sent it and if so maybe he combined it with something he received from elsewhere.

  3. No. Sending back to the same wallet or to another wallet looks exactly the same and can't be linked to any address (look up how stealth addresses work)

Here's a simple explanation of the mechanics: Simple explanation of Monero mechanics - how does Monero work?

Improve this answer
9
  • >> This way you could tell he maybe received something else << I don't think you could possibly know about anything, including whether he maybe received something else or not. Or am I mistaken?
    – kenshi84
    Sep 5, 2017 at 6:40
  • I send something to you, and later you send a TX with 2 input rings. I see my output appear in one input ring but not in the other ring. Therefore it's either someone else doing the spending, or you had something else in your wallet which didn't come from me.
    – JollyMort
    Sep 5, 2017 at 7:06
  • Isn't that already explained in the previous sentence >>When the user spends ... as his "decoy" input<<? The last sentence sounds a bit misleading to me, as if one could "tell" anything. One can only "guess" anything, but never "tell".
    – kenshi84
    Sep 5, 2017 at 7:13
  • That's one part of it - guessing whether or not you spent what I sent you. But if you consider that a TX can have more than 1 input ring, the 2nd input ring would present a deniable possibility that you spent something else alongside what you got from me. That's the purpose of ring signatures as described in CN WP, to prevent what they label as linkability. Ie, by spending something I sent you together with something soemone else sent you, I can't know which is the 2nd input. Some random observer can't link together any 2 inputs in a TX since there's NxN plausible pairs for 2 input rings.
    – JollyMort
    Sep 5, 2017 at 8:20
  • I'm still confused. By saying >>the 2nd input ring would present a deniable possibility<< do you imply that you wouldn't get a deniable plausibility if there weren't for the 2nd ring? I don't understand what difference it makes if the input has 1 ring or 2 rings. The purpose of ring sig is to obfuscate the source of the input (i.e., untraceability), while the linkability issue is addressed by the stealth addressing scheme.
    – kenshi84
    Sep 5, 2017 at 8:33
1

No, no and no. Monero is inherently private. Look for more information with keywords like: stealth address, ring signature, confidential transactions etc.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.