Overview
- FINTRAC said Xeltox Enterprises Ltd. (operating as Cryptomus) failed to file 1,068 suspicious transaction reports in July 2024 tied to child sexual abuse material, fraud, ransomware and sanctions evasion.
- The regulator also found 1,518 unreported large virtual‑currency receipts of C$10,000 or more during the same month.
- Investigators cited 7,557 Iran‑origin transfers between July and December 2024 that were not reported as required under a ministerial directive.
- FINTRAC described inadequate policies, risk assessments and KYC monitoring, noting a rented Vancouver mailbox, no Canadian staff, and examination communications traced to Uzbekistan and Spain.
- The sanction far exceeds last month’s near‑C$20 million penalty against KuCoin’s operator and follows earlier B.C. Securities Commission restrictions on Cryptomus, pointing to intensifying crypto enforcement in Canada.