Cryptomus Card
Cryptomus (Xeltox Enterprises Ltd.) · Visa/Mastercard
Data verified on unchanged since the sources
Worth it if you want to spin up virtual cards in USDT/USDC (up to 10) for online payments: $4 issuance and no annual fee.
Avoid it if you care about your funds: the operator took a record C$176.9M FINTRAC penalty (Oct 2025) for AML failures and is custodial.
Cryptomus Card is a virtual crypto card (no physical) from the Cryptomus payments platform, operated by Canada's Xeltox Enterprises Ltd. It is topped up with USDT or USDC from the custodial Cryptomus wallet, converted to fiat at top-up. It runs on Visa/Mastercard with Apple Pay and Google Pay; a one-time KYC unlocks up to 10 cards. No cashback or ATM withdrawals, $4 issuance and 3.2% top-up. Note: in October 2025 FINTRAC imposed a record C$176.9M penalty on Xeltox/Cryptomus for AML failures (company appealing).
Data & conditions
§ Amounts in USD/GBP are shown in the service's native currency.
| Network | Visa/Mastercard |
|---|---|
| Fund custody | Custodial (platform holds funds) |
| Issuance fee | €4 |
| Annual fee | Free |
| Free ATM limit | No ATM withdrawals |
| ATM withdrawal | Free |
| FX markup | 3.2% |
| Cashback | Not disclosed |
| Contactless | Yes |
| Virtual card | Yes |
| KYC | Full |
| Privacy | 2/10 |
| Supported countries | EEA, UK, APAC, LATAM, MENA, AFRICA |
| Funding / solidity | Cryptomus è una piattaforma di pagamenti in criptovalute gestita da Xeltox Enterprises Ltd. (ex Certa Payments Ltd.), società privata con sede a Vancouver, British Columbia, Canada. |
| Estimated net annual cost | €0/year |
| Regulator | FINTRAC (Financial Transactions and Reports Analysis Centre of Canada) |
| Segment | B2C |
| Past incidents | Oct 2025: FINTRAC imposed a record C$176.9M penalty on Xeltox/Cryptomus for AML failures (company appealing) |
| Funding / solidity | Cryptomus is a crypto payments platform operated by Xeltox Enterprises Ltd. (formerly Certa Payments Ltd.), a private company headquartered in Vancouver, British Columbia, Canada. |
| MiCA / License status | FINTRAC MSB (Canada) Registered as a Money Services Business (MSB) with FINTRAC in Canada. In October 2025 FINTRAC imposed a record C$176.9M administrative penalty on Xeltox/Cryptomus for AML failures (the company filed an appeal). |
Strengths
- Fast virtual card issuance in USDT/USDC, up to 10 per user
- Accepted on Visa/Mastercard with Apple Pay and Google Pay
- Low issuance fee ($4) and no annual fee
- No notable sovereignty advantage documented.
Weaknesses
- Custodial wallet: funds held by the platform
- No cashback and no ATM withdrawals
- Costly top-up (3.2%); serious compliance risk: record C$176.9M FINTRAC penalty (Oct 2025)
- Custodial: the platform holds your funds and can freeze or lose them.
- Full KYC required: verified identity, zero pseudonymity.
- Subject to regulation (Registered as a Money Services Business (MSB) with FINTRAC in Canada. In October 2025 FINTRAC imposed a record C$176.9M administrative penalty on Xeltox/Cryptomus for AML failures (the company filed an appeal).): reporting to authorities and freezes on order.
Verdict
Very low protection. The custodial wallet and full KYC are not offset by any user safeguard: operator Xeltox/Cryptomus is registered only as an MSB with FINTRAC (Canada) and in October 2025 received a record C$176.9M penalty for serious AML failures (company appealing). The incident points to a fragile compliance framework that exposes user funds.
Almost no sovereignty. The card is virtual-only, funds sit in a custodial wallet controlled by the platform, and access requires full KYC: no self-custody, no anonymity, funds can be frozen by the operator.
Promp's editorial rating based on real fees and net annual cost. Promp reviews third-party products independently.
"Sovereignty" rating: score computed on privacy/anonymity (30%), fund control (20%), censorship resistance (20%), trustless/auditability (20%) and costs (10%). Same data, different weights.
Reputation
What happened to people who used Cryptomus Card, and what users say. External signals: they do not feed the promp.it rating.
Incidents & regulatory actions
Notable incidentsDocumented events with consequences still open. Each entry carries a source and a date.
