U.K. Imposes Sanctions on Cryptomus for Money Laundering Activities

The United Kingdom has imposed economic sanctions on Cryptomus, a cryptocurrency platform identified as a significant channel for payments related to ransomware, narcotics, darknet markets, fraud, and cybercrime that assist Russia in evading financial restrictions. On October 8, the U.K. sanctioned Cryptomus, previously known as Certa Payments and Xeltox Enterprises, for facilitating payments that benefit the Russian government and its financial institutions. The sanctions freeze any Cryptomus assets held in U.K. banks and prohibit British companies from conducting business with it. Other platforms targeted in these sanctions include VexPay, TokenSpot, and Tsunami Payments. According to a December 2024 investigation, Cryptomus has acted as a key payment processor for numerous Russian cryptocurrency exchanges and websites involved in cybercrime. The platform has undergone several name changes since its establishment in 2022, most recently rebranding to 'Heleket' after Canada imposed a CAD $176 million fine for anti-money laundering violations. Chainalysis reported that the U.K. sanctions aim to disrupt the broader infrastructure supporting Russia's wartime economy, noting that Cryptomus and Heleket have become major hubs for illicit financial activities. In an October 8 blog post, Chainalysis stated that these services received more illicit funds than other mixers in their dataset, with the number of illicit counterparties exceeding 900 in a single month in late 2025. TRM Labs found that Cryptomus processed over $7 billion in transactions since its inception, including those linked to child sexual abuse material, terrorist financing, and human trafficking. Following the implementation of new 'know your customer' (KYC) rules, Cryptomus's transaction volume decreased significantly, leading to the launch of Heleket as a parallel service that continued to offer no-KYC payment processing. Richard Sanders, a blockchain analyst, emphasized the significance of the U.K. sanctions, stating that unlike Canada's fines, sanctions effectively halt operations. He noted that Cryptomus shared an address with multiple foreign currency dealers and money transfer businesses, many of which did not appear to be physically located there. The sanctions are also notable as they mark the first instance of a 'Five Eyes' country sanctioning a cryptocurrency operation incorporated in another Five Eyes jurisdiction. The authority of entities like Cryptomus and Heleket to provide international financial services appears to stem from questionable financial institutions overseen by an unrecognized regulatory body in a disputed region of northwest Africa. The sole shareholder of Cryptomus's parent company, Certa Payments, was identified as a 25-year-old Ukrainian woman who also led several other firms, including the WS Management and Advisory Corporation, which claims to regulate cryptocurrency, foreign exchange, and online gaming businesses in the Western Sahara region. The website of this entity states it assists with bank setup, online gaming licenses, and the licensing of foreign exchange brokers.