← Cryptomus / Xeltox Enterprises Ltd.reviewed 2026-10-29 · 26 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Cryptomus / Xeltox Enterprises Ltd. against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
3 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #2[disputed][awaiting moderator]in section: FINTRAC Record Penalty (C$176.96 Million)
“The penalty, publicly announced on October 22, 2025, is the largest ever levied by FINTRAC and dwarfs the previous record of approximately C$20 million imposed on KuCoin operator Peken Global Ltd. in September 2024.”
reviewerThe penalty is the largest ever levied by FINTRAC and dwarfs the previous record of approximately C$20 million imposed on KuCoin operator Peken Global Ltd. in September 2024.The dollar figure (~C$20M) is correct, but the date is wrong by a full year: the prior FINTRAC record (Peken Global/KuCoin) was imposed in July 2025 and announced in September 2025, not September 2024.Proposed correction (not yet applied)The penalty, publicly announced on October 22, 2025, is the largest ever levied by FINTRAC and dwarfs the previous record of approximately C$20 million imposed on KuCoin operator Peken Global Ltd. in September 2025. - #20[disputed][awaiting moderator]in section: Alleged Successor Platform: Heleket
“Heleket launched in January 2025, the same month Cryptomus began implementing mandatory KYC controls.”
reviewerHeleket launched in January 2025, the same month Cryptomus began implementing mandatory KYC controls.The cited TRM source explicitly separates these two events by a month: Heleket launched in January, KYC followed in February. The page's claim that they happened in 'the same month' contradicts its own cited source.Proposed correction (not yet applied)Heleket launched in January 2025, one month before Cryptomus began implementing mandatory KYC controls in February 2025. - #21[disputed][awaiting moderator]in the summary
“Blockchain intelligence firm TRM Labs further assessed with high confidence that Cryptomus launched a successor platform, Heleket, shortly after implementing mandatory KYC controls, allegedly to continue facilitating illicit activity under a separate brand.”
reviewerCryptomus launched successor platform Heleket shortly after implementing mandatory KYC controls, to continue facilitating illicit activity under a separate brand.Reverses the sequence found in the cited source: Heleket preceded the KYC rollout, not the other way around, which also matters for the 'to continue facilitating illicit activity' framing TRM uses (displacement in anticipation of KYC, not after it).Proposed correction (not yet applied)Blockchain intelligence firm TRM Labs further assessed with high confidence that Cryptomus launched a successor platform, Heleket, shortly before implementing mandatory KYC controls, allegedly to continue facilitating illicit activity under a separate brand.
unverifiable
3 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #8[unverifiable][awaiting moderator]in section: Illicit Actor Exposure: CSAM, Ransomware, Darknet, and Garantex
“TRM additionally identified at least 56 cryptocurrency exchanges on Cryptomus that facilitated cash-outs to sanctioned Russian banks.”
reviewerTRM identified at least 56 cryptocurrency exchanges on Cryptomus that facilitated cash-outs to sanctioned Russian banks.Could not find this specific figure in the cited source or via independent search. The broader Garantex-exposure claim in the same sentence is well supported, but this specific '56 exchanges' statistic is not traceable to any source I could access. - #16[unverifiable][awaiting moderator]in section: Corporate Structure and Phantom Canadian Presence
“A subsequent address in Vancouver's Olympic Village neighbourhood was shared by four other money services businesses.”
reviewerA subsequent address in Vancouver's Olympic Village neighbourhood was shared by four other money services businesses.The Olympic Village address change itself is confirmed by The Tyee, but the specific figure of 'four other money services businesses' sharing it could not be located in either cited source or via independent search. - #22[unverifiable][awaiting moderator]in the timeline
“On January 16, 2025, Heleket receives initial funding from sanctioned Russian exchange Garantex.”
reviewerOn January 16, 2025, Heleket receives initial funding from sanctioned Russian exchange Garantex.The month (January 2025) and the Garantex link are confirmed, but the specific day (the 16th) is an unsupported addition of precision not found in the cited source or elsewhere.
partially supported
3 claimsThe cited evidence supports part of the claim but not all of it.
- #12[partially supported][awaiting moderator]in section: Corporate Structure and Phantom Canadian Presence
“Its sole listed director is Sabina Salim Kizi Berdieva, a citizen of Bukhara, Uzbekistan.”
reviewerXeltox's sole listed director is Sabina Salim Kizi Berdieva, a citizen of Bukhara, Uzbekistan.The director's full name and Uzbekistan residency are confirmed exactly. The specific city 'Bukhara' could not be verified in any source I accessed and may be an unsupported addition of precision. - #13[partially supported][awaiting moderator]in section: Corporate Structure and Phantom Canadian Presence
“The founder of the Cryptomus platform is Sanjar Berdiev, also an Uzbekistani national based in Tashkent.”
reviewerThe founder of Cryptomus is Sanjar Berdiev, an Uzbekistani national based in Tashkent.Name and nationality confirmed; 'based in Tashkent' is an unsupported added detail not found in the cited source or elsewhere. - #18[partially supported][awaiting moderator]in section: Federal Court Appeal and Corporate Separation Defense
“The appeal contends the alleged violations were committed by 'foreign licensees' of the Cryptomus platform with no connection to Canada, over which Xeltox had 'no knowledge or control.'”
reviewerThe appeal contends violations were committed by 'foreign licensees' with no connection to Canada, over which Xeltox had 'no knowledge or control.'The 'no knowledge or control' quote and the general argument are supported, but the specific quoted term 'foreign licensees' is not attested in the cited Globe and Mail article, which uses 'other licensees' instead. This may be a mischaracterization or drawn from a source not cited.
confirmed
17 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: FINTRAC Record Penalty (C$176.96 Million)
“On October 16, 2025, the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed an administrative monetary penalty of C$176,960,190 on Xeltox Enterprises Ltd., operating as Cryptomus.”
reviewerFINTRAC imposed a C$176,960,190 administrative monetary penalty on Xeltox Enterprises Ltd. (Cryptomus) on October 16, 2025, publicly announced October 22, 2025.Directly confirmed by the primary regulatory source. - #3[confirmed][no action needed]in section: FINTRAC Record Penalty (C$176.96 Million)
“FINTRAC Director and CEO Sarah Paquet stated: 'Given that numerous violations in this case were connected to trafficking in child sexual abuse material, fraud, ransomware payments and sanctions evasion, FINTRAC was compelled to take this unprecedented enforcement action.'”
reviewerFINTRAC Director and CEO Sarah Paquet stated that numerous violations were connected to CSAM trafficking, fraud, ransomware payments and sanctions evasion, compelling unprecedented enforcement action.Exact quote confirmed. - #4[confirmed][no action needed]in section: AML Violations: Suspicious Transaction Reporting Failures
“The most numerically significant failures occurred in July 2024 alone: Cryptomus failed to file 1,068 required suspicious transaction reports and 1,518 large virtual currency transaction reports for transactions of C$10,000 or more.”
reviewerFINTRAC found six categories of violations totaling 2,593 breaches, with 1,068 unfiled suspicious transaction reports and 1,518 unfiled large virtual currency transaction reports in July 2024 alone.Figures and categorization confirmed by the primary source and corroborating press coverage. - #5[confirmed][no action needed]in section: Iran Sanctions Evasion and Ministerial Directive Non-Compliance
“Between July and December 2024, the platform failed to report 7,557 transactions originating from Iran, failed to treat those transactions as high-risk, and did not verify sender or beneficiary identities or conduct required enhanced due diligence.”
reviewerBetween July and December 2024, Cryptomus failed to report 7,557 transactions originating from Iran, in violation of a Ministerial Directive.Confirmed via multiple independent news sources quoting FINTRAC's findings (direct CBC fetch was blocked by a 403, so corroboration came from other reputable outlets reporting the same FINTRAC figure). - #6[confirmed][no action needed]in section: Iran Sanctions Evasion and Ministerial Directive Non-Compliance
“Blockchain intelligence firm TRM Labs independently identified over 75,000 transactions between Cryptomus and Iranian cryptocurrency exchanges, including more than 50,000 with Nobitex alone — Iran's largest domestic crypto exchange.”
reviewerTRM Labs identified over 75,000 transactions between Cryptomus and Iranian cryptocurrency exchanges, including more than 50,000 with Nobitex alone.Confirmed verbatim against the cited TRM source. - #7[confirmed][no action needed]in section: Illicit Actor Exposure: CSAM, Ransomware, Darknet, and Garantex
“TRM Labs documented that between 2022 and 2025, Cryptomus processed hundreds of millions of US dollars in transactions associated with child sexual abuse material vendors, terrorist financing networks, human trafficking operations, and sanctions evasion networks.”
reviewerBetween 2022 and 2025, Cryptomus processed hundreds of millions of US dollars in transactions associated with CSAM vendors, terrorist financing networks, human trafficking operations, and sanctions evasion networks.Confirmed. - #9[confirmed][no action needed]in section: Illicit Actor Exposure: CSAM, Ransomware, Darknet, and Garantex
“Krebs on Security documented 122 illicit services that used Cryptomus as a payment processor, including bulletproof hosting providers, aged account marketplaces, proxy and anonymity services, and anonymous SMS platforms.”
reviewerKrebs on Security documented 122 illicit services that used Cryptomus as a payment processor.Confirmed against the cited Krebs article. - #10[confirmed][no action needed]in section: BC Securities Commission Temporary Order
“On May 20, 2025, the British Columbia Securities Commission (BCSC) issued a temporary order against Xeltox Enterprises Ltd. operating as Cryptomus, finding that the platform may have been violating registration requirements of the Securities Act (British Columbia) and operating as an unrecognized exchange.”
