The UK has imposed sanctions on entities behind crypto payment services Cryptomus and Heleket and on Kyrgyzstani exchange TokenSpot, extending its Russia-related controls to infrastructure that authorities say could be used to bypass financial restrictions.
The October 8 designations cover Xeltox Enterprises Ltd., identified by the UK sanctions list as the owner of Cryptomus and as linked to activities continued through Heleket, and TokenSpot CJSC. The measures include an asset freeze, trust-services restrictions, director-disqualification sanctions, internet-service restrictions and prohibitions affecting correspondent banking and payment processing.
The Foreign, Commonwealth & Development Office said the broader package included three crypto exchanges, two payment platforms and one linked individual. It said there were reasonable grounds to suspect that the targeted services were being used by Russia to circumvent financial sanctions, and that two had processed or facilitated transactions involving the Kremlin-backed A7 network.
What the official records establish
The UK sanctions list gives Xeltox the identifier RUS3755 and TokenSpot RUS3758, with both designated on October 8 under the Russia (Sanctions) (EU Exit) Regulations 2019. The list says the Secretary of State has reasonable grounds to suspect that each entity carried on business in Russia’s financial-services sector in a way that benefited or supported the Russian government.
Those are formal UK government findings and the legal basis for the restrictions. They should not be treated as criminal convictions. The government’s announcement also attributes a claim of more than $90 billion in activity last year to the A7 network itself; that figure is not presented as an independently audited transaction total.
For payment and compliance teams, the operational consequence is more concrete. The sanctions-list notice says UK credit and financial institutions are prohibited from establishing or maintaining correspondent-banking relationships with covered designated persons and from processing payments to, from or through them. It also says the measures extend to institutions owned or controlled by a designated person where the regulations’ ownership-and-control test is met.
Blockchain analysis adds transaction context
Chainalysis said it had tracked Cryptomus and Heleket before the designation and found that the two services had received funds from more than 15,000 counterparties that the analytics company classified as illicit across its monitored categories. It said the monthly number of such counterparties rose above 900 in late 2025.
Those figures are Chainalysis findings rather than totals published by the UK government. They depend on the company’s attribution methods and classification coverage. Chainalysis also cautioned that historical transactions can begin to count as illicit exposure after an entity is newly designated, meaning a later sanctions action can change how earlier flows are categorized.
For TokenSpot, Chainalysis reported that funds from TokenSpot and previously sanctioned Kyrgyzstani exchanges Grinex and Meer converged on the same HTX deposit address, which it said received more than $308 million. The firm also identified connections to the A7A5 instant-swap service, which exchanges the ruble-backed A7A5 token for dollar-backed stablecoins.
Implications for crypto payment providers
The action highlights a compliance risk that extends beyond conventional exchanges. Authorities are applying sanctions controls to merchant-facing processors, crypto-fiat services and other platforms that can connect wallets, stablecoins and bank-payment channels.
Firms with UK exposure will need to screen customers, counterparties and ownership links against the current UK Sanctions List, not just brand names used by a service. The Xeltox entry is especially relevant because the government’s rationale connects a legal entity to both Cryptomus and Heleket. Transaction-monitoring teams may also need to review indirect exposure to named networks and intermediaries rather than relying solely on direct transfers to a listed address.
The designations do not prove that every customer or transaction associated with the named services is illicit. They do, however, create immediate legal and operational consequences within the scope of UK sanctions rules and reinforce the need for entity-resolution controls that connect corporate owners, trading names, websites and blockchain attribution data.