**How Monero hides you: the crowd**

Picture a room of 16 people. Someone hands the cashier a signed note. The cashier can confirm one person in the room signed it. Which one? No idea. That is ring signatures in one sentence. Every Monero transaction hides the real spender in a ring of decoys pulled from the chain's history. RingCT hides amounts with Pedersen commitments. Stealth addresses keep the recipient's address from ever appearing. A passive observer gets a probable set, a hidden amount, and a one-time address it cannot tie to anything earlier.

The catch is that the crowd is the privacy. Ring size is 16 today. FCMP++ (testnet October 2025, Trail of Bits audit through May 2026, mainnet pending) replaces the sampled ring with a proof over the whole output set, turning "hiding among a few" into something much closer to a guarantee. Big upgrade. Not shipped. And the honest weak spot on Monero was never the cryptography, it is the metadata around the ring: input-age, exchange-deposit timing, wallet defaults that quietly point at the real output.

**How Zcash hides you: the sealed envelope**

Different scene. You hand the cashier a sealed envelope. They run a check proving it contains exactly what is owed, that it is yours to spend, and that you have not spent it before. They never open it. That is a zk-SNARK in a paragraph. A shielded transfer proves a valid unspent note exists, you hold the key, the output is correct, and the values balance. The on-chain record is the proof, not the contents. Sender, receiver and amount are absent, not blurred. The anonymity set is every note in the shielded pool, with no decoy ring to shrink. Categorically stronger, on one condition that ruins the party.

**The condition that ruins the party: most ZEC is not shielded**

Roughly 30% of supply sits in the shielded pool. A record high, and still a minority. A transparent ZEC transaction has about as much privacy as a Bitcoin one, which is to say none worth the name. The guarantees only apply to z-to-z transfers; shielding and deshielding reveal amounts at the boundary and open timing windows. Monero has no transparent mode, so the whole chain feeds the set whether users think about it or not. Optional privacy is only ever as strong as the share of people who bother. Zcash also offers selective disclosure: a viewing key proves a shielded transaction to an auditor without making it public. Genuinely handy if you ever need to show compliance without broadcasting your life.

**Where this doesn't protect you**

Private Mode routes through Monero or Zcash shielded as the middle leg; for ZEC that means in and out through z-addresses. It reduces linkability between your source and destination at the protocol level. It does not edit your sending wallet's history, does not unwind KYC from a prior withdrawal, and does not hide you from an adversary who already holds both endpoints. Land the output in a wallet that is attributed elsewhere and you have personally reconnected the graph. Private Mode adds about 5 minutes and 1% plus fees. It reduces linkability. It does not produce anonymity, and overselling that is exactly how tools that work lose the trust of the people who need them. A ZEC ETF has been filed, not approved.

**Our take**

The right question is not which protocol wins in the abstract, it is which property fits your threat model. Monero's mandatory privacy plus the incoming FCMP++ makes it robust by default, no thinking required. Zcash shielded is the harder mathematical guarantee, on the condition you actually use it. Against commodity chain analysis, either is fine when used right. Against a well-funded adversary doing statistics on rings, the sealed-envelope model is the comfier seat. Both are miles ahead of a transparent chain with a pseudonym taped on. The era of calling that "private" should have ended already.

husher.io