One Brand, Two Front-Ends: The 2022 Split and the Continuity Question

Evidentiary Pillars

Operator Profiles

Confirmed Serhii (Sergei) Zhdanov: chief executive of EXMO and, per the UK Companies House Persons with Significant Control register, holder of 75 percent or more of EXMO EXCHANGE LIMITED (Co. 11655602) since 29 September 2025. In 2022 he received the 37.51 percent stake transferred by Russian-citizen founder Edward Bark. Public profiles list him as a chartered accountant (FCCA) associated with "EXMO UK," supporting an assessed UK/Ukraine location rather than Russia. He is covered by the entity designation through the Director Disqualification measure but is not individually SDN-listed and is not OFAC-designated. [OpenSanctions/UK PSC; E-CryptoNews; Crunchbase]

Confirmed Pavel Lerner: co-founder and former managing director of EXMO, a Russian citizen with a Poland residence permit. He was abducted in central Kyiv in December 2017 and released after a ransom was reportedly paid; the incident coincided with a DDoS attack on the exchange. No current operational role is documented. Credible (current status) [Cointelegraph; The Hacker News]

Credible Ivan Petukhovsky and Edward Bark: named in open-source founder lists alongside Lerner. Bark (Russian citizen) exited in 2022, transferring his stake to Zhdanov. Maria Stankevich is cited in some sources as a senior EXMO executive/spokesperson. Current control roles for Petukhovsky and Stankevich are not firmly established. [Coinpedia; review sources]

Disputed Assessments

Single Source Rejected claim: a derivative consumer-warning source (cybercriminal.com) asserts that Sergei Zhdanov, "also rendered as Sergei Mendeleyev," was designated by OFAC as a co-owner and board member of EXMO alongside the Russian mining firm BitRiver. This is incorrect on two counts. First, Zhdanov (EXMO's chief executive) and Sergey Mendeleev (a Garantex co-founder associated with ABCeX) are different individuals; the names are not interchangeable. Second, no OFAC designation of EXMO or of Zhdanov exists in the SDN list as of June 2026. The actual designations are UK (entity, RUS3602) and Ukraine (EXMO RBC Ltd, Kazakhstan). This profile treats the conflated OFAC claim as false. [cybercriminal.com (rejected); OFAC SDN; UK FCDO]

Exchange Mechanics and Product Set

Credible Across both front-ends the stack is broadly identical: a centralized order-book spot exchange supporting dozens of assets (BTC, ETH, XRP, ADA, USDT) plus the native EXMO Coin (EXM) used for fee discounts; margin trading; P2P and OTC-style features; and simple earn products. Fiat on/off ramps, including ruble pairs, were removed from Exmo.com after 2022 but reportedly remained available through Exmo.me for the CIS market. EXMO has historically promoted itself as a long-running, never-hacked European exchange. [CoinGecko; review sources; Exmo.com]

Geographic Posture vs Observed Usage

Confirmed Officially, EXMO states it stopped serving residents of Russia, Belarus and Kazakhstan on Exmo.com after the 2022 invasion. In practice, Exmo.me is described by both Elliptic and media as continuing to serve users in those countries, filling the gap. Russian users reach the service via the Exmo.me mirror because Roskomnadzor blocked the main domain in the CIS around 2017. The result is a split front-end model over shared back-end custody. [Elliptic; IBTimes; review sources]

KYC/AML Posture: Stated Policy vs Observed Behavior

Fiat Rails (Schema Rule: Must Be Addressed)

Analyst Inference No specific bank or payment-processor relationships for Exmo.me are documented in the reviewed English-language open sources. The Russia-facing operation retained ruble fiat on/off ramps after Exmo.com dropped them, which necessarily implies access to Russian payment rails, but the specific banks or processors are not named, likely reflecting de-risking and deliberate opacity. EXMO's Western entities historically claimed European/UK banking access; the UK Correspondent Banking measure now prohibits UK credit and financial institutions from establishing or continuing correspondent relationships with the designated entity and from processing payments to, from or via it. The fiat-rail picture for Exmo.me specifically is a documented gap rather than an established bank list. [UK FCDO; review sources]

