Crypto mixers explained: privacy tools, money laundering, and the legal implications

Crypto mixers explained: privacy tools, money laundering, and the legal implications

I keep hearing people call Bitcoin anonymous. It is not. Not even close. Every BTC transaction ever made is sitting on a public ledger right now. You, me, the IRS, anybody can pull it up. Sure, the ledger shows addresses instead of names. But linking an address to a person? Chainalysis does that for a living. They are not the only ones. Elliptic, TRM Labs, Crystal, they all do. The idea that crypto is untraceable died years ago.

That reality is what created the market for crypto mixers. Bitcoin tumblers. Cryptocurrency mixers. Whatever you call them. Coins go in, get jumbled with everyone else's coins, and come back to a fresh address. The connection between your old wallet and your new one? Gone. That is the pitch, anyway.

This guide covers how crypto mixers work, the different types of crypto mixers, why governments keep shutting them down, and the legal implications of using one in 2026. Tornado Cash. Samourai Wallet. Bitcoin Fog. All of these cases matter. Privacy is a right. Money laundering is a crime. The line has never been this blurry.

How do crypto mixers work?

Way simpler than people make it sound. Crypto mixers work by cutting the link between a sender and a recipient on chain. Bitcoin and Ethereum are public blockchains. If I know your wallet address, I pull up your entire history in ten seconds. Every coin in. Every coin out. That is what a mixer kills.

Here is how it goes. You send BTC to the mixer. Your coins land in a big pool alongside coins from a few hundred strangers. The mixer waits a random amount of time and then sends you back the same amount, minus a fee, to a totally different address. Different coins. Different trail. Nobody watching the blockchain can connect your old address to your new one.

I always use the jar analogy when explaining this. Imagine dropping a $20 bill into a jar that already has 99 other twenties in it. Somebody shakes the jar. You reach in and grab one. That bill in your hand is worth the same $20, but good luck proving it is the same one you put in. Blockchain mixers do that with your coins. Your incoming and outgoing transactions get separated so they cannot be traced back to each other.

How your coins get mixed depends on the service. Centralized ones are run by a person or a company. They hold the funds. Decentralized ones use CoinJoin or similar protocols where users mix bitcoin transactions among themselves. Nobody holds anything. That difference is huge for your risk. Whether you call the tool a bitcoin mixer, a bitcoin tumbler, or a mixing service, the goal does not change: kill the connection between your bitcoins and your identity on the public blockchain. In a web3 world where every digital asset transfer lives on-chain permanently, the demand for that is not going away.

mixers

Different types of crypto mixers

Two very different animals here: centralized and decentralized.

Centralized mixers are a service run by somebody. You send coins. They shuffle them. You get different coins back. Sounds fine until you realize you just handed your BTC to a stranger on the internet. If that stranger decides to keep it, tough luck. If the FBI raids their server room, there might be a log with your deposit right next to your withdrawal. Bitcoin Fog worked exactly like this for over ten years. The guy running it, Roman Sterlingov, got convicted of laundering $1.3 billion in mixed bitcoin. The Department of Justice made an example out of him.

Decentralized mixers skip the middleman entirely. CoinJoin is the big one. A bunch of users throw their bitcoin transactions into one combined transaction. Everybody signs. The outputs scatter to fresh addresses. From the outside, it looks like one giant payment with no clear sender or recipient. Wasabi Wallet and Samourai Wallet's Whirlpool used this approach. Wasabi still does, charging 0.3% on mixes above 0.01 BTC.

Tornado Cash pushed it even further with smart contracts. Dump ETH into a pool. Come back later and withdraw from a different address. A zero-knowledge proof confirms you put money in, without saying when or how much. Nobody can match your deposit to your withdrawal. At least, that was the idea before the Treasury stepped in. Tornado Cash moved over $7 billion in crypto before the Treasury shut it down in August 2022. How much of that was dirty money? Elliptic put the number at about $1.5 billion, including $103.8 million traced to North Korea's Lazarus Group hackers. The rest? People who wanted privacy for perfectly legal reasons.

