Thursday 15 October 2026
Night Edition
ZOTPAPER

News without the noise

ZOTPAPER
Crypto

U.K. Sanctions Cryptomus, Accusing Crypto Platform of Being Major Money Laundering Hub for Russian Cybercrime

UK sanctions target Cryptomus, Heleket, TokenSpot and Tsunami Payments for processing payments benefiting the Russian government and its financial institutions

By LineZotpaper
Published
Read Time1 min
The United Kingdom has imposed economic sanctions on the cryptocurrency platform Cryptomus and related services for acting as a major conduit for payments linked to ransomware, narcotics, darknet markets, fraud and cybercrime and for helping Russia circumvent existing financial restrictions.

On October 8, the U.K. issued sanctions against Cryptomus, previously known as Certa Payments and Xeltox Enterprises, freezing any assets at U.K. banks and barring British companies from offering it business. Also targeted were virtual payment platforms VexPay, TokenSpot and Tsunami Payments service.

The blockchain data firm Chainalysis said the sanctions target the broader infrastructure supporting Russia's wartime economy. Chainalysis wrote that Cryptomus and Heleket have emerged as major payment hubs for illicit activity, receiving more illicit funds across tracked categories than mixers in its dataset and the number of illicit counterparties surged to more than 900 in a single month in late 2025.

The company changed its name several times since emerging in 2022, most recently to Heleket last year after Canada levied a record CAD $176 million fine against the platform for anti-money laundering violations.

Cryptomus has been a payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services.

§

Analysis

Why This Matters

  • The sanctions directly freeze assets and prohibit business with U.K. firms, potentially disrupting a key payment channel used by ransomware actors and other cybercriminals.
  • The move targets infrastructure that helps Russia bypass financial sanctions imposed after its invasion of Ukraine, affecting broader efforts to isolate the Russian economy.
  • Chainalysis data suggests Cryptomus and Heleket received more illicit funds than even cryptocurrency mixers, signalling the scale of money laundering.

Background

Cryptomus emerged in 2022 and has operated under several names, including Heleket, Certa Payments and Xeltox Enterprises. Last year Canada imposed a record fine for anti-money laundering violations in October 2025. The U.K. sanctions are among the most significant actions against a virtual currency platform for facilitating Russian interests.

Key Perspectives

**Security researchers: The platform has been a payment processor for multiple Russian exchanges that sell cybercrime services and help circumvent sanctions. U.K. government: By freezing assets and banning provision of services, it aims to cut off financial support to cybercriminals and the Russian state. Critics/Skeptics: Questions may arise about how effectively such sanctions are enforced globally, as platforms can shift names and jurisdictions to avoid restrictions.

What to Watch

  • Whether Heleket or Cryptomus attempts further rebranding or relocates to services outside U.K. reach.
  • If other countries follow with similar sanctions or investigations into other crypto payment processors.
  • The impact on ransomware payments and darknet market transactions patterns.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workSubscribe