Licensing and Regulatory Standing

Credible EXMO has promoted registrations in Poland (EXMO Poland Sp. z o.o.) and a UK presence, with some sources claiming FCA cryptoasset-business and FinCEN MSB registration for legacy EXMO entities. Critical reviews and registry checks dispute several of these claims, arguing that EXMO entities are not in fact licensed as financial-service providers by the FCA or other named regulators and that branding overstates regulatory status. For Exmo.me specifically, the operator EXMO RBC Ltd is a Kazakhstan-registered crypto business with no robust Western licensing evident in open sources. Treat licensing claims as marketing unless matched to a primary regulator record. [Review sources; ICO register]

Domain Portfolio

Confirmed The decisive infrastructure finding is back-end, not front-end: TRM reports that deposits to both platforms consolidate into shared custodial wallets and hot wallets. The two domains are different shop-fronts over a common custody layer, which is why corporate separation did not produce operational separation. [TRM Labs; review sources]

Designated Digital Addresses

Confirmed The UK designation (RUS3602) lists three TRON (TRC-20) addresses associated with EXMO EXCHANGE LIMITED:

VASP and compliance teams should treat these as designated-entity addresses subject to UK asset-freeze obligations and as high-risk indicators elsewhere. The TRON focus is consistent with USDT-on-TRON being the dominant settlement asset across the Russia-linked ecosystem. No OFAC-designated EXMO addresses exist. [UK FCDO; OpenSanctions]

Apps, API and Channels

Credible EXMO operates web and mobile platforms with a documented public API. Specific hosting providers, SSL patterns, data-center locations and blockchain-node configuration are not enumerated in the reviewed open sources. The UK Internet Services measure requires UK-facing app stores, internet-access and social-media services to take reasonable steps to block access to the designated entity's content and applications for UK users; this does not produce immediate global takedown. [Exmo.com; UK FCDO]

Resilience After Disruption

Confirmed After the 2022 "exit," EXMO reconstituted CIS access almost immediately via Exmo.me and EXMO RBC Ltd, preserving continuity for existing customers. Following the May 2026 UK designation, the platform remained operational; the dual-front-end structure plus shared custody provide resilience, since UK-only measures do not reach a Kazakhstan-operated, non-UK-facing mirror. Further domain or infrastructure adaptation is plausible but not yet documented in open sources as of June 2026. [IBTimes; TRM; UK FCDO]

Volume (Cite Source and Methodology; Do Not Average)

Three-Phase On-Chain Flow (EXMO as Node)

Phase 1: Receipt

Credible Exmo.me receives ruble and crypto deposits from Russian-speaking retail traders and from brokers and intermediaries transacting with Russia-linked and sanctioned platforms. Confirmed direct-counterparty exposure includes Garantex, Grinex and Chatex (TRM) and Garantex specifically (Elliptic). Receipt of named ransomware or darknet actor funds is inferential: no EXMO-specific actor-level attribution has been published by TRM, Elliptic or Chainalysis. [TRM; Elliptic]

Phase 2: Layering

Confirmed The defining layering mechanism is the shared custody layer: deposits to Exmo.me and Exmo.com consolidate into common hot wallets, blending Russia-facing flows with the Western-facing entity's flows and obscuring source platform. Within that pooled custody, users can trade and swap across assets (settlement is TRON-heavy, consistent with the designated TRC-20 addresses), enabling chain-hopping and co-mingling. No EXMO-specific mixer or coinjoin usage is documented. Analyst Inference (asset-level mixing) [TRM]

Phase 3: Extraction

Credible Funds exit to other exchanges (including sanctioned venues such as Garantex) and, for the CIS segment, to ruble fiat off-ramps via Russian payment rails (specific processors not public). Because custody is shared, extraction can occur through the Western-facing side of the same wallet set. No specific downstream receiving exchange for EXMO-originating flows is enumerated in open sources. [TRM; Elliptic]

Designated Addresses and Sanctions Summary

Crimeware Verticals by Evidence Tier

Geographic Patterns

Confirmed Illicit and high-risk flows originate in or transit Russia, Belarus and Kazakhstan, matching Exmo.me's marketed base. Because custody is shared with Exmo.com, Russia-linked flows can co-mingle with Western-facing trading flows, complicating geographic attribution at the wallet level. [Elliptic; TRM]

High-Profile Flows

Confirmed (aggregate) Quantitative anchors are the TRM >$19.5 million direct-with-sanctioned-entities figure and the Elliptic >$1 million Exmo.me-to-Garantex figure. No individually named criminal-actor flows with attributed dollar amounts have been published for EXMO; the figures are counterparty-level, not actor-level, attribution. This is a documented intelligence gap (Section 10). [TRM; Elliptic]

