European law enforcement has dismantled Cryptomixer, one of the longest-running bitcoin-mixing services, in a coordinated multinational operation that resulted in the seizure of servers, data, and $29 million worth of bitcoin.
Authorities say the platform, active since 2016, processed more than $1.5 billion in illicit bitcoin transactions, making it a key laundering tool for cybercriminal groups across the globe.
The takedown, executed in the final week of November 2025, marks one of the most significant crackdowns on crypto-mixing infrastructure to date, and it immediately rippled through the crypto market, contributing to bitcoin’s drop below $85,000 on December 1.
A Coordinated Cross-Border Takedown
The operation, led jointly by Europol and Eurojust, brought together enforcement agencies in Switzerland and Germany.
Investigators seized three Cryptomixer servers located in Switzerland, took control of the Cryptomixer.io domain, and secured more than 12 terabytes of stored data, a move that could expose years of anonymized activity previously hidden from authorities.
A prominent seizure banner has now replaced the website’s functionality, warning former users that their data may be compromised and under investigation.
A Major Blow to Criminal Crypto Infrastructure
Cryptomixer operated on both the public internet and the dark web, becoming a favored laundering tool for ransomware groups, darknet marketplaces, and other criminal actors that relied on it to obscure the origins of illicit bitcoin.
It follows a pattern of intensified global enforcement targeting crypto-mixing services, including the high-profile ChipMixer takedown in 2023, which marked the beginning of more aggressive intervention by European authorities.
By removing Cryptomixer’s infrastructure and financial reserves, regulators aim to disrupt the operational capabilities of cybercriminals who depended on anonymization layers to move funds beyond traceability.
