Criminal, civil and administrative cases that bear on privacy protocols and mixers: prosecutions of developers and operators, takedowns of mixing services, challenges to sanctions and actions by regulators, each with its status, its dated steps and the documents behind them.
Checked on 23 Oct 2026. Charges are allegations until proven, and a case listed here is not a finding about anyone named in it. Information only, not legal advice.
Cases tracked
19
13 criminal, 3 civil and 3 administrative
In 5 jurisdictions, checked 23 Oct 2026
Open
9
5 ongoing, 1 appeal pending and 3 under investigation
Charges, claims, appeals or investigations pending
Concluded
10
4 sentenced, 1 decided, 2 dismissed and 3 closed
Sentenced, decided, dismissed or closed
Next known date
20 Apr 2027
United States v. Storm: final pretrial conference; the retrial is due to begin on 26 April 2027
1 case has a date set
All cases
Every case tracked, the one with the most recent step first. Select a case for its history and documents; a next date links to its entry on the Calendar.
One card per case, in the same order: where it stands, the court or authority, the parties, the charges or claims, the outcome so far, the next known date, its key dates and its numbered sources, which each step cites.
Convicted on one of the three counts on 6 August 2025 and not sentenced. His motion for acquittal, argued on 9 April 2026, was still undecided in the latest filings and reports found (9 October 2026), and the retrial on the other two counts is due to begin on 26 April 2027.
Court or authority
U.S. District Court for the Southern District of New York, Judge Katherine Polk Failla
Roman Storm, a co-founder of Tornado Cash (defendant); the United States, prosecuted by the U.S. Attorney's Office for the Southern District of New York
Charges or claims
Conspiracy to commit money laundering, conspiracy to operate an unlicensed money transmitting business and conspiracy to violate the International Emergency Economic Powers Act (sanctions)
Outcome
None yet: a guilty verdict on the unlicensed money transmitting conspiracy count, and no verdict on the money laundering and sanctions conspiracy counts.
Next known date
: final pretrial conference; the retrial is due to begin on 26 April 2027 On the calendar
Why it matters
The case asks whether developing and running a non-custodial mixer, which never takes control of users' funds, can amount to operating an unlicensed money transmitting business or a money laundering conspiracy.
Key dates
Prosecutors unsealed the indictment of Roman Storm and Roman Semenov, alleging that Tornado Cash facilitated more than $1 billion in money laundering; Storm was arrested in Washington State. [1]
After a four-week trial the jury convicted Storm of conspiring to operate an unlicensed money transmitting business, which carries a maximum of five years in prison, and could not agree on the money laundering and sanctions counts. [2]
Storm's lawyers filed their memorandum in support of a motion for a judgment of acquittal. [3]
The motion for acquittal was argued before Judge Failla. [5]
At the defence's request, the judge moved the retrial of the two open counts from 26 October 2026 to 26 April 2027, with a final pretrial conference on 20 April 2027, citing the pending motion for acquittal. [4, 5]
The court refused Storm's request to dismiss the two open counts under the Speedy Trial Act. [6]
Prosecutors filed a letter citing the D.C. Circuit's Bitcoin Fog ruling of 25 September 2026 as support for trying the case in New York. [7, 8]
Storm's lawyers filed a further letter on venue. [9]
Whether the judge has ruled on the motion for acquittal since 9 October 2026: no ruling was found in press reports up to 23 October 2026, and the docket itself could not be read on that day.
FinCEN; covered US financial institutions that would have had to keep records and report
Charges or claims
A proposed finding under section 311 of the USA PATRIOT Act that international convertible virtual currency mixing is a class of transactions of primary money laundering concern, with recordkeeping and reporting requirements
Outcome
Withdrawn; no rule was made.
Next known date
None.
Why it matters
It would have required US financial institutions to report transactions involving mixing outside the US, in what FinCEN called its first use of section 311 against a class of transactions rather than a single institution or jurisdiction.
