Europol Leads Cross-Border Operation to Shut Down $1.4B Cryptomixer Laundering Platform

• A Europol-led operation in Germany and Switzerland seized a crypto mixer’s servers and data.
• The operation reportedly shut down CryptoMixer after it processed over $1.4 billion linked to major ransomware groups.
• Seized infrastructure and data will support investigators in tracking laundering activity and linked networks.

German and Swiss authorities shut down CryptoMixer, a cryptocurrency mixing service. The joint operation, supported by Europol and Eurojust, took place in Zurich between 24 and 28 November 2025.

The seizure included three servers, over 12 terabytes of data and more than €25 million (approximately $27 million) in Bitcoin.

Europol-led Cross-Border Operation Targets Crypto Mixing Hub

German and Swiss authorities shut down Cryptomixer in a joint investigation framework set up by Eurojust. Key domains were hosted in Germany, and the core infrastructure ran on servers in Switzerland, according to the report.

During the operation, officers seized the cryptomixer.io domain and took control of the infrastructure located in Zurich. Law enforcement placed a seizure banner on the site on both the clear web and its dark web version after the authorities had taken over the platform.

Europol supported a joint German-Swiss action week in Zurich. Its Joint Cybercrime Action Taskforce in The Hague coordinated the operation and the work of the countries involved. Europol also provided on-site forensic expertise, which helped with the seizures and the real-time exchange of information.

How Cryptomixer Worked and Who Used It

Cryptomixer functioned as a hybrid crypto mixing service. The platform pooled deposits from users over randomised periods and redistributed funds to destination addresses at unpredictable times. This made it difficult to follow individual coins on public blockchains.

According to Europol, the service operated as a key laundering tool for ransomware groups, dark web marketplaces, underground forums, and fraud networks. Authorities estimate that since its launch in 2016, the mixer has processed more than €1.3 billion worth of Bitcoin linked to activities including drug trafficking, weapons trafficking, ransomware attacks and payment-card fraud. 

Cryptomixer was a key part of criminal money laundering chains. Illicit funds passed through services like Cryptomixer before moving to exchanges or into traditional banking channels, where they may be converted into other cryptocurrencies or fiat currencies.

Also Read:  Tether Strikes Hard: Authorities Seize 12M USDT in Massive Fraud Case

European authorities boost blockchain tracing to fight illicit laundering

The case forms part of a wider EU effort against online financial crime under the EMPACT program. The program coordinates action against serious and organized crime across member states.

Experts said the takedown would disrupt criminals who relied on Cryptomixer. Organised groups will likely switch to other mixers, cross-chain bridges or loosely regulated exchanges.

Europol’s European Financial and Economic Crime Centre warns that criminal use of cryptocurrencies is becoming more sophisticated. This increases pressure on law enforcement resources and investigative capacity across the EU.

European authorities have also carried out similar operations against other crypto-linked networks and services. In March 2023, Europol shut down ChipMixer, one of the largest mixing services at the time.

Also Read:  Europe Tokenization Market Expected to Surge to USD 4.28 Billion by 2033