Mixer type How it works Who holds your funds? Example Risk level
Centralized Platform pools and redistributes The platform (custodial) Bitcoin Fog, Mixer Money High (trust + legal)
CoinJoin (decentralized) Users combine transactions peer-to-peer Nobody (non-custodial) Wasabi Wallet, Whirlpool Medium (legal risk remains)
Smart contract (decentralized) Deposits and withdrawals via zero-knowledge proofs Smart contract (non-custodial) Tornado Cash Medium-High (sanctions risk)

Why crypto users want mixers: the privacy argument

Why do normal, law-abiding people care about this? Because BTC is not cash. Pay for coffee with Bitcoin and that shop owner can look up your address. From there, they see every transaction you have ever made. Every deposit. Every withdrawal. Every weird purchase at 3 AM. Your boss? If they know your wallet, they see your salary, your side income, everything. A hacker who breaks into an exchange can follow your funds wallet to wallet to wallet.

The benefits of crypto mixers are real and have nothing to do with crime. Think about an activist in Iran or Belarus who gets donations in BTC. Without a mixer, the government traces every coin back to every donor. People get arrested. Or a journalist covering drug cartels. Sources pay the journalist in crypto. If the cartel can see who paid, that person ends up dead. Even something mundane: a company paying remote workers in stablecoins. Without mixing, competitors crawl the blockchain and figure out the entire payroll structure. And then there are the people, probably most mixer users, who just believe their spending habits are none of your business.

Vitalik himself used Tornado Cash. He said so publicly. The donation went to Ukraine-related causes, and his point was simple: wanting privacy does not make you a criminal. Hard to argue with that. Less than 1% of crypto users actually touch mixers, per idnow. Most mixer money is clean. But the 2% that is not? That gets the front page of the Wall Street Journal, and then Congress writes new rules.

mixers

The legal implications of using crypto mixers

This is where most people get confused. And honestly, the law is confused too.

Mixers are not banned everywhere. But use one and you land in a gray zone. Whether anyone cares depends on your country and what you did with the coins afterward.

The U.S. went back and forth on this. August 2022: Treasury slaps Tornado Cash on the OFAC sanctions list. Suddenly, any American who touches those smart contracts is committing a crime. The reason? Lazarus Group, North Korea's hacker army, used Tornado Cash to clean hundreds of millions in stolen crypto. Ransomware gangs did too.

November 2024: a federal appeals court blows the whole thing up. The Fifth Circuit says you cannot sanction code. A smart contract is not a person. It is not property. It runs by itself on Ethereum, and nobody can shut it down. March 2025: Treasury backs off and removes Tornado Cash from the sanctions list entirely.

But the devs? Different story. Alexey Pertsev got convicted in the Netherlands in 2024 for facilitating money laundering. Roman Storm got hit with an unlicensed money transmission conviction in August 2025. The money laundering conspiracy charge? Jury could not decide. So here is the paradox: the code is legal, but writing it got people locked up.

Enforcement action Date Target Outcome
Tornado Cash sanctioned by OFAC August 2022 Tornado Cash smart contracts Sanctions later removed (March 2025)
Bitcoin Fog conviction 2024 Roman Sterlingov (operator) Convicted of money laundering, $1.3B processed
Samourai Wallet arrests 2024 Founders (Keonne Rodriguez, William Hill) Charged with money laundering conspiracy, operating an unlicensed money transmitting business
ChipMixer seizure 2023 ChipMixer platform Seized by Europol and DOJ, $46M confiscated
Alexey Pertsev convicted 2024 Tornado Cash developer Convicted in Netherlands for money laundering
Roman Storm convicted August 2025 Tornado Cash co-founder Guilty of money transmission without a license
Sinbad.io seized November 2023 Sinbad mixer Seized by FBI, used by North Korea's Lazarus Group

You see what happens here. Writing code is one thing. Running a money service without a license is a whole different thing. And if your service moves funds that trace back to North Korean ransomware crews, you end up in a cell.

Europe? Same energy, different laws. EU anti-money laundering rules say every crypto service must do KYC. A mixer with no KYC is breaking the law from day one. Europol and the Department of Justice took down ChipMixer together. They will do it again.

What about you, the regular user? If you mix coins to keep your spending private, that is legal in most places. If you mix coins to hide the fact that you hacked a DeFi protocol, that is money laundering. Proving which one you did is the messy part. And in practice, exchanges do not wait for proof. Binance and Coinbase flag mixed coins. Your account gets frozen. You sit through AML reviews. Even if you did nothing wrong, good luck explaining that to a compliance bot.