Jurisdictional Separation (Schema Rule: Three Jurisdictions)

State Nexus Tier (Russia): NONE

Negative Evidence (Expected if Higher Nexus Existed)

If EXMO were under TOLERATED SAFE HARBOR, PROBABLE COOPERATION or DIRECT CONTROL by Russia, one would expect documented state coordination, protection from enforcement, or ownership links to Russian state organs. None are present; the available record points the other way (a Russian block of the brand's primary domain and a non-Russian principal). The assessment therefore holds at NONE, with the unattributed control of EXMO RBC Ltd flagged as the key uncertainty. Analyst Inference

UK Designation (Primary Action)

Five measures imposed: Asset Freeze; Correspondent Banking Sanctions and processing payments (Regulation 17A); Internet Services Sanctions; Director Disqualification Sanction; and Trust Services Sanctions. Three designated TRON addresses are listed. The Regulation 17A measure prohibits UK credit and financial institutions from maintaining correspondent relationships with EXMO and from processing any payment where EXMO appears anywhere in the chain, shifting UK compliance from name-screening toward full transaction-chain tracing. The designated UK entity's listed website is exmo.com; the Russia-facing Exmo.me is operated by the separately sanctioned Kazakhstan entity. Confirmed [OpenSanctions; UK Sanctions List; Elliptic]

Sanctions and Enforcement Summary

Timeline

Post-Sanction Reconstitution Assessment (Schema Rule)

Market Position and Volume Trends

Confirmed EXMO is an established mid-tier brand with long-standing recognition among Russian-speaking traders. The 2022 split preserved that CIS user base through Exmo.me while letting Exmo.com pursue a European positioning. After the Garantex takedown and rising scrutiny, the Russia-facing segment sits within the cluster of Russia-tolerant venues absorbing displaced grey-market demand, though EXMO's published illicit-flow exposure ($19.5M direct, TRM) is an order of magnitude smaller than the highest-volume nodes (Rapira, ABCeX, Huobi). [CoinGecko; TRM]

Disruption Impact

Reconstitution Status

Brand: Sanctioned (UK, Ukraine) but active; no rebrand. The platform continued operating after 26 May 2026; the dual-front-end structure provides built-in continuity. Confirmed

Continuity design: Pre-built. The 2022 split already established a jurisdictionally separate Russia-facing mirror over shared custody, so reconstitution is structural rather than reactive. Confirmed

Future risk: Persistence over clean exit. With no seizure and a non-UK operator for Exmo.me, the Russia-facing service can continue for CIS users; incremental new mirrors or partner entities are the most likely adaptation. Credible

Intelligence Gaps

[26 May 2026] UK FCDO designates EXMO EXCHANGE LIMITED (RUS3602) and 17 other entities/individuals in the A7/crypto package; five measures and three TRON addresses listed. TRM publishes accompanying analysis: EXMO >$19.5M direct with Garantex/Grinex/Chatex and shared custodial wallets between Exmo.com and Exmo.me. [UK FCDO; TRM]

[21 Feb 2026, updated 3 Mar 2026] Elliptic names Exmo.me among Russia-linked sanctions-evasion services: serves Russia/Belarus/Kazakhstan and sent >$1M directly to Garantex. [Elliptic]

[29 Sep 2025] UK Companies House records Serhii Zhdanov holding 75% or more of EXMO EXCHANGE LIMITED. [UK PSC]

[Jul 2025] Ukraine sanctions EXMO RBC Ltd (Kazakhstan), identified as operator of the Exmo.me exchange, for sanctions circumvention. [President.gov.ua]

[Apr 2022] EXMO announces exit from Russia, Belarus and Kazakhstan, selling the CIS business to an undisclosed buyer who continues the EXMO brand via Exmo.me under a Kazakhstan entity; founder Edward Bark transfers his 37.51% stake to Zhdanov. [Cointelegraph; IBTimes]

