[ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented

[smartmixerhelper]

Damn same thing happened to me and I'm a pretty pro user at this. Did you ever get your coin?

I used the .com and the session ID works. If they give me some "phishing URL" excuse, that's gonna be it for me with them I think and I would warn all other people.

Like I said, that user admited himself that he used a phishing website, and it was not even related to CM at all. There was no "excuse".

I had searche doin google and it was the first proposition i did not make a good search, I regret, but next time I will comme here before
Good nightt

Wait for their reply. If you are not satisfied with their answer, you can start a new discussion about what happened if that's what you wish. There are no reasons to jump to hasty conclusions as of now.

He didn't, he mentioned that the other website bitcoinmixer.eu was the scam clone but he didn't mention anything about the chipmixer issue so I'm assuming it got resolved. He was able to load the session ID on chipmixer just like I can so that invalidates the phishing/fake website possibility. Waiting on email back and will report back. Thanks.

[1714242129]

1714242129

[1714242129]

1714242129

[1714242129]

1714242129

[1714242129]

1714242129

[1714242129]

1714242129

[LoyceV]

He was able to load the session ID on chipmixer just like I can so that invalidates the phishing/fake website possibility.

I just tested with a made-up session ID ("aaaaaaaaaahbbbbbbbbbbddddddddddd"), and that works too. It gives a Deposit address. Based on this test, it makes sense any session ID from a phishing website would work too (and it can even give the owner of the phishing website access to your real session).
Alternatively, any phishing site can get a real session ID from the real ChipMixer website and show that on their own phishing website.

[smartmixerhelper]

If they had the session ID, they could just withdraw the coins too though right? I don't know why they would go as far as to rip the data and spoof it and show it visually.

Either way went to .com, I have dozens of other session IDs moving a lot of coins for their support to see as I was moving a lot of coins for about an hour and a half two hours easily. I use their site and other mixers a lot and I'm extremely careful.

For me there would be no excuse. I'm not bummed so much about the amount (0.3 btc) as I am losing a great service I have been relying on.

Just in case they really do try to go the "you went to the wrong site" route, what other methods are great to clean crypto? Pls feel free to dm. Been thinking about checking out tornado and monero etc.

[aesma]

I have a question related to this. I used the site for a couple of days to mix some coins, one session at a time, keeping vouchers, and destroying the session. Then I used it again. On the .com not the .onion (I will next time). What I experienced was that each new session, with timer starting back to the beginning etc., was still the same ID. Probably based on my IP address or my browser or both. Is that normal ?

[jackg]

I have a question related to this. I used the site for a couple of days to mix some coins, one session at a time, keeping vouchers, and destroying the session. Then I used it again. On the .com not the .onion (I will next time). What I experienced was that each new session, with timer starting back to the beginning etc., was still the same ID. Probably based on my IP address or my browser or both. Is that normal ?

I just tried it and I think it did the same for me so I guess it is. Might just be a saved cookie or something because it didn't do it on incognito.

[TryNinja]

What I experienced was that each new session, with timer starting back to the beginning etc., was still the same ID. Probably based on my IP address or my browser or both. Is that normal ?

Yes.

Session token is stored with browser cookie. As long as you have this cookie - you will keep same token.
Cookies can be set to never expire (privacy nightmare), expire after selected time or expire after you close your browser (best privacy).
ChipMixer cookies are set to expire when you close your browser.

When you destroy session data at step 4 - server-side data is destroyed but browser-data (cookies) persist. We can change this to work as expected.

[notblox1]

Is there any option to test how Chipmixer is working with tbtc testnet bitcoin?
I know some some people who are willing to use it but they first want to test it before using mainnet Bitcoin.
If owners or someone else knows about this this please reply here or send me private message if you want.
Thanks.

[smartmixerhelper]

still no reply from them.....

will update as soon as I hear from them.

[aesma]

@TryNinja

Thanks. I never close my browser (it currently takes 22GB of RAM :p) so it makes sense, next time I'll use a dedicated browser. Well that's a given since I will use Tor. Since the data is destroyed on the server then using a new session with the same ID doesn't provide any "safety" regarding eventual problems, anyway.

