European law enforcement has dismantled a major cryptocurrency mixing service that processed more than $1.4 billion in illicit Bitcoin transactions over nine years, marking one of the most significant takedowns in the ongoing crackdown on crypto money laundering.
Authorities from Germany and Switzerland, supported by Europol and Eurojust, seized €25 million ($27 million) in Bitcoin and confiscated over 12 terabytes of data during a coordinated operation in Zurich between November 24 and 28.
The action targeted Cryptomixer, a hybrid platform accessible on both the clear web and dark web that served as a laundering hub for ransomware groups, dark web marketplaces, and criminal organizations since its launch in 2016.
"Cryptomixer facilitated the obfuscation of criminal funds for ransomware groups, underground economy forums and dark web markets," Europol stated in its December 1 announcement. Law enforcement seized three servers and took control of the cryptomixer.io domain, replacing the site with a seizure banner warning users that "anyone operating or using these cybercriminal services is subject to investigation and prosecution."
What Happened
The operation, designated part of Operation Olympia, represented months of investigative work culminating in synchronized raids across Swiss facilities. Authorities confiscated critical infrastructure including servers containing transaction logs, user data, and operational records totaling more than 12 terabytes - evidence that could potentially unmask thousands of users who relied on the service to conceal criminal proceeds.
Cryptomixer operated by pooling cryptocurrency deposits from multiple users for randomized periods before redistributing funds to new addresses, effectively severing the transaction trail on the blockchain. This made the platform particularly attractive to cybercriminals seeking to launder proceeds from drug trafficking, weapons sales, ransomware attacks, and payment card fraud.
According to Europol, the service processed over €1.3 billion ($1.4 billion) in Bitcoin transactions since 2016, with funds traced back to numerous criminal enterprises including major dark web marketplaces and ransomware operations. The mixing service charged fees for its obfuscation services, allowing criminals to later convert "cleaned" cryptocurrency into fiat currency through exchanges, ATMs, and bank accounts.
Europol's Joint Cybercrime Action Taskforce provided operational coordination, intelligence sharing, and on-site forensic support throughout the week-long action. The takedown follows Europol's March 2023 operation against ChipMixer, which at the time was considered the largest cryptocurrency mixing service, resulting in the seizure of $46.5 million in Bitcoin and 7 terabytes of data.
Also read: https://yellow.com/news/china-doubles-down-on-crypto-ban-as-stablecoin-speculation-resurfaces
Why It Matters
The Cryptomixer shutdown reflects intensifying global enforcement against cryptocurrency mixing services, which authorities argue enable large-scale money laundering while privacy advocates maintain they serve legitimate anonymity purposes. The timing coincides with the European Union's tightening anti-money laundering framework under MiCA regulations, which explicitly ban crypto-mixing services across the bloc.
The enforcement wave extends beyond Europe. In November, U.S. courts sentenced Samourai Wallet co-founders Keonne Rodriguez and William Lonergan Hill to five and four years in prison respectively for operating a mixing service that prosecutors said facilitated over $237 million in illicit transactions. Both defendants had pleaded guilty to conspiracy charges after initially fighting the case.
Earlier in January, U.S. prosecutors indicted three Russian nationals - Roman Vitalyevich Ostapenko, Alexander Evgenievich Oleynik, and Anton Vyachlavovich Tarasov - for allegedly operating Blender.io and Sinbad.io, mixing services linked to North Korea's Lazarus Group. Two were arrested in December 2024, while the third remains at large.
Europol officials have warned that criminal abuse of cryptocurrency is "becoming increasingly sophisticated," placing significant pressure on law enforcement resources. The seized data from Cryptomixer could enable investigators to trace transactions both forward and backward, potentially unraveling long-standing money laundering networks and leading to additional arrests in coming months.
The takedown also represents broader coordination between European law enforcement agencies and marks another chapter in what authorities describe as a sustained campaign to disrupt cryptocurrency-enabled crime across the continent.
Read next: Bitcoin Plunges Below $84K as Asian Selloff Triggers $600M in Liquidations