Deals & regulation
UK sanctions cryptocurrency processor tied to illicit payments and Russia
The UK has sanctioned Cryptomus and related payment platforms, freezing assets held at British banks and barring UK businesses from dealing with them. Investigators and blockchain firms link Cryptomus, later rebranded as Heleket, to ransomware, darknet markets, fraud and other illicit transactions, as well as payments benefiting Russia. The action follows earlier Canadian penalties that investigators say failed to stop the operation. The report describes aliases, parallel services and opaque licensing structures that allegedly helped the business continue operating.
Editorial summary · Publisher article
What matters
- TRM Labs said Cryptomus processed more than $7 billion in transactions since 2022, including activity associated with trafficking, terrorism financing and child sexual abuse material vendors.
- Chainalysis said Cryptomus and Heleket received large illicit flows and had more than 900 illicit counterparties in one month in late 2025.
- Investigators say the platform launched Heleket after Canadian enforcement action and continued offering no-KYC processing.
- The report traces the firms’ claimed licensing structure to entities associated with the disputed Western Sahara region.
Why the sanctions matter
An investigator quoted in the report distinguishes sanctions from fines: restrictions that block counterparties and assets may disrupt operations more directly than penalties that are difficult to collect.
Context & caveats
- The transaction figures and links to illicit activity come from blockchain-analysis firms and investigators; the report does not present them as court findings.
Why this made the edition
The investigation combines the UK sanctions action with blockchain-analysis findings, prior reporting, corporate aliases, and detail on the alleged payment infrastructure supporting illicit activity.
Source material