Cryptomus Review 2026: UK Sanctions, Fees and Merchant Risks

Our verdict

Cryptomus

Informational entry. This model is not a recommendation to open a new merchant account. Check current availability directly with the provider.

We don't recommend new Cryptomus onboarding after the UK's 8 October designation. If you're already a customer, get legal and bank advice before moving funds. Prices and listed features describe the service. They don't give you lawful access or override the restriction.

46

/100

#20 of 27 · Best overall

Not for

• New merchant onboarding under current restrictions
• US citizens or residents excluded by the terms
• Gambling or adult businesses prohibited by policy
• Anyone relying on a guaranteed balance release or bank-arrival time

See the feesScore breakdown

The overview below shows the processing fee only. Its asset count is a broad platform claim, the rating mixes products and users, and bank access isn't confirmed.

At a glance

Fees on a $10k month

$200

2.00% at $100 orders

Bank payouts

Not stated

Crypto assets

100

USDT

Trustpilot rating

2.4/5

521 reviews

Should you use Cryptomus after the UK designation?

We wouldn't start a new merchant relationship. On 8 October 2026, the UK designated Xeltox Enterprises Ltd, RUS3755, listing Certa Payments Ltd, Cryptomus and Heleket as name variations. The official notice includes an asset freeze and payment-processing restrictions, alongside other measures.^[1] Understand that before comparing rates, checking whether your usual wallet appears on a payment page or asking a developer to connect the service to your shop.

OFSI guidance covers activity in the UK, plus UK nationals and UK-established legal entities wherever they operate, and it includes cryptoassets.^[2] The notice's payment-processing measure concerns UK credit or financial institutions processing payments to, from or through the designated person, including some ownership and control cases. It doesn't by itself create a worldwide ban under every country's law.

The Cryptomus–Heleket comparison explains how the two differ and how the official notice ties them together. Heleket isn't our recommended fallback. This is general information, not legal advice.

Is Cryptomus licensed, and which company is responsible?

We haven't verified a current merchant licence or which company signs an individual Cryptomus agreement. FINTRAC names Xeltox operating as Cryptomus in its enforcement record, but who the contracting entity is today, and where it's based, is still unknown to us. Show your adviser the agreement, since neither the brand on today's terms nor the historical regulator record settles who owes your business its balance.

We still list the earlier M2269585 money services business number the provider gave, as an unverified historical claim. FINTRAC says plainly that registration isn't licensing or endorsement, and although its registry landing page was readable on 14 October, the company row wasn't.^[7]

What did FINTRAC penalise, and was it appealed?

FINTRAC imposed C$176,960,190 on 16 October 2025, announcing it on 22 October. Its release lists 1,068 suspicious-transaction reporting failures and 1,518 large virtual-currency receipt reporting failures, both during 1–31 July 2024. Other failures concerned a ministerial directive, compliance policies, risk assessment and notification of changed application information.^[5]

The specific public notice records 2,593 contraventions across six types and says Xeltox appealed to the Federal Court. It records no outcome for the appeal.^[6] Canada's case is a different matter from the later UK designation.

1. July 2024
   Reporting period

   The two reporting counts concern this month. The fine wasn't imposed then.

2. 16 October 2025
   Canadian penalty imposed

   FINTRAC imposed the penalty, and its notice also records an appeal.

3. 22 October 2025
   Canadian announcement

   The regulator published its release after imposing the penalty.

4. 8 October 2026
   UK designation

   The notice lists Xeltox and the Cryptomus and Heleket brands under RUS3755.

For an existing contract, your adviser can check which legal company, service and permissions apply. A Canadian registration claim can't settle sanctions obligations, and it's no guarantee that funds held in custody are safe.

Can US businesses or high-risk merchants use Cryptomus?

US citizens and residents are excluded outright, and current policy prohibits gambling and adult content or services. The terms, updated 17 August 2026, refer to an AML prohibited-country list, but the current policy uses sanctions and high-risk criteria without a country table.^[8] Commercial use also needs written consent under those terms, so a country that isn't listed isn't automatically approved.

The AML policy, reviewed 1 October 2026, prohibits gambling-related activity with no exception for licensed operators. It also prohibits adult services, unlicensed money services, concealed beneficial ownership and other activities, at the provider's discretion. Nothing in it confirms that lawful forex or VPN businesses are accepted.^[9]

Our guide to high-risk payment options covers regulated activities, and any candidate still has to approve your business.

What paperwork does Cryptomus require?

You'll face identity and company checks, including ongoing reviews after an account opens. Current AML policy requires due diligence before a relationship starts and prohibits anonymous accounts. It asks about a company's registration, address, ownership, directors, shareholders, authorised signatories and ultimate owners.^[9]

KYB is the company check. A beneficial owner can differ from the applicant or director. Higher-risk cases can require evidence of where funds and wealth came from.

