UK sanctions Cryptomus, Heleket and TokenSpot in 38-designation Russia package
The UK sanctioned three crypto platforms and two payment firms on October 8 for allegedly helping Russia evade financial sanctions, linking them to the Kremlin-backed A7 network and sanctioned exchanges Garantex and Grinex.
Read this event in Türkçe, 한국어, русский, português (Brasil)
Why it matters
The designations freeze UK assets of the named entities and impose internet service restrictions on several payment platforms, expanding Western pressure on crypto infrastructure allegedly used for Russian sanctions evasion. The coordinated action with prior US and EU measures signals increasing regulatory convergence on crypto-related financial crime.
Where the sources disagree
Processing KG ownership
crypto exchanges
Crypto News (CryptoNews.net), CoinGape, Crypto.News, Bitcoin.com News, CoinDesk, Cointelegraph, Crypto.News, Decrypt
crypto payment processors
CryptoPotato
Decrypt reports Processing KG's parent company is Kyrgyzstan's Ministry of Finance, while other sources do not specify ownership.
Key facts
The UK announced 38 new sanctions designations on October 8, 2026 targeting financial services, oil companies, tankers and military suppliers linked to Russia's war in Ukraine.
38 designationsReported by Crypto News (CryptoNews.net)
Xeltox Enterprises Ltd, registered in Canada, was designated for its ownership of Cryptomus and activities linked to Heleket and Certa Payments.
Reported by Crypto News (CryptoNews.net)
TokenSpot, Processing KG, and Tsunami Payments were designated as Kyrgyzstan-based entities, with Processing KG director Ulan Bukabaev also sanctioned individually.
Reported by Crypto News (CryptoNews.net)
TRM Labs assessed with high confidence in April 2026 that Cryptomus and Heleket were operationally linked, sharing infrastructure, personnel, branding and liquidity sources.
Reported by Crypto News (CryptoNews.net)
TRM Labs assessed on October 6, 2026 that TokenSpot operates as a front company for Grinex, identifying six shared TRON addresses and closely timed service interruptions in April.
Reported by Crypto News (CryptoNews.net)
What happened
The UK Foreign, Commonwealth & Development Office announced 38 new designations on October 8 targeting financial services, oil revenue and military suppliers supporting Russia's war in Ukraine. Among them were Canadian-registered Xeltox Enterprises, which operates Cryptomus and Heleket, Kyrgyzstan-based exchange TokenSpot, payment processors Processing KG (VexPay) and Tsunami Payments, and Processing KG director Ulan Bukabaev. The FCDO said two targeted businesses facilitated transactions with A7, a Kremlin-backed network claiming over $90 billion in 2025 volume. TRM Labs linked Cryptomus and Heleket to Garantex flows exceeding $204 million received and $101 million sent, and TokenSpot to over $950 million sent to A7, Grinex and Garantex. Chainalysis separately reported Cryptomus and Heleket received funds from more than 15,000 illicit counterparties, peaking at 900 in a single month in late 2025, and found TokenSpot, Grinex and Meer received over $308 million from an HTX deposit address. The EU previously sanctioned 14 crypto platforms and the US Treasury sanctioned A7 on October 1.
How the story developed
- Update
US Treasury sanctions A7 network
Designation of Kremlin-backed financial network prior to UK action
- Update
TRM Labs assesses TokenSpot as front company for Grinex
October 6 analysis identifies shared TRON addresses, infrastructure and timed service interruptions
- Official statement
UK announces 38 new Russia-related sanctions designations
FCDO publishes notice targeting financial services, oil revenue and military suppliers including crypto platforms
- First report
First report by Crypto News (CryptoNews.net)
UK sanctions crypto platforms suspected of supporting Russian financial networks
- Update
TRM Labs publishes April 2026 analysis linking Cryptomus and Heleket
High-confidence assessment of operational links between Cryptomus and Heleket including shared infrastructure and Garantex transaction flows
- Independent corroboration
Independently corroborated by CoinGape
UK Sanctions Crypto Platforms Over Suspected Links to Russian Finance Networks
- Update
EU extends transaction bans to 14 crypto platforms
July 2026 package covering six jurisdictions precedes UK action
- Update
Chainalysis publishes analysis of illicit flows through Cryptomus, Heleket and TokenSpot
Report identifies 15,000+ illicit counterparties for Cryptomus/Heleket and $308M from HTX address to TokenSpot/Grinex/Meer
- Official statement
Official statement from Bitcoin.com News
UK Sanctions Crypto Exchanges Over Suspected Russia-Linked Evasion
How coverage built up
Independent sources over time, counted the way the consensus panel counts them: a republication of a wire story does not move the line.
- 8 Oct 2026, 15:51 UTC: Crypto News (CryptoNews.net) — 1 independent source, 1 reports
- 8 Oct 2026, 17:33 UTC: CoinGape — 2 independent sources, 3 reports
- 8 Oct 2026, 18:14 UTC: Crypto.News — 3 independent sources, 4 reports
- 9 Oct 2026, 03:05 UTC: Bitcoin.com News, official — 4 independent sources, 5 reports
- 9 Oct 2026, 03:06 UTC: Bitcoin Insider — 5 independent sources, 6 reports
- 9 Oct 2026, 10:14 UTC: CoinDesk — 6 independent sources, 7 reports
- 9 Oct 2026, 10:34 UTC: Cointelegraph — 7 independent sources, 8 reports
- 9 Oct 2026, 12:04 UTC: Decrypt — 8 independent sources, 10 reports
- 9 Oct 2026, 22:16 UTC: CryptoPotato — 9 independent sources, 11 reports
Affected entities
Also mentioned: European Union, TRON, El Salvador, United Arab Emirates, Tether USDt, U.S. Congress, Japan
Original sources
Related events
Kyrgyzstan shuts gold-backed stablecoin USDKG and orders issuer EVA liquidated
Kyrgyzstan has ordered USDKG, its gold-backed stablecoin, shut down and its issuer EVA plus state-owned Coin Nomad Exchange liquidated, citing Cabinet of Ministers Order No. 639-t.
UK crypto trader says armed intruders stole about $800,000 in a knifepoint home invasion
A UK crypto trader posting as 'realist' on X says knife-wielding intruders stole about $800,000 from his home; police have not confirmed the account.
Israeli PM Netanyahu Calls For Blockchain Plan To Counter Potential Economic Sanctions
Bitcoin rebounds from weekend low but stalls near $83K as ETF outflows persist
Bitcoin recovered from a Sunday low of $80,595 to above $83,000 on Monday but lost momentum, while U.S. spot bitcoin ETFs saw continued net outflows.
Russia puts crypto holdings at $44B, warns on losses from foreign stablecoin freezes
Deputy Finance Minister Ivan Chebeskov put resident crypto holdings at 3.7 trillion rubles, about $44 billion, and said investors bear losses if a foreign issuer freezes assets.
Brooklyn DA and FBI Shut Down 241 Crypto Scam Sites, Seize 112 Servers Targeting Russian Speakers
Brooklyn prosecutors and the FBI dismantled a crypto scam network that stole tens of millions from Russian-speaking Americans, seizing 112 servers and shutting down 241 websites.
