The European Union's blanket ban on all Russian and Belarusian crypto-asset service providers (CASPs) took effect on May 24, 2026. The measure, adopted under the 20th sanctions package on April 23, marks the first time a major jurisdiction has imposed a sectoral prohibition on an entire country's...
"Russia is becoming increasingly reliant on cryptocurrencies for international transactions." — Council of the European Union, 20th Sanctions Package Preamble
The European Union's blanket ban on all Russian and Belarusian crypto-asset service providers (CASPs) took effect on May 24, 2026. The measure, adopted under the 20th sanctions package on April 23, marks the first time a major jurisdiction has imposed a sectoral prohibition on an entire country's crypto ecosystem rather than targeting individual platforms.
The shift follows documented failure of entity-level designations. After law enforcement seized $26 million from Garantex in March 2025, successor platforms — Grinex, MKAN Coin, Exved — appeared within days. The EU's own regulatory text acknowledged that "any further listing of individual crypto asset service providers is therefore likely to result in the set-up of new ones to circumvent those listings."
The package also preemptively bans Russia's digital ruble CBDC and the RUBx stablecoin ahead of Moscow's planned September 2026 nationwide rollout — closing a circumvention channel before it opens. Background data from Chainalysis shows sanctioned entities moved $104 billion in crypto during 2025, a 694% year-over-year increase driven primarily by the A7A5 ruble-pegged stablecoin, which processed $93.3 billion in under 12 months.
Prior EU sanctions packages targeted individual entities. The 19th package (October 2025) designated A7A5, Grinex, and specific exchanges. The 20th package abandoned this approach entirely.
Effective May 24, 2026, EU Regulation prohibits:
The regulation applies extraterritorially to EU persons globally. A parallel framework under the Belarus sanctions regime imposes equivalent restrictions, extended through February 28, 2027.
Three specific crypto assets were added to Annex LIII (prohibited instruments): the digital ruble, RUBx, and the Belarusian digital ruble — joining A7A5, which was listed under the 19th package in November 2025.
The package also designated 120 individuals and entities, imposed transaction bans on 20 Russian banks, and sanctioned four third-country financial institutions connected to Russia's SPFS messaging network (the SWIFT alternative). An additional 46 shadow-fleet vessels were added, bringing the total to 632.
A7A5 is a ruble-pegged stablecoin issued by Old Vector, a Kyrgyzstan-registered company. A7, the fintech entity behind it, is 49% owned by Promsvyazbank — a Russian state-owned bank sanctioned by Western nations for its role financing Russia's defense sector.
According to Chainalysis, A7A5 has processed $119.7 billion in cumulative transactions since launch. It crossed $100 billion in cumulative volume by January 2026, less than one year after its mid-2024 debut. Key metrics:
| Metric | Value | |--------|-------| | Cumulative volume | $119.7 billion | | Volume in first year | $93.3 billion | | Peak daily volume | $1.5 billion | | Current daily volume | ~$500 million | | Active accounts | 41,000+ | | Total transfers | ~250,000 |
TRM Labs identified that approximately 34% of A7A5 trading volume was artificially inflated through wash trading. Even adjusted for this, the stablecoin moved an estimated $60+ billion in genuine transaction volume in under a year.
According to TRM Labs' 2026 Crypto Crime Report, $72 billion of the $93 billion in sanctioned-entity inflows during 2025 was attributable to A7A5 alone. The stablecoin functioned as a purpose-built settlement rail designed to bridge sanctioned Russian businesses into the global financial system, primarily facilitating cross-border trade in energy, dual-use technology, and consumer goods.
New issuance of A7A5 stalled after July 2025, following OFAC designation in August 2025. Daily volumes fell from peaks above $1.5 billion to approximately $500 million — a decline, but not an elimination.
The lifecycle of Garantex illustrates why the EU shifted to sectoral bans.
March 2025: The U.S. Secret Service, partnering with German and Finnish authorities, seized Garantex's infrastructure. Over $26 million in crypto was frozen. The exchange had processed an estimated $96 billion since 2019, according to U.S. Treasury data.