Key dates
FinCEN proposed the special measure, aimed at increasing transparency around mixing. [1]
FinCEN announced the withdrawal of the proposal, together with a 2020 proposal on transactions with unhosted wallets; commenters' concerns that the broad definition of mixing could chill legitimate privacy uses informed the decision. [2, 4]
The withdrawal was published in the Federal Register (91 FR 63513). [3]
Roman Sterlingov, operator of the Bitcoin Fog mixer (defendant)
Charges or claims
Money laundering conspiracy, money laundering in a sting operation, operating an unlicensed money transmitting business and breaching the D.C. Money Transmitters Act
Outcome
Sentenced to 150 months in prison, with a forfeiture money judgment of $395,563,025.39; upheld on appeal.
Next known date
None known.
Why it matters
Bitcoin Fog was a custodial bitcoin mixer, and prosecutors in the Tornado Cash case cited the appeal ruling on venue on 5 October 2026.
Key dates
Sterlingov was arrested at Los Angeles International Airport; Bitcoin Fog stopped operating two days later. [3]
A jury convicted him of all four charges; prosecutors said Bitcoin Fog moved over 1.2 million BTC, worth nearly $400 million at the time. [1]
He was sentenced to 12 years and six months in prison and ordered to pay a forfeiture money judgment of $395,563,025.39. [2]
Whether Sterlingov has asked for a rehearing or will petition the Supreme Court was not found.
Confidence: Confirmed. Checked on 23 Oct 2026.
DismissedCivilReported
Lewellen v. Bondi
Pharos (non-custodial donation software)
Dismissed without prejudice on 25 March 2026 because he had not shown a substantial threat of prosecution; he could sue again, and no appeal was found.
Court or authority
U.S. District Court for the Northern District of Texas, Chief Judge Reed O'Connor
Michael Lewellen, developer of Pharos, a non-custodial tool for crypto donations to charitable crowdfunding campaigns (plaintiff); the Attorney General and the Justice Department (defendants)
Charges or claims
A declaration that developing and publishing non-custodial software does not make him an unlicensed money transmitter that could be prosecuted
Outcome
Dismissed without prejudice, with no ruling on whether non-custodial software is a money transmitting business.
Next known date
None known; the dismissal leaves him free to bring the claim again.
Why it matters
A developer asked a court to rule in advance that the money transmitting statute used against the Tornado Cash and Samourai developers does not reach non-custodial software, and the case ended without a ruling on that question.
Key dates
Lewellen sued the Justice Department in the Northern District of Texas, asking the court to rule that his non-custodial software was not an unlicensed money transmitting business. [1]
Chief Judge Reed O'Connor granted the government's motion to dismiss without prejudice, finding no substantial threat of prosecution and contrasting the Justice Department's cases involving money laundering: "By contrast, the core conduct here would be running a business." [1]
The court's order was not read: the ruling, its date and the filing month come from The Block's report, and the caption is as press reports give it. Whether Lewellen appealed or refiled was not found.
Confidence: Reported. Checked on 23 Oct 2026.
SentencedCriminal
United States v. Harmon
Helix
Sentenced to three years in November 2024; a final order of forfeiture of more than $400 million in assets followed on 21 January 2026.
Court or authority
U.S. District Court for the District of Columbia, Judge Beryl A. Howell; FinCEN for the civil penalty
Larry Dean Harmon, founder and operator of the Helix and Coin Ninja mixers (defendant)
Charges or claims
Money laundering conspiracy, to which he pleaded guilty; FinCEN also assessed a civil penalty for Bank Secrecy Act violations
Outcome
Three years in prison, a $60 million FinCEN penalty and the forfeiture of more than $400 million in assets.
Next known date
None known.
Why it matters
FinCEN's penalty was the first against a bitcoin mixer, treating its operator as a money transmitter that had to follow anti-money laundering law.
