Cryptomus and Heleket Share One UK Sanctions ID, and That Changes the Switching Math

The UK sanctioned Cryptomus and Heleket on Oct. 8, 2026, and it did so under one name: Xeltox Enterprises Ltd., unique ID RUS3755. That detail matters more than either brand. Switching from one checkout provider to the other isn't a change of counterparty. it's a change of signage.

The Foreign, Commonwealth &. Development Office lists Cryptomus, Heleket and Certa Payments Ltd. as variations on Xeltox. The measures attached to that listing are the full stack: asset freeze, trust-services restrictions, director disqualification, internet-services sanctions, and correspondent-banking and payment-processing prohibitions. UK credit and financial institutions can't open or continue correspondent relationships with the entity, and they can't process payments to, from or through it. The same extends to firms Xeltox owns or controls.

Control is the part merchants keep underestimating. OFSI's test isn't a brand registry. It's more than 50% of shares or voting rights, the power to appoint or remove a majority of directors, or a reasonable expectation that someone can direct an entity's affairs. An exchange nobody has heard of can sit inside the perimeter because of who's behind it. Read the attestation. Then read it again, because the corporate name on the invoice tells you less than the ownership chain behind it.

Routing is a separate question from ownership, and that's where the story gets interesting. Chainalysis traced downstream funds from TokenSpot, Grinex and Meer converging on a single HTX deposit address that received more than $308 million. TokenSpot carries its own Oct. 8 designation, RUS3758. No observation period was given, no per-exchange breakdown, and no tie between that endpoint and the Cryptomus group has been established. But the pattern is the point. Different front doors, same hallway.

Canada got there first and harder. FINTRAC confirmed a C$176,960,190 administrative monetary penalty on Oct. 16, 2025, covering 2,593 contraventions across six violation types, including failures to file suspicious-transaction reports and to comply with the Iran directive. Xeltox appealed to the Federal Court. That record is public and it predates the UK action by nearly a year.

For anyone holding a balance, permission and execution are two different problems. An exception applies automatically when its conditions are met. A license is written permission, and general licenses carry conditions, get amended and get revoked. The UK's Oct. 8 addition to the general-license index covers Zarubezhneft's wind-down, not crypto payment processors. Nothing in it moves a Cryptomus balance.

So the operator matters as much as the name on the checkout page, and a switch that doesn't change the legal entity isn't a switch at all. It's the same designation wearing a new logo.