Transaction ban, not asset freeze: HTX, EXMO and others on the EU sanctions list
With its 21st Russia sanctions package, the EU bans dealings with 14 crypto platforms, including HTX and EXMO, from 23 August 2026. Why a transaction ban differs from an OFAC listing and what it means for assessing payment flows.
On 23 July 2026 the Council of the European Union adopted the 21st sanctions package against Russia. With more than 200 new designations it is one of the most extensive packages since the war began. For the crypto industry it marks a turning point: for the first time a whole section of the package specifically targets crypto service providers that, in the EU's assessment, have enabled Russian users to circumvent existing financial sanctions.
Who is affected
The list names 14 crypto platforms, among them HTX (formerly Huobi, referenced in the regulation as Huobi Global SA), one of the largest exchanges worldwide. Other names include EXMO, Rapira, BitPapa, Aifory Pro, WhiteBird, NoOnecrypto and Exnode. The United Kingdom had already added HTX, EXMO and Rapira to its own sanctions regime on 26 May 2026.
The measure applies from 23 August 2026. From that day, EU persons and companies are prohibited from engaging directly or indirectly in transactions with the listed platforms.
Also new is a power to block crypto service providers from entire third countries in the future if a country "systematically and persistently" fails to act against platforms undermining EU sanctions.
A transaction ban is not an asset freeze
This is the crucial difference from most other designations in the package. Banks, oligarchs and arms manufacturers typically receive a freeze of all assets. The crypto platforms instead receive a transaction ban: existing balances are not frozen, but new business is prohibited.
In practice this means:
- A deposit from HTX to a customer account on 10 August 2026 is legal.
- The same deposit on 25 August 2026 is a sanctions breach.
- A balance a customer has held at HTX for years does not have to be reported or frozen. Withdrawing it after the cut-off date, however, is a transaction.
And it is different again from an OFAC SDN listing. The US Treasury publishes specific blockchain addresses for designated actors. The EU does not. Anyone who wants to check whether a payment flow touches HTX needs their own robust attribution of addresses and clusters to the exchange.
What this means for assessing payment flows
A sanctions check that only asks "is this counterparty listed?" falls short when it comes to transaction bans. It also has to ask: when did the transaction take place?
This is why Coinator assesses sanctions exposure in a time-aware manner. For every entity in the register we record since when and under which regime it has been sanctioned. A transaction with HTX before 23 August 2026 is rated like contact with an ordinary exchange without full KYC and additionally flagged "sanctioned later". A transaction after the cut-off receives the full sanctions finding. This allows a portfolio to be cleanly separated into legacy holdings and genuinely problematic movements, without painting historical customer relationships red across the board.
For banks with crypto exposure we recommend three steps before the cut-off date:
- Inventory: Which customers have had inflows from or outflows to the 14 platforms in the last twelve months?
- Anchor the cut-off logic in transaction monitoring rather than merely loading names into a blacklist.
- Document the attribution: On what basis is an address attributed to HTX? With a transaction ban and no official address list, that reasoning is part of the evidence.
Outlook
The country-level power in the 21st package hints at where things are heading: away from individual designations and towards jurisdiction-wide blocks. For investigators and compliance teams the question "where is this service based?" becomes as important as "who runs it?". How we bring entities, home jurisdictions and sanctions regimes together in the register is described in our methodology overview.