Massive-scale laundering: Since its creation in 2016, the service is suspected of having laundered over €1.3 billion in Bitcoin derived from criminal activities.
An international law enforcement operation has dismantled Cryptomixer, a major cryptocurrency laundering service, which resulted in the seizure of the cryptomixer.io domain and three servers in Switzerland. The website now displays a law enforcement seizure banner, marking a major success in the ongoing international cybercrime crackdown.
The action, conducted between November 24 and 28, 2025, was led by authorities in Germany and Switzerland and supported by Europol and Eurojust.
The Cryptomixer crackdown led to the seizure of:
The crypto mixer operated on both the clear and dark web, providing a hybrid mixing service designed to obfuscate the blockchain trail of digital currencies. This made it a preferred platform for cybercriminals, including ransomware groups and operators on dark web markets, to launder illicit proceeds.
The service pooled funds from various users for randomized periods before redistributing them, making it difficult to trace the origin of the assets.
The Cryptomixer shutdown has eliminated a key tool used for laundering funds from activities such as drug trafficking, ransomware attacks, and payment card fraud.
This takedown is part of a broader strategy to disrupt the criminal use of cryptocurrencies. By removing services like Cryptomixer, authorities aim to disrupt the process by which criminals “clean” their digital assets before exchanging them for other cryptocurrencies or fiat currency.
Europol facilitated the exchange of information and provided crucial on-the-spot forensic and operational support through its Joint Cybercrime Action Taskforce (J-CAT). This operation follows a similar successful takedown of the Chipmixer service in March 2023.
In November, a $690 million crypto scam network was dismantled in a multi-country operation, and nine suspects were arrested.
