Key Highlights:
- The UK government has sanctioned Canada-registered Xeltox Enterprises Ltd alongside platforms Cryptomus and Heleket for supporting Russia’s financial services sector.
- Blockchain intelligence firm TRM Labs identified deep operational ties, shared infrastructure, and hundreds of millions of dollars in transfers involving sanctioned entities such as Garantex.
- Additional sanctions targeted TokenSpot—identified as a front company for Garantex successor Grinex—as well as entities across Kyrgyzstan and Russia.
UK Imposes Sanctions on Networks Aiding Russia’s Financial System
In a coordinated effort to disrupt illicit cross-border capital flows, the United Kingdom has formally designated Xeltox Enterprises Ltd, a firm registered in British Columbia, Canada. Authorities sanctioned the company for its involvement in supporting Russia’s financial services sector via the crypto platform Cryptomus and activities linked to Heleket. Under the official UK listing, both brands appear alongside Certa Payments. Blockchain intelligence firm TRM Labs had previously assessed with high confidence in April that Cryptomus and Heleket maintained direct operational links, pointing to shared technical infrastructure, personnel, branding assets, and liquidity sources.
According to TRM Labs, Heleket was launched in January 2025, just one month prior to Cryptomus implementing mandatory identity checks. Following the roll-out of those compliance requirements, Cryptomus experienced a noticeable decline in monthly on-chain volume, whereas Heleket saw an increase. Furthermore, TRM Labs highlighted significant transaction activity involving high-risk and sanctioned entities: between the platforms, Cryptomus received over $204 million from the sanctioned Russian exchange Garantex and transferred another $101 million back to it, based on the April analysis.
TokenSpot Identified as a Front for Garantex Successor Grinex
Alongside Xeltox Enterprises, the UK government separately sanctioned crypto exchange TokenSpot for aiding the Russian financial system. On October 6, TRM Labs assessed with high confidence that TokenSpot functions as a corporate front for Grinex, a platform widely viewed by analysts as the likely successor to Garantex.
The forensic investigation revealed concrete operational crossover between TokenSpot and Grinex, including six shared TRON blockchain addresses and identical back-end setups used to collect deposits and manage transaction fee balances. Analysts also recorded closely synchronized service disruptions that both platforms announced simultaneously in April. TRM Labs reported that TokenSpot routed more than $950 million combined across Grinex, Garantex, and the A7 network. Notably, A7 emerged as TokenSpot’s largest external counterparty, taking in $679.5 million directly from the exchange.
Broader Crackdown Encompasses Kyrgyz and Russian Entities
The UK’s sanctions enforcement reached beyond primary digital asset platforms to encompass international intermediaries facilitating financial movement. Designations were levied against Kyrgyzstan-registered firms Tsunami Payments and Processing KG, alongside Processing KG’s director, Ulan Bukabaev. Authorities also placed sanctions on Russian firm Planeta and Moscow-based financial institution Stolichny Kredit.
Why This Matters
The UK’s enforcement action highlights an evolving trend in sanctions evasion: Russian-linked financial networks increasingly deploy corporate nesting, parallel platforms, and rebranding strategies to bypass regulatory chokeholds. As TRM Labs observed, these designations underscore a continuous operational cycle wherein illicit service providers spin off replacement entities immediately after enforcement actions or compliance updates take effect. Consequently, compliance officers and financial institutions must look past superficial corporate branding, actively auditing historical exposure while closely tracking shared liquidity pools, overlapping deposit architecture, and successor platforms operating across non-aligned jurisdictions.
Frequently Asked Questions
Why was Canada-based Xeltox Enterprises targeted by UK sanctions?
Xeltox Enterprises Ltd, registered in British Columbia, was designated by the UK for supporting the Russian financial services sector through its management of Cryptomus and connections to Heleket, which shared infrastructure and handled substantial transaction volumes with sanctioned platforms like Garantex.
What is the relationship between TokenSpot and Grinex?
According to analysis from TRM Labs, TokenSpot operates as a front company for Grinex, an exchange considered a primary successor to Garantex. The two services share blockchain deposit architecture, at least six TRON addresses, and coordinated operational downtimes.
Which other international firms were included in the UK sanctions update?
The UK enforcement action also designated Kyrgyz entities Tsunami Payments and Processing KG, Processing KG director Ulan Bukabaev, Russian entity Planeta, and Moscow-based bank Stolichny Kredit.
