Europol and German–Swiss police dismantled bitcoin mixer Cryptomixer, seizing €25M in BTC, 12TB of user data and core infrastructure used to launder criminal funds.
Summary
- Operation in Zurich between Nov. 24–28 seized servers, took over the Cryptomixer domain and replaced it with a law-enforcement seizure banner.
- Since 2016, Cryptomixer allegedly laundered proceeds from ransomware, dark web markets, fraud, drug and arms trafficking by obfuscating bitcoin flows.
- Europol coordinated the action via its Joint Cybercrime Action Taskforce, building on earlier mixer crackdowns like the 2023 ChipMixer dismantling.
Europol announced the dismantling of a major European bitcoin mixing service in a coordinated operation with German and Swiss law enforcement authorities, resulting in the seizure of approximately €25 million in bitcoin and over 12 terabytes of user data.
The operation, conducted between Nov. 24 and Nov. 28 in Zurich, targeted Cryptomixer, a platform authorities said facilitated money laundering of proceeds from various criminal activities, according to a Europol statement.
Cryptomixer targeted by Europol for laundering funds
Investigators seized servers, took control of the Cryptomixer domain, and replaced the site with an official law enforcement seizure banner during the week-long action, which received continuous support from Europol.
The platform operated as a hybrid mixing service accessible on both the traditional web and the dark web since its launch in 2016, processing a substantial volume of bitcoin, Europol reported.
Law enforcement authorities stated the platform had become infrastructure for digital criminals, laundering large amounts of illicit funds linked to ransomware groups, dark web markets, and fraud organizations. The mixer was heavily used by ransomware groups, underground cybercrime forums, and operators active on dark web marketplaces, according to the report.
The platform’s software aggregated deposits over extended and randomized periods before redistributing the funds to new addresses designed to break the traceability of transactions, authorities said. This method allowed the concealment of proceeds from drug trafficking, arms trafficking, payment card fraud, and cyberattacks, according to law enforcement.
Europol coordinated intelligence sharing through its Joint Cybercrime Action Taskforce and provided forensic specialists during the operations. The agency has participated in several anti-mixing operations in recent years, including the dismantling of ChipMixer in March 2023, which authorities described as the largest service of its kind at the time.
