A crypto mixer, also called a crypto tumbler, is a service or smart contract that pools cryptocurrency from many users and pays it back out in a way that breaks the visible link between where coins came from and where they go. On a public blockchain every transfer is recorded, so a mixer's purpose is to make it hard for an observer to trace a particular payment from sender to recipient.
Mixers sit at the centre of the debate between financial privacy and financial crime. Supporters see them as a privacy-enhancing technology for people who do not want their salary, donations or savings visible to anyone with a block explorer. Law enforcement agencies see them as a laundering tool used by hackers, ransomware groups and sanctioned states. In the United States they are addressed by FinCEN, OFAC and the Department of Justice; elsewhere by financial intelligence units and police.
Crypto mixers in plain terms
Imagine a room where twenty people each drop a $100 note into a large box. The box is shaken, and each person then takes out a $100 note. Everyone leaves with the same amount, but nobody can say whose original note they are holding.
A crypto mixer does this with digital coins. Because Bitcoin and most other coins leave a permanent public trail, people who want privacy put their coins into the shared box and withdraw the same value to a fresh address. The more people use the box, and the more varied the amounts and timing, the harder it is to match deposits with withdrawals.
How mixing works
There are two broad designs:
- Custodial mixers. A company or operator takes the user's coins, mixes them with others in its own wallets, and sends back different coins minus a fee, often 1–3%, sometimes after random delays. The user must trust the operator not to steal the funds or keep logs.
- Non-custodial mixers. Users keep control of their funds throughout. CoinJoin combines inputs from several Bitcoin users into one transaction with equal-sized outputs. Smart-contract mixers such as Tornado Cash on Ethereum let a user deposit a fixed amount and later withdraw it to a new address using a zero-knowledge proof, so the contract never learns which deposit is being withdrawn.
Users sometimes chain several mixers together, a practice described in daisy chaining tumblers, or access them through Tor to hide their IP address. Newer cryptographically enhanced mixers rely on zero-knowledge techniques rather than trust. Privacy coins such as Monero and Zcash build similar protection into the currency itself instead of adding it afterwards.
Legitimate uses and misuse
Public blockchains offer pseudonymity, not anonymity: once an address is linked to a person, their whole history and balance can be read, a problem explored in Blockchain's Privacy Paradox. Activists, donors in repressive countries, businesses protecting supplier payments and individuals worried about theft or kidnapping have all cited this as a reason to mix.
Mixers are also a standard step in the layering stage of money laundering. Proceeds of exchange hacks, ransomware payments, darknet markets and scams are routinely passed through them before being cashed out. US authorities have linked large flows through Tornado Cash and other mixers to North Korea's Lazarus Group. Blockchain analytics firms track mixer deposits and flag withdrawals, so exchanges often refuse or freeze coins with recent mixer exposure.
Cryptographic mixer designs
Newer mixers, sometimes called cryptographically enhanced mixers and more often zero-knowledge or non-custodial mixers, replace the trusted operator with cryptography, so no single party can steal the funds or link deposits to withdrawals:
- Zero-knowledge pools. Users deposit a fixed amount into a smart contract together with a cryptographic commitment. To withdraw, often to a fresh address, they submit a zero-knowledge proof (ZKP) showing they own one of the deposits, plus a one-time marker that stops the same deposit being withdrawn twice. Tornado Cash, launched in 2019 on the Ethereum blockchain, used this approach.
- Coordinated CoinJoin. Many Bitcoin users combine their inputs into one large transaction with equal-sized outputs, the technique described under CoinJoin. Protocols such as Chaumian CoinJoin use blind digital signatures so the coordinator cannot match inputs to outputs.
- Compliance-oriented pools. Newer designs, such as Privacy Pools launched on Ethereum in 2025, let users prove that their deposit is not linked to a list of known illicit funds while still hiding which deposit is theirs.
Users often add network-level protection, as covered in Tor integration and crypto mixers, because an IP address can undo on-chain privacy.
Regulation and enforcement
US authorities have treated custodial mixers as unlicensed money transmitters. Key actions include:
- Sanctions. The Office of Foreign Assets Control (OFAC) added Blender.io to the SDN List in May 2022, Tornado Cash in August 2022 and Sinbad in November 2023, making it illegal for US persons to deal with them.
- Court challenge. In November 2024 the Fifth Circuit ruled in Van Loon v. Department of the Treasury that Tornado Cash's immutable smart contracts were not "property" that could be sanctioned. Treasury removed Tornado Cash from the list on 21 March 2025.
- Prosecutions. The operator of Bitcoin Fog was convicted in 2024, the founders of Samourai Wallet were charged in 2024, and in August 2025 a New York jury convicted Tornado Cash co-founder Roman Storm of conspiring to operate an unlicensed money transmitting business while failing to agree on laundering and sanctions charges.
- Proposed rule. In October 2023 FinCEN proposed treating international crypto mixing as a primary money laundering concern, which would require reporting of mixer-linked transactions.
In Europe, police took down the ChipMixer service in March 2023. Under the EU's anti-money laundering rules, from 2027 crypto service providers will be barred from handling anonymity-enhancing coins and accounts. For compliance teams, mixer exposure is a standard red flag in AML compliance and sanctions screening, often leading to a suspicious activity report.