The EU Sanctioned Russia's Payment Rails. Georgia Is Where They Stopped.

The Council adopted the 21st sanctions package on 23 July 2026. It freezes assets and bars funds for 94 banks and major financial institutions, extends the transaction ban to 33 further Russian credit and financial institutions, and lists the Moscow Exchange alongside Platezhny Tsentr — the Novosibirsk-based company that operates the Zolotaya Korona money-transfer system. In parallel it extends the transaction ban to 14 crypto-related service platforms based in third countries: Georgia, Panama, the UAE, the Marshall Islands, Kyrgyzstan and Belarus. The Georgian names are Aifory LLC, Abcex LLC and Rapira Group LLC. Within a day Georgia had disappeared from Zolotaya Korona's list of available destinations, along with Kazakhstan and Belarus; only Kyrgyzstan, Turkey and Uzbekistan remained. This is the part of the story that is simply on the record — the package, the listings and the suspension are all documented.

The mechanism is that the EU has stopped sanctioning only Russian institutions and started sanctioning the plumbing they use, wherever that plumbing is registered. Zolotaya Korona mattered precisely because the Western card networks left: it 'became one of Russia's major money transfer systems after Visa and Mastercard suspended operations in Russia following the full-scale invasion of Ukraine'. Georgia sits at the end of that rail twice over — as a destination for transfers and as a jurisdiction where sanctions-relevant crypto firms had incorporated. Meduza notes that 'Georgia and Kazakhstan are among the most popular destinations for Russians who left after the full-scale war began, and many of them rely heavily on Zolotaya Korona and Freedom Bank to send money.' The volumes are not marginal: in June 2026 Russia was the third-largest source of money transfers to Georgia at USD 51.42 million, 14.7% of a USD 348.26 million month, behind the United States (USD 66.2m) and Italy (USD 54.18m). That the EU intended to reach into third-country jurisdictions is explicit — the package introduces, for the first time, a power to ban crypto-asset services from an entire third country found to host platforms helping Russia evade sanctions. Whether Georgia specifically was a target or a consequence is the part we cannot source, and do not claim.

A payment-system designation is indiscriminate by design — it removes the rail, not the users of it the sanctioner objects to. The population on this particular rail is largely private: relocated Russians and the families connected to them, plus Georgian recipients of ordinary remittances. Meduza's framing is that the sanctions 'disrupt key money-transfer routes used by Russians who left after the full-scale invasion', and that many of them 'rely heavily on Zolotaya Korona and Freedom Bank to send money'. The scale of what a closed rail is competing with is visible in the aggregate: Georgia took in USD 348.26 million in transfers in June 2026, up 10.4% year-on-year, of which Russia's share was USD 51.42 million. Not all of that moved through this one operator, and no source breaks the corridor down by system — so the honest statement is that a meaningful channel inside a meaningful flow was closed, not that USD 51 million a month has stopped. The distribution of the loss is our read; the aggregate figures are the National Bank of Georgia's.

The National Bank of Georgia responded the day after the listings. It identified the three named companies as Aifory LLC, Abcex LLC and Rapira Group LLC, said they are not under its regulation, stressed that 'none of their areas of activity was Georgia', and stated that 'investigative actions have been launched against them'. The claim is narrower than it first reads: it is a statement about supervisory perimeter and about where the firms operated, not a claim that they were not registered in Georgia. It is also not the first Western designation to reach them — Aifory LLC and Rapira Group LLC were sanctioned by the United Kingdom in May 2026 for operating 'Russia-focused exchanges seeking to evade sanctions', two months before the EU listed them. A regulator saying an entity falls outside its remit is a defensible technical position and a live political problem at the same time, for a country whose EU accession path is the thing the answer is being heard against.

The case that this works: the rail is genuinely large, the designation is immediate, and compliance was instant — Zolotaya Korona pulled Georgia off its list within a day, without waiting to be forced. The case against: every previous closure in this corridor has been followed by a workaround, and the destinations left open on the same service — Kyrgyzstan, Turkey and Uzbekistan — are the obvious next hops for money that used to arrive directly. The scale of the alternative rails is not small either: CoinDesk reports, citing Chainalysis, that the A7 cross-border payments network the package also targets has processed nearly USD 120 billion to date. The strongest evidence that Brussels expects rerouting is the instrument it just built: a first-ever power to ban crypto-asset services from an entire third country found to host evasion platforms — a deterrent aimed at jurisdictions rather than firms, which is what you design when you expect the firms to move. Whether the flow falls or simply changes shape is not knowable yet, and the monthly National Bank of Georgia transfer data is where it will show up first.