The Council of the European Union adopted its 20th sanctions package against Russia on April 23, 2026, marking the first time crypto assets served as a primary enforcement target rather than an ancillary measure. The package imposes a blanket prohibition on all crypto-asset transactions with any ...
"We are standing firm. The EU just approved one of its strongest sanctions packages against Russia to date. We're cutting the Kremlin's war budget further, going after shadow fleet ships, their enablers, and limiting Russian banks' access to funding." — Kaja Kallas, EU High Representative for Foreign Affairs
The Council of the European Union adopted its 20th sanctions package against Russia on April 23, 2026, marking the first time crypto assets served as a primary enforcement target rather than an ancillary measure. The package imposes a blanket prohibition on all crypto-asset transactions with any provider established in Russia or Belarus, effective May 24, 2026. It bans two additional instruments — the RUBx stablecoin and the digital ruble — and shifts the compliance model from entity-level screening to jurisdictional exclusion.
The regulatory escalation follows a documented 694% surge in crypto-based sanctions evasion in 2025, according to Chainalysis. Sanctioned entities received approximately $104 billion in cryptocurrency during that year, driven largely by the ruble-pegged A7A5 stablecoin, which processed over $93 billion in under 12 months. TRM Labs' 2026 Crypto Crime Report placed total illicit crypto activity at $158 billion in 2025, with $93 billion tied to sanctioned jurisdictions. The EU's response — banning an entire jurisdictional category of crypto providers rather than naming individual platforms — represents a doctrinal shift in how sovereign regulators approach on-chain enforcement.
The 20th sanctions package, adopted April 23, 2026 by the Council of the European Union, introduces several crypto-specific prohibitions:
The measures take effect May 24, 2026. Market participants may complete existing contracts before that date.
The regulatory action is a direct response to the scale of crypto-based sanctions evasion documented by blockchain analytics firms throughout 2025 and early 2026.
Chainalysis data (2026 Crypto Crime Report): Sanctioned entities received approximately $104 billion in cryptocurrency in 2025, a 694% increase year-over-year. The surge was overwhelmingly concentrated in Russia-linked flows.
TRM Labs data (2026 Crypto Crime Report): Total illicit crypto activity reached $158 billion in 2025, up approximately 145% from 2024. Of that total, TRM estimates $93 billion was associated with sanctioned jurisdictions, entities, or networks. The illicit share of total crypto volume edged down to approximately 1.2% from 1.3%, reflecting faster growth in legitimate use.
Elliptic data (February 2026): The firm flagged multiple Russia-linked exchanges — including Bitpapa, ABCeX, Rapira, and Aifory Pro — as continuing to facilitate transactions for sanctioned entities. Elliptic estimated that roughly 9.7% of Bitpapa's outgoing crypto flows were sent to sanctioned entities.
These figures suggest that entity-by-entity designation was insufficient. As the EU's official language noted, "further listings would result in new successor platforms" — a direct reference to the Garantex-to-Grinex migration pattern.
At the center of the evasion infrastructure is A7A5, a ruble-pegged stablecoin launched in February 2025 and designed explicitly for cross-border settlement outside the traditional financial system.
Operator. A7, a Moscow-based company co-founded by Ilan Shor, a Moldovan oligarch wanted in Moldova for his role in a $1 billion bank theft. Russia granted Shor citizenship. Promsvyazbank (PSB), a sanctioned Russian state bank whose CEO is the son of former Russian Prime Minister Mikhail Fradkov, controls 49% of A7.
Volume. A7A5 processed over $93 billion in under 12 months following its launch. According to Elliptic, A7A5 crossed $100 billion in total transactions by early 2026. TRM Labs identified at least $39 billion in 2025 wallet activity directly linked to the A7 network cluster.
Function. A7A5 operates as a purpose-built settlement rail. According to the investigative outlet Proyekt, A7 accounts for approximately 15% of all cross-border monetary transactions involving Russia. The stablecoin is backed by deposits held at PSB and uses legal entities based in Kyrgyzstan.
On-chain links. TRM Labs documented over $2 billion in bidirectional exposure between A7, the sanctioned exchanges Garantex and Grinex, and multiple Kyrgyzstan-registered entities believed to be Garantex-affiliated.