Privacy alternatives to crypto mixers

Mixers are one option. Not the only one. And given the legal heat, other tools for the anonymity of crypto transactions are worth knowing.

Monero does not need a mixer. Privacy is baked into every single transaction. Ring signatures hide the sender. Stealth addresses hide the recipient. Confidential transactions hide the amount. All of it happens by default. You do not opt in. You just send XMR and nobody sees anything. Zcash tried something similar with shielded transactions, but those are optional and most people skip them. The problem with both coins: Binance delisted Monero in multiple regions. Kraken dropped it in some countries too. Regulators hate privacy coins.

Lightning Network was not designed for privacy, but it works pretty well for it. BTC moves off-chain between two people. Only the channel opening and closing transactions hit the blockchain. The payments in between? Invisible. Nobody even knows they happened.

Then there is the atomic swap trick. You buy Monero with your BTC using a direct swap, no exchange involved. Move the XMR around a few wallets. Swap it back to clean BTC later. No mixer. No logs. No company holding your money. It takes more steps and some technical chops, but the people who use this method love it.

L2 rollups on Ethereum help a bit too. Transactions get batched and compressed, which makes it harder to isolate individual moves. Not a privacy tool by design, but a side effect some people appreciate. The privacy-focused crowd is always looking for the next method that does not come with a target on its back.

Privacy method Privacy level Legal risk Complexity Works with Bitcoin?
Crypto mixer (centralized) High High Low Yes
CoinJoin (Wasabi, Whirlpool) Medium-High Medium Medium Yes
Monero Very high Medium (delistings) Low No (separate chain)
Zcash (shielded) High Medium Low No (separate chain)
Lightning Network Medium Low Medium Yes
Atomic swap (BTC to XMR) High Low-Medium High Indirectly

Any questions?

Treasury sanctioned it in August 2022 because North Korean hackers used it. The Fifth Circuit said in late 2024 that you cannot sanction an autonomous smart contract. Treasury took Tornado Cash off the list in March 2025. But developer Alexey Pertsev was convicted in the Netherlands. Co-founder Roman Storm was found guilty of unlicensed money transmission in the U.S. in August 2025, though jurors could not agree on money laundering. The contracts still work on Ethereum. The people behind them ar

Oh yeah. Every big exchange does. Binance, Coinbase, Kraken: they license software from Chainalysis or one of its competitors. The software watches for coins that passed through known mixer addresses. One hit and your account is frozen. Then come the KYC requests. Then, sometimes, a report to law enforcement. I know people who had their accounts locked for weeks over a deposit that went through a mixer months earlier. The coins might look "clean" on the blockchain, but compliance departments tre

Between 0.3% and 7%. Wasabi takes 0.3% on anything over 0.01 BTC. Centralized platforms ask for 1-3%. Some throw in random fees so that the exact amount cannot be traced. On top of the mixer fee, you pay the normal blockchain transaction fee.

Sometimes, yes. Chainalysis and Elliptic have cracked mixer transactions before, especially when the pool is small or the user reuses addresses. It is not foolproof from the IRS side either. Big amounts are harder to clean than small ones. But assuming you are invisible after mixing is a mistake.

For Bitcoin, Wasabi Wallet runs CoinJoin at 0.3% fees without holding your coins. That is hard to beat. Tornado Cash is back on Ethereum after the sanctions got dropped, but using it still makes exchanges nervous. I would stay away from centralized mixers entirely. If they hold your money, they can lose it or hand it over. The best crypto mixer is the one that never has custody of your funds.

Depends on where you are and what you do. In the U.S., using one for privacy is not banned. Running one without a money transmitter license will get you arrested. The Fifth Circuit said in 2024 that smart contract code cannot be sanctioned. Tornado Cash came off the sanctions list. But the guys who built it still got convicted. Europe? KYC is mandatory for all crypto services. A mixer with no KYC breaks the law by default.

Ready to Get Started?

Create an account and start accepting payments – no contracts or KYC required. Or, contact us to design a custom package for your business.

Make first step

Always know what you pay

Integrated per-transaction pricing with no hidden fees

Start your integration

Set up Plisio swiftly in just 10 minutes.