Britain's Foreign, Commonwealth & Development Office placed crypto payment brands Cryptomus and Heleket under the same sanctions designation on Oct. 8, 2026, naming Xeltox Enterprises Ltd. as the target. The notice lists Cryptomus, Heleket and Certa Payments Ltd. as variations of Xeltox's name under unique ID RUS3755. The UK says it has reasonable grounds to suspect Xeltox has supported or benefited from Russia's government through the Russian financial-services sector, citing its ownership of Cryptomus and activity linked to and continued through Heleket.
One company, three trading names
The designation treats the brands as one entity rather than separate operations. That matters because the restrictions attach to Xeltox itself — any UK person or company dealing with Cryptomus, Heleket or Certa Payments is now dealing with a designated person. The notice also says the banking measure extends to credit or financial institutions owned or controlled by the designated person, which pulls in subsidiaries rather than stopping at the parent.
Asset freezes and trust-services restrictions are the headline measures. Director disqualification and correspondent-banking restrictions follow. For the banking piece specifically, UK credit and financial institutions can't establish or continue correspondent relationships with Xeltox and can't process payments to, from or through it.
The internet piece is unusual
Most crypto sanctions stories start and end with asset freezes. This one includes an internet-services measure that obligates social-media platforms, internet-access providers and app stores to take reasonable steps to keep UK users from reaching content, websites or applications supplied by the designated person. That's a broader enforcement surface than a bank freeze, and it puts the compliance burden on intermediaries that don't typically handle sanctions screening.
OFSI guidance notes that cryptoassets fall within the broad definitions of funds and economic resources under UK financial sanctions. The rules apply to people and activities within UK territory, plus UK nationals and entities established under UK law wherever they operate. Ownership and control tests include holding more than 50% of shares or voting rights, the right to appoint or remove a majority of directors, or a reasonable expectation that a person can ensure an entity conducts its affairs according to their wishes.
TokenSpot gets its own ID
TokenSpot CJSC also received an Oct. 8 designation, with its own reference RUS3758 and the same categories of restrictions. The entry designates a separate entity from Xeltox — worth noting because the two arrived on the same day and could be conflated. The UK's sanctions framework distinguishes an exception, which applies automatically when its defined conditions are met, from a license that grants written permission for otherwise prohibited activity. General licenses come with conditions and can expire, be amended or be revoked.
OFSI's Oct. 8 additions included a Zarubezhneft wind-down license covering that oil company and its owned or controlled subsidiaries. There's also a return-of-funds licensing ground for designated money-services businesses that requires UK registration for money-laundering purposes, alongside other conditions. Canadian registration alone doesn't meet the requirement.
Chainalysis tracks the flows
Blockchain analytics firm Chainalysis reported in analysis published the same day that downstream funds from TokenSpot, Grinex and Meer converged on a single HTX deposit address. That address has received more than $308 million in aggregate, according to Chainalysis. The figure is the address's total receipts, not a time-bounded sum — the analysis gives no observation period and no exchange-by-exchange breakdown. Some services reached the address through intermediary wallets, which adds hops to any tracing effort.
The UK action doesn't mention HTX or the Chainalysis findings. Xeltox, TokenSpot, Grinex and Meer all appear in the sanctions context separately from the exchange-side analysis. Whether the HTX address gets pulled into any future designation isn't addressed in the Oct. 8 notices.
The next concrete step is OFSI's licensing posture. Anyone holding funds tied to Xeltox or TokenSpot will need to check whether an exception applies or apply for a license — and the general licenses already issued this week show the office is willing to carve out wind-down paths on a case-by-case basis.
