title: Russia Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/russia/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Russia RU schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 79 sourced findings · 126 sources in the cumulative register 14 Modules baseline.modules[] 79 Findings modules[].findings[] 3 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Russia's digital-ruble and 282-FZ crypto-market regimes are both expanding operationally this period, with the state tightening individual self-custody access even as institutional players gain approved on-ramps. The Bank of Russia confirmed that Federal Law No. 282-FZ's core provisions took effect on 1 September 2026, and subsequently clarified that Article 31 bars individuals from withdrawing crypto from regulated custodial digital accounts to self-hosted wallets and from transferring crypto peer-to-peer between individuals. At the same time, digital-ruble payroll payments have begun and digital-ruble accounts have surpassed the central bank's own forecast for the first month of operation, while Sberbank is reported to have received approval for crypto-exchange services with Moscow Exchange expected to use a partner settlement digital depository. The combined picture is of a payments environment where the state is simultaneously building out a sovereign digital-currency rail and channelling private crypto activity into monitorable, licensed infrastructure. #### Other Developments **A credit-card betting-funding restriction is advancing through the Duma.** Bill No. 720112-8 would require card-issuing banks to decline credit-card payments that fund bets placed with gambling or betting operators; it passed its second reading on 13 October 2026 and is not yet enacted. This is a conduct and safeguarding-adjacent measure aimed at a specific payment use-case rather than a broader change to card-scheme rules or licensing. **Unconfirmed interest has been reported in a stake in Russia's national payment-card operator.** Wildberries, Ozon, MTS and Yandex are reported to be interested in acquiring a stake in JSC NSPK, the operator of the Mir card system and the SBP fast-payment system, per a single Russian business-wire source citing anonymous sourcing. No transaction has been announced or signed, and the report has not been corroborated by a second outlet. #### Cross-Monitor Connections The 282-FZ self-custody restriction and the reported Sberbank crypto-exchange approval connect to Crypto Monitor's coverage of Russia's digital-asset licensing regime, and to Financial Integrity Monitor's sanctions-architecture tracking, where OFAC's A7 Network designation names crypto-adjacent settlement infrastructure reported as adjacent to Russia's broader crypto-market activity. #### Outlook The credit-card betting-funding bill's progress toward an expected end-of-2026 passage is the next concrete date to watch on the conduct side. On the digital-money side, continued digital-ruble account growth relative to the central bank's own forecast, and confirmation of Sberbank's reported crypto-exchange approval and its targeted 1 December 2026 wallet and digital-depository launch, would clarify how far institutional crypto on-ramping is proceeding alongside the sovereign digital-currency rollout. _3 earlier updates not shown here._ ###### Standing brief · as of 4 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal The Bank of Russia has set a binding digital-ruble rollout timetable, the most consequential near-term compliance milestone in the jurisdiction. Large-scale introduction begins 1 September 2026 for systemically important banks and large retailers with revenue above ₽120 million, phasing to universal-licence banks and mid-sized retailers by 1 September 2027 and to all remaining banks and retailers by 1 September 2028. A pilot running since August 2023 had, by end-May 2025, reached roughly 2,500 wallets across 150-plus localities via 15 banks, generating over 63,000 transfers and 17,000 smart contracts, with fees introduced from 2026. The European Union's 20th sanctions package separately bans transactions related to the digital ruble and ruble-linked tokens such as RUBx, effective 24 May 2026. #### Other Developments Federal Law 161-FZ remains the core legal basis for the national payment system, defining money transfer operators, payment system operators and payment infrastructure service operators. The Bank of Russia and Ministry of Finance jointly regulate non-bank payment service providers, an overlap associated with fintech licensing timelines averaging 12-16 months. The Bank of Russia is developing a bill to raise consumer-protection fines on credit institutions to 0.1%-1% of own capital, and