From the journal

UK Applies Russia Sanctions to Crypto Exchanges Under Regulation 17A, 26 May 2026

On 26 May 2026, the UK Office of Financial Sanctions Implementation applied Regulation 17A(2) of the Russia (Sanctions) (EU Exit) Regulations 2019 to designated crypto-asset exchanges for the first time, sanctioning 18 entities including HTX (formerly Huobi). UK financial institutions and virtual asset service providers are prohibited from processing transfers with designated exchanges. HTX is alleged to have channeled over USD 1.5 billion to Russian counterparties.

2 min read

On 26 May 2026, the UK government published its 26th Russia sanctions package, designating 18 entities under the Russia (Sanctions) (EU Exit) Regulations 2019 and applying Regulation 17A(2) to designated crypto-asset exchanges for the first time. Regulation 17A had previously been applied only to correspondent banking relationships with sanctioned Russian banks; this package extends the instrument to virtual asset service providers, marking a shift in UK sanctions enforcement toward the crypto sector.

Regulation 17A(2) of the Russia (Sanctions) (EU Exit) Regulations 2019 prohibits UK credit institutions, financial institutions, and virtual asset service providers from processing inbound or outbound transfers with any entity designated under that provision. The exchange HTX (formerly Huobi) was designated on grounds that it allegedly channeled over USD 1.5 billion to Russian counterparties. A ruble stablecoin issuer and other entities linked to the Kremlin-backed A7 payments network were also designated in the same package.

UK-authorised banks, payment service providers, and registered crypto-asset firms must screen all incoming deposits against the designation list and trace prior transfer hops to identify exposure to a designated exchange. Outbound transfers require assessment of the intended transfer path before processing. Firms that conduct correspondent relationships with or route payments through designated entities face criminal penalties under the Sanctions and Anti-Money Laundering Act 2018.

The A7 payments network, which British officials allege processed proceeds from Russian oil sales and supported military procurement, is the primary targeting rationale for this package. The Office of Financial Sanctions Implementation has not yet published specific technical guidance on the tracing standard for crypto-asset transfers under Regulation 17A, requiring virtual asset service providers to apply existing blockchain analytics and AML risk frameworks pending further guidance.

Licentium advises crypto-asset businesses and financial institutions on UK and EU sanctions compliance obligations. Firms with exposure to sanctioned jurisdictions or counterparties are invited to contact us. Work we undertake includes VASP sanctions screening programme design, OFSI designation analysis, transaction monitoring calibration for crypto assets, and multi-jurisdictional sanctions risk assessment.

Source: UK Government, UK cracks down on backdoor Russian sanctions evasion with tough new measures, GOV.UK, 26 May 2026

Crypto Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.