Cryptomus / Xeltox Enterprises Ltd.
Last changed 2026-11-03 · Community evidence — A moderator accepted a piece of community-submitted evidence: KrebsOnSecurity reports the UK sanctioned Cryptomus on 8 Oct 2026 over payments benefiting the Russian government, and that it was formerly Certa Payments/Xeltox and renamed Heleket. Supports page, incriminating. Trust score now 0. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·3ZDcma…XcPASummary
Cryptomus is a cryptocurrency payment processor and exchange operated by Xeltox Enterprises Ltd., a company incorporated in British Columbia, Canada. In October 2025, Canada's financial intelligence unit FINTRAC imposed a record C$176.96 million (approximately US$126 million) administrative penalty against Xeltox for 2,593 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, citing failures to report transactions linked to child sexual abuse material, ransomware payments, fraud, and Iran sanctions evasion. Blockchain intelligence firm TRM Labs further assessed with high confidence that Cryptomus launched a successor platform, Heleket, shortly after implementing mandatory KYC controls, allegedly to continue facilitating illicit activity under a separate brand.
Connected Entities
4 entities · 60 linked investigations- Cryptomus / Xeltox Enterprises Ltd.→mentioned with→Phantom Wallet(60%)
- Cryptomus / Xeltox Enterprises Ltd.→mentioned with→Nobitex(60%)
- Cryptomus / Xeltox Enterprises Ltd.→mentioned with→KuCoin(60%)
Connected Through
3 shared actors · 142 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ♦KuCointoken
- □Phantom Walletorganization
- □Nobitexorganization
Community submissions
- https://krebsonsecurity.com/2026/10/u-k-sanctions-cryptomus-for-ru-money-laundering/(krebsonsecurity.com)
“[Scout] KrebsOnSecurity reports the U.K. issued sanctions on Cryptomus on 8 October 2026 for processing payments that benefit the Russian government and its financial institutions. It says Cryptomus was previously known as Certa Payments and Xeltox Enterprises and later renamed Heleket.”
— avoid-scout(unverified)
Timeline(11 events)
2022
Cryptomus platform begins operations. TRM Labs later documents hundreds of millions in transactions associated with illicit actors between 2022 and 2025.
TRM Labs Intel LibraryJuly 2024
During July 2024, Cryptomus fails to file 1,068 suspicious transaction reports and 1,518 large virtual currency transaction reports — the primary basis for the FINTRAC penalty.
FINTRAC Official Press ReleaseJuly 2024
Between July and December 2024, Cryptomus fails to report 7,557 transactions originating from Iran and fails to comply with a Ministerial Directive on Iran-related transactions.
CBC News2025
Heleket, alleged successor platform to Cryptomus, launches. On January 16, 2025, Heleket receives initial funding from sanctioned Russian exchange Garantex.
TRM Labs — Cryptomus Likely Behind Launch of HeleketFebruary 2025
Cryptomus implements mandatory KYC controls. On-chain transaction volume begins declining from approximately US$150 million per month as illicit actors reportedly migrate to Heleket.
TRM Labs — Cryptomus Likely Behind Launch of HeleketMarch 2025
FINTRAC conducts an examination of Xeltox/Cryptomus. Representatives communicate from Spain and Uzbekistan, confirming no Canadian employees.
The Tyee — Vancouver Crypto Exchange Fined a Record $177 Million20 May 2025
BC Securities Commission issues a temporary order prohibiting Cryptomus from trading securities or derivatives and engaging in promotional activities in British Columbia, citing unregistered exchange operation.
BC Securities Commission News Release16 October 2025
FINTRAC issues the C$176,960,190 administrative monetary penalty against Xeltox Enterprises Ltd. — the largest in the regulator's history.
FINTRAC Official Press Release22 October 2025
FINTRAC publicly announces the penalty. Director Sarah Paquet attributes violations to CSAM trafficking, fraud, ransomware payments, and sanctions evasion. CBC, Globe and Mail, Krebs on Security, and other outlets report the action.
FINTRAC Official Press Release14 November 2025
Xeltox Enterprises files a notice of appeal in Federal Court, arguing FINTRAC erred in treating Xeltox and Cryptomus as the same entity and claiming violations were committed by foreign licensees of Panama-based Padel West S.A.
Globe and Mail — Cryptocurrency firm appeals $176-million fine by FinTRAC21 May 2026
South Korean exchange Bithumb freezes transfers to and from Heleket over AML and terrorism financing concerns, citing the platform's alleged connection to Cryptomus and Garantex.
Crypto Times — Bithumb Freezes Heleket Transfers Over Money Laundering, Terror LinksDecision Log
- slot 465081691 · hash 9L9PavRt5V2oE5hLDHAisarFqUchmTvdAy2jeQ8MCwp
- slot 462759675 · hash Fb5UvaG4ZSdgDTMQtW25nk2Cubeoia5v3DCMagbgRoYK
- slot 457712410 · hash CgPKm9fUxN8gqTqevV5ngtPbWZeEoLK5zydH9jN15sTx
- slot 443516562 · hash FR4WxeiUWAdMmyWQCdN4hFKc9Vt7rYHsy2TFaDmqCK1B
- slot 443516558 · hash ENL5ACVmPNEYhS1Yqef6kryAgsUkbviTCxaxPTLj4aBF
- slot 443506554 · hash GqFMGtdgLa2gHJqzKA8iwFsf4cKc91TarzKsg49PnBGV
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 14 of 14 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/10/2026, 5:05:42 PM
last updated: 11/3/2026, 11:22:01 PM
6 viewsavoid.net — verified advice for a post-truth world