--- title: "UK Sanctions Cryptomus, Heleket, and Kyrgyzstani Exchange TokenSpot" description: "The British government designated 38 entities tied to Russia's wartime economy, cutting off major illicit crypto processors and sanctions evasion rails." url: https://basisdesk.news/news/uk-sanctions-cryptomus-heleket-tokenspot-russia-network published: 2026-10-09T01:16:38.329Z modified: 2026-10-09T01:16:38.329Z section: Regulation & Policy author: Basis Desk Newsroom (AI-generated, source-verified) sentiment: bearish tickers: [] tags: [UK Sanctions, FCDO, Cryptomus, TokenSpot, Heleket, A7A5, Chainalysis] license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice. --- # UK Sanctions Cryptomus, Heleket, and Kyrgyzstani Exchange TokenSpot The British government designated 38 entities tied to Russia's wartime economy, cutting off major illicit crypto processors and sanctions evasion rails. ## At a glance - **What happened:** The UK FCDO sanctioned crypto processors Cryptomus and Heleket, parent company Xeltox Enterprises, and exchange TokenSpot on Oct. 8. - **Why it matters:** The targets served as key financial infrastructure for illicit funds and Russia-linked sanctions evasion networks that processed hundreds of millions of dollars. - **Who is affected:** Entities transacting with Cryptomus, Heleket, and TokenSpot, as well as institutional exchanges monitoring nested Kyrgyzstani payment flows. - **Takes effect:** 2026-10-08 - **What's next:** No next step announced. - **Status:** enforcement - **Primary source:** [UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions](https://www.chainalysis.com/blog/uk-sanctions-cryptomus-heleket-tokenspot/) — Chainalysis Blog ## Key points - The UK FCDO sanctioned crypto payment processors Cryptomus and Heleket, parent firm Xeltox Enterprises, and exchange TokenSpot on Oct. 8. - Cryptomus and Heleket received more illicit funds than all tracked mixers combined across tracked categories, drawing proceeds from over 15,000 illicit actors. - TokenSpot funneled funds into an HTX deposit address receiving over $308 million alongside sanctioned Kyrgyzstani exchanges Grinex and Meer. ## Editorial remark - **Context:** Western regulators have increasingly squeezed centralized Russian on-ramps, migrating illicit volumes to unregulated payment gateways and regional Central Asian exchanges following earlier actions against Garantex. - **Impact:** Cryptomus, Heleket, and TokenSpot are effectively severed from UK-regulated counterparties, putting global platforms on notice regarding nested exposure to Kyrgyzstani crypto-fiat swappers. - **Watch:** Secondary sanctions from international partners like the US Treasury and EU targeting third-party intermediaries and deposit rails on major global exchanges. The United Kingdom's Foreign, Commonwealth & Development Office designated 38 entities on Oct. 8 for financing Russia's wartime economy, aiding military supply chains, and facilitating sanctions evasion [1]. The sanctions package targets crypto payment processors Cryptomus and Heleket, both managed by parent company Xeltox Enterprises Ltd., alongside Kyrgyzstani exchange TokenSpot CJSC [1]. Blockchain analytics firm Chainalysis revealed that Cryptomus and Heleket served as primary hubs for unlawful finance, drawing transactions from more than 15,000 illicit actors spanning scams, ransomware groups like Black Basta, and darknet marketplaces like Xinbi Guarantee [1]. Indirect flows also linked both processors to the $1.4 billion Bybit exploit carried out by North Korea's Lazarus Group [1]. Chainalysis noted that the two payment services collectively received more illicit funds across tracked categories than all tracked crypto mixers combined, and in late 2025 illicit counterparties spiked past 900 in a single month following the shutdown of Russian exchange Garantex [1]. In October 2025, Canadian regulator FINTRAC penalized Cryptomus with a CAD 177 million fine over anti-money laundering non-compliance [1]. ## Kyrgyzstan Ties to A7A5 Evasion Network TokenSpot was sanctioned for its operational connections to a broader sanctions-evasion network in Kyrgyzstan [1]. Visual and technical analyses demonstrate that TokenSpot and previously sanctioned Kyrgyzstani platform Meer share near-identical web infrastructure, tailored to Russian-language crypto-to-fiat trades [1]. On-chain records traced downstream transfers from TokenSpot, Grinex, and Meer into an identical HTX deposit address that processed more than $308 million [1]. The addresses link directly to instant swap services for the ruble-backed A7A5 token, as documented in broader enforcement efforts examining the [A7 shadow banking network](https://basisdesk.news/news/us-treasury-fincen-ofac-a7-network-sanctions) [1]. Beyond crypto, the FCDO sanctions package placed restrictions on Russian oil producers Zarubezhneft and INK Capital, Stolichny Kredit bank, 12 shadow-fleet oil tankers, and 17 entities procuring missile and drone hardware [1]. ## FAQ **Which crypto companies were designated by the UK on Oct. 8?** The UK designated payment processors Cryptomus and Heleket, their parent company Xeltox Enterprises Ltd., and Kyrgyzstani exchange TokenSpot CJSC. **Why did the UK sanction Cryptomus and Heleket?** Chainalysis reported that the services operated as significant hubs for illicit activity, processing funds from over 15,000 illicit actors, cybercrime forums, and ransomware groups while operating with minimal compliance controls. **How is TokenSpot connected to Russian sanctions evasion?** TokenSpot shares website infrastructure with sanctioned Kyrgyzstani exchange Meer and moved funds into an HTX deposit address that processed more than $308 million tied to the ruble-backed A7A5 token network. ## Sources 1. [UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions](https://www.chainalysis.com/blog/uk-sanctions-cryptomus-heleket-tokenspot/) — Chainalysis Blog, 2026-10-09 --- Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai