Operation Targets Criminal Funds Laundering
Europol and German–Swiss police have dismantled the bitcoin mixer Cryptomixer, seizing approximately €25 million in bitcoin, 12 terabytes of user data, and the core infrastructure used to launder criminal funds. The operation, which took place in Zurich between November 24 and November 28, resulted in the seizure of servers and the takeover of the Cryptomixer domain, which was subsequently replaced with a law-enforcement seizure banner.
Since its launch in 2016, Cryptomixer allegedly laundered proceeds from various criminal activities, including ransomware, dark web markets, fraud, drug trafficking, and arms trafficking, by obfuscating bitcoin flows. Europol coordinated the action through its Joint Cybercrime Action Taskforce, building on previous mixer crackdowns such as the dismantling of ChipMixer in 2023.
Cryptomixer's Role in Illicit Fund Laundering
Europol announced the dismantling of a major European bitcoin mixing service in a coordinated operation with German and Swiss law enforcement authorities. The operation resulted in the seizure of approximately €25 million in bitcoin and over 12 terabytes of user data. The operation, conducted between Nov. 24 and Nov. 28 in Zurich, targeted Cryptomixer, a platform authorities stated facilitated money laundering of proceeds from various criminal activities, according to a Europol statement.
Investigators seized servers, took control of the Cryptomixer domain, and replaced the site with an official law enforcement seizure banner during the week-long action, which received continuous support from Europol. The platform operated as a hybrid mixing service accessible on both the traditional web and the dark web since its launch in 2016, processing a substantial volume of bitcoin, Europol reported.
Law enforcement authorities stated the platform had become infrastructure for digital criminals, laundering large amounts of illicit funds linked to ransomware groups, dark web markets, and fraud organizations. The mixer was heavily used by ransomware groups, underground cybercrime forums, and operators active on dark web marketplaces, according to the report.
The platform’s software aggregated deposits over extended and randomized periods before redistributing the funds to new addresses designed to break the traceability of transactions, authorities said. This method allowed the concealment of proceeds from drug trafficking, arms trafficking, payment card fraud, and cyberattacks, according to law enforcement.
Europol's Ongoing Efforts Against Crypto Crime
Europol coordinated intelligence sharing through its Joint Cybercrime Action Taskforce and provided forensic specialists during the operations. The agency has participated in several anti-mixing operations in recent years, including the dismantling of ChipMixer in March 2023, which authorities described as the largest service of its kind at the time.