Mixer / Tumbler
A crypto mixer (or tumbler) is a service that blends coins from multiple users to obscure the transaction trail. Scammers use mixers after stealing crypto to hide the movement of funds. Regulators are cracking down hard: Tornado Cash was sanctioned by OFAC in 2022, ChipMixer operators were convicted in 2023, and Tornado Cash co-founder Roman Storm was found guilty in 2024.
How a Crypto Mixer Works
A crypto mixer accepts cryptocurrency from multiple users, pools the coins together, and returns equivalent amounts to new addresses. The goal is to break the direct link between the sender's address and the recipient's address, making blockchain tracing more difficult. A commission of 1–3% is typically deducted.
For a centralised mixer, the operator knows the connection between input and output addresses. This is precisely the weakness: if the server is seized, investigators obtain the complete transaction history. This is exactly how BestMixer.io was brought down in 2019 — Europol received all records.
Types of Mixers
Centralised mixers are the simplest. Fast and easy to use, but the operator holds the mapping between inputs and outputs. Law enforcement seizure exposes all users. BestMixer.io and Helix are examples of centralised mixers that were shut down with records intact.
Decentralised protocols (Tornado Cash, Wasabi Wallet CoinJoin) operate via smart contracts or peer-to-peer CoinJoin protocols with no central operator. Tornado Cash worked on Ethereum: users deposited fixed-denomination amounts (0.1 ETH, 1 ETH, etc.) and withdrew to a new address after a delay. No operator holds the mapping — but analytical tools analyse timing patterns and deposit sizes.
Cross-chain swaps via DEXs and bridges are not technically mixers but are widely used to obscure trails: funds are converted from BTC to ETH or USDT across multiple steps, significantly complicating tracing.
Why Mixers Do Not Provide Full Anonymity
Professional blockchain analytics tools — Chainalysis Reactor, TRM Forensics, Elliptic — apply a combination of de-anonymisation methods. Timing analysis: if the input amount and output amount are identical and the time gap is 30 minutes, the probability of linkage is high. Address clustering: if several output addresses from a mixer all send funds to the same destination, they are grouped into a cluster.
The critical insight: most attackers eventually move funds to a centralised exchange to convert to fiat. At that point, KYC data closes the chain. Tornado Cash was de-anonymised in several major investigations — the Ronin Bridge hack ($625 million, 2022), the Harmony Horizon Bridge hack ($100 million). FBI investigators traced attackers through their withdrawal patterns to exchanges.
Legal Status of Mixers
In the United States, using a mixer to conceal illegal proceeds constitutes money laundering under 18 USC 1956. ChipMixer's founder Minh Quoc Nguyen received a 3-year sentence in 2023. Tornado Cash co-founder Roman Storm was convicted in 2024 on charges of conspiracy to commit money laundering and sanctions violations. The EU and most other jurisdictions similarly criminalise mixer use for illegal purposes.
Tornado Cash has been on the OFAC Specially Designated Nationals list since August 2022. For US citizens and residents, interacting with Tornado Cash addresses is a sanctions violation. For others, it means funds automatically receive a high AML-risk label in all major analytics platforms — which can lead to exchange account freezes even for users with no criminal intent.
Clean Funds and Unintended AML Risk
The problem is not limited to bad actors. If you legitimately received funds from an address that previously interacted with a sanctioned mixer or high-risk smart contract, an exchange may freeze your account due to "contaminated" coins. This is the contaminated funds problem — increasingly common as DeFi usage grows.
In such cases, KarCrypto helps prepare documentation proving the legitimate origin of funds: transaction history, source-of-funds evidence, and an explanation of the unwitting exposure to high-risk coins — all formatted for exchange compliance teams.
Frequently Asked Questions
Is it legal to use a crypto mixer?
Depends on jurisdiction and purpose. Using a mixer to conceal illegal proceeds is a crime in most countries. Even legal use of Tornado Cash automatically assigns high AML risk to transactions and can result in exchange account freezes.
Can transactions through a mixer be traced?
Yes, in a significant share of cases. Chainalysis, TRM Labs and Elliptic use timing analysis, amount correlation and address clustering. Tornado Cash was de-anonymised in several major investigations including the Ronin Bridge hack.
What if my funds accidentally received a mixer flag?
Prepare documentation confirming the legitimate origin of your funds: transaction history, source of funds, and correspondence. Contact the exchange support with an explanation. KarCrypto helps prepare such document packages for account unfreezing.
Tornado Cash is sanctioned — is it safe to use?
Tornado Cash has been on the OFAC sanctions list since August 2022. For US citizens, using it violates sanctions law. For others, it means high legal risk and automatic high AML-risk labels on those funds across all major exchanges.
Stolen funds went through a mixer — can they still be recovered?
This complicates the investigation but does not make it impossible. Analysts shift focus to mixer output addresses and track fund movement toward exchanges. In a number of cases, the final address can be identified and a freeze initiated.