Europol has taken down a popular crypto mixer in yet another law enforcement operation targeting distributed cybercrime infrastructure.
Dubbed “Operation Olympia,” it occurred between November 24 and November 28, 2025, and involved Swiss and German law enforcement authorities. Europol’s Joint Cybercrime Action Taskforce and EuroJust also assisted in the takedown operation.
Europol dismantles a popular crypto mixer
Europol targeted three servers linked to the cryptomixer.io domain, resulting in the seizure of 12 terabytes of data and over $29 million (€25 million) in Bitcoin. The European law enforcement agency believes the crypto mixer has laundered over $1.5 billion (€1.3 billion) since 2016.
A crypto mixer allows cryptocurrency owners to pool assets from both legitimate and illegal sources, then redistribute them after deducting platform fees to reduce traceability.
Although operators argue that crypto mixers exist to protect user privacy rather than facilitate cybercrime, they are often used to launder the proceeds of crime, including those from ransomware attacks, illegal arms sales, and drug and human trafficking operations.
According to the European law enforcement agency, the crypto mixer (cryptomixer.io) was “a hybrid mixing service accessible via both the clear web and the dark web,” allowing the “the obfuscation of criminal funds for ransomware groups, underground economy forums and dark web markets,” Europol explained.
While it makes traceability more challenging, obfuscating the source of funds does not ultimately prevent authorities from following the digital trail.
Meanwhile, the seized data will help law enforcement authorities to determine the source of funds and the identities of the suspects, potentially leading to arrests and more takedowns.
“The findings will also contribute to the investigation of further cybercrimes,” stated the German federal investigative agency Bundeskriminalamt (BKA).
Europol law enforcement operation nukes yet another cybercrime infrastructure
In November 2025, Europol’s Operation ENDGAME 3.0 also dismantled the Elysium, Rhadamanthys, and VenomRAT malware networks, which were responsible for stealing millions of credentials and over 100,000 crypto wallets.
Between October 2024 and May 2025, Europol’s law enforcement operations, Magnus and Endgame, also dismantled the RedLine and Lumma infostealer cybercrime infrastructure.
In March 2023, another Europol law enforcement operation nuked the largest crypto mixer ChipMixer, seizing about 1909.4 Bitcoins and 7 TB of data. North Korean government-sponsored hackers were among ChipMixer’s top customers.
In the same year, law enforcement authorities dismantled another crypto mixer, Sinbad[.]io, used to launder stolen cryptocurrency from Horizon Bridge and Axie Infinity hacks by the North Korean hacking group Lazarus. Sinbad was succeeded by Blender[.]io, which was also taken by law enforcement authorities.
In 2019, another crypto mixer, Bestmixer[.]io, was nuked in yet another law enforcement operation involving Europol and the Dutch police. Launched in 2018, Bestmixer had transacted over $200 million (27,000 bitcoins) in just one year.
According to Europol, Bestmixer was “one of the three largest mixing services for cryptocurrencies and offered services for mixing the cryptocurrencies bitcoins, bitcoin cash and litecoins.”
In November 2025, the founders of the Samourai Wallet cryptocurrency mixing service, Keonne Rodriguez (CEO) and William Lonergan Hill (CTO), were sentenced to five and four years in prison, respectively, for transmitting the proceeds of crime amounting to over $237 million.