-
Fine Severe ● open
FINTRAC: a 176,960,190 Canadian dollar penalty, the largest in its history, for about 2,600 anti-money-laundering violations. The company's appeal filed on 14 November 2025, no decision
On 16 October 2025 FINTRAC, Canada's financial intelligence unit, imposed on Xeltox Enterprises Ltd. — trading as Cryptomus, formerly Certa Payments Ltd., a money services business incorporated in British Columbia — an administrative penalty of 176,960,190 Canadian dollars, announced on 22 October. It is the largest the authority has ever issued, for about 2,600 violations of Canada's proceeds of crime and terrorist financing act. THE VIOLATIONS, IN THE AUTHORITY'S OWN NUMBERS. Failure to submit suspicious transaction reports on 1,068 occasions (July-August 2024); failure to report 1,518 virtual currency transactions of 10,000 dollars or more; non-compliance with a Ministerial Directive; inadequate compliance policies; insufficient risk assessments; failure to notify changes to its registration information. WHY THE FIGURE IS WHAT IT IS. The record is explained not by the size of the company but by the nature of what went unreported. FINTRAC lists among the unreported transactions those suspected of involving proceeds from trafficking in child sexual abuse material, fraud, ransomware payments and sanctions evasion. Director Sarah Paquet says it plainly: «given violations connected to child sexual abuse material trafficking, fraud, ransomware and sanctions evasion, FINTRAC was compelled to take this unprecedented enforcement action». Part of the missing reports concerned, according to the authority, transactions with known darknet markets and wallets tied to criminal activity; the unreported operations also include 7,557 transactions originating from Iran. THE APPEAL, AND WHY THERE IS NOT A WORD MORE HERE. On 14 November 2025 Xeltox filed an appeal in Federal Court, arguing that the penalties rest on «errors of law» and, on the substance, that FINTRAC was wrong to treat Xeltox and Cryptomus as «functionally the same entity»: the company states it licenses the Cryptomus platform from a Panama-based company, Padel West S.A., and should not answer for transactions conducted by other licensees. That is an argument, not an outcome. As at this verification date no Federal Court decision is on record: the penalty was imposed by an authority and has been neither upheld nor overturned by a court, and this page presents it as neither. A DISTINCTION THAT MATTERS TO THE READER. None of this says user funds were taken: it is not a hack and not a balance-sheet hole. It says the service's anti-money-laundering controls were judged severely inadequate by the authority that supervises them, and that the amount at stake is of an order of magnitude that can put the continuity of an operator this size in question.
↗ source -
Regulatory action Moderate ● open
British Columbia: provisional order from the securities commission against Xeltox/Cryptomus, suspected of operating as an unrecognised exchange without the required registrations
On 20 May 2025 the British Columbia Securities Commission issued a temporary order (2025 BCSECCOM 209) against Xeltox Enterprises Ltd., trading as Cryptomus, based in Vancouver. In the commission's own words, there is evidence that Cryptomus «may be violating the registration requirements of the Securities Act and operating as an unrecognized exchange». WHAT THE ORDER PROHIBITS. «The temporary order prohibits Cryptomus from trading securities or derivatives and from engaging in promotional activities.» It is a precautionary measure, not a final finding: its purpose is to halt the activity while the matter is decided, and by design it does not establish that a violation occurred. WHAT WE COULD NOT ESTABLISH, AND WE SAY SO. The order expired on 4 June 2025, with the executive director able to ask a commission panel to extend it. From the open sources we consulted it does not appear whether it was extended, whether a hearing was held, or whether the proceeding was closed. So we record the certain fact — an order by an authority, dated and published by that same authority — and declare the question of how it ended still open, rather than pretending to know. THE CONTEXT THAT MAKES THIS ENTRY USEFUL. Five months after this order, the same company received from FINTRAC the penalty recorded below. Two different Canadian authorities, in the same year, on the same operator: the single entry matters less than the sequence.
↗ source
verified on
Public reviews
-
Google Play ↗
4.7/5
5,314 reviews
'Cryptomus: Wallet & Trading' app (platform app, includes card management). Exact score 4.678 and count 5,314 from the page's structured data, not the rounded visible label.
Weighted average across 1 public review platform (5,314 reviews in total), weighted by volume. This is not our rating: it is those platforms’ average.
FAQ
Does the Cryptomus Card require KYC?
Yes: you must register and complete a one-time KYC; once approved you can issue up to 10 virtual cards. It is not anonymous.
Which crypto and card type does it support?
Only USDT and USDC to top up the custodial wallet; virtual-only card on the Visa/Mastercard networks.
Sources
- Official service page Fees · Fx · Virtual · Payment network · +4 Data verified on Jun 23, 2026
- cryptowisser.com Virtual card Data verified on Jul 16, 2026
- cbc.ca Incidenti · Sede Data verified on Jun 22, 2026
- fintrac-canafe.canada.ca Azienda · Paese · Incidenti Data verified on Jun 22, 2026
Show 1 more source
- todey.xyz Cashback · Atm · Payment network · Fees · +1 Data verified on Jun 22, 2026