Shielded vs Transparent Zcash Addresses: Which One to Pay From
Zcash is often described as a private cryptocurrency, but privacy isn’t automatic. A single ZEC can sit at two very different kinds of address: transparent, which behaves like Bitcoin and publishes everything, or shielded, which encrypts the sender, the recipient, and the amount. Paying for a ztrash inbox from the wrong one is the difference between an anonymous payment and a permanent public record.
How to tell them apart
- Transparent addresses begin with
t1ort3. Everything about them is public. - Shielded Sapling addresses begin with
zs1. Amounts and parties are encrypted. - Unified addresses begin with
u1. These bundle several receivers together so a sending wallet can pick the best one it supports. A unified address may or may not include a transparent receiver.
What the ledger shows for each
A transparent transaction writes the sending address, the receiving address, and the exact amount into a public blockchain that anyone can read forever. Chain-analysis firms cluster those addresses into wallets, and if any address in the cluster ever touched a KYC exchange account, the whole history acquires a name.
A fully shielded transaction (shielded address to shielded address) publishes only that a transaction happened and what fee it paid. The sender, the recipient, and the value are encrypted, with a zero-knowledge proof establishing that the transaction is valid without revealing its contents. There is no address to cluster and no amount to correlate.
The awkward middle: shielding and deshielding
Moving funds between the two worlds exposes the transparent half. Shielding (t → z) publishes the source address and the amount entering the shielded pool; deshielding does the same on the way out. The shielded side stays private, but an observer sees that someone moved a specific amount at a specific time.
That matters for timing. If you shield exactly the inbox price and immediately spend it, the two events are easy to line up. If you hold shielded ZEC already, or you swapped straight into a shielded address (see acquiring ZEC with NEAR Intents), your payment is shielded end to end and there is nothing to line up.
Why a ztrash inbox is shielded-only
Each inbox is quoted a fresh unified address that carries only shielded receivers. The transparent receiver most wallets would include is deliberately left out, so there is no transparent option to fall back to: a sending wallet has to pay the shielded receiver, and the payment lands with no public trace linking it to the inbox.
This is also why the address is single-use. A new one is derived per inbox, so two inboxes you buy share no common address, in either direction.
Practical rules
- Spend from a shielded balance. Modern Zcash wallets shield by default, but check which pool your funds are actually in before you send.
- Avoid shielding the exact price seconds before paying. Shield a larger amount, earlier, and spend from it more than once.
- Copy the quoted address exactly. Sending to any other address means the payment is never seen and the inbox is never created.
- Don’t withdraw the change back to a transparent address later unless you want that trail to exist.
Getting this right is what makes the rest of the design hold up: payment is the only gate, so if the payment reveals nothing, neither does the inbox. That’s the same reason nothing is logged on the server side.