U.K. sanctions Cryptomus over alleged illicit-finance links
The U.K. has designated Cryptomus and related crypto payment services over alleged links to illicit finance and Russia’s wartime economy.
The U.K. has sanctioned Cryptomus, a cryptocurrency payment platform previously known as Certa Payments and Xeltox Enterprises, alongside related services Heleket and TokenSpot. The measures freeze assets held at U.K. banks and restrict British businesses from offering services to designated entities, according to the government’s sanctions notice.1
Why Cryptomus matters
Cryptomus has drawn scrutiny because it processed payments for cryptocurrency exchanges and websites linked to ransomware, narcotics, fraud and other cybercrime services, according to Krebs on Security’s reporting.2 The platform has also changed names over time: Krebs identifies Heleket as a later name used after Canada imposed a CAD $176 million anti-money-laundering fine on Cryptomus in 2025.2
Chainalysis says Cryptomus and Heleket operate under parent company Xeltox Enterprises and received funds from more than 15,000 illicit actors across the categories tracked by its research.3 The company also says the U.K. designation is part of a wider package targeting infrastructure connected to Russia’s wartime economy and sanctions evasion.3
The government notice itself is narrower than some of the surrounding reporting: it establishes the designation and the restrictions that follow, while the allegations about illicit transaction flows come from investigators and blockchain-analysis firms.123
What the sanctions mean
The practical effect is to make it illegal for people and businesses covered by U.K. sanctions rules to make funds or economic resources available to designated entities. Financial institutions must also observe restrictions on processing payments involving sanctioned parties.1
That does not instantly erase a cryptocurrency service from the internet, but it can cut off access to compliant banks, payment partners and other businesses that need to follow U.K. rules. Chainalysis argues that this distinction matters: unlike a fine, sanctions can threaten the operation’s ability to function through regulated financial channels.3
Our opinion
The important story here is less the latest name change than the pressure on the payment layer behind cybercrime. A platform can be difficult to police directly, but sanctions aimed at its banking and business relationships raise the cost of operating around it. The allegations still need careful attribution, yet the official designation gives this development a firmer footing than another unverified report about a crypto service’s bad reputation.