Europol-led international operation involving law enforcement agencies in Switzerland and Germany, has dismantled Cryptomixer, an illicit cryptocurrency mixing service linked to cybercriminal operations and international money-laundering schemes.
Authorities seized three servers in Switzerland, along with the platform’s domain, cryptomixer.io, effectively shutting down the service. Following the takedown, investigators recovered 12 terabytes of data and more than $29 million (over EUR 25 million) worth of Bitcoin.
According to Europol, Cryptomixer functioned as a hybrid mixing service, accessible on both the clear web and the dark web. It was widely used by ransomware groups, underground economy forums, and dark-web marketplaces seeking to conceal the origins of illegal funds. The platform’s software intentionally obscured blockchain transactions, making it difficult to trace cryptocurrency flows.
The service, active since 2016, is believed to have mixed over EUR 1.3 billion in Bitcoin. It operated by pooling user deposits for randomized time periods before redistributing them to destination addresses. Such services are often used by criminals prior to cashing out or transferring “cleaned” cryptocurrency through exchanges, ATMs, or bank accounts.
Following the takedown, authorities placed a seizure banner on the Cryptomixer website as part of the ongoing investigation into its operators and users.