The Evolving Landscape of Russian Sanctions Evasion: Exved, MKAN Coin, and the Decentralized Future of financial Obfuscation
A Transparency International Russia examination reveals a elegant network enabling the circumvention of international sanctions against Russia, highlighting a shift towards decentralized, crypto-fueled methods of financial evasion.
The ongoing efforts to hold Russia accountable through economic sanctions are facing a formidable challenge: a rapidly adapting ecosystem designed to obscure the origin and destination of funds. Recent research by Transparency International Russia, detailed in their report “Crypto Laundromat,” exposes a complex web of companies and services facilitating the movement of money into and out of Russia, leveraging jurisdictions with lax oversight and the anonymity of cryptocurrency. This investigation doesn’t just uncover existing loopholes; it reveals a blueprint for future evasion, built on the foundations of a sanctioned exchange and evolving into a decentralized, global network.
Exved: A Facilitator of Sanitized Trade
The investigation centers on Exved, a company operating through hubs in Hong Kong, Thailand, and the United Arab Emirates. Exved doesn’t directly engage in illicit activity like forging documents.Instead,it functions as a payment facilitator,offering a crucial service to those seeking to bypass sanctions: the processing of payments based on “sanitized” invoices that may not accurately reflect the true nature of the goods being traded.
To understand Exved’s operations, researchers, led by Baghdasaryan, conducted a sting operation in October 2024. Posing as a Hong Kong-based electronics exporter, they engaged with Exved via Telegram, gaining rapid onboarding – a mere 30 minutes - demonstrating the ease with which the service can be accessed. the investigation revealed a layered structure: a Russian company, Paysol LLC, acting as Exved’s “agent,” while the actual service agreement was channeled through a Hong Kong-based firm, feilian Company Limited, controlled by Russian national Sergey Antipov.
This arrangement allowed for a complex flow of funds. A hypothetical Russian importer would transfer rubles to Feilian’s Alfa-Bank account in Russia. Feilian would then convert the rubles and forward the funds to the fictitious Hong Kong exporter in dollars, yuan, or USDT (Tether, a stablecoin pegged to the US dollar).
The Importance of “Tailored Documentation” and Evading Scrutiny
During a call with Paysol, Baghdasaryan directly questioned the company’s connections to Garantex (a previously sanctioned Russian cryptocurrency exchange) and Exved, as well as the logistics of importing dual-use goods – items with both civilian and military applications – into Russia. Paysol representatives deliberately evaded these questions.
Though, a Paysol compliance officer, working with the company’s legal team, revealed a key strategy for avoiding detection: “tailored documentation and logistics partners.” The officer explicitly acknowledged that the payment process is frequently used to facilitate the import of restricted goods into Russia. This highlights a deliberate effort to exploit ambiguities in trade regulations and leverage compliant intermediaries to mask the true purpose of transactions.
The investigation further revealed that Paysol provided the researchers’ fictional company with a cryptocurrency wallet address directly linked to a sanctioned Garantex wallet. This wallet had processed over $112 million in transactions, underscoring the scale of the operation and its reliance on sanctioned entities.
From Garantex to MKAN Coin: A Decentralized Evolution
The investigation didn’t stop with Exved. A subsequent finding of leaked Garantex data – including emails, internal documentation, identity verification documents, invoices, and transaction logs dating from 2021 to 2024 – led researchers to MKAN Coin, a Telegram-based crypto-to-cash exchange catering to Russians seeking to move money abroad.
Crucially,MKAN Coin isn’t a completely new entity. The report details that it has “inherited and rebranded Garantex’s laundering blueprint,” extending it into a decentralized, global network designed to withstand sanctions and scrutiny. MKAN Coin operates across a diverse range of jurisdictions, including Kyrgyzstan, Spain, Brazil, Thailand, and Georgia, demonstrating a deliberate effort to diversify its operations and evade jurisdictional control.
The leaked documents revealed a significant connection: a former chief executive of Garantex is behind the MKAN Coin brand. As Baghdasaryan succinctly states, “MKAN Coin is a core product of Garantex. Crypto-to-cash through Telegram, to transfer money abroad, just like Garantex did.”
Implications and the Future of Sanctions Evasion
This investigation paints a concerning picture of the evolving landscape of sanctions evasion. The shift from centralized exchanges like Garantex to decentralized platforms like MKAN Coin represents a
