The US sanctions Sinbad, a crypto mixer allegedly used by the North Korean Lazarus hacking group, and the US, the Netherlands, and Poland seize the service
The U.S. Department of the Treasury has sanctioned the Sinbad cryptocurrency mixing service for its use as a money-laundering tool by the North Korean Lazarus hacking group.
Context & Ripple Effects
Sinbad had already been identified in related coverage as a Bitcoin mixer that appeared to become a preferred laundering outlet for North Korean hackers. The seizure turns that earlier scrutiny into an operational disruption, not just an allegation.
The action extends a Treasury enforcement sequence that began with the first US sanctions against a crypto mixer and continued with sanctions on Tornado Cash and associated wallets. It also pairs financial restrictions with coordinated action by the US, Netherlands, and Poland.
First-order effects
- Sinbad faces both US sanctions and a multinational seizure, immediately disrupting access to the service and raising compliance risk for parties that interact with it.
- Treasury gains another enforcement action aimed at alleged Lazarus-linked laundering infrastructure, while the participating European authorities become direct partners in its removal.
Second-order effects
- Other mixers and crypto businesses serving as transaction intermediaries face stronger incentives to screen for sanctioned exposure and reassess whether their controls can withstand enforcement scrutiny.
- The combined sanctions-and-seizure approach gives authorities a more forceful template than designation alone when a service’s infrastructure or operations can be reached across borders.
Third-order effects
- If this enforcement pattern persists, crypto’s privacy and liquidity infrastructure will be judged increasingly by its ability to prevent illicit use, widening the sector’s crypto legitimacy gap between compliant services and tools treated as laundering conduits.
- The case points toward sanctions enforcement that treats cross-border technical infrastructure as a shared law-enforcement target; its durability will depend on continued international cooperation and the ability to identify replacement services.
The trend: Governments are moving from sanctioning alleged illicit crypto intermediaries to pairing financial designations with coordinated infrastructure seizures.