reviewerOn May 20, 2025, the BCSC issued a temporary order against Xeltox/Cryptomus, prohibiting trading of securities/derivatives and promotional activities, citing possible unregistered exchange operation, set to expire June 4, 2025.Confirmed verbatim against the primary regulatory source. - #11[confirmed][no action needed]in section: Corporate Structure and Phantom Canadian Presence
“Xeltox Enterprises Ltd. is incorporated in British Columbia and was previously known as Certa Payments Ltd.”
reviewerXeltox Enterprises Ltd. was previously known as Certa Payments Ltd.The two sources cited directly on the page do not state this explicitly in the text I could retrieve, but it is independently corroborated by the later UK sanctions designation, which lists Certa Payments Ltd. as a prior/alternate name for the same entity. - #14[confirmed][no action needed]in section: Corporate Structure and Phantom Canadian Presence
“During a March 2025 FINTRAC examination, Xeltox representatives communicated from Spain and Uzbekistan and confirmed the company had no employees working in Canada.”
reviewerDuring a March 2025 FINTRAC examination, Xeltox representatives communicated from Spain and Uzbekistan and confirmed no employees working in Canada.Confirmed. - #15[confirmed][no action needed]in section: Corporate Structure and Phantom Canadian Presence
“The company's originally listed Vancouver address — a downtown co-working space — was found by Krebs on Security to be a mail-drop shared by at least 76 foreign currency dealers, 8 money service businesses, and 6 cryptocurrency exchanges, none of which were physically present.”
reviewerThe company's originally listed Vancouver address was a mail-drop shared by at least 76 foreign currency dealers, 8 money service businesses, and 6 cryptocurrency exchanges.Confirmed verbatim. - #17[confirmed][no action needed]in section: Federal Court Appeal and Corporate Separation Defense
“On November 14, 2025, Xeltox Enterprises filed a notice of appeal in Federal Court challenging the FINTRAC penalty.”
reviewerOn November 14, 2025, Xeltox Enterprises filed a notice of appeal in Federal Court, arguing FINTRAC erred by treating Xeltox and Cryptomus as the same entity, and asserting it merely licenses the platform from Padel West S.A., a Panama company.Confirmed. - #19[confirmed][no action needed]in section: Federal Court Appeal and Corporate Separation Defense
“To support claims of financial hardship, Xeltox reported only US$150,000 in assets and US$983,000 in gross revenue for January-February 2025. FINTRAC disputed these figures, estimating based on blockchain transaction analysis that Cryptomus generated between US$15.4 million and US$77.2 million in profits over three years.”
reviewerXeltox reported US$150,000 in assets and US$983,000 in gross revenue for January-February 2025; FINTRAC estimated Cryptomus generated between US$15.4 million and US$77.2 million in profits over three years.Confirmed, with a minor caveat that the cited article does not explicitly label the profit-estimate currency, though the page's USD framing is consistent with its other dollar figures. - #23[confirmed][no action needed]in section: Alleged Successor Platform: Heleket
“On-chain analysis shows Cryptomus transaction volumes declining from approximately US$150 million in January 2025 to US$86 million in March 2025 as Heleket's volumes rose correspondingly, consistent with a user migration.”
reviewerCryptomus transaction volumes declined from approximately US$150 million in January 2025 to US$86 million in March 2025 as Heleket's volumes rose correspondingly.Confirmed, though TRM attributes the decline to KYC and regulatory scrutiny generally ('likely'), not solely to user migration; the page's framing is a reasonable but slightly more confident gloss on TRM's hedged language. - #24[confirmed][no action needed]in section: Alleged Successor Platform: Heleket
“Approximately 0.6% of Heleket's 2025 incoming transaction volume was identified as illicit — nearly five times the payment-processor industry average, with sanctions-related entities accounting for 60% of those illicit inflows.”
reviewerApproximately 0.6% of Heleket's 2025 incoming transaction volume was identified as illicit — nearly five times the payment-processor industry average, with sanctions-related entities accounting for 60% of illicit inflows.Confirmed verbatim against the cited source. - #25[confirmed][no action needed]in section: Alleged Successor Platform: Heleket
“South Korean exchange Bithumb subsequently froze transfers to and from Heleket over AML and terrorism financing concerns.”
reviewerSouth Korean exchange Bithumb subsequently froze transfers to and from Heleket over AML and terrorism financing concerns.Confirmed via independent corroborating sources; the cited URL itself could not be directly fetched (403 bot wall). - #26[confirmed][no action needed]in the timeline
“South Korean exchange Bithumb freezes transfers to and from Heleket over AML and terrorism financing concerns, citing the platform's alleged connection to Cryptomus and Garantex.”
reviewerSouth Korean exchange Bithumb froze Heleket transfers on/around May 21, 2026.Confirmed via independent sources.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.