The personal verification FAQ names identity documents and a face photo. That's the personal-wallet process, and it says nothing about the paperwork a merchant account needs, the volume you're allowed to process or how long an approval takes. We haven't found a universal review deadline or release guarantee.

A payment review can ask for an invoice, a contract or an explanation of funds, which is more than supplying an ID once.

Which coins and networks does Cryptomus accept?

Cryptomus advertises more than 100 cryptocurrencies across its platform. That isn't a verified count of the payment choices your location or merchant account gets.^[12] Customer checkout can offer different choices from trading and wallet deposits.

The payment-services API describes available pairs of asset and network, with limits and commissions. Its response is labelled an example, so its USDT network rows aren't a live account list, and the table below leaves USDT networks as unknown.^[17]

A network is part of the payment instruction. USDT on Ethereum and USDT on TRON are different choices. A sample checkout picture showing TRON says nothing about whether TRON is open to every account, customer or region.

Auto-conversion into USDT says nothing about which networks customers may pay on. You can receive a different asset from the one your customer sends, so note the sending token, the receiving token and the conversion when you explain a payment to your accountant or compare net proceeds with another provider.

When you compare Cryptomus alternatives, list the assets and networks your customers use, then ask whether checkout and withdrawal each support them on your account.

How does a Cryptomus invoice work?

The invoice flow requests payment, reports its status and credits a hosted merchant balance instead of sending every sale straight to a wallet you control. The gateway lets merchants price invoices in local currency or crypto, with an address generated for the selected network.^[13]

1. 
   01

   Invoice requested

   The order has an amount, reference and permitted payment choices.

2. 
   02

   Customer sends payment

   The asset and network must match the invoice instructions.

3. 
   03

   Status accepted

   The store checks a verified successful status before accepting the order as paid.

4. 
   04

   Balance available

   Hosted receipts are still subject to account restrictions, and getting them out is another step.

A static wallet is another way to collect: its top-up notifications work differently from order-by-order invoices, so customer-balance deposits need their own workflow.

Your developer should rely on verified payment notifications, not the shopper's browser return. A webhook needs an authenticity check and an accepted payment status, and a visit to the success page isn't enough reason to ship goods.

Invoice documentation offers a payment window from five minutes to twelve hours, with a one-hour default. The window says nothing about how soon the network confirms a payment or when you'll have spendable cash, so know what happens in your shop when an invoice expires.

How much does Cryptomus charge merchants?

The listed default is 2% per transaction for new users. Lower pricing depends on the business, turnover, integration and other factors, with an advertised negotiated floor of 0.4%, and there's no public schedule mapping sales bands to lower rates.^[10]

2% of $10,000 is $200, while 0.4% would be $40, a $160 gap. If you already have a negotiated rate, compare it with your statements. The lower figure isn't an offer to a new shop.

The public payment-fee page lists no fixed per-payment amount, yet the payment-service metadata includes fixed charges and minimum and maximum amounts. Leave unanswered costs out of a fee estimate, but don't count them as zero in your forecast.

Compare the processing subtotal

The models use Cryptomus's default 2%, CoinGate Standard's 1% and BitPay's standard bands, and cover the fee only: not negotiated rates, minimums, network fees, conversion margins or bank charges. CoinGate's quote margin and BitPay's mandatory application charge have no price we could find. A number on the screen isn't account approval or permission to use Cryptomus.

At the default basket, CoinGate's fee is $100 and BitPay's is $225. BitPay lists 2% plus 25 cents below $500,000 monthly volume.^[37] You may receive less than these subtotals suggest once conversion and withdrawal costs apply, and a cheaper-looking alternative only helps if it can approve your business and deliver the currency you need.

What would an existing shop's month cost?

This hypothetical receipt uses 100 successful $100 orders at Cryptomus's default 2%, with the same exclusions as above. The remainder is what's left after the modelled fee, not money promised in a bank.

Do smaller orders change the rate?

This curve shows the processing fee only, at $10,000 monthly volume, so you can see what a fixed charge does to smaller baskets.

Cryptomus's line stays level because its default has no numeric fixed charge. Small baskets feel fixed charges, and you can see BitPay's 25 cents taking a bigger share of each order here. A network cost or account minimum could still make Cryptomus orders expensive even though its line doesn't move.

Eligibility comes first. The fee calculator guide explains the model's limits.

Which costs and settings sit outside that percentage?

External withdrawal, exchange-rate margins and exceptional payments are still big gaps. Cryptomus's trading-fee page confirms commission-free transfers between its own wallets but gives no external withdrawal rate or network total.^[11] Free internal movement isn't free bank cash-out.

