UK Targets Cryptomus, Heleket, TokenSpot in New Russian Sanctions

### Executive summary Chainalysis finds that UK-designated crypto payment processors Cryptomus and Heleket and Kyrgyz exchange TokenSpot acted as major payment hubs for illicit activity and sanctions evasion, receiving funds from thousands of illicit actors (including ransomware groups and flows linked to North Korea’s Lazarus Group) and funneling large sums—linked with the A7A5 network and HTX deposit addresses—into Russia’s wartime economy; the report highlights weak AML/KYC controls, on-chain convergence of funds, forum advertising, and regulatory penalties.