UK sanctions crypto payment firms tied to Russia’s A7 network, including Cryptomus parent Xeltox and Grinex front TokenSpot

The UK has sanctioned a group of crypto and payment firms accused of helping Russia move money through the Kremlin-backed A7 network, including Xeltox Enterprises, the entity behind Cryptomus and Heleket. Blockchain intelligence firm TRM Labs says another target, TokenSpot, sent more than $950 million to A7 and the sanctioned exchanges Grinex and Garantex.

UK sanctions target crypto exchanges and payment networks

The October 8 package covers several cryptocurrency and payment businesses that British authorities associate with suspected sanctions evasion. Two of the targeted platforms were identified by officials as having processed or facilitated transactions involving the A7 network, which has attracted scrutiny from Western authorities.

The FCDO framed the measures as a warning to businesses supporting Russia’s military campaign.

“The message is simple: if you help Russia fund or equip this war, you will face the consequences.” – UK Foreign, Commonwealth & Development Office

The designation list includes Xeltox Enterprises Ltd., a company registered in Canada, and TokenSpot, Tsunami Payments and Processing KG, which are registered in Kyrgyzstan. TRM Labs also identified Planeta among the targeted businesses.

According to the blockchain intelligence firm, Cryptomus and Heleket are brands covered under Xeltox Enterprises’ single corporate listing rather than separate entries in the sanctions package.

Processing KG’s director, Ulan Arymbaevich Bukabaev, was also designated. The company’s listing identifies Kyrgyzstan’s Finance Ministry as its parent organisation.

The implications extend beyond the named companies. Under the UK sanctions framework, individuals and businesses subject to British jurisdiction must freeze the funds and economic resources of designated parties and must not make those resources available to them.

These restrictions can complicate access to financial services, cross-border payments and commercial counterparties for businesses covered by the measures. Their practical impact will depend on the relationships between the designated entities and the wider financial networks through which they operate.

TokenSpot transfers raise questions about A7’s financial reach

A central element of the latest UK sanctions is the alleged connection between TokenSpot and several previously restricted cryptocurrency networks.

TRM Labs reported on October 8 that TokenSpot had transferred more than $950 million combined to the A7 network and the previously sanctioned exchanges Grinex and Garantex. The firm assessed with high confidence that TokenSpot operates as a front company for Grinex, citing shared wallet infrastructure.

The assessment highlights how cryptocurrency transactions can connect businesses operating under different names while allowing investigators to trace relationships through blockchain records.

The A7 network is particularly significant because of its use of A7A5, a ruble-backed stablecoin issued by Old Vector LLC. US authorities designated Old Vector in August 2025, adding another layer of restrictions around the digital asset infrastructure associated with the network.

British officials also pointed to A7’s claim that it moved more than $90 billion in 2025. That figure is roughly equivalent to half of Russia’s annual military expenditure, although the reported transaction volume should not automatically be interpreted as money spent directly on military operations.

The distinction matters because a payment network’s total transaction value can include repeated transfers, settlements and other financial activity. Nevertheless, the scale of A7’s reported operations has made it a focus of international enforcement efforts.

The US government intensified its action against the network on October 1 through Operation Economic Outcast. The Treasury Department’s Office of Foreign Assets Control designated A7 as a significant transnational criminal organisation.

Separately, the Financial Crimes Enforcement Network proposed prohibiting certain funds transfers involving intermediary companies, known as subagents, associated with A7. The agency also issued an alert to financial institutions. The transfer restriction remains a proposal rather than a final prohibition.

Together, these actions illustrate the growing emphasis on identifying the intermediaries that allegedly help restricted entities maintain access to financial infrastructure.

UK sanctions build on earlier action against Russia-linked crypto

The October measures follow a British sanctions package announced on May 26 that targeted cryptocurrency and payment networks associated with Russia. That earlier action included Huobi Global, also known as HTX, Exmo, Bitpapa, Rapira and entities linked to A7.

Other governments have also taken action against businesses connected to the same ecosystem. On October 2, Japan imposed asset-freeze measures on Garantex Europe OU, which had previously faced US restrictions and a law enforcement operation in March 2025.

The US Treasury has described Grinex as a successor to Garantex, alleging that personnel associated with the earlier exchange established the replacement platform and transferred customer deposits to it.

These developments underline a recurring challenge for sanctions enforcement: restricting one company or exchange may not eliminate the underlying financial activity if related operators can establish replacement entities or redirect transactions through other intermediaries.

Cryptocurrency’s cross-border nature adds complexity, particularly when exchanges, payment processors and stablecoin issuers operate across multiple jurisdictions. Blockchain analysis can help investigators identify transaction patterns and shared infrastructure, but determining who controls an entity and whether a particular transaction violates sanctions may require additional evidence.

The UK government has expanded its latest package beyond digital assets. The October 8 designations also cover oil companies Zarubezhneft and INK Capital. The FCDO said the measures bring British sanctions coverage to more than 90% of Russia’s oil production capacity.

Twelve additional tankers associated with Russia’s so-called shadow fleet were also designated, taking the total number of vessels targeted in that category above 600. The shadow fleet refers to ships used to transport oil while attempting to circumvent restrictions and related controls.

A further 17 entities and individuals were targeted over supplies considered critical to Russia’s military-industrial sector. These included machine tools, electronics and materials used in the production of missiles and drones.

Financial enforcement puts crypto intermediaries under pressure

The latest UK sanctions demonstrate that British authorities are looking beyond major exchanges to examine the payment companies and intermediaries that may facilitate restricted financial flows.

For cryptocurrency businesses, the designations reinforce the importance of understanding counterparties, monitoring transactions and complying with applicable sanctions obligations. Firms that provide payment processing, stablecoin services or exchange infrastructure can face significant regulatory and operational consequences if they are identified as facilitating prohibited activity.

The allegations surrounding TokenSpot, Grinex and A7 also show why investigators are increasingly examining relationships between digital asset platforms rather than treating each exchange as an isolated business.

However, a sanctions designation is a government measure, not in itself a criminal conviction. The specific allegations and evidence concerning each company should therefore be distinguished from any findings that might emerge through subsequent legal or enforcement proceedings.

As Britain and its international partners continue targeting financial channels associated with Russia, the effectiveness of these measures will depend partly on cooperation between governments, financial institutions, blockchain intelligence firms and cryptocurrency service providers.

The October 8 package adds further pressure to a network of businesses already facing restrictions in several jurisdictions. Whether it substantially limits the movement of funds associated with Russia will depend on how effectively authorities can enforce the measures and prevent the emergence of alternative routes.

For now, the expanded UK sanctions mark another step in Britain’s broader effort to constrain the financial infrastructure that it believes helps sustain Moscow’s war effort.