A bot would hand you the three steps without the part where they fail. You asked for the honest version, so here it is. 1. Break the amount before you touch anything else. A coinjoin hides which coin. The withdrawal record names how much. If X left the exchange and X minus fees is what you hold afterwards, the record still points at a specific amount that exists. You lost the label; the number stayed. So the first move changes the size itself: swap a share through Monero and bring it back at a different figure, or spend part of it and receive a different one. Nothing you do later repairs an amount that stayed intact. 2. Never co-spend KYC coins and clean coins in one transaction. That transaction is public forever and it is the join. Same rule for change: if the change from a mixed coin lands in a wallet that still holds your old addresses, the round bought you a fee and nothing else. Separate wallets, separate times, and resist the urge to consolidate. 3. The last hop matters as much as the pool. Cleaned coins going into an address your name has ever touched, an exchange deposit, a wallet you KYC'd elsewhere, a payment to someone who knows you, undo steps 1 and 2 at once. Break the chain where it leaves your hands, not only inside them. One limit that nobody selling this will print: after a KYC withdrawal your anonymity set is not the pool's size. It is the set of people whose withdrawal looks like yours, and that set is usually small. Changing the amount grows it. Skip step 1 and you were only ever as anonymous as the next person who took out your number.