A spread can reduce proceeds even when auto-conversion is advertised as free, and withdrawal-conversion charges may still apply. Exchange trading prices belong to another product's tariff.

Settings can change what an order earns. The invoice API permits 0–5% underpayment tolerance and lets a set portion of the processing commission be charged to the customer. At 5%, a $100 invoice may be marked paid after $95 arrives, and you're credited what arrived.^[16] That $5 shortfall comes on top of the processing fee.

The payment page's broad per-coin discount or surcharge claim and the invoice API's parameter bounds describe different settings, so don't assume every method allows the same range or that a surcharge covers all your costs.

When does the money become usable?

We found no verified universal withdrawal or bank-arrival deadline. The FAQ titled “How fast can I withdraw” explains Business and Personal Wallet options and direct API access but gives no time commitment.^[28] Any existing movement needs your bank and adviser first.

Automatic withdrawal offers hourly, four-hourly or daily frequency and a minimum-balance trigger. Those settings tell you nothing about whether held funds are released or a transfer completes on schedule.^[29] An adviser should review any existing automation along with the account.

Payout documentation draws from Business Wallet balances. An amount expressed in fiat can be sent as cryptocurrency, not bank money, and the payout fee can reduce the recipient's amount or come from the merchant balance.^[24] Record payments to recipients apart from your own sales withdrawals.

The white-label page advertises SEPA and SWIFT bank withdrawal without a full currency list, merchant conditions, minimum, charge or bank-credit time.^[14] That's an advertised option, not a confirmed account offer. SEPA covers euro bank transfers and SWIFT is international bank messaging, and neither label promises arrival.

Can Cryptomus hold funds, and how do refunds work?

Yes, funds and account access can be restricted, and a refund feature doesn't guarantee release. Current terms permit pooled assets without deposit insurance, withdrawal suspension and partial, delayed or impossible returns in specified circumstances, and closing an account depends on conditions, with the user bearing the costs.^[8]

The status reference defines locked as funds held under the anti-money-laundering programme, and gives processing, blockchain-confirmation checks, underpayments and successful payments their own statuses.^[18] Blockchain confirmation and release by the hosted service are different questions.

The refund API requires a completed payment and a destination supplied by the merchant. Commission can come from the merchant balance or reduce the customer's refund, and the docs list blocked-payout errors. None of it promises a free refund, a universal completion time or recovery of unsupported transfers.^[20]

For an existing refund issue, keep the order, the amount you received, what the customer is owed, the status and the correspondence. Your adviser should confirm your legal permission and access before any movement, and if a fee reduces the customer's refund, get advice on what you owe for that sale.

The terms require claims within three months of the dispute arising, while the negotiation clause uses 90 calendar days. Those are different provisions, and neither is a refund turnaround promise. Ask a qualified adviser promptly whether they apply and can be enforced. This is general information, not legal advice.

Does Cryptomus work with your store and accounting?

Cryptomus offers shop modules and a developer API, but the sources give no proof that an installed checkout works. Its catalogue names WooCommerce, WHMCS, PrestaShop, OpenCart, Magento and other platforms, and a listing says nothing about your theme, payment settings and order workflow, or who fixes things if the plugin stops marking paid orders correctly.

WordPress.org closed the plugin on 18 April 2025 for a guideline violation, and it remains unavailable there.^[31] Cryptomus's own catalogue still shows WooCommerce with tutorial and download labels, but the tutorial detail wasn't readable and we haven't verified a current package or compatibility with an installed store. The closure isn't itself proof of a security defect.

The PHP SDK documentation describes a software helper for the API. Its original Packagist listing shows 1.0.0 dated 29 July 2022 and says it isn't auto-updated.^[27] An old release date leaves open whether the current API still behaves the way your application expects.

Payment-history documentation provides transaction records but says nothing about a tested QuickBooks or Xero connection. Your accountant will want order IDs, amounts, commissions, conversions, payouts and refunds reconciled, with exchange trades kept out of it. An API menu isn't automatic bookkeeping.

Point-of-sale readiness isn't confirmed either. A payment page that opens on a phone is no proof of a cashier workflow, hardware connection or accounting export. The processor selection guide covers replacement questions without assuming a plugin solves them all.

Are there recurring plans and testing tools?

Yes, with limits. The recurring reference supports weekly, monthly and three-monthly plans: the payer logs in, authorises the plan and makes the first payment before later automatic payments follow.^[25] That's more than emailing another bill, though it isn't automatic debits from an outside wallet.

If you're planning a replacement, note your subscriptions' authorisations, renewal dates, unpaid periods and customer notices. The documentation isn't a portability agreement or permission to move funds.

