Loading article…
Cybercriminals are increasingly using mining pools to obfuscate illicit funds, acting as de facto mixers, according to blockchain analysis firm Chainalysis.
Cybercriminals are increasingly diverting illicit proceeds to cryptocurrency mining pools to obfuscate the origin of their funds, according to blockchain analysis firm Chainalysis. The company reports that these pools, which typically allow miners to combine resources, are being utilized as de facto mixers by malicious actors to create the illusion that funds come from legitimate mining rather than criminal activity [2].
Key takeaways
Mining pools are groups of miners who work together to solve cryptographic problems required by blockchains, a structure created because mining difficulty often became too high for individuals to compete alone [1]. While the primary purpose is to release new cryptocurrency and verify transactions, the process holds appeal for bad actors because it provides a means to acquire money with a clean on-chain original source [3]. Chainalysis notes that in this scenario, the mining pool acts similarly to a mixer, creating the illusion that funds are proceeds from mining rather than from ransomware [2].
Not only ransomware actors but also crypto scammers are using mining pools to launder their funds [2]. The blockchain analysis firm explained that it is possible for ransomware actors to try to pass off their own funds as mining proceeds, even in cases where they are not first moving the funds through a mining pool, by sending them to exchange deposit addresses that receive significant funds from mining pools [2].
Data indicates that tens of millions of dollars’ worth of cryptocurrency have been sent from ransomware addresses to mining pools each quarter over the past year [2]. This flow of funds represents a significant vector for laundering criminal proceeds. Since the start of 2018, 372 specific exchange addresses with heavy exposure to mining pools have received $158 million from ransomware addresses [2]. Chainalysis claims this figure constitutes a large share of the total value sent to all exchanges by all ransomware addresses over that period [2].
This trend highlights a growing challenge for cryptocurrency compliance, as illicit actors seek new methods to bypass traditional detection mechanisms. Chainalysis argues that this is a solvable problem if mining pools and hashing services implement rigorous wallet screening to reject crypto coming from addresses linked to criminal activity [2]. Additionally, the firm suggests that exchanges should more carefully consider the full exposure profile of wallets sending funds to them using publicly available "know your transaction" tools [2].
Coverage is mostly measured — 5 of 5 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
Solo mining involves high variance and the risk of not finding a block for long periods; pools smooth out these revenue streams by sharing rewards proportionally based on contributed hash rate.
Institutional pools provide specialized services such as high-security custody, treasury management, and integration with prime brokers to support large-scale mining operations.
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 3 outlets · Jun 12, 2026 · How we report
The migration of hash rate, particularly away from China, has prompted a focus on stability, security, and the development of mining infrastructure in new regions like the United States.
Industry experts suggest that energy consumption and the use of renewables are more effectively managed at the individual miner level, as mining pools themselves do not consume significant amounts of energy.