Straight answer: crypto "mixers" (tumblers) pool and redistribute coins to break the transaction trail on public blockchains. Privacy itself is legitimate — but most centralized mixers now carry criminal exposure: several are sanctioned (Tornado Cash, ChipMixer, Blender.io), operators have been convicted of money laundering, and "I was just protecting privacy" doesn't shield users from sanctions liability or mixer-seizure evidence.
How mixing actually works
Public blockchains are transparent — every transaction is traceable. Mixers break the trail by pooling your coins with others', then paying out different coins to new addresses. Techniques include centralized pooling, CoinJoin-style collaborative transactions, and privacy-focused chains like Monero that obscure by default.
The legal reality post-2022
- US: OFAC sanctioned Tornado Cash (Aug 2022); developers prosecuted. ChipMixer seized 2023. Using sanctioned mixers is itself a sanctions violation regardless of intent.
- EU: 5AMLD/6AMLD treat mixing as high-risk; exchanges must report mixer-linked deposits.
- Enforcement pattern: operators charged with unlicensed money transmission and money laundering; user funds in seized mixers are evidence, not protected.
Key distinction: privacy is legal; laundering is not. The same tool is legal for shielding salary amounts from public view and criminal for obscuring theft proceeds — the difference is source-of-funds and jurisdiction, not the mechanism.
Legitimate privacy practices
- CoinJoin implementations — collaborative transactions without a trusted central operator; generally lower legal risk than centralized mixers.
- Privacy-native chains — Monero and similar; legal to hold and use in most jurisdictions, though exchange access is limited.
- Address hygiene — new addresses per transaction, avoiding address reuse, separating identities.
- VPN + Tor for access — protects network-level privacy without touching the blockchain trail.
- KYC-aware exchanges — counterintuitively, regulated exchanges with clear policies offer more legal safety than anonymous mixer-adjacent services.
What makes a mixer "criminal" vs "privacy tool"
- Custody model: centralized operators who touch your funds carry the highest risk — both seizure and operator prosecution.
- Sanctions status: OFAC-listed addresses/services are per-se violations in the US regardless of your intent.
- Marketing: services explicitly marketing to criminals (darknet onboarding, "untraceable" claims) signal enforcement targets.
- Source of funds: clean crypto + privacy tool ≠ laundering; stolen crypto + any obfuscation = laundering everywhere.
If you've used a sanctioned mixer
- Don't panic-move funds — further transactions compound the trail.
- Consult a crypto-specialized attorney before any next step; voluntary disclosure often resolves better than discovery.
- Document source-of-funds — the legal question is always where the crypto came from.
- Check whether your jurisdiction criminalizes the use itself (US: yes for sanctioned services) vs the laundering.