In one of the most significant enforcement actions against cryptocurrency mixing services to date, Dutch authorities shut down Bestmixer.io on May 22, 2019, sending shockwaves through the digital asset community and raising urgent questions about privacy, regulation, and the future of blockchain anonymity tools.
TL;DR
- Dutch FIOD seized Bestmixer.io, one of the three largest crypto mixing services globally
- The operation involved law enforcement from France, Latvia, Luxembourg, and Europol
- Bestmixer.io reportedly processed over $200 million in transactions since its May 2018 launch
- The crackdown was triggered by a 2018 McAfee investigation that flagged the platform for facilitating money laundering
- No arrests have been made yet as Europol continues its investigation into criminal usage
The Takedown That Stunned the Crypto World
The Dutch Financial Intelligence and Investigation Service (FIOD) executed a coordinated seizure of Bestmixer.io, a cryptocurrency mixing platform that had rapidly become one of the most popular tools for obscuring blockchain transactions. The operation, conducted in partnership with law enforcement agencies from France, Latvia, and Luxembourg, resulted in the confiscation of six servers powering the mixing service.
According to Dutch media reports, Europol officials are now working to determine the full extent of criminal money laundering that flowed through the platform. The speed and scale of the takedown demonstrated an unprecedented level of cross-border cooperation among European law enforcement agencies targeting cryptocurrency-related crime.
McAfee Investigation Sparked the Crackdown
The roots of the Bestmixer shutdown trace back to 2018, when cybersecurity firm McAfee raised serious concerns about the mixing service. McAfee published a detailed report indicating that Bestmixer.io was being used to facilitate large-scale money laundering, with transactions involving Bitcoin (BTC), Litecoin (LTC), and Bitcoin Cash (BCH). The report served as a catalyst for regulatory scrutiny and ultimately prompted the coordinated European response.
McAfee also released its own technical analysis demonstrating how the platform allowed users to pool and redistribute cryptocurrency transactions, effectively breaking the traceable link between sender and receiver on public blockchains. This capability, while attractive to privacy advocates, made the service equally appealing to bad actors seeking to launder illicit proceeds.
A $200 Million Mixing Empire
Since its launch in May 2018, Bestmixer.io had grown to become one of the three largest cryptocurrency mixing services in the world. The platform reportedly processed a staggering turnover of at least $200 million in its roughly one year of operation. Its dominance in the mixing market made it a high-priority target for regulators seeking to curb the use of cryptocurrency for illicit financial activity.
The mixing service supported multiple major cryptocurrencies, including Bitcoin, Litecoin, and Bitcoin Cash. Users could access the platform without registration, making it particularly attractive for those seeking anonymity. At the time of the seizure, Bitcoin was trading at approximately $7,680, while Ethereum hovered around $245, according to CoinMarketCap data.
Broader Regulatory Context
The Bestmixer takedown did not occur in isolation. It was part of a broader wave of regulatory actions targeting the cryptocurrency space during the week of May 20, 2019. In the United States, IRS Commissioner Charles Rettig announced that the agency was preparing its first comprehensive cryptocurrency tax guidance since 2014, signaling a new era of tax compliance expectations for digital asset holders.
The SEC also made its presence felt, delaying its decision on the highly anticipated VanEck Bitcoin ETF proposal and simultaneously pursuing enforcement actions against alleged crypto fraudsters. The commission sued California resident Daniel Pacheco for allegedly operating a $26 million cryptocurrency pyramid scheme through IPro Solutions and IPro Network, and separately halted the Argyle Coin diamond-backed cryptocurrency scheme, which had allegedly defrauded investors of $30 million.
Privacy Coins and the Future of Mixing Services
The shutdown of Bestmixer.io reignited a long-standing debate within the cryptocurrency community about the balance between privacy and regulatory compliance. Privacy-focused cryptocurrencies like Monero (XMR), which was trading at approximately $83.51 on the day of the seizure, have long faced scrutiny from regulators who view their anonymity features as potential tools for financial crime.
