UK Sanctions Three Crypto Exchanges Over Russian Illicit Funds
The UK government has designated three cryptocurrency exchanges and two payment processors suspected of helping Russian entities bypass financial sanctions, with the five platforms collectively linked to billions of dollars in illicit flows and direct ties to a Kremlin-backed financial network. For accounting firms, auditors, and CFOs with any exposure to digital asset counterparties, this action redraws the compliance perimeter and demands an immediate review of onboarding records and transaction monitoring outputs.
What the UK Government Actually Did
The UK Foreign, Commonwealth and Development Office (FCDO) issued the sanctions designations, naming the five platforms as facilitators of Russian sanctions evasion. Three of the designated services are linked to Kyrgyzstan, and two were found to have processed transactions connected to the A7 financial network, a Kremlin-backed infrastructure that the UK Foreign Ministry says claimed to have moved more than $90 billion in a single year, representing close to half of Russia's annual military expenditure.
The Five Designated Platforms
The specific platforms named in the designations include TokenSpot, a Kyrgyzstani exchange; Grinex and Meer, two further services; and payment processors Cryptomus and Heleket. Blockchain analytics firm Chainalysis, cited in the FCDO's action, found that Cryptomus and Heleket received funds from thousands of illicit counterparties, with the number peaking at roughly 900 distinct entities within a single month in late 2025. That figure gives the action its scale: this is not a question of isolated bad actors slipping through, but of platforms operating as infrastructure for sanctioned flows at volume.
The HTX Connection
A thread connecting several of the designations is HTX, the exchange formerly known as Huobi. Chainalysis determined that TokenSpot, Grinex, and Meer collectively received over $308 million from a single HTX deposit address. HTX's operator, Huobi Global, was itself added to UK sanctions in May. The company has contested that designation, arguing it applies only to the Huobi Global legal entity and that its exchange operations and user funds are unaffected. Whether that argument holds any legal weight for counterparties conducting business with HTX-linked entities remains a live compliance question: UK sanctions law generally imposes strict liability, meaning the intent of the transacting party is not a defence.
The A7 Network: Why Scale Matters Here
The A7 network is central to understanding why regulators have moved against these particular platforms. Described by the UK government as a Kremlin-backed financial infrastructure, A7 claimed internally to have channelled more than $90 billion in the prior year. To put that figure in context, UK authorities described it as approaching half of Russia's annual military spending, suggesting it plays a material role in funding Russia's war economy rather than representing opportunistic retail sanctions evasion.
Two of the five designated platforms, Cryptomus and Heleket, processed transactions directly linked to A7 activity. TokenSpot was also tied to the network. The practical implication for compliance teams is that the network was not hiding: it was operating through platforms that any KYC review relying solely on jurisdiction-based risk scoring or name-screening would likely have passed. The red flags were in the transaction graph, not the registration documents.
Accounting and Regulatory Implications for Firms
Sanctions Exposure and the Strict Liability Standard
UK sanctions administered by the Office of Financial Sanctions Implementation (OFSI) operate on a strict liability basis for civil penalties. A firm does not need to have known that a counterparty was sanctioned to face a financial penalty: it is sufficient that the firm dealt with a designated person or entity, or made funds available to one. For accounting firms holding client digital assets or processing crypto transactions on behalf of clients, this makes counterparty screening a non-negotiable control, not a best-efforts exercise.
The designation of payment processors Cryptomus and Heleket is particularly relevant to firms using third-party payment infrastructure for crypto-denominated billing or treasury operations. If any processor in the payment chain is designated, the transaction itself may constitute a sanctions breach regardless of whether the underlying commercial purpose was entirely legitimate.
What Your Crypto Accounting Software Needs to Flag
Robust crypto accounting software should now be interrogated against these specific designations. The key questions for any finance team are whether existing wallet address screening is updated to reflect the newly designated addresses associated with these five platforms, whether historic transaction data can be queried to identify any flows touching these entities, and whether the software's automated alerts can surface relationships to the HTX deposit address cited in the Chainalysis analysis.
Firms using digital asset accounting software that does not integrate with a live sanctions screening feed, or that cannot run retrospective address-matching queries, face a genuine gap. The $308 million figure traced through a single HTX deposit address illustrates that a single shared infrastructure point can implicate a wide range of downstream counterparties. Ledger-level transaction data, not just counterparty name matching, is now the minimum standard for defensible compliance.
Reporting Obligations Under OFSI
UK-regulated firms, including accountants registered with a professional body for anti-money laundering supervision, are required to report to OFSI if they know or have reasonable cause to suspect that they hold funds or economic resources belonging to a designated person. The discovery of any historic transaction touching these newly designated platforms could trigger that obligation. Firms should treat this sanctions action as a prompt to run an immediate screening exercise across client portfolios and document the outcome, regardless of whether the result is clear.
Implications for Individual Filers and Personal Accounts
For individuals who have used any of the five designated platforms, the position is serious. Holding, transferring, or receiving funds through a designated entity without an OFSI licence is a criminal offence in the UK. This applies even if the individual was unaware of the designation at the time the transaction occurred, though in practice prosecutors consider knowledge when deciding whether to bring criminal rather than civil proceedings.
