Russia crypto shadow network sidesteps sanctions crackdown

TLDR

A new blockchain analytics report says a Russia-linked crypto shadow network is still moving large volumes around Western sanctions.

1. Elliptic identifies five platforms, including ABCeX, Exmo, Bitpapa, Rapira and Aifory Pro, routing ruble-to-crypto flows and stablecoins to sanctioned entities.
2. Crackdowns on Garantex and Bitpapa have shifted, not stopped, activity, with ABCeX alone processing at least 11 billion dollars and illicit crypto addresses taking in over 150 billion dollars in 2025.
3. EU officials are considering a blanket ban on Russia-related crypto transactions while Russia moves to license domestic platforms, raising future compliance and stablecoin risk for crypto users.

Deep Dive

1. How The Shadow Network Operates

Elliptics latest report highlights five Russia-linked exchanges that together form a sanctions-evasion infrastructure: ABCeX, Exmo, Bitpapa, Rapira and Aifory Pro. The report is summarized in coverage on Russia-linked exchanges bypassing sanctions.

Bitpapa, a peer to peer platform already sanctioned by OFAC since March 2024, sends about 9.7 percent of its outgoing funds to sanctioned entities and rotates wallet addresses to avoid detection. ABCeX, operating from Moscows Federation Tower (formerly used by sanctioned exchange Garantex), has handled at least 11 billion dollars in crypto, with flows to Garantex and cash-to-crypto service Aifory Pro.

Exmo claimed it exited Russia in 2022 but reportedly still shares custodial wallets with Exmo.me and has sent over 19.5 million dollars to sanctioned platforms such as Garantex, Grinex and Chatex. Rapira has transferred more than 72 million dollars to Grinex, while Aifory Pro runs cash to crypto kiosks and virtual USDT cards from Moscow, Dubai and Turkey, including nearly 2 million dollars traced to Iranian exchange Abantether, according to additional reporting.

2. Why Crackdowns Have Limited Effect

Sanctions have removed specific nodes, notably Garantex and now Bitpapa, but Elliptic and others find volume simply migrates to less regulated venues. After Garantexs shutdown, activity increased at ABCeX, Rapira and Aifory Pro instead of declining.

TRM Labs data cited in a CoinsKid community article shows illicit actors received about 141 billion dollars via stablecoins in 2025, with 86 percent tied to sanctions related activity and roughly half concentrated in a ruble pegged token A7A5 within a Russia linked network called A7. This suggests stablecoins and over the counter style cash services are now core plumbing for sanctions evasion, not a side channel.

3. Policy And Market Responses To Watch

European officials are debating a blanket ban on crypto transactions involving Russia, according to Elliptics summary and regional coverage. At the same time, Russia is exploring licensing domestic platforms instead of banning them, aiming to keep crypto rails under local control.

For global users and platforms, the main risks are tighter know your customer checks, more aggressive screening of ruble pairs and Russia related flows, and potential restrictions on certain stablecoins if they are closely tied to sanctioned ecosystems. Centralized exchanges that serve Western users may feel pressure to sever any indirect links to the highlighted platforms, even when those links run through intermediaries.

Conclusion

Russias crypto shadow network shows how adaptable sanctions evasion can be when ruble to crypto gateways, OTC cash services and stablecoins are combined. Western crackdowns have closed some doors but pushed flows into a denser, more opaque cluster of platforms. For the wider crypto market, the likely response is not a blanket ban on crypto itself, but steadily tighter controls around cross border flows, high risk regions and stablecoin infrastructure that touches the sanctioned Russian ecosystem.