UK Sanctions Crypto Platform Cryptomus Over Russian Money Laundering
On October 8, 2026, the United Kingdom issued economic sanctions against Cryptomus, a cryptocurrency payment platform, for processing financial transactions that benefit the Russian government and its financial institutions.
The Tech TL;DR:
- The U.K. government sanctioned Cryptomus on October 8, 2026, freezing its bank assets and barring British firms from doing business with it.
- Blockchain analytics firms Chainalysis and TRM Labs report that the platform has processed over $7 billion in transactions since 2022, including funds tied to ransomware and darknet markets.
- Investigators trace the platform’s corporate history through multiple aliases and rebrands, including Certa Payments, Xeltox Enterprises, and Heleket.
Asset Freezes and Business Bans Imposed on October 8
The U.K. government sanctions freeze any assets held by Cryptomus in British banks and prohibit British companies from providing any commercial services to the platform, whether virtual or physical. Alongside Cryptomus, the U.K. targeted several other virtual payment platforms, including VexPay, TokenSpot, and Tsunami Payments. These measures form part of an effort to disrupt financial infrastructure supporting Russia’s wartime economy.
Earlier today, the UK sanctioned three crypto services linked to Russia’s wartime economy. Our data reveals how they fit into a broader illicit financial ecosystem.The UK designated crypto payment processors Cryptomus and Heleket, both operated by parent company Xeltox… pic.twitter.com/jP02BhPKvD
The October 8 action follows earlier regulatory penalties from other jurisdictions. In 2025, Canada levied a CAD $176 million fine against Cryptomus for anti-money laundering violations. However, blockchain analyst Richard Sanders noted on LinkedIn that Canada’s financial penalty proved ultimately uncollectible and did not force the platform to halt operations. In contrast, sanctions can actually halt a cryptocurrency payment processor’s operations.
# Example network isolation rule for blocked payment endpoints
iptables -A OUTPUT -d cryptomus.com -j DROP
iptables -A OUTPUT -d heleket.com -j DROP
Cryptomus Processed Billions in Illicit Transactions
Blockchain telemetry compiled by TRM Labs in April 2026 indicates that Cryptomus has processed more than $7 billion in transactions since launching in 2022. The platform’s transaction ledger includes funds linked to ransomware operators, narcotics vendors, darknet markets, child sexual abuse material distributors, terrorist financing networks, and human trafficking rings.
Chainalysis published a blog post on October 8, 2026, stating that Cryptomus and its related services received more illicit funds across tracked categories than any cryptocurrency mixer in their dataset. According to Chainalysis telemetry, the number of distinct illicit counterparties interacting with the platform surged to more than 900 in a single month in late 2025.
| Metric / Enforcement Action | Cryptomus (Canada Fine) | Cryptomus (U.K. Sanctions) |
|---|---|---|
| Date Issued | 2025 (Exact month unspecified) | October 8, 2026 |
| Enforcement Mechanism | CAD $176 million administrative fine | Asset freeze and commercial ban |
| Operational Impact | Appealed; platform launched parallel no-KYC service | Legally bars British firms from processing transactions |
Corporate Aliases and the Transition to Heleket
Cryptocurrency investigators have mapped multiple corporate rebrands and structural pivots by the platform’s operators. Originally emerging in 2022 under names including Certa Payments and Xeltox Enterprises, the platform instituted stricter know-your-customer (KYC) rules that caused a temporary dip in transaction volume. In response, operators launched a parallel service named Heleket to continue processing transactions without KYC requirements.
When the U.K. sanctions took effect on October 8, users attempting to interact with the platform encountered operational halts. A support bot operating the Cryptomus Telegram bot confirmed on October 8 that the platform was suddenly unable to process transactions.
Disputed Regulatory Frameworks in Western Sahara
Corporate registration records examined during prior investigative reporting reveal that Certa Payments listed its sole shareholder as a 25-year-old Ukrainian woman who also headed WS Management and Advisory Corporation. This corporate entity acts as a self-described regulatory body issuing licenses for cryptocurrency, foreign exchange, and online gaming operations within the disputed northwest African region of Western Sahara.
The official website for this oversight entity, operating at crasadr.com, provides business formation and banking setup assistance. Technical infrastructure analysis shows that one of Certa Payments’ former web domains shared a server with twelve other domains, including rasd-state.ws, which serves as the portal for the Central Reserve Authority of the Western Sahara.
Disclaimer: The technical analyses and security protocols detailed in this article are for informational purposes only. Always consult with certified IT and cybersecurity professionals before altering enterprise networks or handling sensitive data.