All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Cloudzy + Cryptomus: 300 USDC confirmed on-chain since Oct 1, AML-locked, both sides say "not us"
Facts only, judge for yourselves.
1 Oct 2026, 17:38 UTC: 300.02 USDC (ERC-20) sent to the address generated by Cryptomus for a Cloudzy top-up invoice. Confirmed on chain: https://etherscan.io/tx/0xc1831738b3dac262d93c2d12298ebccc3e15dd2fdffee3fcddbc361fe45d6554
Cryptomus payment page: "Your payment is blocked. Sign up and return to the payment form."
Cloudzy ticket #198427, four replies from three agents over 48 hours: funds not received, locked by Cryptomus AML, contact Cryptomus yourself, no credit, no refund, "we cannot intervene". Ticket kept in the Sales department, never escalated. I ended up paying another 300 USD by card on 6 Oct to keep 4 production VPS alive.
Cryptomus (support chat on 3 Oct, AML officer and aml@ e-mail on 5 Oct): deposit on hold pending AML compliance review, send origin platform, withdrawal screenshot and source of funds. No timeline, no release procedure. A formal demand letter with a 10-day deadline got the same copy-paste template back.
What Cryptomus's own merchant docs say: merchants with blocked payments must contact Cryptomus support (https://doc.cryptomus.com/merchant-api/payments/creating-static); the merchant sees the status "locked: Funds are locked due to the AML program" (https://doc.cryptomus.com/merchant-api/payments/payment-statuses); and there is a merchant endpoint "Refund payments on blocked address" (https://doc.cryptomus.com/merchant-api/payments/refundblocked). Cloudzy, as the merchant, has the tools. The payer has none.
Context on the processor Cloudzy chose: on 16 Oct 2025 FINTRAC confirmed a CAD 176,960,190 penalty against Xeltox Enterprises Ltd. (Cryptomus) for 1,068 unreported suspicious transactions and other failures, and recorded that the company had no employees in Canada (https://fintrac-canafe.canada.ca/pen/amps/pen-2025-10-22-eng).
Cloudzy, if you read LET: ticket #198427, your move. Anyone here ever had a Cryptomus AML lock released or refunded through the merchant side? Details welcome.
Comments
Don’t worry much they will post new advertisement very soon.
We used Cryptomus who locked our account without warning quite a while ago, at first refused to do anything but after a few emails pointing out they unblocked the account for 14 days to allow the withdrawal of funds, we could not comply with their instant KYC they applied to a mass amount of accounts as at the time no longer supported our country in their drop down list.
You could avoid this by swapping your ETH to XMR and avoid all the AML bullshit
Or just pay using card like a normal person.
Always avoid providers who have Cryptomus for cryptocurrencies.
lol. Because $300
wait isn't cloudzy-wowdzy who @Francisco sold buyvm to?
looks like that one, but i don't see their problem on this matter if using cryptomus is NOT a problem
Yes?
Cloudzy can't do anything if the funds got tied/locked by cryptomus. Maybe you can ask Cryptomus to send the funds back and you do something else.
I'm not sure why Cloudzy's getting dragged here. It isn't their fault the dudes coins have STD's.
Francisco
maybe it's time to switch to some self custody crypto gateway? however i don't think you wanna deal with the AML score things yourself
A couple of weeks ago, I also got blocked due to AML issues. I didn't know how to reach them other than through their Telegram bot, so I found the Russian-language crypto forum Bits. Media and posted in their thread there. They returned my funds the next day—after asking for details on some transfers I’d received over a year ago—but told me not to make any more transfers from that wallet because it was now flagged in their system.
Why someone still uses Cryptomus/Heleket? Isnt it shady business itself? While crypto was created as anonymous and decentralized way to send money or pay you guys using shady business (who already was fined by regulator) api with random kyc/kyb/aml applied? And thats while open source stuff like btcpay exist?
If the money was AML by Cryptomus or Heleket, that means it would have been locked out by any other processor as well. They only AML of its really dirty or suspicious.
>
Sure, but you have no way to prevent being sent dirty coins. Your wallet is then dirty and now when you try to sell those coins they're getting flagged like the OP.
BTCPay is great, but given the amount of stolen crypto going around its iffy for a business to use it.
Francisco
Isn’t Cryptomess the same ones involved in the $22k fruit and vegetable crypto saga?
Hmm, where did your crypto come from?
i just like typing clowdzy-wowdzy
We have also seen a few payments getting locked by Cryptomus, and there doesn’t seem to be any refund option in their panel/dashboard. Interestingly, the customers never contacted us about a refund or anything. Maybe they already knew something was wrong with the funds (dirty funds).
This is why you should only use a self-hosted BTCPay server set to accept XMR only. No AML risk there since all coins are identical and can't be tainted. Otherwise, use Cryptomus only for XMR as @luckypenguin says.
This is a safe thing to do sir? I'm curious.
Unless you live in a country where cryptocurrency is banned, why not?
Cryptomus is a shady Russian owned payment solution and that is your choice to prevent getting paid with dirty "money".
Does dirty mean? like somehow the crypto get marked for AML. But how would payment processor know it?
Does that mean it can be exploited for ransomware? That's my biggest gripe with crypto. And the waste of energy.
It means the coins were marked as fraudulent, stolen, etc. The problem is they remain perpetually "tainted" for everyone who transactions with them, so you might get some Bitcoin from someone legit who got it from someone legit who got it from someone legit who got a tiny portion from someone who stole it, and now your coins are marked tainted. This can happen even with reputable exchanges. That very issue cost some sucker $22,500 and cost @Calin his privilege to be on LET.
It's possible because most blockchains are public, so all transactions can be trivially plotted and traced. It's not possible with XMR, since all coins are identical (i.e. "fungible"). Thus a payment provider either has to accept all XMR transactions, or none of them. It can't flag any particular transaction as suspicious, so there's no AML hold risk.
What do you mean? The BTCPay server? I suppose if someone keeps all the cryptocurrency they make on the server and never exchange it for fiat, yeah. But you're not supposed to do that. It's not meant for long-term coin storage.
And not all cryptocurrencies waste energy. Proof-of-Work (PoW) coins do, but others, like Ethereum, use Proof-of-Stake (PoS) which does not require computationally-expensive mining (they use the term "minting" to distinguish it). Ethereum has virtually no energy waste. Bitcoin mining, meanwhile, is an absolute energy hog.
And that's why all hosts should have their own cryptocurrency nodes instead of relying on some predatory third party platform like Cryptomus to accept cryptocurrency payments.
Crypto is supposed to be peer to peer electronic cash, businesses using a central third party like Cryptomus beats the ENTIRE point of using crypto in the first place.
I will add that you can also use Bitcart. It is a robust self hosted crypto payment gateway, covers pretty much every major coin out of the box without any custom plugins except for ETH. It does not need a full node to operate or the need to provide a private key to use it. Xpubkey is all you need for BTC or a viewkey for XMR.
Skhron @tentor uses it for crypto invoices and payments.
Calin take notes