The European Commission on June 9, 2026, proposed its 21st sanctions package against Russia, including transaction bans on 11 unnamed crypto platforms and over 35 Russian banks. The package introduces, for the first time, a mechanism to impose a blanket ban on crypto-asset services originating fr...
The European Commission on June 9, 2026, proposed its 21st sanctions package against Russia, including transaction bans on 11 unnamed crypto platforms and over 35 Russian banks. The package introduces, for the first time, a mechanism to impose a blanket ban on crypto-asset services originating from entire third-country jurisdictions — a tool with no precedent in EU sanctions law.
The crypto provisions land weeks after the UK sanctioned HTX (formerly Huobi) on May 26 for alleged ties to Russian evasion networks, and less than two months after the EU's own 20th package imposed a sectoral prohibition on all transactions with Russian-based crypto service providers. Taken together, the three actions represent the most concentrated regulatory assault on crypto-facilitated sanctions evasion in the history of the asset class. The measures also arrive 22 days before the July 1 MiCA transition deadline, after which unlicensed crypto firms face mandatory cessation of EU operations.
Chainalysis's 2026 Crypto Crime Report quantified the scale of the problem: sanctioned entities received $104 billion in cryptocurrency in 2025, a 694% year-over-year surge. Russia's A7A5 stablecoin alone processed $93.3 billion within its first year of operation, functioning as a purpose-built settlement rail for sanctioned businesses.
The 21st sanctions package targets approximately 90 banks — a record for a single EU sanctions round — resulting in over half of Russia's internationally connected lenders facing asset freezes and transaction bans. Within this broader set, 35 banks and 11 crypto platforms are subject to expanded restrictions covering global operations.
The European Commission has not publicly named the 11 crypto platforms, leaving exchanges, compliance teams, and sanctions lawyers waiting for the final legal text. The package still requires unanimous approval from EU member states before taking effect. According to reporting from the Organized Crime and Corruption Reporting Project (OCCRP), a "mini-package" of preliminary measures may arrive by mid-June, with the full package expected by mid-July.
Beyond named entities, the package introduces a structural mechanism: the power to impose a complete ban on crypto-asset services from any third country whose platforms facilitate sanctions circumvention. This transforms the EU's sanctions toolkit from a list-based approach — targeting specific entities — to a jurisdiction-wide approach. Under this framework, all crypto service providers in a flagged jurisdiction would be prohibited from transacting with EU persons, regardless of individual compliance records.
Additional measures in the package include:
The EU's escalation is a direct response to data showing that crypto-based sanctions evasion has moved from a marginal nuisance to a systemically significant financial channel.
Chainalysis's 2026 Crypto Crime Report, published in March 2026, found that sanctioned entities received $104 billion in cryptocurrency in 2025, up 694% from the prior year. Total illicit crypto transaction volume reached $154 billion, meaning sanctions-linked flows accounted for 67.5% of all illicit crypto activity. The report characterized the shift as "industrialized" — organized crime groups and nation-state actors now operate blockchain-based supply chains at a scale comparable to traditional financial infrastructure.
The single largest vector is A7A5, a ruble-denominated stablecoin launched in mid-2024 by the A7 payments network. According to Chainalysis, A7A5 processed $93.3 billion in transactions within its first year, serving as a settlement rail for sanctioned Russian businesses to access international markets. More recent estimates place cumulative A7A5 volume at $119.7 billion.
The A7 network itself — a cluster of wallets and entities associated with Russian state-aligned financial infrastructure — is linked to at least $39 billion in flows during 2025 alone, according to on-chain analysis cited in the Chainalysis report.
Separately, the Russian exchange Garantex, previously sanctioned by the U.S. Treasury in April 2022, processed over $100 billion in total transactions, with 82% of volume linked to sanctioned entities, according to TRM Labs' 2026 Crypto Crime Report.
The UK's Office of Financial Sanctions Implementation (OFSI) sanctioned Huobi Global S.A. — the Panama-based entity behind the HTX exchange — on May 26, 2026. It was one of the largest crypto exchanges ever directly sanctioned by a Western government.
The UK sanctions package targeted 18 entities and individuals, including HTX, Rapira Group LLC, Aifory LLC, Arvix LLC, and Bitpapa IC FZC LLC, for providing "financial services to A7 Limited Liability Company," a sanctioned Russian payments network.
On-chain data cited by researchers flags HTX as having processed $21.06 billion in high-risk crypto transactions from 2021 through May 2026, of which approximately $7.64 billion involved Russian high-risk actors and darknet marketplaces. Major crypto exchanges, including Coinbase and Binance, reportedly increased transfer scrutiny with HTX within 24 hours of the UK announcement.
HTX has denied the core allegations, stating the sanctioned entity (Huobi Global S.A.) is separate from HTX's current operations. A public statement from the exchange argued that the UK's sanctioning rationale "conflates distinct entities."
The UK also designated the A7A5 stablecoin and its issuer, applying banking-style asset-freeze obligations to crypto entities for the first time under UK law.
The 21st package builds on structural changes introduced in the EU's 20th sanctions package, adopted by the Council on April 23, 2026, with crypto-specific provisions taking effect May 24.
The 20th package enacted three measures:
Sectoral ban on Russian CASPs: A blanket prohibition on EU persons transacting with any crypto-asset service provider established in Russia — regardless of whether that specific provider is named on a sanctions list. This replaced the prior entity-by-entity approach.
Specific asset bans: RUBx and the digital ruble (Russia's central bank digital currency) were added to the EU's Annex LIII list of banned crypto-assets. The digital ruble ban is preemptive, designed to close a circumvention channel ahead of Russia's planned CBDC rollout in September 2026.
Extension to decentralized platforms: The measures explicitly cover decentralized protocols — a notable expansion indicating Brussels is moving beyond centralized exchange targeting.
The 20th package contained 120 new designations, making it the largest EU sanctions round in two years. According to Elliptic, the measures shifted compliance obligations from screening against named entities to maintaining continuous awareness of counterparty geography — a fundamentally different operational requirement.
The sanctions escalation coincides with the end of the MiCA (Markets in Crypto-Assets Regulation) transitional period on July 1, 2026. After that date, any entity providing crypto-asset services in the EU without a full CASP (Crypto-Asset Service Provider) authorization is in breach of EU law and must cease operations.
According to CCN, approximately 83% of EU crypto firms remain unlicensed as of June 2026. Of the 1,200-plus entities that held pre-MiCA national VASP registrations, only about 210 have converted to full CASP authorization — a conversion rate of roughly 17%.
Major exchanges that have secured MiCA licenses include Kraken, Coinbase, Bitstamp, Bitpanda, OKX, and Crypto.com. Penalties for non-compliance include fines of up to EUR 5 million or 3% of total annual turnover, whichever is higher. France's AMF has warned that continued unlicensed operation after July 1 may trigger criminal prosecution, carrying up to two years' imprisonment and a EUR 30,000 fine under French law.
The convergence of the MiCA deadline with expanded sanctions enforcement creates a dual compliance pressure point. Firms that are both unlicensed under MiCA and inadequately screening for sanctions exposure face compounding legal risk across two separate regulatory frameworks.
The shift from entity-based to jurisdiction-based sanctions fundamentally changes compliance architecture for crypto service providers operating in or serving EU customers.
Immediate operational requirements:
The practical effect is that the compliance cost of serving EU customers has increased materially. Firms without dedicated sanctions compliance infrastructure face a binary choice: invest in screening technology or exit the EU market.
The EU's 21st sanctions package represents a structural escalation in how sovereign regulators approach crypto-facilitated sanctions evasion. The shift from targeting named entities to threatening jurisdiction-wide bans introduces a deterrence mechanism that extends Brussels' regulatory reach beyond its own borders.
The data supports the escalation. At $104 billion in sanctioned-entity crypto flows in 2025, the scale of evasion is no longer compatible with entity-by-entity enforcement. A7A5's $93.3 billion in throughput within a single year demonstrates that state-backed stablecoin infrastructure can replicate — and in some cases exceed — the settlement capacity of traditional banking rails.
For the crypto industry, the compliance implications are concrete and immediate. The convergence of expanded sanctions, the MiCA licensing deadline, and the UK's parallel enforcement actions against HTX creates a regulatory environment in which the cost of EU market access is rising rapidly. Firms that lack geographic screening, token-level monitoring, and jurisdictional risk assessment capabilities face either significant investment or market exit.
The 21st package awaits unanimous member-state approval. The unnamed 11 platforms await identification in the final legal text. The industry awaits clarity on which third-country jurisdictions, if any, will face the full-ban mechanism. In the interim, compliance teams are operating against an expanding set of obligations with an incomplete regulatory picture — a condition likely to persist through mid-July.