An exchange can change its name, move users to a second brand or route payments through an affiliated processor. Compliance screening becomes much harder when the legal company on a sanctions list is not the name customers recognize on a website.
That problem runs through the UK's October 8 Russia-related sanctions package. The government announced 38 new designations across oil, military supply chains and financial networks, including three crypto exchanges and two payment platforms it suspects of helping Russia evade restrictions. The announcement says two of the targeted services facilitated transactions with the A7 network. The network's claim that it moved more than $90 billion in 2025 is a claim cited by the government, not an independently audited total.
For crypto compliance teams, the most consequential detail is how names, corporate entities and financial infrastructure overlap.
Cryptomus and Heleket: one listing can cover several names
Blockchain-intelligence company TRM Labs identifies Xeltox Enterprises Ltd as the designated legal entity associated with Cryptomus, Heleket and Certa Payments. A screening system that checks only the public-facing Cryptomus brand can miss the corporate-name match. Conversely, it would be careless to assume that any service with a similar name or a historical transaction link is necessarily a separately designated entity.
TRM assessed before the new UK action that Cryptomus and Heleket were operationally linked, pointing to similarities in infrastructure, personnel and business operations. That is a blockchain-analytics assessment, distinct from the legally authoritative UK designation and its aliases.
The distinction may sound technical, but it determines how an institution investigates a possible match. The relevant questions are whether the counterparty is the listed person, an alias, an entity owned or controlled by a listed person, or merely a wallet that interacted with a tagged address at some point. Those cases call for different evidence and different legal analysis.
TokenSpot and the reconstruction of payment routes
The sanctions also include Kyrgyzstan-based TokenSpot and payment businesses such as Tsunami Payments and Processing KG. TRM links TokenSpot to Grinex and describes common infrastructure, shared addresses and connections to the A7 network. In its October analysis, TRM estimated that TokenSpot sent roughly $679.5 million to A7 and received $48.5 million from it over the examined period.
Those amounts are attributed onchain analytics, not figures announced as independently audited totals by the UK government. Transaction history can help an investigator find relevant counterparties, but it does not prove that every customer using a service knowingly participated in sanctions evasion.
A financial institution reviewing exposure will need to map corporate identity, named aliases, ownership and control, time periods and payment flows. Blanket rules based on a single wallet hop may generate false positives, particularly where pooled deposit addresses or service providers handle funds for many unrelated users.
There is also a practical question of continuity. Sanctions can cut a venue's access to payment processors, banks, custodians and institutional counterparties even while its blockchain addresses remain technically capable of receiving transfers. Services may reappear under different names or migrate to new operational arrangements. That is precisely why screening cannot stop at yesterday's list of website brands.
The operating consequence
Firms subject to UK restrictions should consult the current UK government sanctions information and applicable official list entries, rather than treating an analytics vendor's classification as a substitute for a legal determination. Other jurisdictions may impose different obligations. Where exposure is suspected, documented human review remains essential.
The October 8 package marks another step away from targeting prominent exchange names alone. It focuses attention on the payment and settlement relationships through which sanctioned networks can maintain access to funds. The operational challenge for legitimate businesses is to follow those relationships accurately without turning every indirect blockchain connection into an accusation.
