A new report from blockchain analytics firm Elliptic has pulled back the curtain on five Russia-linked cryptocurrency exchanges that are systematically circumventing international sanctions, enabling billions of dollars in suspicious transactions. Stepping into the void left after the closure of the major exchange Garantex by US authorities in March 2025, these platforms operate outside traditional banking supervision and carve out a financial corridor for Russian entities. The findings emerge as the European Union debates a sweeping crypto ban aimed at Russia, underscoring how digital assets now pose the most significant weak link in the sanctions regime.
Shadow Exchanges Widen Their Global Reach With Sophisticated Tactics
Of the five exchanges scrutinized in the report, only Bitpapa currently appears on official sanctions lists—a telling sign of just how widespread and elusive the illicit crypto ecosystem has become. Added to the US Office of Foreign Assets Control (OFAC) blacklist in March 2024, Bitpapa directs roughly 10% of its transfers to sanctioned parties and frequently rotates wallet addresses, undermining surveillance systems. Meanwhile, ABCeX, headquartered in Moscow’s landmark Federation Tower, has become a central hub for sanctions evasion with $11 billion in transaction volume.
A particularly striking case involves Exmo and its offshoot Exmo.me. While Exmo publicly claims to have exited Russia following the 2022 invasion of Ukraine, Elliptic found the technically intertwined duo still share key infrastructure and hot wallets. According to the data, Exmo continued to interact directly with blacklisted platforms like Garantex and Chatex, totaling more than $19.5 million—casting doubt on the authenticity of its withdrawal. The report reveals such claims to be largely paper-thin maneuvering rather than substantive disengagement.
Financial Escape Routes Stretch From Dubai to Istanbul
Rapira, based in Georgia, and Aifory Pro, a multinational operation, are emerging as crucial conduits for Russian capital seeking global access. Russian authorities recently raided Rapira’s Moscow offices on suspicions of illicit transfers to Dubai, raising concerns that even local regulators are losing their grip. Meanwhile, Aifory Pro enables users to sidestep Western service restrictions through USDT-backed virtual cards, straddling a Moscow-Dubai-Turkey triangle. These cards allow Russian users to make payments on banned platforms including Airbnb and ChatGPT, expanding the tools available to circumvent sanctions.
The scale of unlawful activity tracked on blockchains is also surging. In 2025, such volumes surpassed $150 billion, highlighting growing fissures in the sanctions framework. Most notable is the ruble-pegged stablecoin A7A5, which has facilitated over $93 billion in transactions. These developments underscore Russia’s strategic pivot, as the nation prepares to introduce localized crypto regulations that could further entrench these evasion mechanisms. The data make clear that shuttering a single major exchange merely splinters illicit flows into smaller, yet more agile, platforms—complicating efforts to dismantle these crime networks.
“Our analysis demonstrates that taking down one large exchange does not collapse the illegal crypto economy; instead, criminal activity disperses to multiple smaller and more nimble platforms,” Elliptic stated in its report.
Efforts by Western authorities to impose ironclad restrictions have so far been outpaced by the adaptability of these digital actors. Although formal blacklists catch the most visible offenders, dozens of successor exchanges rapidly fill the breach, employing ever more sophisticated obfuscation techniques. These include frequent address changes, the use of layered transaction chains, and integration with virtual financial instruments specifically designed to bypass Name Screening and Know Your Customer (KYC) checks.
Even as governments ramp up their regulatory rhetoric, the pace at which ghost exchanges emerge creates a game of whack-a-mole for compliance teams worldwide. Institutional weaknesses, varying legal frameworks, and cross-border jurisdictional loopholes further hamper enforcement. In many cases, law enforcement efforts are one step behind, giving bad actors ample room to maneuver.
As global debates continue over the regulation of cryptocurrencies, Elliptic’s report offers a stark reminder of the persistence and creativity within sanction-evasion networks. Analysts warn that without transnational coordination and smarter technological defenses, digital platforms will remain a favored vehicle for financial wrongdoing. The cat-and-mouse dynamic threatening current anti-money-laundering regimes will only intensify if urgent, cross-border measures are not enacted.
