Russia Shut 9 Crypto Exchanges in Moscow-But the Real $93 Billion Flows Stay in Place

Moscow's raid targeted local crypto counters, not the entire sanctions-era pipeline

Russia's latest move hit visible, street-level infrastructure more than the broader money lane. Authorities shut down nine channels in Moscow and detained more than 20 people in operations tied to alleged call-center fraud and outbound fund transfers. That is meaningful enforcement, but it does not by itself signal a broad cleanup of Russia-linked crypto flows.

The scale mismatch is the clearest clue. In 2025, the ruble-backed A7A5 stablecoin processed $93.3 billion in less than a year, while exchanges built around it also moved billions more. By contrast, the Moscow operation centered on money stolen from Russian victims being converted into cryptocurrency and pushed abroad. That points to targeted disruption of fraud-linked outflows, not a system-wide reset.

Pressure is also rising higher up the chain. Britain sanctioned HTX and the A7 network earlier this year, and the EU later added HTX to its sanctions list for allegedly helping Russians evade sanctions. If major exchanges and routing networks are increasingly constrained, the $93 billion channel could feel real pressure. For now, though, the distinction still matters: local office raids may squeeze retail cash channels first, while the larger sanctioned plumbing continues operating.

Why the bigger risk sits in rails and stablecoin channels, not in scattered local offices

The market may read Moscow's raids as a broad crypto crackdown. It is not quite that. Russia shut nine channels linked to alleged call-center fraud and retail cash movement. That is real enforcement, but it is still lower in the chain than the cross-border routing networks that can keep large flows moving.

Illicit volume is small in market terms, but concentrated in key liquidity channels

The more important point is concentration. In 2025, illicit volume fell to 1.2% of overall crypto volume. That does not mean risk is harmless, but it does suggest the market is not being broadly contaminated. The sharper issue is that illicit actors captured 2.7% of available crypto liquidity, which makes the problem one of deployable capital rather than headline volume.

That fits the current Russia-linked pattern. Flows tied to sanctions evasion have been concentrated in specific networks and stablecoin rails rather than spread evenly across the ecosystem. A raided office changes optics. A squeezed rail changes liquidity.

A7 and HTX sanctions are the more direct pressure points

Britain said the A7 network was used to route funds, finance procurement and exploit foreign banking systems. The EU later added HTX to its sanctions list. Those are the more consequential fault lines because they target exchange access and banking interfaces, not just local storefronts.

The nature of the risk is also changing. The FATF said crypto-enabled crime is now more complex and interconnected, and that stablecoin use by illicit actors has increased. That supports a more institutional read: the system relies less on isolated cash-out shops and more on internationalized, durable payment rails.

What matters next: Russia's licensing framework and the platforms that keep deeper liquidity

The next shift is regulatory rather than theatrical. Russia's new crypto law creates licensing for exchanges, brokers, and custodians under Bank of Russia oversight, and most provisions become effective on September 1, 2026. That should help separate licensed liquidity from weaker venues, even if the broader sanctions-era plumbing remains active.

Positioning around compliance and liquidity

Not every Russia-facing flow carries the same risk. The cleaner approach is to avoid unlicensed OTC desks, lower-regulated venues, and opaque trading lanes, because the real squeeze is coming through sanctioned routing channels rather than local offices. Britain has already targeted HTX, and the A7A5 ecosystem processed $93.3 billion in less than a year, so scale is not the issue. Compliance visibility is.

Platforms with stronger compliance and deeper, more visible liquidity are better placed to withstand headline risk. That matters because illicit actors accounted for only 1.2% of overall crypto volume, while still capturing 2.7% of available crypto liquidity. The issue is not diffuse crime-related negativity across the market. It is exposure to concentrated, usable liquidity channels.

What would challenge this view

This view would need reassessment if Moscow's broader framework remains largely cosmetic while sanctioned venues continue handling large volumes with limited impact. In that scenario, the recent raids would look more like optics than a durable liquidity filter.