[ANN] BitMixList.org - XMR <=> BTC - AML Score Checker - Bitcoin Mixer List

[Forsyth Jones]

The AML checker is working again.

A few important changes:

- I have switched the old backend to Quicknode + MistTrack. This has the side effect of making AML checks return instantly.
-- This is also very expensive, so prices have been increased to 500 sats per check (up from 100). At current prices this is about $3.5 for 10 checks and $35 for 100 checks.
- You can now see a label for the address if it exists in the MistTrack database.

This new backend allows me to create an AML checker API. This is coming soon but there is no timeline for this feature.

Just letting you all know that Reumix should be delisted, 100% confirmed exit scam, all the details are in the ALTT ANN thread

and I was one of the victims.

[NotATether]

Just letting you all know that Reumix should be delisted, 100% confirmed exit scam, all the details are in the ALTT ANN thread

and I was one of the victims.

Removed, thanks.


BTW: the AML endpoint can also check Ethereum, BSC, and Tron addresses. I just haven't implemented support for these yet.

So it will hopefully help people inspect an even wider range of addresses.

[NotATether]

To prevent scams form being listed in the future, I am now charging a listing fee of $500 for exchanges and $1000 for mixers.

The fee will be used to test the service and also as a deterrence to entry-level scammers.

[bitmover]

To prevent scams form being listed in the future, I am now charging a listing fee of $500 for exchanges and $1000 for mixers.

The fee will be used to test the service and also as a deterrence to entry-level scammers.

It is great that your service is so popular can companies will pay to get listed.

Congratulations,  good job NotATether.

This is also great that it increases the cost for scammers. I hope this prevents people from using services not listed. At least forum users

[examplens]

To prevent scams form being listed in the future, I am now charging a listing fee of $500 for exchanges and $1000 for mixers.

The fee will be used to test the service and also as a deterrence to entry-level scammers.

Such an approach makes you non-objective, thus making the list unreliable. Only services that are willing to pay and buy "trust" will be listed. We have seen too many scam projects that, over time, invested in promotion and gaining a reputation, only to turn into a scam at some point.
Recent examples like Reumix, cointor... They paid and were rewarded so that after gaining some kind of reputation, they would leave with the first larger orders.
$1000 for one mixer is not a lot of money, if it will help them reach their goal.

[dkbit98]

To prevent scams form being listed in the future, I am now charging a listing fee of $500 for exchanges and $1000 for mixers.

The fee will be used to test the service and also as a deterrence to entry-level scammers.

Was listing new services on BitMixList website free before this announcement?
I have nothing against charging a fee if you want, but $500 or $1000 won't stop anyone from scamming.
All they need is to collect more money with their shady service than they paid you, and they will be gone with the wind...

[NotATether]

Was listing new services on BitMixList website free before this announcement?
I have nothing against charging a fee if you want, but $500 or $1000 won't stop anyone from scamming.
All they need is to collect more money with their shady service than they paid you, and they will be gone with the wind...

Previously, I would receive recommendations from my campaign manager friends, or I would simply wait for a few months after a service made an ANN thread before adding them.

Bitmixlist somehow got around a 5x spike in traffic recently, so it's not totally beyond the realm of possibility that it becomes a rendezvous for finding services, which would enable larger listing fees for whatever reason. Not that I'm thinking about that currently.

The funds are used to test the exchanger over several pairs to make sure the site is working.

Small-time scammers who want to pull a fast one will be put off by such a fee, especially since it's larger for mixers.

Also, I don't collect a fee to list coordinators or the P2P sites, as well as the instant exchangers (I only collect the subset supported by OrangeFren).

[Trêvoid]

Hello good day NotATether, I hope you’re doing well. It’s been a while since we last talked.

I wanted to get straight to the point. I’ve been doing some OSINT and research came across information about a Russian scammer who previously owned jud-ex(.)com and darkmap(.)cc

You can find scam reports about those sites online.

https://bitcointalk.org/index.php?topic=5576584.0
https://bitcointalk.org/index.php?topic=5570619.0
https://carigold.com/forum/threads/jud-ex-com-cryptocurrency-exchange-service.709663/post-27651833
https://www.okchanger.com/exchangers/Jud-ex-com

I noticed that you’ve listed byware(.)net, and based on what I’ve found, there are similarities between those scam sites and byware(.)net. It could be still same individual operates multiple websites using a similar system (Swap API) handling swaps normally in most cases, but selectively scamming users on large transactions. Unfortunately, one of my clients was also a victim. I’ll keep researching and do my best to warn people so they don’t fall for these scams.

nokyc-noaml(.)cc
byware(.)net

I’d suggest adding a visible warning or banner advising users to avoid large swaps, or just deleting them - just to be safe.

Thank you for looking into this.