1. OpenSanctions: EXMO EXCHANGE LTD. (UK FCDO RUS3602, 26 May 2026; five measures; three designated TRON addresses; UK Co. 11655602, formerly EXMO PAYMENTS LTD; PSC Serhii Zhdanov 75%+; EXMO POLAND Sp. z o.o.)
2. UK Government: List of Russia sanctions designations, 26 May 2026 (18-entity A7/crypto package incl. EXMO EXCHANGE LIMITED)
3. UK FCDO: UK cracks down on backdoor Russian sanctions evasion with tough new measures (26 May 2026; A7 network ~$90B/year; first Reg. 17A application to crypto)
4. TRM Labs: UK Designates Huobi, Exmo, Bitpapa, and 11 Other Entities (EXMO >$19.5M direct with Garantex/Grinex/Chatex; Exmo.com and Exmo.me share custodial wallets; Ukraine sanctioned the Kazakhstan Exmo entity Jul 2025) : 26 May 2026
5. Elliptic: Russia-linked cryptocurrency services and sanctions evasion (Exmo.me serves Russia/Belarus/Kazakhstan; sent >$1M directly to Garantex) : 21 Feb 2026 (upd. 3 Mar 2026)
6. Elliptic: UK designates cryptoasset exchanges including HTX in sweeping new sanctions package (Regulation 17A extended to crypto; full-chain tracing) : 26 May 2026
7. Chainalysis: UK Sanctions Crypto Companies With Russia Ties (A7 network; 26 May 2026 package) : May 2026
8. Cointelegraph: Crypto firm Exmo exits Russia and Belarus by selling part of its business (Exmo.me to serve Russia/Belarus/Kazakhstan via Kazakhstan entity)
9. IBTimes: Exmo Says It Sold Russian Crypto Business; New Owner Will Continue To Use Company Name
10. CoinDesk via Yahoo: EXMO Exits Russia, Sells User Base There to Unnamed Buyer (Edward Bark, Russian founder, transferred 37.51% stake to Serhii Zhdanov)
11. President of Ukraine: Decree enacting NSDC sanctions (Jul 2025) including the Kazakhstan-registered EXMO entity (operator of Exmo.me)
12. LIGA.net: Zelenskyy imposes new sanctions (EXMO RBC LTD, Kazakhstan, named as operator of EXMO.me cryptocurrency exchange involved in sanctions circumvention)
13. Cointelegraph: Director of UK-Based Crypto Exchange Kidnapped in Kiev (Pavel Lerner, EXMO managing director, abducted Dec 2017)
14. EXMO: Official statement on Elliptic allegations (claims sanctions compliance as a core element; advanced blockchain-analytics screening)
15. E-CryptoNews: Interview with EXMO CEO Serhii Zhdanov
16. Crunchbase: Sergey Zhdanov, Chief Executive Officer, EXMO
17. CoinGecko: EXMO statistics, markets and trust score (established 2014; Poland)
18. cybercriminal.com: EXMO red flags (REJECTED source for the false claim that Zhdanov = "Sergei Mendeleyev" and was OFAC-designated)
19. OFAC Sanctions List Search Tool (negative evidence: no EXMO or Zhdanov SDN designation as of June 2026)
20. TRM Labs: The Imitation Game (post-Garantex high-risk exchange ecosystem; Grinex/Chatex context; ABCeX tie to Sergey Mendeleev, distinct from Zhdanov)

Profile produced using open-source intelligence. Confidence labels applied per schema: CONFIRMED (multiple independent sources), CREDIBLE (single strong source or multiple weaker sources), ANALYST INFERENCE (logical extrapolation from confirmed facts). Volume figures cited with source and methodology; figures from different vendors are presented separately, not averaged (TRM >$19.5M EXMO direct with Garantex/Grinex/Chatex; Elliptic >$1M Exmo.me→Garantex). Two-tier connected-entity model applied throughout Section 09 (Tier 1 transaction confidence plus Tier 2 facilitation assessment). Three jurisdictions documented separately per schema (registration UK / Kazakhstan / Poland; hosting unknown but custody shared; operator brand Zhdanov UK/Ukraine, Exmo.me control unattributed). Key corrections vs source draft: (1) the >$19.5M figure and the shared-custodial-wallet finding are TRM's, not Elliptic's; (2) the UK sanctioned EXMO EXCHANGE LIMITED (UK entity, website exmo.com) while Ukraine sanctioned the separate Kazakhstan operator EXMO RBC Ltd, and the two should not be merged; (3) the claim that CEO Sergei Zhdanov is "Sergei Mendeleyev" and was OFAC-designated is false. Status: Sanctioned (UK FCDO 26 May 2026, RUS3602; Ukraine Jul 2025); not OFAC-designated; platform active; assessed Russian state nexus NONE.