has pressed banks over complaint-handling deadline violations. A single NPCS-operated universal QR code is being legislated to supersede the Sberbank/Alfa-Bank/TBank Fintech Platform consortium, which holds over 80% of the acquiring market, with bank technical readiness required by 1 September 2026; Mir had, by June 2026, surpassed 475 million cards issued, over 75% of domestic card transactions. OFAC has warned that SPFS membership may itself trigger sanctions designation under Executive Order 14024, three major Chinese banks have stopped accepting payments from sanctioned Russian institutions since early 2024, and BRICS Pay remains in early pilot stages after an October 2024 Moscow prototype demonstration. The Bank of Russia revoked CB Novy Moskovsky Bank's licence on 23 January 2026 over suspicious transactions, echoing the February 2024 revocation of Qiwi Bank's licence for AML/CFT violations, while OFAC designated Gazprombank and 50-plus internationally connected Russian banks under Executive Order 14024. E-wallet volume reached ₽13.3 trillion in 2025, up 1.6 times year-on-year, while QR-code and biometric payments grew 1.4 times to ₽5.7 trillion. The Faster Payments System had 226 participating banks and had processed 50.8 billion transactions worth ₽269.6 trillion since 2019, as of 1 June 2026. Credit institutions paid ₽2,713.58 million in voluntary fraud reimbursements in 2024, up from ₽1,378.76 million in 2023, against an estimated 50,000-70,000 daily fraud victims. FATF downgraded Russia's Recommendation 15 virtual-asset rating to Partially Compliant, prompting Rosfinmonitoring to propose licensing crypto exchanges with Travel Rule-aligned obligations. Sberbank, Alfa-Bank and TBank registered Fintech Platform LLC on 13 January 2026, X5 Group and Alfa-Bank launched Orange Pay on 2 April 2026, and Russian fintech equity funding fell 94.32% year-on-year to $3.82 million to March 2026. #### Cross-Monitor Connections OFAC's SPFS sanctions-risk alert and the Gazprombank-and-50-bank designation have been routed to the Financial Intelligence Monitor for illicit-finance analysis beyond WPM's payments-market-structure scope. A 2024 amendment permitting supervised cross-border crypto settlement and the Bank of Russia's crypto-for-cross-border-payments experiment, alongside the FATF Recommendation 15 downgrade, indicate a widening virtual-asset AML/CFT gap also flagged to FIM. WPM's role remains limited to payments-market-structure observation. #### Outlook The 1 September 2026 digital-ruble deadline and the universal QR code technical-readiness deadline fall on the same date, reinforcing state-directed infrastructure consolidation over bank-led alternatives. Correspondent-banking access is likely to keep contracting as de-risking continues, pushing settlement further toward crypto-enabled and bilateral channels. Consumer-protection enforcement looks set to intensify further even as statutory fraud reimbursement remains negligible, leaving voluntary reimbursement dominant. Commercial activity is likely to stay concentrated in domestic bank-led ventures, with international venture capital largely absent. trust tier: ai_unverified ###### Latest update · 18 October 2026 #### Regulatory Status Russia's payments-regulatory environment this period is defined by three concurrent threads. First, conduct-level tightening: Bill No. 720112-8, which would require card-issuing banks to decline credit-card payments funding bets with gambling operators, passed its second reading on 13 October 2026 and remains unenacted. Second, digital-money expansion: digital-ruble payroll payments have begun and account growth has surpassed the Bank of Russia's own forecast, while Federal Law No. 282-FZ's core crypto-market provisions, in force since 1 September 2026, were clarified to restrict individual crypto self-custody withdrawals and peer-to-peer transfers. Third, institutional crypto on-ramping: Sberbank is reported to have received approval for crypto-exchange services, with a planned wallet and digital-depository launch targeted for 1 December 2026, though this remains secondary-sourced. A separate, unconfirmed commercial report describes interest from Wildberries, Ozon, MTS and Yandex in acquiring a stake in NSPK, the Mir/SBP operator, though no transaction has been announced. #### Outlook The credit-card betting-funding bill's path toward an expected end-of-2026 passage, continued digital-ruble adoption relative to central-bank forecasts, and confirmation of Sberbank's reported crypto-exchange approval are the three threads to watch for the next period. Any corroboration or denial of the reported NSPK stake interest would also be a material development for Russia's