Key dates
FinCEN assessed a $60 million civil money penalty against Harmon, its first against a bitcoin mixer. [1]
Harmon pleaded guilty to money laundering conspiracy. [2]
He was sentenced to three years in prison for operating Helix, which processed over $300 million of cryptocurrency from 2014 to 2017. [2]
Judge Howell entered a final order of forfeiture after a settlement with a mortgage-holder, giving the United States title to more than $400 million in cryptocurrency, real estate and other assets tied to Helix. [3]
The Zcash Foundation said on 14 January 2026 that the SEC had concluded its review and did not intend to recommend enforcement action. The SEC does not comment on investigations.
Court or authority
U.S. Securities and Exchange Commission (SEC)
Reference
In the Matter of Certain Crypto Asset Offerings (SF-04569)
Keonne Rodriguez, chief executive, and William Lonergan Hill, chief technology officer, of Samourai Wallet (defendants)
Charges or claims
Conspiracy to commit money laundering and conspiracy to operate an unlicensed money transmitting business; both pleaded guilty to the money transmitting conspiracy
Outcome
Sentenced: five years for Rodriguez and four years for Hill.
Next known date
None known.
Why it matters
The case applied the US money transmitting offence to the makers of a Bitcoin wallet app and its coinjoin mixing service, Whirlpool.
Key dates
Both were charged; Rodriguez was arrested in the US and Hill in Portugal, and Samourai's servers and domain were seized with Icelandic authorities. Prosecutors said Samourai executed over $2 billion in unlawful transactions. [1]
Both pleaded guilty to conspiring to operate a money transmitting business that transmitted criminal proceeds. [2]
Rodriguez was sentenced to five years in prison. [3]
Asked about a pardon for Rodriguez, President Trump said "I've heard about it, I'll look at it" and asked the Attorney General to examine the case. [4]
Pardon status: no pardon or commutation was found in Justice Department or press sources up to 23 October 2026; this is an absence of evidence, not an official statement.
Confidence: Confirmed. Checked on 23 Oct 2026.
Under investigationCriminal
Cryptomixer takedown
Cryptomixer
Shut down on 26 November 2025; no charges against the operators were found up to 23 October 2026.
Court or authority
Frankfurt prosecutors' cybercrime unit (ZIT) and Zurich cantonal prosecutors, with the BKA and Europol
A criminal investigation into money laundering through the mixer
Outcome
Service shut down; no prosecution found.
Next known date
None known.
Why it matters
The BKA described cryptomixer.io, which had run since 2016, as the oldest online money laundering service when a joint German and Swiss operation closed it.
Key dates
German and Swiss authorities shut down cryptomixer.io and seized about EUR 25 million in cryptocurrency during an operation from 24 to 28 November 2025; Europol said over EUR 1.3 billion in bitcoin had been mixed through it since 2016. [1, 2]
Convicted and sentenced to 64 months in prison on 14 May 2024. His appeal is pending; he was released from prison under electronic monitoring in February 2025 to work on it.
Court or authority
Rechtbank Oost-Brabant (East Brabant District Court); on appeal, the Gerechtshof 's-Hertogenbosch (Court of Appeal)
Alexey Pertsev, a developer of Tornado Cash (defendant); the Openbaar Ministerie (Public Prosecution Service)
Charges or claims
Money laundering through Tornado Cash between 2019 and 2022
Outcome
Convicted at first instance, 64 months in prison; not final while the appeal is pending.
Next known date
No date for the main appeal hearing was found.
Why it matters
The district court held a developer criminally liable for laundering through a non-custodial mixer, finding that Tornado Cash combined maximum anonymity with a serious lack of features enabling identification, control or detection.
