The Problem
There is a widespread belief that Bitcoin is private by default. That buying without KYC is enough.
It is not.
Every transaction with another person leaks information. Not all at once, not obviously - but it accumulates. Over time, anyone you have transacted with can reconstruct fragments of your economic activity if your UTXOs have not been managed carefully. Not just chain analysis firms watching from the outside - also the person you paid last month, or the merchant who sold you something six months ago.
Nobody would want a stranger to know how much money they have or where it comes from. But there is enormous confusion about how Bitcoin transactions actually work, and that confusion has a cost.
In April 2024, OXT.me and KYCP.org went offline after the Samourai Wallet arrests. They were the only tools that let ordinary people see what chain analysis firms could infer about their transactions.
Chainalysis, Elliptic, and Crystal kept operating as usual. The asymmetry became absolute: they kept analyzing with their tools, and users were left with no way to see what those analyses said about them.
am-i.exposed was built to close that gap.
They score your wallet every day. You've never seen the results.
A Bitcoin privacy scanner that runs the same heuristics blockchain surveillance firms use. Except it runs in your browser. And it does not phone home.
What This Is Not
This is not a company. There are no accounts, no data collection, no cookies, no analytics. There is no privacy policy because there is nothing to write a privacy policy about.
This is a static website. No server, no backend - HTML, JS, CSS, and WASM. Your addresses and transactions never leave your browser. The only network requests go to mempool.space for blockchain data - or to your own instance if you run a node.
Data collection is not avoided as a policy - it is architecturally impossible. There is no server to send data to. The code is auditable. The entire application can be downloaded and run offline.
The Blind Spot
There is something Chainalysis, Elliptic, and Crystal will not tell you: their analyses are assumptions. Their heuristics are based on closed-source code that nobody can independently audit or verify. This is not forensic science - it is applied statistics with error margins.
When a surveillance firm labels an address as "probably" linked to another, that probability comes from an opaque model. No independent validation. No peer review. No published error rates.
What is true: the more ambiguous a transaction is, the less reliable any heuristic becomes. And ambiguity is something every Bitcoin user can create.
Collective Defense
Bitcoin privacy is not individual. It is collective.
Every time you avoid a round amount, you make every other transaction on the network harder to classify. Every time you stop reusing addresses, the clustering algorithms lose a link - not just on your wallet, but on every wallet that ever transacted with you. Every time you run a CoinJoin, the anonymity set grows for everyone in the round, including people you will never meet.
The surveillance model feeds on patterns. On habits. On the assumption that most people will not bother. Every person who bothers weakens it for everyone being watched.
This tool exists so you can see which patterns you are leaving exposed. Not to shame you - to show you where the easy wins are. Changing a habit takes thirty seconds. Use a new address. Avoid round amounts. Do not merge all your coins into one transaction.
There is no single solution that defeats blockchain analysis on its own. But every ambiguous transaction weakens the assumptions the models rely on. Every user who improves their habits erodes the reliability of the surveillance model - not just for themselves, but for every participant on the network. The goal is not perfection. The goal is for enough people to make small, consistent improvements that the heuristics stop being reliable.
No Business Model
There is no business model. This tool makes zero money.
If it helps, there is a Lightning tip jar below. Nothing more. No ads will ever appear here. No investor is waiting for an exit. No token. No "sign up for early access." If this tool disappears one day, it will be because the maintainer moved on - not because a business failed.
All the code is open. MIT licensed. Fork it, audit it, run your own copy.
The Catch
This tool cannot protect you from anything. It can only show you what is already visible to anyone running the same heuristics. If the result scares you, that is the point. Now you know what they know.