TL;DR - Grinex is the OFAC-sanctioned successor to Garantex; if its ruble-backed A7A5 funds reach your wallet through a swap or a no-KYC exchange, your address carries sanctions exposure that a service can freeze.
When law enforcement seized Garantex in early 2025, the exchange did not disappear. Its operators rebuilt it under a new name, moved customer balances over, and kept laundering money behind a ruble-pegged token. If you trade on smaller venues or accept peer-to-peer payments, some of those coins can land in your wallet without any warning. This guide explains what Grinex is and how to check whether your address is exposed.
What is Grinex and why is it sanctioned?
Garantex was one of the largest Russia-based crypto exchanges. The US Treasury's OFAC first sanctioned it in April 2022 for moving funds from ransomware crews and darknet markets. On March 6, 2025, a US Secret Service-led operation with German and Finnish authorities seized its domains and froze its infrastructure.
Within days, Garantex officers stood up a near-identical platform called Grinex and transferred customer deposits to it. Blockchain investigators at Chainalysis and TRM Labs documented the rebrand: shared design, the same founder promoting it, and tokens burned at Garantex then re-minted and deposited into Grinex. On August 14, 2025, OFAC designated Grinex as a successor owned or controlled by Garantex under Executive Order 13694. Its addresses now sit on the same sanctions list.
The same operators reissue the A7A5 token across sanctioned venues, so a static blacklist of one name misses the rest.
How does Grinex exposure reach an ordinary wallet?
Most people never touch Grinex directly. The risk arrives through the token at the center of the network. A7A5 is a ruble-backed asset that trades on both Ethereum and Tron, issued by a Kyrgyzstan company and backed by deposits at a sanctioned Russian bank. Chainalysis reported it processed over 51 billion dollars in cumulative volume through July 2025.
That money does not stay inside the network. Analysts found a decentralized exchange that swaps A7A5 into mainstream stablecoins, with roughly 1.46 billion dollars moving through it. Once value is sitting in USDT or USDC, it can hop into no-KYC exchanges, peer-to-peer desks, and ordinary wallets that have no idea where the coins started. You can end up two or three transfers downstream of a sanctioned exchange after a single swap.
How do you check if your wallet is exposed to Grinex?
Start with the sources you can cite, then trace the money back:
Run the receiving address through the OFAC Sanctions Search portal. OFAC guidance confirms you can query a digital-currency address directly against the SDN list, which now includes Grinex-linked wallets.
Look up the address on a block explorer such as Etherscan. Some explorers tag known sanctioned wallets, but the label only catches a direct match on one chain.
Trace the funds back several hops. Direct deposits are rare; the real risk is an intermediary or a swap contract that sat between you and the exchange.
Doing this by hand across multiple chains is slow and easy to get wrong. You can screen the address with Plastron to trace sanctions, mixer, and stolen-funds exposure across Ethereum and six more EVM chains in one query. Because A7A5 lives on Ethereum, the swapped stablecoin trail is visible to an EVM screener.
What happens if your wallet has Grinex exposure?
US sanctions work on strict liability. You do not need to know a counterparty was sanctioned to face consequences. When an exchange screens an incoming deposit and finds a sanctioned entity in the transaction graph, the standard response is to freeze the deposit, open a review, and file a Suspicious Activity Report if required. A hold can last weeks, and in the worst case a US person can face civil or criminal liability for transacting with a blocked entity.
Exposure comes in two shapes. Direct exposure is a transfer straight from Grinex to your wallet. Indirect exposure runs through one or more intermediary wallets or a swap. Both can trigger a hold, though a direct transfer scores higher. Note that Grinex itself suspended operations in April 2026 after a reported hack, but the takedown does not clear its history: the addresses stay on the list and the old transfers stay on-chain.
One swap is enough to put a clean-looking stablecoin balance a few hops from a sanctioned exchange.
How can you avoid sanctioned-exchange funds going forward?
Screen before you accept, not after. Check a counterparty address before an OTC deal, a peer-to-peer trade, or a large incoming payment, and keep a record of the clean ones. Treat any deposit from an unknown seller on a no-KYC venue as higher risk, since that is exactly where bridged A7A5 value tends to surface. The lesson from Garantex and Grinex is that sanctioned operators rebrand and reissue assets to dodge detection, so a name-only blacklist will always lag - screen the full transaction graph instead.
FAQ
Is Grinex the same as Garantex?
Functionally, yes. Investigators describe Grinex as a rebrand built by Garantex staff, with customer deposits transferred over after the March 2025 takedown. OFAC sanctioned it in August 2025 as a successor entity, so funds linked to either name carry the same exposure.
What is the A7A5 token?
A7A5 is a ruble-backed token on Ethereum and Tron, issued by a Kyrgyzstan company and backed by deposits at a sanctioned Russian bank. It is the main vehicle the network uses to move value, and a DEX lets holders swap it into mainstream stablecoins.
Grinex halted in 2026 - can it still flag my wallet?
Yes. Sanctioned addresses stay on the OFAC list after an exchange stops trading, and the historical transfers remain on-chain. A screener can still trace funds in your wallet back to those addresses long after the platform goes dark.
Does receiving swapped A7A5 funds break US sanctions?
US sanctions are strict-liability, so liability does not depend on intent. Receiving funds unknowingly is lower risk than sending them, but you should still screen the address, document how you got the crypto, and disclose the source if an exchange asks.
Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.
About Plastron
Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.