Did Using eXch Before the 2025 Takedown Flag My Coins as Dirty?

By Alexandr Kerya · · 6 min read

TL;DR - Using eXch before its May 2025 seizure does not automatically make your coins illegal, but exchanges and analytics firms now treat eXch activity as a high-risk laundering signal, so your deposits may be held or flagged.

If you swapped coins through eXch in the months before it was shut down, you may be worried that those funds are now marked. The service spent years selling itself as a way to move crypto privately, then collapsed in a high-profile police seizure tied to one of the largest crypto thefts ever. That history is exactly what makes counterparties cautious about anything that touched it. What matters for you is not the headline but where your specific coins sit relative to the dirty flows that ran through the platform.

What was eXch and why did it get shut down?

eXch was a no-KYC instant swap service that let users trade one cryptocurrency for another without creating an account or verifying identity. It marketed itself on privacy and on not keeping records, which made it attractive to people who wanted to move coins without leaving a paper trail. That same design made it a favored venue for laundering stolen funds.

Its reputation turned terminal after the February 2025 Bybit hack, a theft of roughly $1.5 billion in crypto that investigators have attributed to North Korea's Lazarus Group. Blockchain analysts traced a large share of those proceeds through eXch, with one widely cited estimate from Elliptic putting the figure near $200 million. In late April 2025 the operators announced the service would close, and German authorities seized its server infrastructure, taking roughly 8 terabytes of data and about 34 million euros in crypto.

The rise and fall of eXchNo-KYC swapperprivacy, no recordsBybit fundslaundered via eXchShutdownannounced April 2025SeizedGerman police, May 2025
eXch went from a privacy-branded swap service to a police seizure tied to the Bybit theft.

Does using eXch make my coins dirty?

Not by itself. Swapping coins through eXch is not a crime, and plenty of people used it for ordinary privacy reasons without touching any stolen money. The phrase dirty coins describes funds that carry exposure to illicit activity, and exposure is measured by what actually flowed into your wallet, not by which service you happened to use.

The problem is that risk scoring does not see your intent. It sees a counterparty that is now strongly associated with laundering. If your coins came out of eXch shortly after stolen funds went in, an analytics tool may register your wallet as having close exposure to those flows. If your activity sat far from the tainted batches, the exposure can be faint or absent. Either way, the eXch label alone raises the odds that a compliance system pauses to look closer.

Why doesn't eXch's "won't be flagged" claim hold up?

eXch promoted the idea that coins passing through it could not be traced or flagged. On a public blockchain that claim was never realistic. Every swap leaves an on-chain record, and forensic firms reconstruct the path of funds across services by clustering addresses and following value, even when an intermediary keeps no logs of its own.

After the seizure, investigators also gained the platform's internal data, which only sharpened that tracing. Firms such as TRM Labs and Elliptic have continued to map eXch-linked flows, and exchanges now commonly treat deposits with eXch in their recent history as elevated risk. The marketing promise of invisibility did not survive contact with how screening actually works.

How do I check if my wallet is exposed to eXch?

You can start by reviewing your own transaction history on a block explorer such as Etherscan, looking for transfers to or from addresses associated with the service. That manual approach has limits: it shows direct transfers but will not reveal indirect exposure that sits a hop or two away, and matching addresses to a defunct service by hand is slow and error-prone. Screen your wallet with Plastron to check it against known high-risk services and trace multi-hop exposure across Ethereum and six more EVM chains in one pass.

Exposure comes in two shapes. A direct hit means coins moved straight between your wallet and an eXch-linked address. Indirect exposure means tainted funds reached you through one or more intermediary wallets, which can still raise a flag even though your address never touched the service directly. Our guide on how many hops from a flagged address still flag your wallet explains how distant a link can be and still matter.

Direct versus indirect eXch exposureDirect exposureeXch-linkedYour walletIndirect exposure (2 hops)eXch-linkedPass-throughYour wallet
A direct hit puts an eXch-linked address in your history; indirect exposure reaches you through a clean-looking intermediary.

What should I do if I used eXch?

First, screen the wallet so you know whether you have real exposure and how close it is. A clean result is common and worth confirming before you worry. If you do find exposure, gather records that show where your coins came from and why you used the service, since documented, lawful source of funds is your strongest defense if an exchange asks questions.

If you plan to deposit affected coins to a regulated exchange, expect that a review or temporary hold is possible, and be ready to explain the history calmly. Our guide on what tainted or dirty coins really mean covers how to think about that risk, and the sanctioned-exchange checklist for Garantex walks through a similar situation step by step.

FAQ

Is it illegal to have used eXch?

No. Using a no-KYC swap service is not itself a crime in most jurisdictions. The legal risk comes from the source of the funds you moved, not from the service you chose, though heavy laundering history makes any eXch activity a stronger compliance signal.

Will my exchange definitely freeze a deposit that came through eXch?

Not necessarily. Whether a deposit is held depends on your exposure and the exchange's risk thresholds. Faint or distant exposure may pass without notice, while close ties to known stolen funds are far more likely to trigger a review.

Can analysts still trace coins now that eXch is offline?

Yes. The on-chain record of every swap remains permanent, and the seizure handed investigators the platform's internal data. Coins are arguably easier to trace now than while the service was running.

What if my exposure to eXch is only indirect?

Indirect exposure can still raise a flag, but it usually carries less weight than a direct transfer. The number of hops and the amount involved both affect how a screening tool scores it, so a distant link may have little practical impact.

Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.

About Plastron

Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.

How Plastron works and who runs it →

Keep reading

How to Check If Your Wallet Is Exposed to Lazarus Group (North Korea) CryptoHow to Check If Crypto You Received Came From a Sanctioned Exchange Like GarantexIs My Crypto Tainted? What Dirty Coins Really MeanWhy Adverse Media Screening Catches What Sanctions Lists Miss