[smartmixerhelper]

@TryNinja

Thanks. I never close my browser (it currently takes 22GB of RAM :p) so it makes sense, next time I'll use a dedicated browser. Well that's a given since I will use Tor. Since the data is destroyed on the server then using a new session with the same ID doesn't provide any "safety" regarding eventual problems, anyway.

yea I've had same issue and didn't notice and sent coins again to same deposit address and they fixed it for me.

I'm still waiting on this "different deposit address" issue/bug still though. Missing 0.3 bitcoin. Did determine the wallet I was originally given also belongs to them so hopefully its a quick fix.

[smartmixerhelper]

WELP they replied with the typical "that's not our address" BS.

I push through so much bitcoin and I've been using their service dozens of times a day everyday so it sucks I have to find a different service to use now.

I'm 100% sure I didn't go to a scam URL or copy and paste the wrong thing. I always goto the .com site.

Here is the address the site originally instructed me to deposit to:

https://www.blockchain.com/btc/address/1Gj9CbEuoxKnnhsw3xhUNo3v7jnzmQ8WMS

Whoever it is, hasn't moved or used any of the coins sitting there.

Now that I can't trust chipmixer anymore, what software/app implementations are best to clean bitcoin?

I know it's hard to prove outside of a video recorded session, but I'm a VERY big user of mixing sites and so I'm very good with opsec and how I have my environment setup so me personally, I'm convinced I can't trust chipmixer anymore and won't be using them.

Damn such a bummer.

[TryNinja]

Here is the address the site originally instructed me to deposit to:

https://www.blockchain.com/btc/address/1Gj9CbEuoxKnnhsw3xhUNo3v7jnzmQ8WMS

Don't you find weird that this address has already been used 6 times since October? I don't think you can be "100% sure" that this wasn't a mistake on your end.

[smartmixerhelper]

Here is the address the site originally instructed me to deposit to:

https://www.blockchain.com/btc/address/1Gj9CbEuoxKnnhsw3xhUNo3v7jnzmQ8WMS

Don't you find weird that this address has already been used 6 times since October? I don't think you can be "100% sure" that this wasn't a mistake on your end.

I think its actually quite convenient. If I was chipmixer and I was going to selectively scam people, this is exactly what I would do so people like you would say that. It's all about creating a scenario in which it looks "unrealistic" to get away with it. On the contrary, if someone went through all the trouble to try and trick me (whether getting a typo domain or whatever) why would it go to a place that isn't spent? I would just keep these unspent until my full complete exit scam.

I move coins for hours at a time daily. I opened browser, went to chipmixer.com. No typos. I can produce session IDs for 0.3 bitcoin increments for up to 2 hours before this funky one. I probably put 2 bitcoin total that day before I had this issue. Just kept going one after another, just fine. That might've been the problem too, they noticed me doing same amount over and over and decided to keep one.

I'm telling you, I'm the last person to make a mistake like going to a wrong site or having copying and paste hijacked or whatever else there could be.

It's okay, I'm convinced I can't trust this site, I've already moved on. You guys be careful too.

[Welsh]

I hope that's not what they say because it would be typical excuse. I might start video capturing each session now and my trust in them would be lost.

Might be worth noting, depending on what you're using a mixing service for; I'd assume for privacy, video capturing the process could well put that as risk, if there's digital evidence of you using the mixing service if that's something you''re concerned about.

I'm telling you, I'm the last person to make a mistake like going to a wrong site or having copying and paste hijacked or whatever else there could be.

It's okay, I'm convinced I can't trust this site, I've already moved on. You guys be careful too.

I also consider myself pretty adept at security, and I'm probably a lot more cautious in some regards to other people. However, I also have made silly mistakes in the past with security, and I've also got somethings right now that need to be fixed from a security point of view. I don't think anyone is perfect. A lot of people like to mitigate going to a wrong address by using bookmarks, that might be something to consider as even when reading out what you've typed, your eyes can play tricks on you just as much as your hand coordination while typing it can. Although, I personally don't like the bookmark method, since that definitely isn't foolproof, and introduces a complacency aspect that I'm not comfortable with. 

There's been many customers over the years of Chipmixer, both larger, and smaller deposits. I personally believe there would be more incidents like yours if they were the culprit. It is very likely, that you made a mistake, as opposed to their system messing up which has been trialed by thousands of people over a course of a few years.

[smartmixerhelper]

I hope that's not what they say because it would be typical excuse. I might start video capturing each session now and my trust in them would be lost.

