Cryptomus Likely Launched Heleket to Evade FINTRAC’s Record CAD 177M Penalty, TRM Analysis Finds

TRM Labs analysis reveals that Cryptomus likely created Heleket as a successor platform to circumvent FINTRAC's record CAD 177 million penalty, with both services sharing identical operators and infrastructure. Heleket demonstrates illicit transaction ratios five times higher than typical payment providers, with both platforms historically relying on sanctioned Russian exchange Garantex for liquidity.

The alleged connection between Cryptomus and Heleket represents a significant escalation in regulatory evasion tactics within cryptocurrency infrastructure. Rather than ceasing operations after facing severe penalties, Cryptomus appears to have merely rebranded or created a sister service to continue facilitating illicit financial flows. TRM's high-confidence assessment stems from shared technical infrastructure and operator patterns, suggesting deliberate obfuscation rather than organic competition.

This pattern reflects broader industry challenges where centralized payment processors operating in gray-market regulatory zones can rapidly relocate operations or rebrand to escape enforcement actions. FINTRAC's record CAD 177 million penalty, while substantial, failed to deter the platform's continued illicit facilitation. The involvement of Garantex—already subject to international sanctions—as a primary liquidity provider indicates intentional coordination with sanctioned entities to maintain operational capacity despite regulatory pressure.

For cryptocurrency users and legitimate platforms, this development underscores risks associated with payment processors lacking robust compliance frameworks. Platforms relying on services like Cryptomus or Heleket face regulatory exposure through association. The elevated illicit inflow ratio on Heleket signals active criminal use, including CSAM-related transactions, creating both reputational and legal liability for any connected services.

Regulatory authorities face mounting pressure to develop more sophisticated tracking mechanisms beyond traditional corporate enforcement. The ease of service migration suggests that regulatory frameworks designed for traditional financial institutions prove inadequate for cryptocurrency infrastructure. Future enforcement likely requires coordinated international sanctions targeting underlying infrastructure providers and liquidity sources rather than individual payment platforms.

• →TRM Labs confirmed Cryptomus and Heleket share operators and infrastructure, indicating intentional regulatory evasion post-penalty
• →Heleket's illicit transaction ratio exceeds typical payment processor averages by nearly five times, signaling active criminal facilitation
• →Sanctioned Russian exchange Garantex supplied primary liquidity to both platforms, demonstrating coordinated sanctions circumvention
• →Regulatory penalties against centralized payment processors prove insufficient deterrent without coordinated infrastructure-level sanctions
• →Services connected to Cryptomus or Heleket face elevated regulatory risk and potential enforcement action through association