#
Russia's payment market is governed by the Federal Law 'On the National Payment System' (161-FZ), which defines money transfer operators, e-money operators, payment system operators and payment infrastructure service operators. The Bank of Russia licenses credit institutions and non-bank credit organisations that provide funds-transfer services; MinFin and the CBR jointly regulate non-bank PSPs, creating jurisdictional overlap. NSPK, wholly owned by the CBR, operates the Mir card scheme (est. under a May 2017 law) and clears domestic transactions for foreign card schemes.
Outlook
The bank-versus-non-bank licensing overlap between the Bank of Russia and Ministry of Finance is likely to persist as a structural friction point for non-bank payment institutions seeking market access.
Licensing, Authorisation & Market Access
Federal Law No. 282-FZ, whose core provisions took effect 1 September 2026, adds a new Bank-of-Russia-licensable activity class covering crypto exchange and digital-depository operations. This activity class sits structurally adjacent to, but distinct from, Russia's existing National Payment System (NPS) payment-services licensing regime: a firm licensed to operate crypto exchange or depository services under 282-FZ is not thereby licensed as a payment-services provider, and the two authorisation tracks proceed under separate statutory and supervisory bases even though both fall under Bank of Russia oversight. The full implementing-regulation package needed to operationalise the new activity class -- reported at roughly 27 secondary acts -- remains in progress this cycle, meaning the licensing framework exists in statute but is not yet fully operational in practice. No Tier-1 Bank of Russia primary regulatory text for the omnibus statute itself was retrieved this cycle; the claim rests on T3 secondary reporting, which caps confidence at Probable.
Outlook
The Bank of Russia is reported to be targeting completion of the remaining implementing-act package by end-October 2026, with a stated aim of enabling licensed crypto operators to begin trading before year-end 2026. Whether this timeline holds is the key near-term marker for market-access purposes, distinct from the separate crypto-monitor tracking of licensing mechanics in depth.
1 earlier distinct update(s)
Licensing, Authorisation & Market Access
Draft law No. 811008-8 establishes a phased mandatory-adoption timeline for digital-ruble transaction capability across the Russian banking and retail sector. The first tranche, comprising eleven to twelve systemically important banks, must offer digital-ruble transaction capability from 1 September 2026. Universal-licence banks and retailers with revenue above 30 million rubles follow on 1 September 2027, and the remaining banks and retailers with revenue above 5 million rubles follow on 1 September 2028. This bank-PSP-facing obligation is distinct in kind from a conduct or safeguarding requirement: it is a market-access mandate compelling participation in a state-operated payment rail rather than a licensing condition governing entry into the market itself, and it applies specifically to already-licensed bank entities rather than to non-bank payment institutions or e-money issuers.
Bank of Russia Governor Nabiullina confirmed at the July 2026 Financial Congress that all twelve systemically important banks are technologically ready for the 1 September 2026 mandate, with the central bank allowing for the possibility of one or two deferrals into late 2026. This official readiness confirmation, delivered directly by the regulator ahead of the mandatory commercial launch, indicates the first-tranche deadline is highly likely to be met at the systemic-bank level, even if a small number of individual institutions receive short extensions.
The phased structure itself is a notable design choice from a market-access perspective: by sequencing the mandate from largest systemically important banks down to smaller retailers over a three-year window, the regulator is managing rollout risk across the banking sector's full size distribution rather than imposing a single-date universal requirement. This bank-first sequencing places the initial compliance burden on the institutions best resourced to absorb new infrastructure requirements, deferring the harder small-retailer compliance question to 2028.
Outlook
The immediate test is whether the 1 September 2026 deadline is met without the reported deferrals extending materially beyond "late 2026" language, since any slippage at the systemically-important-bank tier would be the clearest possible signal of implementation strain. The 2027 and 2028 tranches, extending the mandate to universal-licence banks and then to smaller retailers, will be the next points at which market-access compliance costs are tested against a much larger and more heterogeneous population of obligated entities.
Sources and findings (5)
- T1http://www.cbr.ru/queries/unidbquery/file/48362/64retrieved
- T2https://cyberleninka.ru/article/n/legal-and-regulatory-framework-of-the-payment-and-e-money-services-in-the-brics-countriesretrieved
- T4https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-marketretrieved
- T1https://www.cbr.ru/eng/psystem/retrieved
- T3https://en.wikipedia.org/wiki/Mir_(payment_system)retrieved