MABOnChain
Educational content only. Nothing on this site is financial advice.
Home / Regulation / UK Sanctions Cryptomus, TokenSpot and Three More Crypto Platforms Over Russian Sanctions Evasion
Regulation

UK Sanctions Cryptomus, TokenSpot and Three More Crypto Platforms Over Russian Sanctions Evasion

By MABOnChain Desk · Published · Updated · 4 min read

Editorial digital-art illustration of a cracked Union Jack dissolving into blockchain chains wrapping a bank vault and a shadow oil tanker, gold coins leaking through the cracks on a dark navy background

Published October 8, 2026, 18:00 UTC. Reporting via the UK Foreign Office sanctions announcement, TRM Labs on-chain figures reported by The Block and BBX, and The Crypto Times.

The United Kingdom sanctioned five cryptocurrency and payment platforms on Thursday, October 8, accusing them of helping Russia move money around Western financial restrictions, according to the sanctions package announced by the Foreign, Commonwealth & Development Office.

The $950 million trail

The named platforms are the crypto exchanges Cryptomus, Heleket, VexPay and TokenSpot, plus the payment service Tsunami Payments, The Crypto Times reported. The UK sanctions notice lists Cryptomus and Heleket under Xeltox Enterprises Ltd, VexPay under OJSC Processing KG, and TokenSpot under TokenSpot CJSC. British authorities said some of the platforms are linked to Kyrgyzstan, and one individual was included in the package.

The crypto targets sit inside a wider package covering 38 individuals and entities tied to Russia's oil trade, financial networks and military supply chains. The Foreign Office said two of the entities have processed or helped facilitate transactions with the A7 illicit finance network, the Kremlin-linked payment system London says Russia uses to move money outside the normal financial system and dodge sanctions.

On-chain figures reported by The Block, citing blockchain analytics firm TRM Labs, show the scale of the money movement. TokenSpot transferred more than $950 million to the already sanctioned exchanges Grinex and Garantex and to the A7 network, while Cryptomus received $204 million in transactions with Garantex and transferred $101 million onward.

Foreign Secretary Yvette Cooper said the UK was adapting its approach to the evolving tactics Russia uses to evade restrictions. "If the Kremlin thinks it can evade our sanctions by hiding behind crypto networks and shadow financial systems, it is gravely mistaken," she said.

The A7 network's $90 billion claim

The A7 network is the centerpiece of the UK's case. The government said the network claimed last year that it had moved more than $90 billion, an amount the UK said was roughly half of Russia's yearly military spending. The UK described A7 as being used to route funds, finance procurement and exploit foreign banking systems to evade restrictions.

Thursday's action builds on a May 2026 package in which the UK sanctioned the A7 network itself along with several crypto-related entities, including a Panama-based entity linked to the HTX exchange, then known as Huobi Global. In 2025, the UK had also acted against Kyrgyz-linked Grinex LLC and Old Vector LLC, two entities tied to infrastructure behind the A7A5 ruble-pegged stablecoin, which the authorities said had moved more than $9.3 billion in four months.

Oil, shadow tankers and missile parts

The crypto designations are one part of the package. The UK also sanctioned two Russian oil companies, Zarubezhneft and INK Capital, saying the move aims to reduce Russia's oil revenues and close routes that let sanctioned oil firms do business under different names. A further 12 oil tankers the UK describes as part of Russia's shadow fleet were added, bringing the number of sanctioned vessels above 600. The UK said many of the ships are more than 20 years old and use false flags and other deceptive shipping practices to move Russian oil.

Another 17 entities and individuals were sanctioned over the supply of goods the UK, US and EU consider important to Russia's war effort, including machine tools and electronics used to produce missiles and drones. The UK said some of the goods are routed through third countries to hide their connection to Russia.

This article is news reporting and is not investment advice.

Sources

Not financial advice. This content is for information and education only. See our disclaimer, editorial policy and disclosures.

MABOnChain Daily Brief

The key crypto and markets stories in one short, plain-language email. Free. Unsubscribe any time.

Loading the signup form…

Prefer chat? Join us on Telegram

Keep reading

DeFi

Chainlink Launches CCIP Vault Adapters, Lets Vaults Take Deposits From 80+ Chains

October 8, 2026 · 4 min read

Chainlink launched CCIP Vault Adapters on October 8, a tool that lets DeFi vaults accept one-click deposits from more than 80 blockchains while keeping strategy and accounting on a single hub chain. Aave, Lombard, Maple and World Liberty Financial are named early adopters, and the stock adapter for standard ERC-4626 vaults deploys in a single transaction.

DeFi

SecondFi Opens Recovery Portal After $21M Hack, Offers Victims 30 ADA Per Lost NFT

October 8, 2026 · 4 min read

SecondFi has opened a recovery portal for victims of its $21 million June hack, but stolen NFTs that cannot be returned earn a flat 30 ADA, about $7.60, each. Payouts are estimated from an incident snapshot of the June exploit, SecondFi warns the final amounts may differ, and security firm NS3.AI reports the official guide asks victims to type their exploited wallet's recovery phrase into SecondFi's webpage.

Regulation

U.S. Government Moves $770M in Seized Bitcoin to Coinbase Prime, Including $200M From Unknown Holdings

October 8, 2026 · 4 min read

Galaxy Research's October 7 on-chain analysis shows U.S. government-linked wallets sent 9,261 BTC worth about $770 million to Coinbase Prime across October 6 and 7. Nearly half came from funds recovered from the 2016 Bitfinex hack and another portion from known Binance seizures, but 2,456 BTC worth roughly $204 million arrived from wallets never before attributed to the government, which Galaxy said may represent new law enforcement seizures. The transfers do not confirm a sale, and no DOJ or Marshals statement has confirmed a new seizure.

DeFi

79thVault Loses $12.5M as Compromised Operator Key Drains 79AU Liquidity Pool

October 8, 2026 · 4 min read

A wallet holding the OPERATOR_ROLE on 79thVault's 79AU token contract moved 2.01 million tokens out of the project's main PancakeSwap liquidity pool on October 7, sold them back into the same pool across about 95 swaps, and walked away with 16,249 BNB worth roughly $12.5 million. Security monitors call it a suspected private key compromise or insider action; 79thVault has only posted a vague 'system upgrade' notice.