United Kingdom: Sanctions Architecture and Evasion

The UK's autonomous Russia sanctions regime added 26 designations and 12 specifications on 8 October 2026, directly naming the crypto exchange platform Cryptomus (operating as Heleket) and the payment platform Prime-Top as sanctions-evasion vectors. This is architecturally significant beyond the individual designations: it confirms the UK's designation authority is now reaching directly into crypto and payment infrastructure, not only into the designated persons and entities those rails might otherwise serve, which widens the practical screening perimeter for any regulated firm with exposure to Russia-adjacent crypto or payment activity.

The UK Sanctions List is now the sole authoritative designation record for this regime, the OFSI Consolidated List having been retired on 28 January 2026. A compliance function still relying on the legacy consolidated list, rather than the UK Sanctions List itself, would miss every designation made in the more than eight months since that retirement, including the 8 October round. This is a structural data-source risk distinct from the substantive designations themselves, and one that a screening programme built on outdated tooling would not surface on its own.

The UK's enhanced-due-diligence trigger under the Money Laundering Regulations 2017 has also narrowed structurally. Under regulation 33(1)(b) as amended, mandatory enhanced due diligence now applies only where a jurisdiction is a FATF call-for-action country. There is no longer a separate UK high-risk-third-countries list, and a jurisdiction's presence on the FATF grey list (increased monitoring) is a risk factor a firm may weigh, not an automatic trigger for mandatory EDD under UK law. This diverges from the EU's own high-risk list, which runs on a separate schedule and separate criteria, so firms operating across both UK and EU perimeters should not assume parity between the two lists.

The UK's architecture here continues to run on a fully autonomous, date-agnostic designation cadence distinct from the EU Council's numbered-package approach, reinforcing that UK and EU sanctions regimes, while often substantively aligned on Russia, are procedurally and temporally independent of one another.

Outlook

The pattern of direct crypto/payment-rail designation seen in the 8 October round is worth monitoring for recurrence in future UK designation rounds, as it signals a deliberate strategy of targeting evasion infrastructure rather than only end-beneficiaries. Firms should also confirm their screening tooling has fully migrated off the retired OFSI Consolidated List.