TL;DR - Exchanges group your wallets into one entity using deposit-address reuse and on-chain behavior, then tie that cluster to your name through the KYC data on any one address.
You made a fresh wallet for privacy, moved funds through it, and assumed it was a clean break from your main account. It rarely is. Blockchain analytics firms and the exchanges that buy their tools spend all day linking separate addresses back to a single owner. This is called clustering, and it is the quiet engine behind most compliance flags. Here is how it works and what your own activity gives away.
What does it mean for wallets to be clustered?
Clustering is the practice of grouping many blockchain addresses that appear to be controlled by the same person or business into one "entity". Analysts do not need your name to build a cluster. They only need patterns in the public transaction record that repeat in ways a single owner tends to produce.
Once a cluster exists, everything in it shares a reputation. If one address in your cluster touched a sanctioned mixer or received stolen funds, the risk attaches to the whole group. That is why a wallet you thought was separate can inherit a problem from an address you barely use.
How does deposit-address reuse link your wallets?
The strongest linking trick is deposit-address reuse. When you deposit to an exchange, it hands you a unique deposit address. That address is created per customer, not per transaction, so it acts like a name tag. Behind the scenes, the exchange sweeps funds from every customer deposit address into a few large hot wallets.
Analysts read this in reverse. If several outside addresses all send funds to deposit addresses that forward to the same exchange hot wallet, and the timing lines up, those outside addresses are very likely the same customer. Deposit-address reuse is one of the most reliable heuristics for the Ethereum network, precisely because the sweep pattern is so regular.
Two wallets that fund the same per-customer deposit address are read as one owner.
What on-chain behavior gives away that two wallets are yours?
Deposit sweeps are not the only tell. Academic work on Ethereum address clustering points to several behaviors that quietly connect addresses:
Gas funding. A new wallet needs ETH for gas. If it gets its first drop of gas from your main wallet, the two are now linked.
Token-approval sequences. The order in which an address approves and interacts with contracts can form a fingerprint that repeats across your wallets.
Airdrop claims. Claiming the same airdrop from multiple addresses, or funneling claims to one place, ties them together.
Timing and amounts. Transactions that fire at the same hours, or move round-number amounts in a pattern, narrow the field to one person.
Address reuse. Sending change or consolidating balances back into a known address folds the new one straight into the old cluster.
No single signal is proof. Clustering works by stacking weak signals until the combined odds point clearly at one owner.
How does KYC turn a cluster into your identity?
A cluster on its own is anonymous. It becomes yours the moment one address in it touches a service that knows your name. Compliance teams call this an identity anchor. When you complete KYC at an exchange and then deposit from a personal wallet, that wallet is anchored to your verified identity.
From there the link spreads outward. Every other address in the same cluster inherits the anchor, even ones you never used at that exchange. This is the same forensic path that lets investigators connect a chain of wallets back to a person, a pattern covered in more depth in the guide on whether law enforcement can trace a wallet to your identity.
One verified address anchors the whole cluster to your real name.
Can you check what your own wallet reveals?
You can see part of the picture yourself. Open your address on a block explorer such as Etherscan and study its direct counterparties: where the first gas came from, which addresses it consolidates with, and any labeled service it touched. That shows the obvious one-hop links a human can spot.
The gap is depth. A block explorer shows direct, single-chain activity, so it misses the multi-hop and cross-chain links that clustering tools stitch together. Rather than checking one source at a time, screen the address with Plastron to see sanctions, mixer, and stolen-funds exposure across Ethereum and six other chains in one pass. If a flag turns up, the guide on direct versus indirect exposure explains how close a link has to be before it moves a risk score.
How can you limit unwanted linkage?
You cannot erase a public ledger, but you can slow the linking down. Fund a new wallet from a source that is not already tied to you, rather than topping it up from your main account. Avoid consolidating balances from several wallets into one. Keep spending, savings, and public-facing addresses apart instead of routing everything through a single hub.
One warning: reaching for a mixer or a privacy tool to break the trail often backfires. Sending funds through a sanctioned mixer is itself a strong red flag, and it can raise your risk score far more than the linkage you were trying to hide. Understanding what a screen looks for, covered in the plain-English guide to wallet screening, is a safer starting point than obfuscation.
FAQ
Is wallet clustering the same as knowing my name?
No. Clustering groups addresses that behave like one owner, but the group stays anonymous until it touches a service that holds your identity. A single KYC deposit is usually enough to attach your name to the entire cluster.
Can two unrelated people get clustered by mistake?
It happens. Heuristics deal in probabilities, so shared services, coincidental timing, or a one-off transfer can produce a false link. Good analytics tools assign a confidence level rather than a flat yes, but mistakes are why disputing a bad flag matters.
Does using a new wallet for every transaction stop clustering?
It helps, but it is not a cure. Fresh addresses still need gas from somewhere, and the funding source, timing, and later consolidation can re-link them. Reducing linkage takes consistent habits, not a single new address.
Do decentralized exchanges cluster wallets too?
A decentralized exchange does not run KYC, so it does not anchor your identity itself. The same on-chain behaviors still form a cluster, though, and that cluster can be anchored later the moment any address in it deposits to a KYC exchange.
Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.
About Plastron
Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.