Canada Slaps $176 Million fine on Crypto Firm Linked to Russian Cybercrime
A Canadian regulatory agency has levied a record $176 million fine against Cryptomus, a digital payments platform accused of facilitating financial transactions for illicit activities, including those connected to Russia. The penalty underscores growing concerns about the use of cryptocurrency to launder funds linked to serious crimes and evade international sanctions.
The Financial Transactions and Reports Analysis Center of Canada (FINTRAC) imposed the $176,960,190 penalty on Xeltox Enterprises Ltd., operating as Cryptomus, on October 16. According to the agency, Cryptomus repeatedly failed to submit reports on suspicious transactions when there was reasonable evidence suggesting the funds were tied to criminal enterprises.
These enterprises include those involved in the trafficking of child sexual abuse material, fraud, ransomware payments, and the circumvention of sanctions. “Given that numerous violations in this case were connected to trafficking in child sexual abuse material, fraud, ransomware payments and sanctions evasion, FINTRAC was compelled to take this unprecedented enforcement action,” stated a regulatory agency spokesperson.
The examination, building on reporting by researcher jason Sanders, revealed that Cryptomus served as a critical infrastructure provider for a vast network of illicit online services. these included:
- Account Sales: Platforms such as verif[.]work and kopeechka[.]store selling aged email, financial, and social media accounts.
- Anonymity services: Providers like crazyrdp[.]com and rdp[.]monster offering proxy services to mask user identities.
- Anonymous interaction: Services including anonsim[.]net and smsboss[.]pro providing untraceable SMS messaging.
Sanders’s research identified at least 56 cryptocurrency exchanges operating through Cryptomus, including entities like casher[.]su, grumbot[.]com, flymoney[.]biz, obama[.]ru, and swop[.]is. These platforms, largely geared towards Russian speakers, facilitated anonymous cryptocurrency swaps and, critically, allowed for the exchange of cryptocurrency for cash deposited into accounts at major Russian banks – many of which are currently subject to Western sanctions.
A Cost of Doing Business?
When reached for comment regarding FINTRAC’s action, Sanders expressed surprise at the length of time it took for regulators to intervene. “I have no idea why they don’t just sanction them or prosecute them,” he told KrebsOnSecurity. “I’m not let down with the fine amount but it’s also just going to be the cost of doing business to them.”
the $176 million fine represents a significant escalation in FINTRAC’s enforcement efforts. Last year, the agency issued 23 penalties totaling less then $26 million. However, Sanders argues that much work remains to be done in targeting other shadowy money service businesses (MSBs) registered in Canada that may be serving as money laundering fronts for entities based in Russia and iran.
Widespread Registration, Questionable Presence
Further investigations by CTV National News and the Investigative Journalism Foundation (IJF) in July 2024 revealed a concerning trend: the widespread practice of multiple MSBs registering at the same address, frequently enough without the knowledge or consent of the property’s occupants.
The parent company of Cryptomus, Xeltox Enterprises, was found to be associated with at least 76 foreign currency dealers, eight MSBs, and six cryptocurrency exchanges at a single Vancouver address. This address is a three-story building formerly occupied by a bank,now housing a massage therapy clinic and a co-working space. Investigators found no evidence that any of the registered MSBs or currency dealers were utilizing services at the co-working space.
Similarly,reporters uncovered a cluster of 97 MSBs registered at a commercial office suite in ontario,with no evidence of any actual business activity taking place at the location.
The case of Cryptomus serves as a stark reminder of the challenges regulators face in combating the use of cryptocurrency for illicit purposes and the need for increased vigilance in monitoring the activities of MSBs operating within Canada’s financial system. The significant fine levied against Cryptomus signals a commitment to addressing these challenges, but, as one analyst noted, it may only be the first step in a much larger effort to dismantle the networks that enable financial crime.