Key dates
The FIOD arrested a 29-year-old man in Amsterdam on suspicion of concealing criminal financial flows and facilitating money laundering through Tornado Cash; press reports named him as Alexey Pertsev. [1]
The district court convicted him of money laundering and sentenced him to 64 months in prison. [2]
He appealed to the Court of Appeal in 's-Hertogenbosch, The Block reported on 16 May 2024. [3]
A Dutch court refused to release him while the appeal was prepared, The Block reported on 13 July 2024. [4]
A Dutch court approved his conditional release from prison under electronic monitoring so that he could work on the appeal. [5]
At a preliminary hearing in 's-Hertogenbosch the defence asked for more evidence from the prosecution, including on the Chainalysis software used in the investigation; the court said it would decide on 2 October 2025. [6]
The court's decision on the defence's requests for evidence, due on 2 October 2025, and the date of the main appeal hearing could not be confirmed from court or press sources on 23 October 2026.
Ended as moot after the delisting: on 3 July 2025 the Eleventh Circuit vacated the district court's 2023 ruling for the Treasury and told it to dismiss the case.
Court or authority
U.S. District Court for the Northern District of Florida; on appeal, the U.S. Court of Appeals for the Eleventh Circuit
A criminal investigation into money laundering through the service
Outcome
Service shut down; no prosecution found.
Next known date
None known.
Why it matters
German authorities treated a swapping service that let users trade without identifying themselves as a laundering channel, suspecting it had handled part of the proceeds of the February 2025 Bybit theft.
Key dates
German authorities seized eXch's servers and about EUR 34 million in crypto-assets, estimating that about $1.9 billion had passed through the service, which did not require users to identify themselves. [1]
Joseph Van Loon and five other Tornado Cash users, backed by Coinbase (plaintiffs); the Department of the Treasury and OFAC (defendants)
Charges or claims
That OFAC exceeded its authority under the International Emergency Economic Powers Act and the Administrative Procedure Act by designating Tornado Cash and its smart contracts
Outcome
Decided for the plaintiffs: the designation was held unlawful and OFAC was enjoined from enforcing it.
Next known date
None known.
Why it matters
The Fifth Circuit held that immutable smart contracts are not property that the Treasury can block under the International Emergency Economic Powers Act.
Key dates
The district court ruled for the Treasury, finding that Tornado Cash is an association that OFAC could designate. [1]
The Fifth Circuit reversed, holding that Tornado Cash's immutable smart contracts are not property that can be blocked under the International Emergency Economic Powers Act, and sent the case back for partial summary judgment for the plaintiffs. [2]
The Treasury removed Tornado Cash from the sanctions list. [3]
The district court rejected the argument that the delisting made the case moot and entered judgment declaring the sanctions unlawful, with OFAC "permanently enjoined from enforcing" them, as press reports quote it. [4, 5]
The text of the 28 April 2025 judgment was not read; its terms are given as press reports quote them. No appeal from it was found, but none was ruled out from the docket.
Tornado Cash (designated 2022 to 2025); Roman Semenov (designated since 2023)
Charges or claims
Sanctions designation for laundering virtual currency, including proceeds of thefts by North Korea's Lazarus Group; redesignated in November 2022 under additional North Korea authorities
Outcome
Sanctions lifted on 21 March 2025; in Van Loon, a federal court later barred OFAC from enforcing them.
Next known date
None.
Why it matters
Until March 2025 the designation barred US persons from dealing with the Tornado Cash smart contracts listed in it.
Key dates
OFAC sanctioned Tornado Cash, saying it had been used to launder more than $7 billion since 2019, including over $455 million stolen by the Lazarus Group. [1]
OFAC redesignated Tornado Cash with additional North Korea authorities and issued new guidance. [2]
The Treasury removed the Tornado Cash entry, which listed its website and about 90 Ethereum addresses, citing a review of the legal and policy issues raised by sanctions on evolving technology; Semenov's entry was amended and kept. [4, 5]
Charged and at large since the indictment was unsealed on 23 August 2023. He is on the FBI's wanted list and remains on the US sanctions list, from which Tornado Cash itself was removed in March 2025.