Might be worth noting, depending on what you're using a mixing service for; I'd assume for privacy, video capturing the process could well put that as risk, if there's digital evidence of you using the mixing service if that's something you''re concerned about.

I'm telling you, I'm the last person to make a mistake like going to a wrong site or having copying and paste hijacked or whatever else there could be.

It's okay, I'm convinced I can't trust this site, I've already moved on. You guys be careful too.

I also consider myself pretty adept at security, and I'm probably a lot more cautious in some regards to other people. However, I also have made silly mistakes in the past with security, and I've also got somethings right now that need to be fixed from a security point of view. I don't think anyone is perfect. A lot of people like to mitigate going to a wrong address by using bookmarks, that might be something to consider as even when reading out what you've typed, your eyes can play tricks on you just as much as your hand coordination while typing it can. Although, I personally don't like the bookmark method, since that definitely isn't foolproof, and introduces a complacency aspect that I'm not comfortable with. 

There's been many customers over the years of Chipmixer, both larger, and smaller deposits. I personally believe there would be more incidents like yours if they were the culprit. It is very likely, that you made a mistake, as opposed to their system messing up which has been trialed by thousands of people over a course of a few years.

no bookmarks and even that would be arguing for my point as I had like 12, 13 sessions in a row for close to 2 hours just fine right before this issue. the ONLY way would've been for me to mistype the domain and for me to not realize it, even though I make a conscious effort to look at the URL every single time. I have a good protocol that I go through when mixing.

and that's the thing, there was another guy that mentioned this exact issue earlier, deposit address got swapped literally 2 pages before me. in fact I've looked through about 40 of these pages and there are a handful of people that mention the exact same thing and they all gave up / disappeared with no official feedback. for example if you look at the last guy like 2 pages back, he mentions he had the same issue on chipmixer site and also another bitmixer.eu site too. they clear up that the bitmixer.eu issue was indeed a scam site but the original issue of his coins going missing on the chipmixer site never gets addressed, its like oddly brushed away.

like I said, I would be skeptical if I was you guys too but my sole purpose of this post is to share what my experience was. after all, it all starts with the first warning post right? and even if this scares chipmixer into doing it with less frequency or not do it all together, its worth that alone so.

[LoyceV]

Here is the address the site originally instructed me to deposit to:

https://www.blockchain.com/btc/address/1Gj9CbEuoxKnnhsw3xhUNo3v7jnzmQ8WMS

Don't you find weird that this address has already been used 6 times since October? I don't think you can be "100% sure" that this wasn't a mistake on your end.

I think its actually quite convenient. If I was chipmixer and I was going to selectively scam people, this is exactly what I would do so people like you would say that. It's all about creating a scenario in which it looks "unrealistic" to get away with it.

From what I've seen, it's much more likely you just somehow used the wrong website. There are several phishing sites out there.

I had like 12, 13 sessions in a row for close to 2 hours just fine right before this issue. the ONLY way would've been for me to mistype the domain and for me to not realize it, even though I make a conscious effort to look at the URL every single time.

Making a small typo once every few hours doesn't sound too far fetched
Can you check your browser history, or do you instantly delete everything?

[smartmixerhelper]

Here is the address the site originally instructed me to deposit to:

https://www.blockchain.com/btc/address/1Gj9CbEuoxKnnhsw3xhUNo3v7jnzmQ8WMS

Don't you find weird that this address has already been used 6 times since October? I don't think you can be "100% sure" that this wasn't a mistake on your end.

I think its actually quite convenient. If I was chipmixer and I was going to selectively scam people, this is exactly what I would do so people like you would say that. It's all about creating a scenario in which it looks "unrealistic" to get away with it.

From what I've seen, it's much more likely you just somehow used the wrong website. There are several phishing sites out there.

I had like 12, 13 sessions in a row for close to 2 hours just fine right before this issue. the ONLY way would've been for me to mistype the domain and for me to not realize it, even though I make a conscious effort to look at the URL every single time.

Making a small typo once every few hours doesn't sound too far fetched
Can you check your browser history, or do you instantly delete everything?

How do you think I went to the wrong website? I'm using safari and typing in chipmixer.com. I was using the site for about 2 hours and had over a dozen sessions or so before I ran into this issue.

