What is an Unspent Transaction Output (UTXO)?

Throughout this series, we've described BitcoinBitcoinBitcoin is a decentralized digital currency that enables secure peer-to-peer transactions without relying on a central authority.Keep learning balances and transactions in fairly intuitive terms; Joe has 1,000 Bitcoin, Joe sends Sarah 200, Joe now has 800. It's a useful simplification, and it's how most walletCrypto WalletsA crypto wallet doesn’t store coins like a piggy bank. Instead, it keeps keys that let you access your crypto on the blockchain.Keep learning interfaces present things to users. But it isn't, technically, how Bitcoin actually tracks ownership under the hood. This article corrects and expands on that simplification by introducing the UTXO model; Unspent Transaction Output; the actual accounting structure underpinning Bitcoin and several other major blockchainsBlockchainThink of blockchain as a public notebook that everyone owns a copy of. Whatever gets written in it is permanent and visible to all.Keep learning, and a meaningfully different approach from the one EthereumEthereumEthereum is a decentralized blockchain platform that runs smart contracts and dApps, using its native cryptocurrency (ETH) for transactions and fees.Keep learning uses.

The Account Model: What Most People Assume

Before explaining UTXOs, it's worth describing the more intuitive alternative, since it's genuinely how Ethereum (and most traditional banking systems) work, and it's likely the mental model most readers already carry without realizing it.

In an account-based model, each address simply has a running balance, stored directly and updated with each transaction; much like a bank account. Send 5 ETH from Address A to Address B, and the network simply decrements Address A's balance by 5 and increments Address B's balance by 5. It's straightforward, intuitive, and closely mirrors how everyday financial software already works.

Bitcoin, deliberately, doesn't work this way.

The UTXO Model: How Bitcoin Actually Works

In the UTXO model, there's no running balance stored anywhere for any address at all. Instead, the entire concept of a "balance" is something every wallet calculates on the fly, by adding up a collection of discrete, individual pieces of unspent currency; UTXOs; that happen to be associated with that address.

Think of it less like a bank account, and more like a physical wallet containing a specific, countable set of bills and coins. You don't have a single stored number representing "how much money you have"; you simply have a pile of distinct, individually spendable items, and your effective balance is whatever you get by adding them all up at any given moment.

Each UTXO is created as the output of a previous transaction, and it remains "unspent"; sitting there, available, like an uncashed check; until some future transaction consumes it as an input. Once spent, that specific UTXO ceases to exist entirely; it cannot be partially spent or spent more than once. A new transaction always consumes one or more existing UTXOs in full as its inputs, and produces one or more brand-new UTXOs as its outputs.

Working Through an Actual Transaction

This is genuinely easier to understand through a concrete example, so let's walk through one, building on the running example used throughout this series.

Suppose Joe doesn't have one tidy "balance" of 1,000 Bitcoin sitting in his wallet. Instead, his wallet actually holds several distinct UTXOs he's accumulated from previous transactions; say, one worth 600 Bitcoin (received as payment from a previous sale) and another worth 400 Bitcoin (received separately, weeks earlier). His wallet software adds these together and simply displays "1,000 BTC" as his balance, but on the actual blockchain, these remain two entirely separate, individually identifiable units.

Now Joe wants to send Sarah 200 Bitcoin. Because Bitcoin transactions must consume entire UTXOs as inputs; there's no way to "partially spend" a single UTXO; Joe's wallet software needs to select enough existing UTXOs to cover the 200 he wants to send. It might select just the 400 BTC UTXO, since that alone is enough to cover the payment.

This single 400 BTC UTXO becomes the input to a new transaction, which then produces two new outputs:

1. A new UTXO worth 200 BTC, sent to Sarah's address
2. A new UTXO worth 200 BTC, sent back to one of Joe's own addresses; this is called the change, conceptually identical to receiving change back from a cashier after paying with a bill larger than the purchase price

After this transaction confirms, the original 400 BTC UTXO no longer exists at all; it's been fully consumed. Joe's wallet now holds two UTXOs: the original, untouched 600 BTC one, and the newly created 200 BTC change UTXO, together still adding up to the 800 BTC his wallet interface displays as his remaining balance. Sarah, meanwhile, now holds a single new 200 BTC UTXO of her own.

You can watch this process directly on real, live transactions using the Blockchain.com Explorer, referenced in our blockchain networkBlockchain NetworkA blockchain network is a system of computers connected to each other that follow the same set of rules to record, share, and validate transactions.Keep learning article; searching any Bitcoin transaction there displays its actual inputs and outputs explicitly, including the change output, exactly as described above. It's a genuinely worthwhile exercise to look up a handful of real transactions there and watch this input-output structure play out in practice, rather than taking it purely on faith.

Why Bitcoin Was Designed This Way

It's reasonable to ask why Bitcoin's creator chose this comparatively more complex model over the simpler, more intuitive account-based approach Ethereum and traditional banking use. A few genuine advantages explain the choice.