Court or authority
U.S. District Court for the Southern District of New York (the same indictment as Roman Storm)
Roman Semenov, a co-founder of Tornado Cash and a Russian national (defendant)
Charges or claims
Conspiracy to commit money laundering, conspiracy to operate an unlicensed money transmitting business and conspiracy to violate the International Emergency Economic Powers Act (sanctions)
Outcome
None. The charges are allegations, and he has not appeared in a US court.
Next known date
None known.
Why it matters
A co-founder of Tornado Cash remains charged and under US sanctions after the protocol itself was removed from the sanctions list.
Key dates
The indictment charging Semenov and Roman Storm was unsealed; Storm was arrested and Semenov remained at large. [1]
OFAC added Semenov to its list of Specially Designated Nationals in coordination with the indictment. [2]
When OFAC removed the Tornado Cash entry, it amended Semenov's entry, dropping one of its two sanctions programmes, and kept him on the list. [3]
A February 2026 press report that the FBI moved Semenov onto its Ten Most Wanted list could not be confirmed from an FBI source; the FBI's white-collar crime wanted page names him.
Confidence: Confirmed. Checked on 23 Oct 2026.
OngoingCriminalReported
United States v. Ostapenko, Oleynik and Tarasov
Blender.io and Sinbad.io
Charged in January 2025; Ostapenko and Oleynik were arrested on 1 December 2024 and Tarasov is at large. No trial, plea or sentence was found up to 23 October 2026.
Court or authority
U.S. District Court for the Northern District of Georgia; in the Netherlands, the FIOD and the Public Prosecution Service (Sinbad.io takedown); OFAC (sanctions)
Roman Vitalyevich Ostapenko, Alexander Evgenievich Oleynik and Anton Vyachlavovich Tarasov, Russian nationals (defendants)
Charges or claims
Conspiracy to commit money laundering and operating an unlicensed money transmitting business
Outcome
None. The charges are allegations.
Next known date
None known.
Why it matters
Two custodial mixers were sanctioned and taken offline before their alleged operators were charged, with OFAC's Blender.io action being its first sanction on a mixer.
Key dates
OFAC sanctioned Blender.io, its first sanctions on a mixer, saying it had processed over $20.5 million of the proceeds of a theft by North Korea's Lazarus Group. [1]
The FIOD and the Dutch Public Prosecution Service took Sinbad.io offline, seizing its servers in the Netherlands and Finland. [2]
OFAC sanctioned Sinbad.io, which it called a key money laundering tool of the Lazarus Group. [3]
The Justice Department release could not be opened in full on 23 October 2026; the arrest and indictment dates come from its search listing and press reports of it. Where the two men are held, and whether they are in US custody, could not be confirmed.
Confidence: Reported. Checked on 23 Oct 2026.
OngoingCriminalReported
United States v. Pavlov
Hydra Market
The US charges against Pavlov, filed in April 2022, are pending with no US court appearance found; in Russia, a Moscow court sentenced Moiseyev to life in December 2024.
Court or authority
U.S. District Court for the Northern District of California; in Germany, the BKA (takedown); in Russia, a Moscow court (trial of the founder and 15 others)
Dmitry Olegovich Pavlov, a Russian resident charged with running the servers that kept Hydra online (defendant in the US); Stanislav Moiseyev and 15 others (defendants in Russia)
Charges or claims
In the US, conspiracy to distribute narcotics and conspiracy to commit money laundering
Outcome
In the US, none: the charges are allegations. In Russia, life imprisonment for Moiseyev.
Next known date
None known.
Why it matters
The Justice Department listed money laundering and mixing services among what Hydra sold, so the case concerns mixing offered inside a darknet market rather than a standalone tool.
Key dates
German authorities shut down Hydra, seizing its servers and about $25 million in bitcoin; the Justice Department announced charges against Pavlov, and OFAC sanctioned Hydra and the exchange Garantex. [1, 2]
A Moscow court sentenced Moiseyev to life in prison and 15 others to terms of 8 to 23 years, Infosecurity Magazine reported on 3 December 2024. [3]
Anatoly Legkodymov, founder and majority owner of the Bitzlato exchange (defendant)
Charges or claims
Operating an unlicensed money transmitting business that handled illicit funds
Outcome
Time served, about 18 months; under the plea agreement he agreed to dissolve Bitzlato.
