Europol has supported a coordinated action by Swiss and German authorities to dismantle Cryptomixer, an illegal cryptocurrency mixing service linked to cybercrime and large-scale money laundering.
The operation took place in Zurich from 24 to 28 November 2025 and resulted in the seizure of three servers, the takeover of the cryptomixer.io domain, and the confiscation of more than 12 terabytes of data, along with over EUR 25 million worth of Bitcoin. A seizure notice was placed on the website after the platform was taken offline.

Cryptomixer operated on both the clear web and the dark web, offering a way for users to hide the origin of their cryptocurrency. By pooling deposits and redistributing funds at random times, the service made blockchain transactions extremely difficult to track. This capability attracted cybercriminals involved in ransomware attacks, drug and weapons trafficking, payment card fraud, and other illegal activities. Since launching in 2016, the platform is believed to have processed more than EUR 1.3 billion in Bitcoin.
Investigators say the service played a major role in helping criminals disguise their profits before sending them to cryptocurrency exchanges. Once the funds appeared clean, offenders could convert them into other digital currencies or withdraw them as cash. Mixing services like Cryptomixer have long been a key part of the money-laundering process within the cybercrime ecosystem.
Europol supported the takedown through the Joint Cybercrime Action Taskforce based in The Hague. The agency helped coordinate participating countries, shared intelligence, and hosted operational meetings. Cybercrime experts from Europol also provided on-site forensic assistance during the action. The operation follows a similar effort in March 2023, when Europol helped take down Chipmixer, which was then considered the largest illegal cryptocurrency mixing service.