payments-infrastructure ownership picture. _3 earlier updates not shown here._ ###### Standing brief · as of 4 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Russia's payments regulatory environment carries an elevated risk rating on a tightening trajectory, driven by sanctions escalation: OFAC's designation of Gazprombank and more than 50 internationally connected Russian banks, the mandatory digital-ruble rollout beginning 1 September 2026, and FATF's downgrade of Russia's virtual-asset compliance rating are the principal drivers across licensing, CBDC, correspondent banking, financial crime and legal domains. Russia's payments regulatory architecture is consolidating state control via NSPK and Mir dominance, the forthcoming mandatory digital ruble, and a single NPCS-operated universal QR code, systematically displacing bank-led alternatives such as the Sberbank, Alfa-Bank and TBank Fintech Platform consortium. Correspondent-banking and cross-border settlement access continues to contract, pushing settlement toward crypto-enabled and bilateral friendly-jurisdiction channels with attendant sanctions-evasion risk. #### Outlook The 1 September 2026 digital-ruble deadline and the universal NPCS QR code technical-readiness deadline, both falling on the same date, are the fixed points around which compliance activity will organise over the next two quarters, with correspondent-banking contraction and virtual-asset AML/CFT gaps likely to remain the dominant medium-term themes. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Probable confirmed 2026-07-04 Russia's payment market is governed by the Federal Law 'On the National Payment System' (161-FZ), which defines money transfer operators, e-money operators, payment system operators and payment infrastructure service operators. The Bank of Russia licenses credit institutions and non-bank credit organisations that provide funds-transfer services; MinFin and the CBR jointly regulate non-bank PSPs, creating jurisdictional overlap. NSPK, wholly owned by the CBR, operates the Mir card scheme (est. under a May 2017 law) and clears domestic transactions for foreign card schemes. Standing sub-brief · as of 4 July 2026 128 words · last cycle 2026-10-04 #### Licensing, Authorisation & Market Access Federal Law 161-FZ defines money transfer operators, payment system operators and payment infrastructure service operators, forming the core legal basis for Russia's national payment system. NSPK, wholly owned by the Bank of Russia, operates the Mir scheme and clears domestic transactions of foreign card schemes; as of 1 January 2026 the national payment system comprised 31 payment systems and 353 money transfer operators. The Bank of Russia and Ministry of Finance jointly regulate non-bank payment service providers, an overlap reportedly associated with fintech licensing timelines averaging 12-16 months that have deterred foreign investment. #### Outlook The bank-versus-non-bank licensing overlap between the Bank of Russia and Ministry of Finance is likely to persist as a structural friction point for non-bank payment institutions seeking market access. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access Federal Law No. 282-FZ, whose core provisions took effect 1 September 2026, adds a new Bank-of-Russia-licensable activity class covering crypto exchange and digital-depository operations. This activity class sits structurally adjacent to, but distinct from, Russia's existing National Payment System (NPS) payment-services licensing regime: a firm licensed to operate crypto exchange or depository services under 282-FZ is not thereby licensed as a payment-services provider, and the two authorisation tracks proceed under separate statutory and supervisory bases even though both fall under Bank of Russia oversight. The full implementing-regulation package needed to operationalise the new activity class -- reported at roughly 27 secondary acts -- remains in progress this cycle, meaning the licensing framework exists in statute but is not yet fully operational in practice. No Tier-1 Bank of Russia primary regulatory text for the omnibus statute itself was retrieved this cycle; the claim rests on T3 secondary reporting, which caps confidence at Probable. #### Outlook The Bank of Russia is reported to be targeting completion of the remaining implementing-act package by end-October 2026, with a stated aim of enabling licensed crypto operators to begin trading before year-end 2026. Whether this timeline holds is the key near-term marker for market-access purposes, distinct from the separate crypto-monitor tracking of licensing mechanics in depth. **1 earlier distinct update(s)** Periodic update · new data 2026-09-21 #### Licensing, Authorisation & Market Access Draft law No. 811008-8 establishes a phased mandatory-adoption timeline for digital-ruble transaction capability across the Russian banking and retail sector. The first tranche, comprising eleven to twelve systemically important banks, must offer digital-ruble transaction capability from 1 September 2026. Universal-licence banks and retailers with revenue above 30 million rubles follow on 1 September 2027, and the remaining banks and retailers with revenue above 5 million rubles follow on 1 September 2028. This bank-PSP-facing obligation is distinct in kind from a conduct or safeguarding requirement: it is a market-access mandate compelling participation in a state-operated payment rail rather than a licensing condition governing entry into the market itself, and it applies specifically to already-licensed bank entities rather than to non-bank payment institutions or e-money issuers. Bank of Russia Governor Nabiullina confirmed at the July 2026 Financial Congress that all twelve systemically important banks are technologically ready for the 1 September 2026 mandate, with the central bank allowing for the possibility of one or two deferrals into late 2026. This official readiness confirmation, delivered directly by the regulator ahead of the mandatory commercial launch, indicates the first-tranche deadline is highly likely to be met at the systemic-bank level, even if a small number of individual institutions receive short extensions. The phased structure itself is a notable design choice from a market-access perspective: by sequencing the mandate from largest systemically important banks down to smaller retailers over a three-year window, the regulator is managing rollout risk across the banking sector's full size distribution rather than imposing a single-date universal requirement. This bank-first sequencing places the initial compliance burden on the institutions best resourced to absorb new infrastructure requirements, deferring the harder small-retailer compliance question to 2028. #### Outlook The immediate test is whether the 1 September 2026 deadline is met without the reported deferrals extending materially beyond "late 2026" language, since any slippage at the systemically-important-bank tier would be the clearest possible signal of implementation strain. The 2027 and 2028 tranches, extending the mandate to universal-licence banks and then to smaller retailers, will be the next points at which market-access compliance costs are tested against a much larger and more heterogeneous population of obligated entities. **Sources and findings (5)** 1. T1 [http://www.cbr.ru/queries/unidbquery/file/48362/64](http://www.cbr.ru/queries/unidbquery/file/48362/64) retrieved 2026-07-04 2. T2 [https://cyberleninka.ru/article/n/legal-and-regulatory-framework-of-the-payment-and-e-money-services-in-the-brics-countries](https://cyberleninka.ru/article/n/legal-and-regulatory-framework-of-the-payment-and-e-money-services-in-the-brics-countries) retrieved 2026-07-04 3. T4 [https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-market](https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-market) retrieved 2026-07-04 4. T1 [https://www.cbr.ru/eng/psystem/](https://www.cbr.ru/eng/psystem/) retrieved 2026-07-04 5. T3 [https://en.wikipedia.org/wiki/Mir_(payment_system)](https://en.wikipedia.org/wiki/Mir_(payment_system)) retrieved 2026-07-04 ### W1b Conduct, Safeguarding & Promotions Probable confirmed 2026-07-04 Consumer/conduct supervision sits with the Bank of Russia's Service for Consumer Protection and Financial Inclusion, which handles reactive complaint-driven supervision and proactive identification of unfair market practices (mis-selling, misinformation on fees/yields). Enforcement is intensifying: the CBR is developing a bill to raise fines for consumer-rights violations (proposed at 0.1-1% of a credit institution's capital) and has publicly pressed banks over slow complaint handling and inadequate explanations for blocked transactions. Standing sub-brief · as of 4 July 2026 123 words · last cycle 2026-10-18 #### Conduct, Safeguarding & Financial Promotions The Bank of Russia's Service for Consumer Protection and Financial Inclusion conducts both reactive, complaint-driven and proactive supervision of unfair market practices, backed by inspection and supervisory-response powers. The Bank of Russia is developing a bill to raise fines on credit institutions for consumer-rights violations, proposed at 0.1%-1% of an institution's own capital. It has also threatened formal orders against banks continuing to violate 2024-law complaint-handling deadlines, and urged proactive disclosure of transaction-blocking grounds. No