If you have transacted through TokenSpot, Grinex, Meer, Cryptomus, or Heleket, the prudent steps are to stop all activity on those platforms immediately, preserve complete transaction records, and take legal advice before making any disclosure. Self-reporting to OFSI is a recognised mitigating factor in penalty determinations, but the framing of that disclosure matters.
On the tax side, any assets currently held on a newly designated platform may be effectively frozen pending further regulatory action. HMRC's position on the tax treatment of frozen or inaccessible crypto assets has not been tested directly against sanctions freezes, but the general principle is that disposal does not occur until ownership or control is lost in a legally conclusive sense. Filers with assets on these platforms should flag the position to their adviser and document the facts clearly before any return is filed.
The Broader Pattern: Kyrgyzstan as a Sanctions Evasion Hub
Three of the five designated platforms have Kyrgyzstani links, which reflects a broader pattern that Western regulators have been tracking since 2022. Kyrgyzstan sits outside the main Western sanctions regimes and has seen a significant increase in crypto exchange registrations since Russia's full-scale invasion of Ukraine began. Platforms operating in that jurisdiction are not automatically sanctioned, but their presence on a geography-based risk matrix should now be weighted more heavily by compliance teams conducting enhanced due diligence on digital asset counterparties.
The parallel growth of Russia's ruble-backed digital asset activity, which reportedly reached $110 billion in cumulative on-chain transactions up to June of this year, indicates that the demand for sanctions-evasion infrastructure is not diminishing. Enforcement actions like this week's UK designations remove specific nodes, but the underlying network adapts. Compliance postures built around static name lists rather than dynamic transaction monitoring will struggle to keep pace.
Practical Next Steps for Compliance Teams
Immediate Actions
Firms should take the following steps without delay. First, add all five designated platforms and their known wallet addresses to internal sanctions screening lists. Second, run a retrospective query across all client and firm accounts to identify any historic transactions touching these entities or the HTX deposit address identified in the Chainalysis analysis. Third, document the methodology and outcome of that exercise as evidence of a proactive compliance response. Fourth, if any positive matches are found, escalate to the Money Laundering Reporting Officer and take legal advice on OFSI reporting obligations before any deadline passes.
Medium-Term Controls
Beyond the immediate response, this action points to a structural need: crypto bookkeeping software and compliance tooling must be connected to a live, authoritative sanctions feed that captures OFSI, OFAC, and EU designations in near real time. Relying on periodic manual updates to a static list is no longer defensible given the frequency with which new designations are being issued across multiple jurisdictions. Firms advising clients on digital asset accounting should also review whether client-facing onboarding questionnaires ask specifically about the use of lesser-known exchanges and payment processors, not just the major centralised platforms.
The UK's designation of these five platforms is also a signal to the wider industry that blockchain analytics evidence is now routinely used to support enforcement actions. Firms that have not yet integrated on-chain data analysis into their AML workflow should treat this action as a catalyst for that investment.
For context on how similar enforcement patterns are developing in other jurisdictions, see our earlier coverage of Japan's sanctions against Garantex and the cross-border AML implications for firms, and our analysis of AML red flags that compliance teams must know when dealing with crypto bridge activity.
Frequently Asked Questions
Are UK sanctions against these platforms relevant to firms outside the UK?
UK sanctions have extraterritorial reach in certain circumstances, particularly where a firm has a UK-nexus, a UK-incorporated entity, UK nationals involved, or sterling-denominated flows. Non-UK firms should also check whether their own jurisdiction's sanctions list has been updated: coordinated designations across the UK, EU, and US are common in Russia-related enforcement actions, and a platform not yet designated in one jurisdiction may be named shortly after a UK action.
What should a firm do if a client has funds frozen on one of these platforms?
The firm's first obligation is to document the facts and assess whether the situation creates a reporting obligation to OFSI or a Suspicious Activity Report obligation under the Proceeds of Crime Act 2002. Clients should be advised not to attempt to move funds through alternative channels without first obtaining legal advice, as that could constitute a further breach. The firm itself should not facilitate any transaction designed to circumvent the freeze.
Does the HTX connection automatically implicate all HTX users?
Not automatically. The Chainalysis finding relates to a specific deposit address used by the three designated platforms. However, any firm or individual who transacted directly with those designated platforms through HTX should treat that as a flag requiring investigation. The broader HTX designation of its operator, Huobi Global, creates a separate question that depends on the specific legal structure of each transaction.
How does this affect the tax treatment of assets held on designated platforms?
HMRC has not issued specific guidance on the tax treatment of assets frozen as a result of sanctions designations. The general position is that a disposal for Capital Gains Tax purposes requires a change in beneficial ownership or the permanent loss of an asset. A sanctions freeze does not in itself constitute a disposal, but the position should be kept under review and disclosed to a tax adviser. Assets that become permanently inaccessible may eventually qualify for a negligible value claim, but that is a separate process with its own evidentiary requirements.
Is using a non-designated exchange based in Kyrgyzstan a sanctions risk?
Geography alone does not create a sanctions breach, but it is a relevant risk factor. The FCDO's focus on Kyrgyzstan-linked platforms should prompt enhanced due diligence on any exchange or payment processor based in that jurisdiction, including a review of its ownership structure, its AML framework, and its known counterparty relationships. Where enhanced due diligence cannot produce a satisfactory risk assessment, the prudent course is to avoid or exit the relationship.
Source: Cointelegraph Regulation | UK Foreign, Commonwealth and Development Office (FCDO)