www.trmlabs.com U.K. Sanctions Cryptomus for Russian Money Laundering Activities
Article Content
- •U.K. sanctions target Cryptomus for facilitating Russian cybercrime.
- •Cryptomus has processed over $7 billion in illicit transactions since 2022.
- •The platform rebranded to Heleket after facing a significant fine in Canada.
On October 8, 2026, the U.K. imposed sanctions on Cryptomus, a cryptocurrency platform linked to Russian cybercrime, freezing its assets in U.K. banks. The platform, previously known as Certa Payments and Xeltox Enterprises, has processed over $7 billion in transactions since its inception in 2022, including payments for ransomware, narcotics, and human trafficking. The sanctions also target other payment platforms like VexPay and TokenSpot. Experts from Chainalysis noted that Cryptomus has become a significant hub for illicit financial activities, with over 900 illicit counterparties identified in late 2025. Following a record CAD $176 million fine from Canada in 2025 for anti-money laundering violations, Cryptomus rebranded to Heleket to continue operations without KYC compliance. The U.K. sanctions aim to disrupt the financial infrastructure supporting Russia's wartime economy.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Cryptomus in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the implications of the U.K. sanctions?
How much illicit activity is linked to Cryptomus?
What was the reason for the Canadian fine?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…