Untraceability

Given two transactions with the receivers X and Y, it’s impossible (or at least computationally infeasible) to determine if X = Y.