A7A5 was first sanctioned by OFAC (U.S.) and added to the EU's Annex LIII under the 19th sanctions package in October 2025. The 20th package extends the ban to RUBx and the digital ruble.
The Garantex-Grinex sequence illustrates why the EU shifted to a sectoral ban.
Garantex was a Russia-based crypto exchange sanctioned by OFAC in 2022 for facilitating transactions involving ransomware proceeds and sanctioned entities. On March 6, 2025, the U.S. Secret Service — in partnership with German and Finnish law enforcement — seized Garantex's web domain and froze over $26 million in cryptocurrency.
Grinex launched almost immediately as Garantex's successor. On-chain analysis by both Chainalysis and TRM Labs confirmed continuity between the two platforms, including asset migration facilitated through the A7A5 stablecoin. Grinex was subsequently sanctioned by OFAC, the UK, and the EU.
April 2026 disruption. On April 16, 2026, Grinex announced it was suspending operations following a cyberattack that resulted in the loss of approximately $13.7 million (over 1 billion rubles). Grinex attributed the attack to "Western intelligence agencies," claiming it showed "an unprecedented level of resources and technology accessible only to entities of hostile states." No evidence was provided.
The EU cited this exact pattern in its rationale for the sectoral approach: individual designations generate successor platforms, so the 20th package bans the entire jurisdictional category.
The 20th package bans two instruments that had not yet reached significant transaction volumes but posed foreseeable evasion risk.
RUBx is a ruble-pegged stablecoin backed by Promsvyazbank, the same sanctioned state bank that co-owns A7. Its inclusion closes a potential successor channel to A7A5.
Digital ruble. Russia's central bank digital currency is planned for mass-market rollout in September 2026. The EU ban is pre-emptive — targeting the instrument before it becomes operational for cross-border settlement. The digital ruble, under Central Bank of Russia control, would offer a sovereign-grade settlement rail outside of SWIFT and correspondent banking. By banning EU participation before launch, the EU removes optionality.
The shift from entity-specific to jurisdictional bans fundamentally changes the compliance task for EU-regulated crypto firms, banks, and payment processors.
Before the 20th package: Compliance teams screened counterparties against named sanctions lists (SDN, Annex I, etc.). If a Russian exchange was not designated, transactions were permissible.
After the 20th package: Any crypto provider established in Russia or Belarus is banned, regardless of designation status. The compliance obligation shifts to identifying the operational nexus of counterparty providers — a jurisdictional determination, not a list-matching exercise.
For MiCA-regulated crypto-asset service providers, this means:
Firms that maintain counterparty relationships with providers in either jurisdiction must sever or suspend those connections by May 24.
The sectoral ban addresses the successor-platform problem but introduces new enforcement challenges.
Jurisdictional arbitrage. Russian-linked crypto operations have historically used Kyrgyz, Turkish, and UAE-based entities as fronts. The A7A5 network itself is registered in Kyrgyzstan. A sectoral ban on Russia-established providers may push activity further into third-country shells.
Attribution difficulty. Identifying whether a crypto platform is "established in" Russia when it uses distributed infrastructure, third-country legal entities, and pseudonymous operators requires capabilities that many EU compliance teams do not currently possess.
DeFi enforcement gap. Autonomous protocols without identifiable operators or jurisdictional presence present a structural enforcement challenge that entity-based or jurisdiction-based bans cannot fully address.
Volume displacement, not elimination. Chainalysis data on the Garantex-to-Grinex migration suggests that shutting one channel displaces volume rather than eliminating it. The same dynamic may apply at the jurisdictional level.
The EU's sectoral crypto ban against Russia represents the most aggressive regulatory action taken against a country's crypto infrastructure to date. It acknowledges, implicitly, that the prior approach — designating individual platforms and instruments — failed to contain a $104 billion evasion problem. The shift to jurisdictional exclusion closes the successor-platform loophole but opens new questions about enforcement against distributed, pseudonymous, and third-country operations. Blockchain analytics firms Chainalysis, TRM Labs, and Elliptic will serve as de facto enforcement infrastructure, as EU compliance teams depend on their tools to execute jurisdictional screening at scale. The May 24 deadline imposes an 18-day compliance window — tight for institutions with complex counterparty networks.