Regards,
Trêvoid

[NotATether]

I’d suggest adding a visible warning or banner advising users to avoid large swaps, or just deleting them - just to be safe.

I'll add a large warning. People should not be performing large transactions on any exchange or mixer in the first place.

[ByWaRe]

Hello good day NotATether, I hope you’re doing well. It’s been a while since we last talked.

I wanted to get straight to the point. I’ve been doing some OSINT and research came across information about a Russian scammer who previously owned jud-ex(.)com and darkmap(.)cc

You can find scam reports about those sites online.

https://bitcointalk.org/index.php?topic=5576584.0
https://bitcointalk.org/index.php?topic=5570619.0
https://carigold.com/forum/threads/jud-ex-com-cryptocurrency-exchange-service.709663/post-27651833
https://www.okchanger.com/exchangers/Jud-ex-com

I noticed that you’ve listed byware(.)net, and based on what I’ve found, there are similarities between those scam sites and byware(.)net. It could be still same individual operates multiple websites using a similar system (Swap API) handling swaps normally in most cases, but selectively scamming users on large transactions. Unfortunately, one of my clients was also a victim. I’ll keep researching and do my best to warn people so they don’t fall for these scams.

nokyc-noaml(.)cc
byware(.)net

I’d suggest adding a visible warning or banner advising users to avoid large swaps, or just deleting them - just to be safe.

Thank you for looking into this.

Regards,
Trêvoid

We have absolutely nothing to do with what you described in this post!

We use a platform that may look similar to another one, but that doesn’t mean that if someone took certain actions, it has anything to do with us. Using engines for exchange platforms is standard practice, and we naturally conducted a full audit of the site before launching it.

It seems as though you're trying to eliminate your exchange's competitors this way, but that's not very nice of you.

Therefore, please do not tarnish our reputation with mere assumptions.

[Trêvoid]

I’d suggest adding a visible warning or banner advising users to avoid large swaps, or just deleting them - just to be safe.

I'll add a large warning. People should not be performing large transactions on any exchange or mixer in the first place.

Hello good day NotATether, you may check details.

https://bitcointalk.org/index.php?topic=5578174

[NotATether]

Hello good day NotATether, you may check details.

https://bitcointalk.org/index.php?topic=5578174

If their account has been banned from Bitcointalk, it is probably better I delist them for safety reasons.

BTW, what was the reason for the ban? I couldn't find it in any topic.

[NoKYC-NoAML.CC]

Hello good day NotATether, you may check details.

https://bitcointalk.org/index.php?topic=5578174

If their account has been banned from Bitcointalk, it is probably better I delist them for safety reasons.

BTW, what was the reason for the ban? I couldn't find it in any topic.

The reason ByWare was blocked is this thread:
https://bitcointalk.org/index.php?topic=5578174
In it, two users, Trêvoid and albon, started spreading rumors. They also filed complaints against ByWare, citing this thread.

Please read this thread to the end; I explained everything in detail there, and you’ll see that Trêvoid and albon are just gossipmongers who slandered us without presenting any evidence.

[albon]

If their account has been banned from Bitcointalk, it is probably better I delist them for safety reasons.

BTW, what was the reason for the ban? I couldn't find it in any topic.

I suspect you didn't take enough time to read the full case so let me summarize it for you (refer to posts #2 and #4).

The reason this account was banned is that it promoted byware(.)net claims on its own website to have been operating since 2015...However, WHOIS records show the domain was registered only 10 days ago.

On top of that, the account that promoted this domain was created in 2018 remained completely dormant for nearly 4 years [from April 2020 until March 2026] It was suddenly reactivated with a password change just before the promotion began -> This is a classic indicator of a hacked or bought account..

It was proven that byware(.)net and nokyc-noaml(.)cc used the same script and the same language layouts, and the same ToS and FAQ pages, literally with no changes except for the logo. The most critical evidence linking them was the shared Yandex Metrika ID found in the source code of both sites. Once I exposed this technical evidence the scammer rushed to delete the Yandex Metrika code to hide their tracks. ^{[BTW, nokyc-noaml(.)cc is currently offline.]}

Too bad for them, I’ve already archived everything. You can still check the original evidence in my previous links.

[NoKYC-NoAML.CC]

I suspect you didn't take enough time to read the full case so let me summarize it for you (refer to posts #2 and #4).

The reason this account was banned is that it promoted byware(.)net claims on its own website to have been operating since 2015...However, WHOIS records show the domain was registered only 10 days ago.

On top of that, the account that promoted this domain was created in 2018 remained completely dormant for nearly 4 years [from April 2020 until March 2026] It was suddenly reactivated with a password change just before the promotion began -> This is a classic indicator of a hacked or bought account..

