Share
European law enforcement authorities, led by German and Swiss investigators, dismantled the cryptocurrency mixing service Cryptomixer.io as part of Operation Olympia, seizing three servers, the platform’s domain, and more than €25 million ($29 million) in bitcoin in a coordinated action from November 24 to 28, 2025.
The takedown, supported by Europol and Eurojust, targeted a service that had laundered over €1.3 billion ($1.5 billion) in bitcoin since its 2016 launch, primarily for ransomware groups, dark web markets, and fraud networks, according to Europol.
Cryptomixer.io operated as a hybrid Bitcoin mixer, reachable on both the open internet and the dark web, and had processed more than €1.3 billion in transactions since launching in 2016. Investigators say the service was a go-to tool for ransomware gangs, dark-web marketplaces, and fraud networks, allowing criminals to hide the trail of proceeds from drug sales, weapons trafficking, extortion, and payment-card scams.
The platform worked by pooling incoming deposits from multiple users, holding them for random durations, and then distributing the coins to new addresses at unpredictable intervals, breaking up the public blockchain link between source and destination. Once “cleaned,” the bitcoin could be sent to mainstream exchanges, converted to other cryptocurrencies, or cashed out via ATMs and bank accounts.
By offering this anonymity layer, Cryptomixer provides an opening for cybercriminals to re-enter the regulated financial system with funds that appeared unconnected to their original crimes.
Investigators confiscated over 12 terabytes of data, including user logs that could aid future probes into cybercriminal networks. A seizure banner now appears on the cryptomixer.io site, warning: “Law enforcement agencies have seized databases and other information relating to this domain. Anyone operating or using these cybercriminal services is subject to investigation and prosecution.”
This operation follows similar crackdowns, including the 2023 ChipMixer shutdown, which seized €44.2 million in bitcoin. In the U.S., the founders of Samourai Wallet were convicted in November 2025 for laundering $237 million, and Tornado Cash co-founder Roman Storm awaits sentencing after a partial conviction in August.
The seizure is another indication of intensifying global pressure on mixers, which are often used to facilitate illicit activity under the cover of anonymity, potentially disrupting ransomware economies reliant on crypto laundering.
Share