non-bank e-money safeguarding mechanism (segregation, trust, bond or insurance) has been evidenced this cycle. #### Outlook Enforcement pressure on conduct and complaint-handling is likely to intensify further as the capital-based fines bill progresses, while the e-money safeguarding gap remains a candidate for targeted follow-up. Periodic update · new data 2026-10-18 #### Conduct, Safeguarding & Financial Promotions State Duma Bill No. 720112-8 passed its second reading on 13 October 2026, advancing a measure that would require credit-card-issuing banks to decline credit-card payments funding bets placed with gambling or betting operators. This is a conduct-adjacent restriction operating at the payment-instrument level: it does not alter betting-operator licensing status, but it does impose a new compliance obligation on card-issuing banks to identify and decline a specific category of transaction. The bill is reported to be targeted for passage by the end of 2026, but as of the second reading it remains unenacted, with no confirmed effective date or penalty provision identified. The measure sits within a broader conduct-and-safeguarding frame in that it is designed to interrupt a specific consumer-harm-adjacent funding channel (credit-card-funded betting) rather than to regulate betting-operator conduct directly. #### Outlook The bill's progress toward further readings and its targeted end-of-2026 passage window are the key dates to watch. Confirmation of the bill's final text, effective date and any penalty or compliance mechanism for card-issuing banks would determine the practical compliance burden this measure imposes once enacted. **Sources and findings (5)** 1. T1 [https://www.cbr.ru/eng/protection_rights/](https://www.cbr.ru/eng/protection_rights/) retrieved 2026-07-04 2. T1 [https://www.cbr.ru/press/event/?id=12401](https://www.cbr.ru/press/event/?id=12401) retrieved 2026-07-04 3. T3 [https://en.iz.ru/en/1864902/lubov-lezneva/protective-measures-central-bank-proposes-increase-fines-banks-violating-consumer-rights](https://en.iz.ru/en/1864902/lubov-lezneva/protective-measures-central-bank-proposes-increase-fines-banks-violating-consumer-rights) retrieved 2026-07-04 4. T1 [https://cbr.ru/eng/about_br/bankstructute/szpp](https://cbr.ru/eng/about_br/bankstructute/szpp) retrieved 2026-07-04 5. T3 [https://interfax.com/newsroom/top-stories/116481/](https://interfax.com/newsroom/top-stories/116481/) retrieved 2026-07-04 ### W2 Stablecoins & Digital Money Confirmed confirmed 2026-07-04 The digital ruble is Russia's CBDC, piloted since August 2023 and mandated for mass rollout from 1 September 2026 for systemically important banks and large retailers, with staged deadlines out to 2028 for smaller institutions. It is designed as a third form of the national currency alongside cash and non-cash rubles, delivered via a universal NPCS-operated QR code. Separately, the 2020 Digital Financial Assets law (259-FZ) legalises crypto-asset circulation but bars crypto as domestic payment; a 2024 amendment and subsequent experimental legal regimes permit crypto use in cross-border trade settlement under CBR/Rosfinmonitoring supervision, a policy directly linked to sanctions evasion. Horizon · 2027-09-01 (±year) Digital ruble mandatory acceptance - universal-licence banks & mid-sized retailers_in_force_pending · TT1_ Horizon · 2028-09-01 (±multi_year) Digital ruble mandatory acceptance - remaining banks & retailers_in_force_pending · TT1_ Horizon · 2026-09-01 (±quarter) Digital ruble mandatory acceptance - systemically important banks & large retailers_in_force_pending · TT1_ Standing sub-brief · as of 4 July 2026 131 words · last cycle 2026-10-18 #### Stablecoins & Digital Money Large-scale digital-ruble introduction begins 1 September 2026 for systemically important banks and large retailers, phasing to full coverage by 1 September 2028 via an intermediate 1 September 2027 stage. A pilot running since August 2023 had, by end-May 2025, reached roughly 2,500 wallets and 63,000-plus transfers across 15 banks, with fees introduced from 2026. Federal Law 259-FZ legalises digital-currency circulation but bars Russian residents from receiving it as payment for goods or services, while a 30 July 2024 law permits supervised cross-border settlement in digital currency. The EU's 20th sanctions package bans digital-ruble and RUBx-linked transactions from 24 May 2026. #### Outlook The 1 September 2026 mandatory-acceptance deadline is the defining near-term milestone for this module, with the sanctions-versus-adoption tension persisting through the 2027 and 2028 phase-in dates. Periodic update · new data 2026-10-18 #### Stablecoins & Digital Money Russia's digital-money