Europol dismantles Swiss-German network after tracing €1.3 billion in laundered BTC

European regulators are putting increasing pressure on cybercrime networks as they target services that conceal the movement of digital funds. A coordinated action supported by Europol has taken down Cryptomixer, a long-standing platform used to obfuscate crypto transactions across the light and dark web. Authorities report that the site has processed more than a billion euros over the past decade and has become a major method of laundering illicit proceeds.

Investigators trace 1.3 billion euros through Cryptomixer before shutting down the platform

Law enforcement teams from Switzerland and Germany carried out the operation in Zurich between November 24 and 28. Officers seized the domain cryptomixer.io as well as three servers operating the platform.

Europol confirmed that investigators seized more than €25 million in Bitcoin and more than 12 terabytes of data during the raids. Visitors to the platform now encounter an input banner indicating closure.

Cryptomixer provided technology designed to disrupt the traceability of blockchain transactionsmaking it difficult for analysts to track the movement of funds. Cybercriminals relied on the service to launder money from drug and weapons trafficking, credit card fraud, ransomware operations, dark web marketplaces and underground forums.

According to investigators, more than €1.3 billion in Bitcoin has passed through the service since 2016. Most of these assets were either transferred to exchanges or converted to cash through ATMs and bank accounts.

Authorities worked through Europol coordination networks to share intelligence and technical support. The Joint Action Taskforce against Cybercrime (J-CAT), based at Europol headquarters in The Hague, enabled real-time communication between agencies. Europol has also deployed digital forensics specialists to the field. Furthermore, Eurojust helped prosecutors by managing cross-border legal procedures.

Crackdowns on crypto mixers mark changing landscape for privacy platforms

Recent enforcement actions across Europe have continued to target crypto mixing operations. In March 2023, Europol helped shut down Chipmixer, a service that processed more than $3 billion in six years of operation. Criminal groups have continued to seek anonymization tools despite these actions.

One recent case involved a 400 ETH transaction linked to North Korea's Lazarus Group on Tornado Cash, a well-known anonymization platform. Pressure on Tornado Cash has intensified after co-founder Roman Storm was convicted of operating an unlicensed money transmitting business.

Prosecutors say the site processed $1 billion linked to criminal schemes, although Storm denies any knowledge of those activities. The jury was unable to reach a verdict on charges related to money laundering and sanctions violations.

Europol's assessment of the closure of Cryptomixer highlights several factors that contributed to the success of the operation:

• Swiss and German investigators collaborated within a common framework to combat cybercrime.
• J-CAT coordinated the rapid exchange of information.
• Forensic specialists examined the seized digital evidence.
• Authorities removed the servers supporting the site's light and dark web infrastructure.
• Eurojust guided cross-border legal procedures.

Officials expect further action against digital anonymity tools as criminal networks increasingly adopt crypto-based methods. Data recovered from Cryptomixer is expected to support several investigations involving ransomware groups, trafficking operations, and financial fraud networks.

Scrutiny of services that obscure crypto transactions is expected to intensify as regulators and law enforcement increase oversight of digital assets. The closure of Cryptomixer reflects a broader effort to restrict the financial infrastructure supporting cybercrime across Europe.