What Wallet Data Can a Free RPC See
Free RPC nodes can see your wallet address, all token balances under that address, historical transaction records, and gas fee estimates, but they absolutely cannot see your private key.
An RPC node is essentially a public entry point for querying blockchain data. When you connect your wallet to a free RPC node, the wallet client sends requests to the node to query data related to your address, and the node returns the public data from the blockchain to you.
Prerequisite: Understand what an "RPC node" is
An RPC node is a server running blockchain client software that stores the entire historical data and current state of the blockchain. When you use a wallet to send a transaction or check a balance, the wallet requests data from or broadcasts the transaction through the RPC node.
Free RPC nodes are publicly available and anyone can connect to them. Common free nodes include Infura, Alchemy free tier, Etherscan public nodes (rate-limited), public community nodes, and more.
Why can a free RPC node look up my wallet data? Because the blockchain itself is a public ledger, and all transaction records and address balances are public. The RPC node simply shows you this public data.
Step 1: What data an RPC node can read from a wallet
Understand the scope of what a free RPC node can see.
Readable data (all of the following can be queried):
| Data type | What can be seen | Example |
|---|---|---|
| Address balance | Current balance of any wallet address | 0xabc...123 has 2.5 ETH, 1000 USDT |
| Token holdings | All tokens and amounts held under the address | Holds UNI, AAVE, LINK, etc. |
| Transaction history | All incoming/outgoing transaction records of that address | Sent 1 ETH to 0xdef...456 three days ago |
| Contract interactions | Which smart contracts the address has interacted with | Traded on Uniswap, deposited on Aave |
| Gas fee estimates | Current network gas price, suggested fees | Current Base Fee 15 Gwei |
| Transaction status | Whether a transaction succeeded, and reason for failure | A certain transaction confirmed, another failed |
| Transaction data | If the transaction is unencrypted, the called method and parameters are visible | Transferred 100 USDT to a specified contract |
⚠️ Note: All of the above data is inherently public on the blockchain. The RPC node simply reads this public data from the chain and returns it to you. It does not need to "access" your wallet — all it needs is your wallet address.
Step 2: What data an RPC node cannot read
Learn which information is safe and invisible to the RPC node.
Unreadable data:
❌ Private key or recovery phrase: RPC nodes do not store users' private keys. Your private key exists locally in the wallet app and is never sent to the RPC node.
❌ Wallet password: The wallet unlock password is also stored only locally.
❌ Unbroadcast transaction drafts: If you haven't yet clicked "confirm send", the RPC node will not know about the transaction.
❌ Cross-chain asset information: RPC nodes for one chain can only query data on that chain. An Ethereum RPC node cannot look up assets on Solana.
Step 3: Understanding the truth about privacy — there is no privacy on-chain
Distinguish between "what an RPC node can see" and "what is already visible on-chain".
Key insight: The RPC node can see the balances and transaction records of any wallet address, but not because it has "hacked" your wallet. It's because the blockchain itself is public.
If you don't want others to look up all your assets and transaction history through a single wallet address, the only solution is to use multiple addresses (generate new wallet addresses) to distribute your assets, rather than trying to "hide" an address.
Common failure reasons
The privacy risk of free RPC nodes is not about them "seeing" your data, but about their logging practices: free nodes may record the IP address and timestamp of query requests, linking them to your wallet address. If you value privacy highly, consider paid RPC nodes or services that do not keep logs.
Using a malicious RPC node: If you connect to a maliciously operated RPC node, it can return falsified data or tamper with transaction contents (such as replacing the target address of a transaction). Connecting to trusted RPC nodes (like Infura, Alchemy, or your wallet's default node) is an essential security habit.
Risk reminder
The most important security rule: your private key and recovery phrase should never leave your device. If you give your private key to someone else or import it into an untrusted wallet application, that is the real risk.
Do not connect to sketchy "accelerators" or "free nodes" from unknown sources; they can tamper with the content of the transactions you send.
How to verify your RPC connection is trustworthy
Check the RPC URL your wallet is currently connected to. If it shows a domain like mainnet.infura.io/v3/xxx, eth-mainnet.alchemyapi.io/v2/xxx, or rpc.ankr.com/eth — mainstream service domains — you can usually use it with confidence.
If your wallet is connected to a non-encrypted node starting with http:// or a suspicious-looking domain, it is recommended to switch to the wallet's default RPC or a trusted third-party node.