It was proven that byware(.)net and nokyc-noaml(.)cc used the same script and the same language layouts, and the same ToS and FAQ pages, literally with no changes except for the logo. The most critical evidence linking them was the shared Yandex Metrika ID found in the source code of both sites. Once I exposed this technical evidence the scammer rushed to delete the Yandex Metrika code to hide their tracks. ^{[BTW, nokyc-noaml(.)cc is currently offline.]}

Too bad for them, I’ve already archived everything. You can still check the original evidence in my previous links.

NotATether, before you let albon spoon-feed you his version of events, read thread https://bitcointalk.org/index.php?topic=5578174.0 from start to finish.

What albon is doing is not investigation. It is gossip laundering.

He keeps recycling his own early accusations from that thread and presenting them as if the matter had already been proven, while quietly steering people away from the later replies where his claims were answered point by point. That is not evidence-gathering. That is what a rumor peddler does when the full context does not help his story.

The one fact that was openly acknowledged there is simple: ByWaRe and NoKYC-NoAML used the same engine, which is why the two sites had a similar structure. That was never hidden. But neither ByWaRe nor NoKYC-NoAML was shown there to be involved in fraudulent activity, and neither of those two sites was shown to have any proven connection to the scam sites dragged into the original accusation. Albon keeps trying to inflate “same engine” into “same scam network” because his entire narrative falls apart the moment facts are separated from his theatrics.

That is why he keeps dragging people back to his own selected posts instead of telling them to read the whole thread. He is not trying to clarify the facts for you - he is trying to control which facts you see. That is manipulation, not credibility.

So if you actually want the truth rather than albon’s edited-for-effect version, read the entire thread https://bitcointalk.org/index.php?topic=5578174.0, including the later replies he would clearly prefer you not to read. Otherwise you are not being shown a case at all - you are being handed a selectively edited smear campaign by someone who keeps mistaking gossip, distortion, and repetition for proof.

[NotATether]

Notice of contact email change

In the beginning, when running BitMixList, I listed the email address admin@notatether.com for email contact.

For a better style and a more professional appearances, the primary email address will change to admin@bitmixlist.org on May 1st.

The old email address can still be used for correspondence if you already have it, but the new email will be the preferred address going forward.

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On May 1st, the primary contact email will change from admin@notatether.com to admin@bitmixlist.org.
-----BEGIN PGP SIGNATURE-----
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=kKKF
-----END PGP SIGNATURE-----

Thanks to @Etranger for the Russian translation of BitMixList.

[NotATether]

Major redesign has been published

This new design for BitMixList prioritizes service discovery and comparison, and provides separate pages for each directory service. The navigation bar has been re-worked to optimize finding services quickly, while support information, bots, PGP public keys and domain verification have been embedded for each entry.

Coordinators now show coinjoin statistics from Wabisator, with config posted in JSON.

A new search bar enables users to find blog posts quickly.

The AML checker also got a redesign - soon, we will roll out a new payment gateway with Monero support.

Exciting possibilities are on the horizon, and as always, thank you for using BitMixList.

[Trêvoid]

Major redesign has been published

This new design for BitMixList prioritizes service discovery and comparison, and provides separate pages for each directory service. The navigation bar has been re-worked to optimize finding services quickly, while support information, bots, PGP public keys and domain verification have been embedded for each entry.

Coordinators now show coinjoin statistics from Wabisator, with config posted in JSON.

A new search bar enables users to find blog posts quickly.

The AML checker also got a redesign - soon, we will roll out a new payment gateway with Monero support.

Exciting possibilities are on the horizon, and as always, thank you for using BitMixList.

Great!

But site has been flagged

bitmixlist.org is blocked!

Phantom believes this website is malicious and unsafe to use.

This site has been flagged as part of a community-maintained database of known phishing websites and scams. If you believe the site has been flagged in error, please file an issue.

Ignore this warning, take me to http://bitmixlist.org/ anyway.

[NotATether]

Great!

But site has been flagged

bitmixlist.org is blocked!

Phantom believes this website is malicious and unsafe to use.

This site has been flagged as part of a community-maintained database of known phishing websites and scams. If you believe the site has been flagged in error, please file an issue.

Ignore this warning, take me to http://bitmixlist.org/ anyway.

I have been made aware of this. I'm going to open an issue today or tomorrow.

Edit: It looks like the domain is not even inside the blocklist at https://github.com/phantom/blocklist ?

So given that this is correct, as multiple people have reported this problem to me, where is the actual blocklist they placed the domain in?

To reach Phantom support, I had to argue with an AI for 5 minutes, but the ticket has finally been created by email and we'll see what happens from there.

Update: the site is no longer flagged since a couple of hours ago

[Trêvoid]

https://bitcointalk.org/index.php?topic=5584545.0

Tomboi exchange - SCAM 100K$

Please delist them from your sites.