environment saw material movement on two fronts this period. The digital ruble, the Bank of Russia's central bank digital currency, began supporting payroll payments, and digital-ruble accounts surpassed the central bank's own forecast for growth in the currency's first month of broader availability. This points to faster-than-expected adoption of the sovereign digital-currency rail, at least as measured by account openings, though the underlying usage intensity behind those accounts is not detailed in material available this period. In parallel, Federal Law No. 282-FZ's core crypto-market provisions, confirmed in force by the Bank of Russia since 1 September 2026, were clarified by the central bank to restrict individual crypto self-custody: individuals may not withdraw crypto from regulated custodial digital accounts to self-hosted wallets, nor transfer crypto peer-to-peer between individuals. This channels individual crypto activity through custodial, licensed infrastructure. At the institutional level, Sberbank is reported to have received regulatory approval for crypto-exchange services, with Moscow Exchange expected to use a partner settlement digital depository for related activity; this remains secondary-sourced and unconfirmed via a primary Bank of Russia announcement. Sberbank's planned crypto-wallet and digital-depository launch is targeted for 1 December 2026. Taken together, these developments describe simultaneous build-out of a sovereign digital-currency rail and a licensed, custodial private-crypto rail, with the common thread across both being a shift of digital-money activity into state-visible, licensed infrastructure rather than unmonitored peer-to-peer channels. #### Outlook Continued digital-ruble account growth relative to the central bank's forecast, and confirmation of Sberbank's reported crypto-exchange approval via a primary source, are the key developments to watch. The targeted 1 December 2026 launch of Sberbank's crypto-wallet and digital-depository product is the next concrete date on the institutional-crypto timeline. **1 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Stablecoins & Digital Money Russia's digital-money landscape advanced on two fronts this cycle, both centred on 1 September 2026. First, the digital rouble's mandatory-participation requirement took effect: the twelve systemically important credit institutions and retail enterprises with annual revenue above RUB 120 million must now provide digital-rouble settlement capability, a shift from the pilot phase the digital rouble had previously occupied toward a mandated rail for Russia's largest financial and commercial actors. This requirement's precise scope rests on a single, non-primary source, so the exact list of obligated institutions and the threshold's practical application should be treated as reported rather than confirmed from a Bank of Russia publication. Second, the same date marked the commencement of Federal Law No. 282-FZ, under which Sberbank launched a cryptocurrency-based cross-border settlement service for corporate foreign-trade customers. The legal basis is Article 1(7)(1) of 282-FZ, which permits digital currency or digital rights to serve as payment or consideration under a foreign-trade contract between a Russian resident and a non-resident. This is a bank-enabled, rather than purely crypto-native, settlement product, which is notable: a systemically important credit institution bringing crypto-based settlement into its corporate product set signals a different order of institutional adoption than exchange-only crypto activity. Third, A7A5, a ruble-pegged stablecoin backed 1:1 by rubles held at sanctioned state bank Promsvyazbank and processed through its Tokeon platform, continues to move several billion dollars in cross-border settlement following its recognition as a digital financial asset. This settlement volume is market-reported rather than independently verified against a primary issuer or Bank of Russia disclosure. #### Outlook The practical uptake of the digital-rouble mandatory-participation requirement among obligated institutions, and the scale at which Sberbank's new crypto-settlement product is actually used by corporate foreign-trade customers, are the two developments to watch as this cycle's commencements move from legal effect into operational practice. **Sources and findings (6)** 1. T1 [https://cbr.ru/eng/press/event/?id=25774](https://cbr.ru/eng/press/event/?id=25774) retrieved 2026-07-04 2. T1 [https://cbr.ru/eng/press/event/?id=24732](https://cbr.ru/eng/press/event/?id=24732) 3. T3 [https://cbdctracker.hrf.org/currency/russian-federation](https://cbdctracker.hrf.org/currency/russian-federation) retrieved 