UK Sanctions Cryptomus and TokenSpot in Russia Package

The UK government has designated two crypto platforms, Cryptomus and TokenSpot, under its Russia sanctions regime, imposing immediate asset freezes and dealing prohibitions on both entities. For accounting firms, auditors, and CFOs who manage any exposure to digital assets, the designations are a live compliance event that requires action now, not at the next quarterly review.

What the UK Has Actually Done

Both Cryptomus and TokenSpot have been added to the UK's consolidated financial sanctions list, administered by the Office of Financial Sanctions Implementation (OFSI) within HM Treasury. Designation under the Russia sanctions regime means that UK persons and UK-nexus entities are prohibited from dealing with the funds or economic resources of the named parties, making funds or economic resources available to them, or engaging in any transaction that circumvents those prohibitions.

The Legal Basis

The designations sit under the Russia (Sanctions) (EU Exit) Regulations 2019, the primary UK statutory instrument that implements and extends the Russia sanctions framework post-Brexit. Those regulations carry strict liability provisions: a firm does not need to have known it was breaching a prohibition to face a civil monetary penalty. OFSI can issue penalties of up to the greater of £1 million or 50% of the estimated value of the breach. Criminal prosecution, carrying up to seven years' imprisonment, remains available for the most serious cases.

Why Crypto Platforms Are in the Frame

Cryptomus is a crypto payment processing platform that allows merchants and individuals to send and receive digital asset payments. TokenSpot operates as a crypto exchange. The UK has increasingly focused on crypto-native infrastructure as a vector for sanctions evasion, on the basis that pseudonymous transactions and cross-border settlement without traditional correspondent banking relationships create structural opportunities to move value outside the conventional financial system. This designation follows a broader pattern seen across allied jurisdictions, including the EU's earlier action against Garantex and US Treasury designations of various Russia-linked crypto entities.

Immediate Compliance Obligations for UK Firms

The moment a designation is published on the OFSI consolidated list, UK obligations attach. There is no grace period. Firms need to move across several workstreams in parallel.

Sanctions Screening and List Updates

Any firm using automated sanctions screening, whether embedded in a crypto accounting software stack, a standalone AML tool, or a banking platform, must confirm that the updated OFSI list has been ingested. The OFSI list is updated without advance notice, so firms that rely on periodic batch updates rather than continuous feed integrations are at risk of a gap. The first action is a manual check against the current published list, followed by a retroactive sweep of recent counterparty data.

Firms should also cross-reference against the US OFAC Specially Designated Nationals list and the EU consolidated sanctions list, because transactions with entities on those lists can carry secondary exposure for UK firms with US-dollar clearing relationships or EU subsidiary operations. For background on how allied jurisdictions have approached Russia-linked crypto designations, see how Japan responded to the Garantex Russia sanctions designation.

Transaction Freezing and Reporting

If a firm holds, controls, or has processed funds connected to either designated entity, UK law requires those funds to be frozen immediately and reported to OFSI. The reporting obligation is not discretionary. Failure to report a known or suspected breach is itself a criminal offence under the Policing and Crime Act 2017, as amended. Firms should treat any identified connection as requiring legal counsel before taking any further steps, including attempting to unwind or return funds without OFSI authorisation.

Customer and Counterparty Due Diligence

Crypto businesses registered with the Financial Conduct Authority (FCA) under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 have an existing obligation to conduct ongoing monitoring of business relationships. The new designations trigger a specific review obligation for any customer or counterparty that has used Cryptomus or TokenSpot as a payment rail, exchange venue, or liquidity source. Enhanced due diligence records should be updated to reflect the designation date and the firm's assessment of any residual exposure.

Accounting and Reporting Implications

Beyond the immediate legal compliance steps, the designations carry accounting consequences that practitioners and CFOs need to work through systematically.

Asset Recognition and Impairment

Any digital assets held on or processed through Cryptomus or TokenSpot that are now subject to a freeze cannot be treated as freely realisable assets on a balance sheet. Under both IFRS and UK GAAP, an asset is recognised only to the extent that future economic benefits are expected to flow to the entity. A frozen asset, particularly one caught in a sanctions dispute with no clear timeline for resolution, may require impairment or reclassification. Auditors reviewing year-end or interim positions that include such assets will need to assess whether management has appropriately disclosed the restriction and applied a suitable carrying value adjustment.

Revenue and Receivables

For firms that have outstanding receivables from either platform, those amounts are now effectively uncollectable for an indefinite period. IFRS 9 expected credit loss provisioning and the equivalent FRS 102 bad debt provisions should be revisited. In some cases, full write-down may be appropriate, subject to legal advice on the likelihood and timeline of any OFSI licence that might permit collection.