Built-in double-spend prevention. Because each UTXO can only ever be consumed once, as a complete unit, in a single transaction, the entire model inherently prevents double-spending at the structural level; there's no possibility of a single unit of currency being referenced as an input in two different transactions simultaneously, since the moment one transaction successfully consumes it, it permanently ceases to exist for any future transaction to reference. This connects directly to the consensus mechanismsBlockchain consensus mechanismsA consensus mechanism is a method for validating transactions and securing a blockchain without relying on a central authority.Keep learning covered earlier in this series: nodesBlockchain NodesA node is simply a computer that participates in a blockchain network. Each node stores a copy of the blockchain and helps verify transactions.Keep learning verifying a new transaction simply need to check whether the referenced UTXO inputs still exist and haven't already been spent elsewhere; a comparatively simple, parallelizable check.

Stateless, parallel verification. Because transactions only need to reference and consume specific prior UTXOs, rather than depend on a single, globally shared, sequentially updated balance, different transactions touching entirely unrelated UTXOs can, in principle, be verified independently and in parallel, without needing to coordinate sequencing with every other unrelated transaction happening at the same time.

Enhanced privacy potential. Because Bitcoin balances aren't stored as a single number associated with an address, but instead exist as a scattered collection of individual UTXOs, the model offers somewhat more natural opportunities for privacy-preserving techniques (such as generating a fresh address for every transaction, a widely recommended best practice) compared to an account model, where a single address's full transaction history and running balance are immediately, permanently visible as one continuous record.

Auditability. Every UTXO can be traced back, transaction by transaction, to the exact point at which it was originally minedCrypto MiningCrypto mining is the process of using computing power to validate blockchain transactions and earn cryptocurrency rewards.Keep learning or received; providing an extremely clean, granular, and independently verifiable audit trail for the entire supply of Bitcoin in existence at any given moment.

Coin Selection: A Genuinely Practical Wallet Concern

The example above glossed over a real, practical decision wallet software has to make on every transaction: exactly which UTXOs to select as inputs when multiple options are available, a process known as coin selection.

This isn't a trivial detail; different selection strategies have genuine, practical consequences. Selecting a single large UTXO when a smaller one (or several smaller ones combined) would have sufficed unnecessarily increases the transaction's size in bytes (since each additional input requires its own data and digital signature, as discussed in our cryptographyCryptographyCryptography is the science of securing information using mathematical techniques to protect data, ensure privacy, and verify authenticity.Keep learning article), which in turn increases the transaction feeTransaction feesTransaction fees are charges paid to process and validate transactions on a blockchain network.Keep learning required to get it confirmed promptly. Selecting many small UTXOs to cover a larger payment, on the other hand, can substantially "bloat" a transaction's size for the opposite reason; too many inputs, each adding their own overhead.

Most modern wallet software handles coin selection automatically, using algorithms specifically designed to balance fee efficiency against other considerations like privacy (deliberately avoiding combining UTXOs in ways that might make it easier for an outside observer to link separate addresses back to the same owner). For a genuinely hands-on look at how this works in practice, several modern Bitcoin wallets; Sparrow Wallet among the most popular for this specific purpose; offer manual coin control features, allowing technically inclined users to inspect their own UTXO set directly and choose specific inputs themselves, rather than relying entirely on automatic selection.

UTXO "Dust": A Practical Side Effect

One practical consequence of the UTXO model worth knowing about is the accumulation of what's commonly called dust; UTXOs so small in value that the fee required to spend them, given their associated data overhead, would cost more than the UTXO itself is actually worth. Over time, a wallet that has received many small payments can accumulate a meaningful number of these effectively unspendable, "stuck" UTXOs, a maintenance consideration that simply doesn't exist under a single-running-balance account model.

UTXOs vs. the Account Model: A Direct Comparison

This penultimate row is also a large part of why Ethereum, designed from the outset to support complex smart contractsSmart ContractsA smart contract is a self-executing computer program deployed on a blockchain. It contains rules and conditions written directly into code.Keep learning with persistent internal state (covered briefly in our blockchain protocolBlockchain ProtocolA blockchain protocol is the set of rules and standards that govern how a blockchain network operates, validates transactions, and reaches consensus.Keep learning article), opted for the account model instead: smart contracts generally need to track and update ongoing internal state in a way that maps far more naturally onto a running-balance account structure than onto a scattered collection of discrete, one-time-use UTXOs.

Bringing It Together

The UTXO model is one of the more elegant, if initially counterintuitive, design decisions running underneath everything this series has described about Bitcoin specifically. To summarize:

• A UTXO is a discrete, individually spendable unit of currency, created as the output of one transaction and consumed, entirely, as the input to a future one
• Wallets calculate a displayed "balance" by summing all UTXOs associated with an address; there's no running balance stored on-chain at all
• Spending a UTXO that exceeds the intended payment amount produces a change output, conceptually identical to receiving change from a cashier
• This model offers structural double-spend prevention, parallel verification, and modest privacy advantages, at the cost of more complex transaction construction and the practical concern of accumulated dust
• Ethereum's account model trades these UTXO-specific advantages for a structure better suited to complex, stateful smart contract logic

Understanding UTXOs fills in a genuine gap left by the simplified "Joe has a balance" framing used earlier in this series; and offers a clearer, more accurate picture of exactly what's happening, transaction by transaction, underneath every Bitcoin balance ever displayed in a wallet app.