2026-07-04 4. T2 [https://www.loc.gov/item/global-legal-monitor/2021-01-11/russian-federation-new-bill-defines-cryptocurrency-proposes-tax-regulations/](https://www.loc.gov/item/global-legal-monitor/2021-01-11/russian-federation-new-bill-defines-cryptocurrency-proposes-tax-regulations/) retrieved 2026-07-04 5. T3 [https://tadviser.com/index.php/Article:Legislation_on_Digital_Financial_Assets_and_Digital_Currency_in_Russia_(259-FZ)](https://tadviser.com/index.php/Article:Legislation_on_Digital_Financial_Assets_and_Digital_Currency_in_Russia_(259-FZ)) retrieved 2026-07-04 6. T3 [https://cryptobriefing.com/russia-digital-ruble-september-launch/](https://cryptobriefing.com/russia-digital-ruble-september-launch/) retrieved 2026-07-04 ### W3 Operational Resilience & Critical Information Infrastructure Probable confirmed 2026-07-04 Financial-sector operational resilience sits within Russia's Critical Information Infrastructure (CII) regime under Federal Law 187-FZ (2017, in force since Jan 2018), which lists banking and other financial-market areas among protected CII sectors. Compliance is enforced through GosSOPKA, the FSB-run detection/prevention system coordinated via the National Computer Incident Coordination Center (NKTsKI/FinCERT for the financial sector), with new administrative fines (up to ₽500,000) introduced in March 2026 and an expanded, ~400-item industry CII object list approved in February 2026. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/russia/) Standing sub-brief · as of 4 July 2026 101 words · last cycle 2026-10-04 #### Operational Resilience & Critical Infrastructure Federal Law 187-FZ (2017, in force January 2018) obliges critical-information-infrastructure operators, including banking and financial-market entities, to report incidents and cooperate with FSB/FinCERT. A 25 March 2026 bill introduces fines up to ₽500,000 for CII rule violations, following a roughly 400-item industry CII object list approved 26 February 2026 spanning banking and financial-market areas. A separate presidential law prohibits state institutions, banks and others from using foreign messaging apps for customer communication, part of broader fraud-countermeasure tightening. #### Outlook CII enforcement is likely to tighten further as the expanded object list is operationalised across the banking sector. Periodic update · new data 2026-09-28 #### Operational Resilience & Critical Infrastructure Two converging infrastructure mandates took effect on 1 September 2026. First, the digital rouble became mandatory acceptance for 12 systemically important banks and for retailers whose prior-year revenue exceeds ₽120 million, with the Bank of Russia's stated plan to phase in mandatory acceptance for smaller banks and retailers through 2028. Second, a universal QR code, built on the National Payment Card System, was mandated across all banks by the same date; the code is designed to support the existing Faster Payments System (SBP), individual bank platforms, buy-now-pay-later services, and -- eventually -- digital-rouble payments, functioning as a unifying instant-payments and CBDC-acceptance layer across the banking sector. Both mandates are drawn from a Tier-1 Bank of Russia primary source and carry Confirmed confidence. Together, they represent a consolidation of Russia's domestic payments-acceptance infrastructure around state-controlled rails, ahead of and alongside the new crypto-market licensing track tracked separately under Licensing, Authorisation & Market Access. #### Outlook The marker to watch is whether the phased extension of mandatory digital-rouble acceptance to smaller banks and retailers proceeds on the stated 2028 timeline without slippage, and whether universal QR code adoption achieves full bank-side implementation as mandated. **1 earlier distinct update(s)** Periodic update · new data 2026-09-21 #### Operational Resilience & Critical Infrastructure The digital-ruble platform's operational architecture at launch concentrates a key function, wallet issuance, entirely at the central bank. Only the central bank can open digital-ruble wallets as the 1 September 2026 mandate takes effect; the capability for commercial banks to open wallets is reportedly under consideration but is not yet live, and the platform's offline-payment function has not yet been activated. This is a material resilience consideration for a payment instrument transitioning from pilot to mandated commercial infrastructure: centralising wallet-opening at a single institution, even the central bank itself, creates a single point of dependency for onboarding that a distributed commercial-bank-led model would not carry. The absence of a live offline-payment function at the point