Law enforcement authorities from Switzerland and Germany, with support from Europol, have successfully dismantled a primary cryptocurrency mixing service called ‘Cryptomixer’ that was facilitating cybercrime and money laundering operations worldwide.
The coordinated action took place between November 24 and 28, 2025, in Zurich, Switzerland.
During the operation, authorities seized three servers and confiscated the cryptomixer.io domain.
The takedown resulted in the seizure of over 12 terabytes of data and more than EUR 25 million worth of Bitcoin.
Following the shutdown, law enforcement replaced the website with a seizure banner to notify users of the platform’s closure.
How Cryptomixer Operated
Cryptomixer was a hybrid mixing service accessible via both the clear and dark web. Since its creation in 2016, the platform has processed over EUR 1.3 billion in Bitcoin transactions.
The service was specifically designed to hide the origin of criminal funds by blocking transaction traceability on the blockchain.
The platform worked by pooling deposited funds from various users for randomized periods before redistributing them to destination addresses at irregular intervals.
This process made it extremely difficult to trace specific coins, effectively concealing the source of cryptocurrency used in illegal activities.
Cryptomixer became the preferred laundering platform for various criminal enterprises, including ransomware groups, underground economy forums, and dark web marketplaces.
According to the Europol, the service facilitated money laundering for numerous illegal activities such as drug trafficking, weapons trafficking, ransomware attacks, and payment card fraud.
Criminals typically use mixing services like Cryptomixer to “clean” their cryptocurrency before transferring it to legitimate exchanges.
This allowed them to convert their laundered digital assets into other cryptocurrencies or traditional currency through ATMs or bank accounts.
Europol played a crucial role in the operation through the Joint Cybercrime Action Taskforce (J-CAT), hosted at Europol’s headquarters in The Hague, Netherlands.
The agency coordinated information exchange between participating countries, hosted operational meetings, and provided cybercrime expertise and forensic assistance during the action day.
The operation involved Germany’s Federal Criminal Police Office and Prosecutor General’s Office Frankfurt am Main, along with Switzerland’s Zurich City Police, Zurich Cantonal Police, and Public Prosecutor’s Office Zurich.
This takedown follows Europol’s previous success in March 2023, when authorities shut down ‘Chipmixer’, the largest mixing service at the time.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.