Garantex disruption, Grinex succession and A7A5 (2025-present)

The 2025 disruption of Garantex combined criminal process, infrastructure seizure, financial sanctions and private stablecoin controls against a Russian cryptocurrency exchange already designated by the United States. It produced immediate operational loss. United States authorities later identified Grinex and the rouble-linked A7A5 token as components of a successor ecosystem. The case shows both the reach of coordinated control over digital infrastructure and the speed with which payment networks can attempt to reconstitute outside that control.

Instruments and chronology

The United States designated Garantex in April 2022. On 6 March 2025, authorities in the United States, Germany and Finland seized internet domains and servers used by the exchange. The United States also unsealed charges against Aleksej Besciokov and Aleksandr Mira Serda. Those charges remain allegations unless and until proved in court.

The disruption worked across several layers. Court orders transferred control of domains. German and Finnish action removed server infrastructure. The indictment exposed alleged operators to arrest and prosecution. Tether froze USDT held in addresses associated with Garantex, denying the exchange access to an issuer-administered settlement asset. These were separate acts with different legal bases and effects.

On 14 August 2025, the United States Treasury designated Grinex, the A7 companies, Old Vector and related persons. It did not designate a token as a legal person. Treasury described Grinex as a successor to Garantex and identified Old Vector as the Kyrgyzstani issuer of A7A5. The United Kingdom designated Grinex and Old Vector on 20 August. Official and blockchain-analysis reports also described customer and liquidity migration. Their estimates use different address clusters, time windows and definitions. They should not be combined into one throughput figure.

State nexus and adaptation

The state nexus is established for the enforcement campaign. It is more contested on the target side. Treasury findings support defined links among A7A5, Old Vector, Promsvyazbank and the A7 network. They do not by themselves prove that every transaction, exchange user or successor decision was directed by the Russian state.

A7A5 changes the enforcement surface but does not abolish it. A rouble-linked token issued outside the United States reduces exposure to a dollar-stablecoin issuer such as Tether. It can still depend on issuers, custodians, exchanges, banks, software providers and jurisdictions. Unfreezable is therefore the wrong category. The relevant question is which actor can exercise control at each layer.

Assessment

This is a main-sequence case of statecraft through network denial. The operation synchronised law enforcement, sanctions administration, infrastructure control and private issuer compliance. Its immediate result was measurable disruption. Its longer result was displacement and attempted reconstitution, not demonstrated eradication.

The case also sharpens the distinction between legal attribution and analytical inference. An indictment alleges criminal conduct. A designation records an administrative finding. Blockchain analysis attributes addresses through stated methods. A publishable assessment must preserve those categories while testing whether the network lost capacity, shifted jurisdiction or merely changed names.

See also

Cryptocurrency and stablecoin sanctions evasion · Crypto exchanges as chokepoints (fiat on/off-ramps) · Issuer-controlled dollar stablecoins (USDT and USDC) · Network reconstitution (parallel rails) · OFAC digital asset sanctions practice (2018 to present)

Sources

1. United States Department of Justice, 'Garantex Cryptocurrency Exchange Disrupted in International Operation', 7 March 2025.
2. United States Department of the Treasury, 'Treasury Sanctions Russia-Based Hydra, World's Largest Darknet Market, and Ransomware-Enabling Virtual Currency Exchange Garantex', 5 April 2022.
3. United States Department of the Treasury, 'Treasury Sanctions Garantex Successor Grinex and Facilitators of Sanctions Evasion in Russia and the Kyrgyz Republic', 14 August 2025.
4. United States Department of Justice, indictment in *United States v Besciokov and Serda*, unsealed March 2025.
5. United Kingdom Office of Financial Sanctions Implementation, Cryptoassets Threat Assessment, 2025.
6. United Kingdom Government, 'UK targets sanctions circumvention and crypto networks exploited by Russia', 20 August 2025.
7. TRM Labs, 'Garantex, Grinex, and the A7A5 Token: A Deep Dive into Sanctions Evasion Networks', 2025.
8. Chainalysis, 'How 2022 Crypto Sanctions Affected Crypto Crime', 2023.
9. Elliptic, The Typologies Report, September 2025.