Older mixers you could argue could kind of be traced but even then there’d still be difficulty and deniability.

There’s a newer class of privacy mixer though that basically is untraceable. On privacy chains you can’t see the transactions so from an outside perspective it looks like the money just went into a black hole and it wouldn’t show up until it got converted to public again. When it gets converted to public though, it has no connection to the original transaction and could be literally anyone else’s money who used the chain converting to public.

It could take a long time but you could basically just slowly do this and withdraw small enough amounts of money to not raise suspicion. Or do something like start your own coin and pump the price with the stolen funds then cash out the coin. There’s new privacy smart contract chains where this could be done without even signing slightly the stolen funds were used.

It’s kind of a mess.