I always glance at the URL bar to make sure the https is showing, I'm telling you guys, there was no typo. I know you guys really really want me to have made a typo or gone to a phishing website but 100% sure that did not happen.

If anyone wants to PM me, I can show you and give you session IDs for all the sessions I had just fine with it before. I mix coins for several hours daily everyday and have been for years. If anyone can message me and help me with cleaning/mixing coins now that I won't be using chipmixer, that would be great.

[malevolent]

no bookmarks and even that would be arguing for my point as I had like 12, 13 sessions in a row for close to 2 hours just fine right before this issue. the ONLY way would've been for me to mistype the domain and for me to not realize it, even though I make a conscious effort to look at the URL every single time. I have a good protocol that I go through when mixing.

and that's the thing, there was another guy that mentioned this exact issue earlier, deposit address got swapped literally 2 pages before me. in fact I've looked through about 40 of these pages and there are a handful of people that mention the exact same thing and they all gave up / disappeared with no official feedback. for example if you look at the last guy like 2 pages back, he mentions he had the same issue on chipmixer site and also another bitmixer.eu site too. they clear up that the bitmixer.eu issue was indeed a scam site but the original issue of his coins going missing on the chipmixer site never gets addressed, its like oddly brushed away.

Are you sure you didn't type in "chipmixer" but with a different TLD at the end?

As for the other person, if he fell for one scam, it's possible he fell for another one (phishing, malware), too.

like I said, I would be skeptical if I was you guys too but my sole purpose of this post is to share what my experience was. after all, it all starts with the first warning post right? and even if this scares chipmixer into doing it with less frequency or not do it all together, its worth that alone so.

Sure.

[smartmixerhelper]

no bookmarks and even that would be arguing for my point as I had like 12, 13 sessions in a row for close to 2 hours just fine right before this issue. the ONLY way would've been for me to mistype the domain and for me to not realize it, even though I make a conscious effort to look at the URL every single time. I have a good protocol that I go through when mixing.

and that's the thing, there was another guy that mentioned this exact issue earlier, deposit address got swapped literally 2 pages before me. in fact I've looked through about 40 of these pages and there are a handful of people that mention the exact same thing and they all gave up / disappeared with no official feedback. for example if you look at the last guy like 2 pages back, he mentions he had the same issue on chipmixer site and also another bitmixer.eu site too. they clear up that the bitmixer.eu issue was indeed a scam site but the original issue of his coins going missing on the chipmixer site never gets addressed, its like oddly brushed away.

Are you sure you didn't type in "chipmixer" but with a different TLD at the end?

As for the other person, if he fell for one scam, it's possible he fell for another one (phishing, malware), too.

like I said, I would be skeptical if I was you guys too but my sole purpose of this post is to share what my experience was. after all, it all starts with the first warning post right? and even if this scares chipmixer into doing it with less frequency or not do it all together, its worth that alone so.

Sure.

I always type in the dot com

[ChipMixer]

Here is the address the site originally instructed me to deposit to:

https://www.blockchain.com/btc/address/1Gj9CbEuoxKnnhsw3xhUNo3v7jnzmQ8WMS

Don't you find weird that this address has already been used 6 times since October? I don't think you can be "100% sure" that this wasn't a mistake on your end.

I think its actually quite convenient. If I was chipmixer and I was going to selectively scam people, this is exactly what I would do so people like you would say that. It's all about creating a scenario in which it looks "unrealistic" to get away with it. On the contrary, if someone went through all the trouble to try and trick me (whether getting a typo domain or whatever) why would it go to a place that isn't spent? I would just keep these unspent until my full complete exit scam.

Unrealistic theory fits when you are sure who is guilty and you want proofs to confirm it.

Your theory is - since October ChipMixer selectively scam users by serving special address before they decide how much they want to deposit. 5 out of 7 transactions to this address are under 3 mBTC. 1 transaction is even lower than 1 mBTC. All that while paying around 10 BTC (since October) for signature campaign at BCT.

More realistic theory is that you are using Tor while accessing .com:

Attention:

At least one Tor exit node serves chipmixer.com as plain-text stripping SSL encryption and replacing deposit address with their own.

If you use Tor - please use Tor link: http://chipmixerwzxtzbw.onion/

This message was posted in July.

More about Tor exit nodes: https://medium.com/@nusenu/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac