The European Union's blanket ban on all crypto transactions with Russian and Belarusian service providers took effect on May 24, 2026. Two days later, on May 26, the United Kingdom sanctioned 18 entities and individuals comprising the "A7 network," including HTX (formerly Huobi), one of the world...
"Our stablecoin has a good chance to stay competitive even after the sanctions are lifted." — Oleg Ogienko, Executive, A7A5
The European Union's blanket ban on all crypto transactions with Russian and Belarusian service providers took effect on May 24, 2026. Two days later, on May 26, the United Kingdom sanctioned 18 entities and individuals comprising the "A7 network," including HTX (formerly Huobi), one of the world's largest crypto exchanges by volume. Together, the actions represent the most aggressive coordinated Western effort to sever Russia's crypto-based sanctions evasion infrastructure — a pipeline that moved an estimated $93.3 billion through the ruble-pegged A7A5 stablecoin alone in 2025, according to Chainalysis.
The measures mark a doctrinal shift. Rather than targeting individual wallets or platforms — a strategy the EU itself acknowledged as ineffective — regulators are now banning entire categories of service providers by jurisdiction of incorporation. The approach effectively treats Russia-based crypto-asset service providers (CASPs) the way traditional financial sanctions treat banks: as a sector to be cut off, not a list to be managed.
The timing is deliberate. Russia's central bank plans to launch the digital ruble on September 1, 2026, and both the EU and UK frameworks include preemptive bans on the CBDC and its supporting infrastructure, closing what regulators view as the next circumvention channel before it opens.
The Council of the European Union adopted the 20th sanctions package against Russia on April 23, 2026. The crypto-specific provisions applied from May 24, 2026.
The core measure is a total sectoral ban: every EU person and EU-licensed crypto firm is now legally prohibited from transacting with any crypto-asset service provider established in Russia or Belarus. The ban extends to decentralized trading platforms operated from those jurisdictions. This is the first time the EU has imposed a blanket prohibition on an entire category of crypto service providers tied to a specific country.
Specific assets were also blacklisted. RUBx, a ruble-backed stablecoin issued by Rosbank, and the digital ruble were added to Annex LIII of the sanctions regulation, joining A7A5, which was banned under the 19th sanctions package in October 2025. All open positions, custody arrangements, and unsettled trades with Russian or Belarusian providers had to be closed by EU close of business on May 24.
The regulation also prohibits netting transactions with Russian agents — a technical but consequential provision. Netting arrangements had been identified as a structural vehicle for obscuring the true counterparties of Russia-linked transactions, effectively allowing layering techniques within blockchain transaction flows.
The EU also designated Meer.kg (doing business as TengriCoin), a Kyrgyzstani exchange where significant volumes of A7A5 are traded, extending enforcement extraterritorially into Central Asian jurisdictions that have served as relay points for sanctioned flows.
On May 26, 2026, the UK Foreign Commonwealth and Development Office (FCDO) sanctioned 18 entities and individuals under the Russia sanctions regime. The targets comprise what British officials call the "A7 network" — a group of companies and individuals that the government says moved $90 billion into Russia's economy using crypto in 2025, equivalent to more than half of the country's annual military budget.
The most prominent target is HTX (formerly Huobi). Huobi Global S.A., a Panamanian entity operating HTX, was designated for allegedly channeling over $1.5 billion to Russia, helping the regime bypass international trade blockades. HTX processed $3.3 trillion in global trading volume in 2025. On May 27, HTX rejected the allegations, stating it had refused to list the A7A5 stablecoin, according to CoinDesk.
Other designated entities include EXMO Exchange, Rapira Group, and Bitpapa — all accused of facilitating transactions with previously sanctioned Russian entities. According to Chainalysis, Bitpapa, ABCeX, Rapira, and Aifory Pro collectively processed billions of dollars in crypto, with ABCeX alone handling at least $11 billion.
Britain applied banking-style sanctions to crypto exchanges for the first time. UK financial firms must freeze funds and trace transactions associated with designated entities. Any assets HTX holds within British jurisdiction are locked, and the exchange can no longer legally move money through UK-connected financial infrastructure.
A7A5, a ruble-pegged stablecoin linked to sanctioned Russian defense bank Promsvyazbank, sits at the center of the enforcement actions. According to Chainalysis' 2026 Crypto Crime Report, released March 5, 2026, A7A5 facilitated $93.3 billion in transactions in just 10 months during 2025. The token has processed $119.7 billion to date.
For context, $93 billion is equivalent to roughly one-third of Russia's entire imports bill. The stablecoin functions as a purpose-built settlement rail designed to bridge sanctioned Russian businesses into the global financial system. OFAC and OFSI first designated entities tied to A7A5 in August 2025, followed by the European Commission's 19th sanctions package in October 2025, which banned transactions in A7A5 itself.