Days later: Former Garantex operators launched Grinex, registered in Kyrgyzstan. Former customers received A7A5 credits equivalent to their frozen balances, redeemable on the new platform.
March 2025: OFAC sanctioned Grinex. August 2025: UK sanctions followed. October 2025: EU 19th package designation.
April 16, 2026: Grinex announced suspension of operations, claiming over 1 billion rubles ($13.1 million) in user funds were stolen by "special services of unfriendly states." Elliptic noted the exchange had also spawned additional successor networks including MKAN Coin and Exved.
The EU regulation text itself acknowledged the pattern: designating operators individually did not stop them. Each designation triggered a new entity within days. The sectoral approach aims to make the legal framework jurisdiction-based rather than entity-based — any future Russian CASP is automatically prohibited without requiring a new designation cycle.
Russia's Central Bank confirmed a full digital ruble deployment target of September 1, 2026. The rollout was postponed from July 2025 due to technical integration difficulties. The phased schedule:
The EU's decision to ban the digital ruble three months before its planned launch is a preemptive measure. The regulation prohibits not only transactions in the digital ruble but also any EU-person involvement in supporting its development or deployment.
Russia has positioned the CBDC as a tool for de-dollarization and sanctions circumvention, enabling direct energy trade settlements outside the SWIFT system. The EU ban aims to close this channel before it becomes operational at scale. The Belarusian digital ruble receives identical treatment under the parallel Belarus sanctions framework.
The 20th package marks the first activation of the EU's anti-circumvention tool against a specific third country. Kyrgyzstan was targeted based on evidence that dual-use goods and crypto infrastructure were being routed through the country to benefit Russian entities.
Specific measures:
The pressure appears to have produced results. On May 19, 2026, Kyrgyzstan's Ministry of Justice blocked the operations of 50 companies for involvement in business with likely ties to sanctioned partners — the first time the country had shuttered companies over cooperation with sanctioned entities.
Chainalysis flagged additional jurisdictions of concern for sanctions evasion routing: the UAE, Uzbekistan, Kazakhstan, and China. Whether similar anti-circumvention measures will be applied to these jurisdictions remains unclear.
The sectoral ban materially changes the compliance burden for EU-regulated crypto firms. Prior sanctions required screening against specific entity lists. The new framework requires jurisdictional screening — identifying whether a counterparty CASP is established in Russia or Belarus, regardless of its designation status.
According to analysis by Elliptic and Chainalysis, compliance teams must now:
The EU's Anti-Money Laundering Regulation (AMLR), applying to CASPs from July 10, 2027, will further harmonize sanctions-evasion risk into customer due diligence and enhanced due diligence frameworks. Morgan Lewis noted that senior management accountability for sanctions compliance is "no longer optional but increasingly expected as a core regulatory obligation."
The cost implications are significant. CASPs must now maintain capabilities equivalent to bank-grade sanctions controls — a compliance infrastructure investment that smaller EU exchanges may struggle to absorb.
The 20th sanctions package represents a structural shift in how jurisdictions approach crypto-related sanctions enforcement. Entity-level designations proved insufficient against an adversary willing to spin up replacement platforms within days. The sectoral approach — banning all CASPs from a jurisdiction rather than specific ones — addresses this directly, though enforcement against decentralized protocols and peer-to-peer transactions remains an open question.
The scale of the problem is documented: $104 billion in sanctioned crypto flows in 2025, with A7A5 alone accounting for more than two-thirds. Whether a jurisdictional ban proves more effective than individual designations will depend largely on enforcement capacity and the willingness to extend anti-circumvention measures to intermediary countries beyond Kyrgyzstan.
For EU-based exchanges, the compliance shift from entity screening to jurisdictional screening adds operational cost and complexity. The convergence with MiCA licensing requirements and the upcoming AMLR framework suggests that sanctions compliance is becoming a permanent structural cost of operating in European crypto markets — not unlike the compliance burden traditional financial institutions have absorbed over the past two decades.