Cryptomixer platform raided by European police; $29 million in bitcoin seized

Law enforcement agencies in Switzerland and Germany have dismantled a major cryptocurrency mixing service long suspected of helping cybercriminals launder illicit funds, Europol said Monday.

The platform, known as Cryptomixer, was one of the world’s largest bitcoin “mixers” — services that blend together cryptocurrency from many users and redistribute it in small, randomized transactions to obscure the money trail. Europol said the service had handled more than €1.3 billion ($1.5 billion) since  launching in 2016, with most of the funds tied to criminal activity.

Police seized three servers in Switzerland along with the platform’s website, replacing it with a law-enforcement seizure banner. Authorities also confiscated more than $29 million worth of bitcoin and over 12 terabytes of data, Europol said.

Cryptomixer operated on both the open internet and the dark web, providing anonymity tools to ransomware gangs, dark-market vendors and online fraudsters, authorities said. The service was intentionally built to hide the movement of money on the blockchain, Europol said, making it a go-to tool for criminals to launder profits from drug and weapons trafficking, payment-card fraud, and hacking operations.

Criminals typically pooled deposits for long, randomized intervals before the service quietly redistributed “cleaned” funds to fresh crypto wallets — a process that often preceded cash-outs via exchanges, ATMs or bank accounts.

The takedown is the latest in a string of enforcement actions targeting crypto mixing services.

In May, German police seized infrastructure belonging eXch, confiscating more than $30 million in digital currency. Last year, German and U.S. authorities seized four servers linked to ChipMixer and roughly $46.5 million in bitcoin.

The U.S. Treasury has also targeted mixers with sanctions, designating Blender.io in 2022 and Tornado Cash later that year.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

India Orders Phone Makers to Pre-Install Government App to Tackle Telecom Fraud

Next Post

Officials accuse North Korea’s Lazarus of $30 million theft from crypto exchange

Related Posts

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Gladinet and Control Web Panel (CWP) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerabilities in question are listed below - CVE-2025-11371 (CVSS score: 7.5) - A vulnerability in files or directories accessible to
Read More

OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls

Artificial intelligence (AI) company OpenAI on Wednesday announced the launch of ChatGPT Health, a dedicated space that allows users to have conversations with the chatbot about their health. To that end, the sandboxed experience offers users the optional ability to securely connect medical records and wellness apps, including Apple Health, Function, MyFitnessPal, Weight Watchers, AllTrails,
Read More

CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat

CTM360 has identified a rapidly expanding WhatsApp account-hacking campaign targeting users worldwide via a network of deceptive authentication portals and impersonation pages. The campaign, internally dubbed HackOnChat, abuses WhatsApp’s familiar web interface, using social engineering tactics to trick users into compromising their accounts. Investigators identified thousands of malicious URLs
Read More