Despite multilateral sanctions, A7A5 maintains a market cap of approximately $500 million, according to CoinGecko data. The token's operators have pivoted to DeFi infrastructure after centralized exchanges rejected listing applications. On May 24, 2026 — the same day the EU ban took effect — CoinDesk reported that A7A5 executives claim the stablecoin can survive even if sanctions are lifted, citing faster settlement times, yield linked to Russia's high interest rates, and regional crypto infrastructure.
Stablecoins now account for approximately 84% of illicit transaction volume globally, according to Chainalysis, reflecting how sanctioned actors increasingly rely on liquid, dollar- or ruble-pegged assets to move funds across borders.
The EU's shift to sector-wide bans was driven by a specific lesson: Garantex.
Garantex Europe OU was a Moscow-linked crypto exchange that facilitated over $100 million in transactions linked to illicit activities. On March 6, 2025, the U.S. Secret Service, partnering with German and Finnish law enforcement, seized its web domain and froze over $26 million in cryptocurrency.
Within months, Garantex migrated its customer base and funds to a successor exchange, Grinex, which resumed operations with near-identical infrastructure. Grinex was subsequently sanctioned by OFAC, the UK, and the EU. On April 16, 2026, Grinex announced it had suspended operations after a cyberattack resulting in the theft of approximately $15 million (over 1 billion rubles). The platform attributed the attack to "state-backed actors from unfriendly states," though analysts at TRM Labs and Elliptic noted that the on-chain behavior — frantic swapping from stablecoins to decentralized tokens — resembled standard laundering patterns rather than a state-sponsored operation.
The Garantex-to-Grinex migration demonstrated that designating individual platforms produces a game of whack-a-mole. The EU explicitly cited this ineffectiveness when justifying the sectoral approach: "further listings would result in new successor platforms," the Council stated.
Both the EU and UK measures include provisions targeting Russia's planned central bank digital currency. The Bank of Russia confirmed that the large-scale introduction of the digital ruble will begin on September 1, 2026. Under the phased rollout, Russia's largest banks and merchants with annual revenue above ₽120 million (approximately $1.5 million) must accept digital ruble payments from that date. Full rollout is expected by 2028.
The EU's 20th package added the digital ruble to its prohibited assets list effective May 24, 2026 — more than three months before the CBDC launches. The ban also prohibits all EU support for the development of the digital ruble. This is the first preemptive ban on a sovereign CBDC in sanctions history.
The rationale is explicit: Russia has promoted the digital ruble as a way to modernize payments and reduce reliance on Western payment networks. Cross-border use cases — particularly in bilateral trade with countries that have not joined the Western sanctions regime — represent a direct circumvention channel. By banning the asset before launch, the EU aims to prevent integration with any EU-connected financial infrastructure from the outset.
For EU-licensed CASPs operating under MiCA, the 20th sanctions package imposes requirements that mirror traditional banking compliance obligations.
Counterparty screening: CASPs must systematically assess exposure to crypto-assets, stablecoins, and decentralized platforms for indirect Russian and Belarusian links. This assessment extends beyond direct counterparties to include indirect exposure via liquidity provision, technology services, and smart-contract interactions.
Geo-blocking and KYC: Robust geo-blocking, enhanced KYC, and counterparty controls are now required — not recommended. CASPs that fail to implement these controls face the same enforcement risk as banks that process sanctioned transactions.
Senior management accountability: Governance frameworks must reflect parity between CASPs and traditional financial institutions. Senior management accountability for sanctions compliance is, per the regulatory guidance accompanying the package, "no longer optional but increasingly expected as a core regulatory obligation," according to analysis from Squire Patton Boggs.
Netting prohibition: The ban on netting transactions with Russian agents requires CASPs to audit settlement processes for indirect exposure. This is particularly relevant for market makers and liquidity providers operating across multiple venues.
In the UK, the banking-style designation of HTX sets a precedent. Any UK-based financial institution or payment processor that continues to service designated entities faces criminal liability. The practical effect: UK compliance teams must now screen for 18 new crypto-related entities in real-time, a capability many smaller CASPs may lack.
The coordinated EU-UK actions of May 24-26, 2026 represent the highest-water mark for crypto sanctions enforcement. The policy shift — from targeting individual platforms to banning entire jurisdictional categories of service providers — reflects a frank acknowledgment that previous approaches failed to contain Russia's crypto evasion infrastructure, which moved at least $93 billion through a single stablecoin in 2025.
The open question is whether the sectoral approach works any better. A7A5's operators are already pivoting to DeFi infrastructure that operates without centralized intermediaries. Decentralized exchanges, cross-chain bridges, and privacy protocols remain outside the direct reach of entity-based sanctions. The digital ruble, even if banned preemptively in EU markets, could still function as a settlement layer for Russia's bilateral trade with non-sanctioned jurisdictions.
The compliance burden falls squarely on EU and UK crypto firms, which must now implement banking-grade controls — including smart-contract-level counterparty screening — or face enforcement action. For a sector that has historically operated with lighter regulatory touch, the gap between requirement and capability is substantial. The next test is whether MiCA-supervised firms can operationalize these controls before the next enforcement cycle, or whether the compliance gap itself becomes a vulnerability.