<\/p>\n
More than 90% of illicit crypto flowing into Kyrgyz exchanges is tied to sanctions evasion, with analysts citing growing links to Russian paramilitary and darknet actors.<\/p>\n
Kyrgyzstan\u2019s rapid crypto expansion has become a sanctions workaround for Moscow, with analysts at blockchain forensic firm TRM Labs claiming that Russian<\/a> actors are actively using Bishkek-registered shell crypto exchanges to \u201cprocure dual-use goods since the outset of the war in Ukraine.\u201d<\/p>\n In a recent blog post<\/a>, analysts noted that many crypto providers registered in Kyrgyzstan exhibit classic shell company traits, including identical apartment addresses, recycled founders, and even copy-pasted emails.<\/p>\n Moreover, several of these Kyrgyz exchanges exhibit \u201csimilar on-chain heuristics to Garantex,\u201d the blacklisted Russian crypto exchange sanctioned<\/a> by the U.S. Treasury for facilitating sanctions evasion and darknet market activity before its takedown<\/a> by law enforcement in March 2025.<\/p>\n According to data from the New York-headquartered blockchain forensics firm, more than 90% of illicit crypto inflows to Kyrgyz-registered exchanges from February 2022 to July 2025 were tied to sanctions-related activity.<\/p>\n \u201cSince Russia\u2019s invasion of Ukraine, US, UK, and EU sanctions authorities have consistently targeted Russia\u2019s illicit finance ecosystem\u2014including sanctions evasion, money laundering networks, darknet markets, and non-compliant exchanges,\u201d Ari Redbord, vice president and global head of policy and government affairs at TRM Labs, told The Defiant. <\/p>\n Redbord added that when a jurisdiction is repeatedly associated with such activity, it \u201craises the risk of broader regulatory action, whether through increased scrutiny, de-risking by major financial institutions, or even country- or sector-level restrictions.\u201d<\/p>\n \u201cIt\u2019s a reminder that gaps in compliance don\u2019t just pose a reputational risk \u2014 they can become national-level economic vulnerabilities,” Redbord explained.<\/p>\n TRM Labs notes that shortly after Garantex was shut down, a spinoff called Grinex emerged and began using \u201cthe same spending heuristic previously associated with Garantex.\u201d<\/p>\n \u201cIn May 2025, TRM Labs reported that Grinex facilitated the movement of funds from Garantex by enabling withdrawals via Russian stablecoin A7A5. Users with balances exceeding USD 50,000 were able to extract funds through Grinex using A7A5 shortly after Garantex\u2019s takedown by law enforcement,\u201d the firm said.<\/p>\nShared Control<\/h2>\n