Next known date
None known.
Why it matters
Bitzlato was an exchange, not a mixer, but its founder was sentenced under the same unlicensed money transmitting statute behind the count on which Roman Storm was convicted and the count to which the Samourai founders pleaded guilty.
The exact days of the arrest and the plea are not given here: the Justice Department release could not be opened in full on 23 October 2026, so they are shown by month.
Confidence: Reported. Checked on 23 Oct 2026.
OngoingCriminal
United States v. Nguyen
ChipMixer
Charged in March 2023 and not in custody, according to the Justice Department at the time; no arrest or court appearance was found up to 23 October 2026.
Court or authority
U.S. District Court for the Eastern District of Pennsylvania; in Germany, the Frankfurt prosecutors' cybercrime unit (ZIT) and the Bundeskriminalamt (BKA)
Minh Quoc Nguyen, a Vietnamese national charged as ChipMixer's operator (defendant)
Charges or claims
Money laundering, operating an unlicensed money transmitting business and identity theft
Outcome
None. The charges are allegations.
Next known date
None known.
Why it matters
A custodial bitcoin mixer was taken down by German and US authorities together, and its alleged operator was charged as an unlicensed money transmitter.
Key dates
German authorities seized ChipMixer's servers and about EUR 44 million in bitcoin, estimating that it had laundered about 154,000 BTC since 2017. [1]
US charges against Nguyen were announced in Philadelphia, with the seizure of two domains and a GitHub account. [2]
Whether anyone was charged: none was found, which is not proof that no one was.
Confidence: Confirmed. Checked on 23 Oct 2026.
How cases are tracked
Statuses
Ongoing
Charges or claims are pending and there is no final outcome. Includes defendants who are at large.
Appeal pending
Decided at first instance, with an appeal pending.
Under investigation
A service was taken down or an inquiry opened, and no charges against anyone have been made public.
Sentenced
Sentence passed, with no appeal pending.
Decided
A civil case decided on its merits, with no appeal pending.
Dismissed
Ended without a ruling on the merits, for example as moot.
Closed
An administrative action that has ended: sanctions lifted, a proposed rule withdrawn or an investigation closed without action.
Types of case
Criminal
Prosecutions and criminal investigations, including takedowns of services by police and prosecutors.
Civil
Lawsuits in which people or organisations challenge the state, such as challenges to sanctions.
Administrative
Actions by government agencies outside the courts: sanctions designations, proposed rules and investigations by regulators.
What is included
Cases in which a court, prosecutor, sanctions authority or regulator acted on a privacy protocol, a mixer, a privacy wallet, non-custodial software or the organisation behind a privacy coin, and a few others that turn on the same offences or on mixing: an exchange prosecuted for unlicensed money transmitting and a darknet market that sold mixing. The 19 cases listed are in the United States, Germany, the Netherlands, Switzerland and Russia. No action by the US Commodity Futures Trading Commission concerning a privacy protocol was found.
Sources and confidence
Each card numbers its documents, and each dated step cites the ones it rests on. Court records, judgments and official releases come first; press reports fill gaps, for example where a court record could not be read. Confirmed: the main facts rest on court records, judgments or official releases (12 cases); Reported: some of what the card says rests on press reports alone (7 cases). Anything that could not be confirmed is listed under its case.
Dates ahead
Every confirmed hearing or deadline is also on the Calendar, which links back to its case here. A case with no date set says so. Dates move: check the linked documents before relying on one.
Each case was checked on the day its card gives; the list as a whole was checked on 23 Oct 2026.
Charges are allegations until proven in court, and a case listed here is not a finding about anyone named in it. Information only, not legal advice.