Skip to content
$BTC$81,937−1.3%$ETH$2,481−3.7%$SOL$109.54−5.6%$XRP$1.39−2.3%$TON$1.38−11.9%MCap$2.74T−2.5%BTC.D59.7%Fear&Greed59 GreedGas0.20 gwei·2.2 sat/vBNews mood8% bullish
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Regulation & Policy · 1 min read

UK Sanctions Cryptomus, Heleket, and Kyrgyzstani Exchange TokenSpot

The British government designated 38 entities tied to Russia's wartime economy, cutting off major illicit crypto processors and sanctions evasion rails.

Editorial oversight: Julian Mercer, Chief Editor
Bearish

At a glance Enforcement action

What happened
The UK FCDO sanctioned crypto processors Cryptomus and Heleket, parent company Xeltox Enterprises, and exchange TokenSpot on Oct. 8.
Why it matters
The targets served as key financial infrastructure for illicit funds and Russia-linked sanctions evasion networks that processed hundreds of millions of dollars.
Who is affected
Entities transacting with Cryptomus, Heleket, and TokenSpot, as well as institutional exchanges monitoring nested Kyrgyzstani payment flows.
Takes effect
2026-10-08
What's next
No next step announced.
Primary source
Chainalysis Blog: UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions

Key points

  • The UK FCDO sanctioned crypto payment processors Cryptomus and Heleket, parent firm Xeltox Enterprises, and exchange TokenSpot on Oct. 8.
  • Cryptomus and Heleket received more illicit funds than all tracked mixers combined across tracked categories, drawing proceeds from over 15,000 illicit actors.
  • TokenSpot funneled funds into an HTX deposit address receiving over $308 million alongside sanctioned Kyrgyzstani exchanges Grinex and Meer.

The United Kingdom's Foreign, Commonwealth & Development Office designated 38 entities on Oct. 8 for financing Russia's wartime economy, aiding military supply chains, and facilitating sanctions evasion 1. The sanctions package targets crypto payment processors Cryptomus and Heleket, both managed by parent company Xeltox Enterprises Ltd., alongside Kyrgyzstani exchange TokenSpot CJSC 1.

Blockchain analytics firm Chainalysis revealed that Cryptomus and Heleket served as primary hubs for unlawful finance, drawing transactions from more than 15,000 illicit actors spanning scams, ransomware groups like Black Basta, and darknet marketplaces like Xinbi Guarantee 1. Indirect flows also linked both processors to the $1.4 billion Bybit exploit carried out by North Korea's Lazarus Group 1. Chainalysis noted that the two payment services collectively received more illicit funds across tracked categories than all tracked crypto mixers combined, and in late 2025 illicit counterparties spiked past 900 in a single month following the shutdown of Russian exchange Garantex 1. In October 2025, Canadian regulator FINTRAC penalized Cryptomus with a CAD 177 million fine over anti-money laundering non-compliance 1.

Kyrgyzstan Ties to A7A5 Evasion Network

TokenSpot was sanctioned for its operational connections to a broader sanctions-evasion network in Kyrgyzstan 1. Visual and technical analyses demonstrate that TokenSpot and previously sanctioned Kyrgyzstani platform Meer share near-identical web infrastructure, tailored to Russian-language crypto-to-fiat trades 1.

On-chain records traced downstream transfers from TokenSpot, Grinex, and Meer into an identical HTX deposit address that processed more than $308 million 1. The addresses link directly to instant swap services for the ruble-backed A7A5 token, as documented in broader enforcement efforts examining the A7 shadow banking network 1. Beyond crypto, the FCDO sanctions package placed restrictions on Russian oil producers Zarubezhneft and INK Capital, Stolichny Kredit bank, 12 shadow-fleet oil tankers, and 17 entities procuring missile and drone hardware 1.

Questions this story raises

Which crypto companies were designated by the UK on Oct. 8?
The UK designated payment processors Cryptomus and Heleket, their parent company Xeltox Enterprises Ltd., and Kyrgyzstani exchange TokenSpot CJSC.
Why did the UK sanction Cryptomus and Heleket?
Chainalysis reported that the services operated as significant hubs for illicit activity, processing funds from over 15,000 illicit actors, cybercrime forums, and ransomware groups while operating with minimal compliance controls.
How is TokenSpot connected to Russian sanctions evasion?
TokenSpot shares website infrastructure with sanctioned Kyrgyzstani exchange Meer and moved funds into an HTX deposit address that processed more than $308 million tied to the ruble-backed A7A5 token network.

Sources

  1. [1] UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions — Chainalysis Blog, October 9, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote
Share X Telegram Bluesky Markdown Web Story

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.