Cryptomus for RU Money Laundering
Cryptomus has been fined $176 million by its regulator as a result.
Cryptomus has been fined $176 million by its regulator as a result.
The United Kingdom has issued economic sanctions against Cryptomus , a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.
Heleket’s support agent on Telegram claims, despite all evidence to the contrary, that it is not affiliated with Cryptomus.
In April 2026, the blockchain analysis firm TRM Labs found Cryptomus had processed more than $7 billion in transactions since its inception in 2022, including transactions associated with child sexual abuse material vendors, terrorist financing networks, and human trafficking operations.
TRM noted that Cryptomus’s transaction volume cratered after the platform instituted new know your customer or KYC rules, and that the cryptocurrency platform responded to the Canadian fines by launching Heleket as a parallel service that continued to offer no-KYC payment processing.
Sanders said the sanctions also are notable because they are the first known instance of a Five Eyes country (referring to the Australia, Canada, New Zealand, the U.K. and the U.S.) sanctioning a cryptocurrency operation incorporated in another Five Eyes jurisdiction.
Any organization in the same sector or handling data the same way Cryptomus does is now looking at the same regulatory standard, not just Cryptomus.
On October 8, the U.K. issued sanctions (PDF) against Cryptomus — previously known as Certa Payments and Xeltox Enterprises — for processing payments that benefit the Russian government and its financial institutions.
The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise.
A regulatory finding like this is a signal to the whole sector, not just the named organization: this is the standard that's now being enforced, not just discussed.
Also targeted in these sanctions were the virtual payment platforms VexPay , TokenSpot , and the Tsunami Payments service .
Cryptomus has responded to the finding and been fined $176 million.
As explained in our December 2024 investigation, Cryptomus has been a key payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services.
The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.
Review your own compliance posture against whatever standard this regulator just enforced, since this finding is the clearest signal yet of what actually gets acted on.
Don't assume a reprimand without a fine means low risk -- the finding of fault is what sets the precedent, not the dollar amount.
Richard Sanders is a blockchain analyst and investigator who spent months mapping out Cryptomus’s payment infrastructure and transacting with its customers.
What happened
Cryptomus has been fined $176 million by its regulator as a result.
The United Kingdom has issued economic sanctions against Cryptomus , a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.
Heleket’s support agent on Telegram claims, despite all evidence to the contrary, that it is not affiliated with Cryptomus.
What changed
In April 2026, the blockchain analysis firm TRM Labs found Cryptomus had processed more than $7 billion in transactions since its inception in 2022, including transactions associated with child sexual abuse material vendors, terrorist financing networks, and human trafficking operations.
TRM noted that Cryptomus’s transaction volume cratered after the platform instituted new know your customer or KYC rules, and that the cryptocurrency platform responded to the Canadian fines by launching Heleket as a parallel service that continued to offer no-KYC payment processing.
Sanders said the sanctions also are notable because they are the first known instance of a Five Eyes country (referring to the Australia, Canada, New Zealand, the U.K. and the U.S.) sanctioning a cryptocurrency operation incorporated in another Five Eyes jurisdiction.
Who is affected
Any organization in the same sector or handling data the same way Cryptomus does is now looking at the same regulatory standard, not just Cryptomus.
On October 8, the U.K. issued sanctions (PDF) against Cryptomus — previously known as Certa Payments and Xeltox Enterprises — for processing payments that benefit the Russian government and its financial institutions.
The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise.
Why it matters
A regulatory finding like this is a signal to the whole sector, not just the named organization: this is the standard that's now being enforced, not just discussed.
Technical details
Also targeted in these sanctions were the virtual payment platforms VexPay , TokenSpot , and the Tsunami Payments service .
Response
Cryptomus has responded to the finding and been fined $176 million.
As explained in our December 2024 investigation, Cryptomus has been a key payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services.
The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.
What security teams should do
Review your own compliance posture against whatever standard this regulator just enforced, since this finding is the clearest signal yet of what actually gets acted on.
Don't assume a reprimand without a fine means low risk -- the finding of fault is what sets the precedent, not the dollar amount.
Richard Sanders is a blockchain analyst and investigator who spent months mapping out Cryptomus’s payment infrastructure and transacting with its customers.