The testing reference simulates notifications and says test data aren't saved to the database. It lets you inspect messages and signatures, but it isn't a full live-payment sandbox, and it says nothing about compliance approval or bank delivery.^[21] We haven't run it.

What support and user reviews can you rely on?

Cryptomus lists email and Telegram for help. We couldn't confirm current official hours, a response commitment or a public status URL, so nothing here tells you how quickly a held payment gets resolved.

Trustpilot's numeric profile showed 2.4 from 521 reviews on 14 October 2026, with 49% five-star and 43% one-star. Its image label instead reads 2.5; we use the repeated numeric display. The page reports replies to 96% of negative reviews, which isn't a support-ticket resolution rate.^[32]

Of four highlighted excerpts selected by Trustpilot, two concern holds or AML delays, one repeated sales contact and one praises merchant support. They're selected excerpts, not a sample of the latest twenty reviews or a representative survey.

With an eligible replacement, ask who owns an urgent case, how you'll get updates and how refunds are escalated. Reviews say little about how often merchants face holds, and positive feedback lifts no restrictions.

How should you read the score and trade-offs?

Read the score as a preliminary comparison of the facts we collected. The formula has no sanctions factor and doesn't fully weigh enforcement history, so a position isn't lawful-access clearance, custody assurance or an endorsement of new onboarding.

Listed plugins can earn points without proving compatibility, the historical MSB claim affects licence points without current verification, and unknown extra costs stay out of the cost arithmetic. The ranking methodology explains those limits.

CertiK's project page lists an audit of CRMS.sol, the token contract, requested in 2023 and revised in 2024. That audit covers the token contract, not custody or gateway operations, and a badge leaves the contractual and legal questions here open.

Which Cryptomus alternatives should you compare?

Start with a provider that can approve your company, activity and way of receiving money. CoinGate, BitPay and BTCPay Server show three different operating choices, and the cards below follow our ranking order.

CoinGate is a hosted candidate in its supported countries, and the US isn't on the list. The Standard fee is 1%, before a payment-quote risk margin CoinGate doesn't price, and weekly Standard settlement isn't promised bank arrival.^[35] The CoinGate review and fee guide cover deductions and approval conditions.

BitPay accepts US and Canadian merchant applications, subject to approval and state and product limits, while new EEA, UK and Australian onboarding is paused.^[38] Its standard first tier gives $225 on the example basket, and its terms require an unpriced non-refundable application fee. The BitPay review covers settlement and refunds.

BTCPay Server's general FAQ describes self-hosted software with no software fee and direct-wallet receipts. You'd budget for hosting, maintenance, security, network costs and optional conversion, and your team takes on more operational work. Conversion providers run their own checks and charge their own costs.

1. 1

   CoinGate

   A hosted candidate in its supported merchant countries.

   81/100

   1%
   • 1% Standard fee before a quote margin it doesn't price
   • Public withdrawal pricing
   • Public invoice and settlement details
   • The US isn't on its country list. Approval of your activity and account, other deductions and bank arrival are still unknown.
   Read review ↗Visit site
2. 3

   BitPay

   A candidate for an approved US or Canadian crypto shop.

   73/100

   2% + $0.25
   • Public standard volume bands
   • Settlement and refund documentation
   • Current store listings
   • New EEA, UK and Australian onboarding is paused. The standard fee starts at 2% plus 25 cents, plus an application fee we couldn't price and other costs.
   Read review ↗Visit site
3. 12

   BTCPay Server

   Software for a team able to run direct-wallet bitcoin checkout.

   57/100

   0%
   • No percentage fee for the software
   • Self-hosted operation
   • Direct-wallet receipts
   • Hosting, maintenance, networks and optional conversion cost money. Your team runs the system, and legal obligations stay yours.
   Read review ↗Visit site

Two more choices fit a narrower group. Coinbase Business serves eligible US and Singapore companies. Its 1% offer is for migrating Commerce merchants, and new-account fees appear in the account. Its specified USDC networks and Ethereum USDT credit account USDC rather than giving you the old Commerce self-custody.

NOWPayments terms exclude EU, UK, US and UAE residents or citizens, and people located or resident in Russia.^[43] Its fee help lists 1% for same-coin payments and 1.5% for conversion or certain fixed-rate settings, with lower account discounts if you meet its verification conditions. A cheap-looking snippet is no guide to what you'd be offered or whether you qualify.

Our main gateway comparison has the broader shortlist. Planning a replacement checkout doesn't replace getting advice before an existing Cryptomus balance moves.

What evidence supports this review?

Cryptomus review FAQ

Change log: 14 October 2026, rechecked the original sources and put the UK restriction first; removed older network, withdrawal, compatibility and review-sample assurances.