Crypto Mixers Roar Back: Criminals Outpace Regulators in Digital Obfuscation
Despite a concerted crackdown by US crypto regulators on services like Tornado Cash in 2022, recent research reveals that crypto mixing is not only back but thriving. The initial assumption that shutting down the tools would eliminate the problem has proven flawed, as illicit actors have demonstrated a striking ability to adapt faster than the rules can evolve.
The Revival of Digital Anonymity
A new report from the Cambridge Centre for Alternative Finance (CCAF) indicates that coin mixer usage has rebounded to pre-sanction levels. Total crypto mixer transactions surged to approximately 32,000 in 2025, a significant increase from 21,000 in 2024 and 16,000 in 2023. This resurgence is largely driven by new protocols, with Raingun now dominating the market, handling 71% of all mixer transaction volume by screening deposits against flagged addresses. Notably, Tornado Cash still accounts for around 25% of 2025 transactions, while Privacy Pools makes up the remaining 5%. However, a critical gap remains: blacklists are updated only as new exploits surface, creating a window for funds from freshly flagged addresses to bypass detection.
Sanctions' Double-Edged Sword: Deterring Privacy, Empowering Crime
The 2022 US Treasury sanctions on Tornado Cash caused an immediate and dramatic disruption, with daily transactions plummeting by 97% and the overall mixer market volume falling by 45%. Yet, this disruption proved uneven. CCAF researchers highlight that these sanctions primarily deterred legitimate users seeking financial privacy, while illicit actors swiftly migrated to alternative platforms, cross-chain bridges, and decentralized exchanges. Before 2022, centralized exchanges, which require identity verification, were significant sources of mixer funding. Post-ban, these deposits largely vanished. By 2025, a staggering 95% of all crypto mixer funding originated from unlabelled wallet addresses with no identifiable entity ties, up from 76% in 2020. This indicates a shift towards more sophisticated and anonymous funding sources. Furthermore, most mixer activity now occurs within 24 hours of wallet creation, a stark contrast to previous patterns, suggesting users are prioritizing rapid anonymization to evade identification. A 2023 Federal Reserve Bank of St. Louis paper reinforces this, noting that only about 30% of Tornado Cash traffic was linked to illicit sources, underscoring the legitimate demand for privacy tools that regulators inadvertently pushed into less transparent avenues.