Advocates for cryptocurrency privacy argue that mixing services serve legitimate purposes, including protecting users from surveillance and enabling financial privacy in jurisdictions with oppressive regimes. Critics counter that the lack of transparency makes these tools ideal for money laundering, tax evasion, and the financing of illicit activities.
Why This Matters
The Bestmixer.io seizure marked a watershed moment in the global regulatory approach to cryptocurrency privacy tools. It demonstrated that law enforcement agencies were not only capable of tracking illicit blockchain activity but also willing to coordinate internationally to shut down services they deemed threats to financial integrity. For the broader crypto market, the action served as a clear signal that the era of unregulated anonymity in digital assets was drawing to a close. As governments worldwide sharpen their regulatory frameworks, the tension between privacy rights and anti-money laundering enforcement will continue to shape the evolution of the cryptocurrency landscape.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. Always conduct your own research before making any investment decisions.
McAfee doing the chain analysis that triggered the seizure. an antivirus company outperforming Europol on crypto forensics in 2019 is wild
Kerr F. McAfee flagged it before Europol even started investigating. Dutch FIOD got the credit but the actual intel came from a private company
$200M processed in under a year. no wonder they went after bestmixer first, it was way too visible
it was the most popular mixer because it was literally advertised on forums. zero opsec from the operators
null_pointer advertising a mixer on a .io domain with a public website in 2019. these operators deserved to get seized on principle alone
opsec_ghost agree on the .io domain being a joke. but McAfee threat intel doing the work Europol should have done is the wild part
the funny part is bestmixer operated on a .io domain with a public website. tor hidden services learned from this years ago
claiming 100% untraceable on your public FAQ while processing 200M is the dumbest opsec in crypto history. they basically wrote their own indictment
Coordinated action across 5 countries for a mixer that launched in 2018. They were watching from day one.
mcafee flagged them in 2018 and it still took a year for authorities to act. the investigation timeline is crazy
Pavel Novak and it was McAfee, a antivirus company, that did the initial investigation. not exactly law enforcement material but their threat intel was solid enough for FIOD to act
5 countries coordinated but the actual seizure was done by the Dutch FIOD. netherlands has been aggressive on crypto enforcement since 2020
Aminata Diallo dutch FIOD has been ahead of everyone on crypto enforcement. they shut down Bestmixer, went after Tornado Dev, and barely made headlines for either
mixing services are a cat and mouse game. shut down bestmixer and three more popped up within months. the demand for privacy tools didnt go anywhere
coinjoin_fan whirlpool and wasabi picked up the slack. the fiod operation proved you can shut down a centralized mixer but privacy demand is permanent
onion_layer_7 coinjoin tools like whirlpool are harder to shut down because there is no central operator to arrest. protocol vs platform
onion_layer_7 whirlpool survived because it was coinjoin with no central coordinator. bestmixer was literally a hosted service holding your coins. completely different threat model
Decentralized mixers like Whirlpool survived because they’re protocol-based, not platform-based. Important distinction.
whirlpool survived because no central coordinator held funds. bestmixer was literally a hosted mixing service. protocol vs platform distinction matters
McAfee doing the investigative work that actual law enforcement should have done. a antivirus company found the money laundering before Europol
the funniest part of Bestmixer was their FAQ page claiming 100% untraceable. might as well paint a target on your back
@opsec_void_ The FAQ claims were comedy gold. ‘100% untraceable’ on a public website? Classic rookie mistake.
This was inevitable. Any centralized service claiming 100% untraceability was asking for trouble.
bestmixer processing 200M in a year and getting caught because of a mcafee report is wild. actual law enforcement needed an antivirus company to do the forensics
the fact that McAfee of all companies flagged Bestmixer before Europol even noticed tells you how far behind law enforcement was in 2019
Drystan M. antivirus company doing chain analysis better than actual intelligence agencies. says everything about crypto enforcement priorities back then
200M processed in one year and they got shut down because of a publicly accessible FAQ page claiming 100% untraceable. operational security was nonexistent