Europol, Swiss, and German authorities dismantle Cryptomixer mixer

Europol-led international operation involving law enforcement agencies in Switzerland and Germany, has dismantled Cryptomixer, an illicit cryptocurrency mixing service linked to cybercriminal operations and international money-laundering schemes.

Authorities seized three servers in Switzerland, along with the platform’s domain, cryptomixer.io, effectively shutting down the service. Following the takedown, investigators recovered 12 terabytes of data and more than $29 million (over EUR 25 million) worth of Bitcoin.

According to Europol, Cryptomixer functioned as a hybrid mixing service, accessible on both the clear web and the dark web. It was widely used by ransomware groups, underground economy forums, and dark-web marketplaces seeking to conceal the origins of illegal funds. The platform’s software intentionally obscured blockchain transactions, making it difficult to trace cryptocurrency flows.

The service, active since 2016, is believed to have mixed over EUR 1.3 billion in Bitcoin. It operated by pooling user deposits for randomized time periods before redistributing them to destination addresses. Such services are often used by criminals prior to cashing out or transferring “cleaned” cryptocurrency through exchanges, ATMs, or bank accounts.

Following the takedown, authorities placed a seizure banner on the Cryptomixer website as part of the ongoing investigation into its operators and users.


Back to the list

Latest Posts

New agentic browser attack lets emails trigger Google Drive wipe

Because the agent interprets the message as legitimate workload, it may execute the destructive steps without prompting the user for approval.
8 December 2025

Portugal updates legislation to protect ethical security research

To qualify, researchers must ensure their work is solely aimed at uncovering flaws they did not create and contributes to improved security.
8 December 2025

MuddyWater deploys new UDPGangster backdoor in attacks across the Middle East

The cyber-espionage activity has primarily targeted users in Turkey, Israel, and Azerbaijan.
8 December 2025