Begin with the concept
What is a cryptocurrency mixer?
A mixer is a service or protocol designed to make transaction flows harder to follow by pooling or otherwise separating deposits from withdrawals. Some people use privacy tools for lawful reasons. The same features can also be used to obscure proceeds from theft, ransomware, fraud, sanctions evasion, or other illicit activity.
That dual-use context is why an interaction belongs in enhanced due diligence rather than an automatic conclusion. The event can help an analyst decide what questions to ask, but it cannot explain the customer's purpose on its own.
Keep historical facts in their period
Tornado Cash: designation, court review, and delisting
In August 2022, the U.S. Treasury designated Tornado Cash and stated that more than $455 million stolen by the DPRK-linked Lazarus Group had been laundered through it. That figure and designation belong to Treasury's public record for that period. Read Treasury's 2022 designation.
In November 2024, the U.S. Court of Appeals for the Fifth Circuit held that the immutable smart contracts at issue were not sanctionable property under the statute. Read the court's opinion.
Treasury removed the economic sanctions against Tornado Cash in March 2025. That changed current OFAC status; it did not erase the historical designation or the existence of recorded on-chain interactions. Read Treasury's delisting notice.
Address-level evidence
What a mixer interaction result contains
Eagle Virtual surfaces recorded interactions involving the submitted address and covered mixer contracts. The fields describe the public event; they do not turn it into an allegation.
Address and network
Confirm which submitted address and supported blockchain network are associated with the recorded event.
Direction or role
Review whether the address sent to or received from the covered contract, with the role or direction shown where available.
Public event reference
Use the available transaction, chain position, pool, asset, amount, and timestamp fields to understand what was recorded.
Designation context
Keep a protocol's current sanctions status separate from its historical status and from the address's recorded interaction.
Current Eagle Virtual mixer coverage includes recorded Tornado Cash pool interactions on Ethereum and Polygon. Check the supported-network and product coverage pages when a decision depends on a particular chain or evidence dimension.
Interpretation limits
What the event does not establish
No purpose or intent
The interaction does not establish why the customer used a privacy service or whether the use was lawful or unlawful.
No linked deposit and withdrawal
One side of a recorded interaction does not establish which withdrawal corresponds to a deposit or who controlled another address.
No fund-following or clustering
The result does not trace assets after the event, group wallets into one owner, or attribute a counterparty.
No automatic disposition
Eagle Virtual supplies the available evidence. The customer applies its policy, reviews context, and decides the next step.
Enhanced due diligence
Questions for a source-of-funds review
Use the recorded interaction to test the customer's explanation and documents, not to replace them. Relevant questions can include:
Purpose and expected activity
Is privacy-service use consistent with the customer's stated business, personal purpose, geography, and expected transaction pattern?
Source and ownership
What is the stated source of the assets, who controlled the submitted address, and what documentation supports that explanation?
Timing, amount, and sequence
How does the event relate to the transaction under review, and what does the broader sequence show without assuming relationships the evidence does not establish?
Escalation and recordkeeping
Does the organization's policy call for more information, second-line review, monitoring, restriction, or another documented action?
Operational fit
Screen, review, route, and monitor
In Eagle Eye Report, mixer use is kept separate from government sanctions and stablecoin-company control actions. Review the recorded interaction, route it under the customer's procedure, and monitor selected addresses when continued observation is appropriate.
The same evidence can support implemented web, API, CSV, report, Slack, and email workflows. Delivery format does not change the interpretation limit: a recorded interaction is still an indicator for review, not a conclusion.
Questions compliance teams ask
Mixer interaction review FAQ
What is a recorded mixer interaction?
A recorded mixer interaction is a public on-chain event showing that the submitted address interacted with a covered mixer or privacy-service contract. It is address-level evidence for review and does not establish why the service was used.
Does a mixer interaction establish wrongdoing?
No. A recorded interaction does not establish purpose, intent, ownership, a linked deposit and withdrawal, or wrongdoing. It should be compared with customer purpose, expected activity, source-of-funds information, timing, amount, and the broader transaction sequence.
Is Tornado Cash currently designated by OFAC?
The U.S. Treasury removed the economic sanctions against Tornado Cash in March 2025. The former designation and a recorded address interaction remain separate historical facts. Reviewers should verify the current official source when sanctions status matters to a decision.
Does Eagle Virtual follow funds through a mixer?
No. Eagle Virtual surfaces a recorded interaction involving the submitted address. It does not link a deposit to a withdrawal, trace onward funds, cluster wallets, or attribute a counterparty.
How should a source-of-funds team use mixer interaction evidence?
Use the event to focus the review: confirm the address, network, direction or role where available, timing, and source; then compare those facts with the customer's explanation and supporting documents under the organization's procedure.
Authority and court record
Primary sources
Continue learning