of mandatory commercial launch is a further operational-resilience gap. Offline capability is a standard resilience feature for retail payment instruments intended to function during network outages or connectivity failures; its absence at launch means the digital ruble's operational resilience profile is, for now, wholly dependent on continuous network connectivity between participating banks and the central platform. Taken together, these two design characteristics indicate that the digital-ruble platform is entering mandated production use in a state that still carries meaningful infrastructure-completeness gaps relative to a mature retail payment system. This is consistent with a rollout being driven by an institutional-adoption deadline rather than by a technical-readiness threshold being fully met first. #### Outlook Watch for confirmation of whether commercial-bank wallet-opening capability is introduced in the period following the 1 September 2026 launch, which would materially improve the platform's resilience profile by distributing the onboarding function. The continued absence of an offline-payment function into 2027, as the mandate extends to universal-licence banks, would be a further operational-resilience signal worth tracking given the larger and more geographically dispersed set of institutions that tranche would bring onto the platform. **Sources and findings (5)** 1. T2 [https://www.ponarseurasia.org/russian-itc-security-policy-and-cybercrime/](https://www.ponarseurasia.org/russian-itc-security-policy-and-cybercrime/) retrieved 2026-07-04 2. T3 [https://jamestown.org/russian-directive-expands-internet-control/](https://jamestown.org/russian-directive-expands-internet-control/) retrieved 2026-07-04 3. T3 [https://tadviser.com/index.php/Article:Critical_Information_Infrastructure_of_Russia](https://tadviser.com/index.php/Article:Critical_Information_Infrastructure_of_Russia) retrieved 2026-07-04 4. T2 [https://www.internetgovernance.org/wp-content/uploads/IGPWhitePaper_STADNIK_RUNET-1.pdf](https://www.internetgovernance.org/wp-content/uploads/IGPWhitePaper_STADNIK_RUNET-1.pdf) retrieved 2026-07-04 5. T3 [https://therecord.media/russia-tightens-cyber-measures-as-fraud-hits-record-high](https://therecord.media/russia-tightens-cyber-measures-as-fraud-hits-record-high) retrieved 2026-07-04 ### W4 Scheme & Network Compliance Probable confirmed 2026-07-04 Mir, operated by CBR-owned NSPK, is the mandated domestic card scheme for budget employees, pensioners and (since October 2022) mobilised servicemen, and now underpins the great majority of domestic card volume following Visa/Mastercard's 2022 withdrawal. A single, NPCS-operated 'universal QR code' is being legislated as the sole non-card QR standard (draft law 811008-8), displacing a rival bank-led consortium (Sberbank/Alfa-Bank/TBank's 'Fintech Platform') that had proposed its own unified QR solution. Horizon · 2026-09-01 (±quarter) Universal NPCS QR code - bank technical-readiness deadline_adopted · TT1_ Horizon · 2026-09-01 (±quarter) Universal NPCS QR code - bank technical-readiness deadline_adopted · TT1_ Standing sub-brief · as of 4 July 2026 114 words · last cycle 2026-07-04 #### Scheme & Network Compliance Mir, mandated for budget employees, pensioners and, since October 2022, mobilised servicemen, had by June 2026 surpassed 475 million cards issued, representing more than 75% of domestic card transactions. Draft law 811008-8 legislates a single NPCS-operated universal QR code, superseding the Sberbank/Alfa-Bank/TBank Fintech Platform consortium that holds over 80% of the acquiring market; banks must be technically ready by 1 September 2026. Following Visa and Mastercard's 2022 withdrawal, card-issuing banks pivoted to UnionPay for co-branded issuance while continuing to service existing Visa and Mastercard cards domestically. #### Outlook The universal QR code mandate is set to displace the bank-led Fintech Platform consortium from 1 September 2026, consolidating scheme governance under NPCS. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://en.wikipedia.org/wiki/Mir_(payment_system)](https://en.wikipedia.org/wiki/Mir_(payment_system)) retrieved 2026-07-04 2. T1 [https://www.cbr.ru/eng/psystem/](https://www.cbr.ru/eng/psystem/) retrieved 2026-07-04 3. T3 [https://interfax.com/newsroom/top-stories/109064/](https://interfax.com/newsroom/top-stories/109064/) retrieved 2026-07-04 4. T1 [https://cbr.ru/eng/press/event/?id=25774](https://cbr.ru/eng/press/event/?id=25774) retrieved 2026-07-04 5. T3 [https://www.paymentsdive.com/news/russia-pivots-to-unionpay-for-payments-alternative/620254/](https://www.paymentsdive.com/news/russia-pivots-to-unionpay-for-payments-alternative/620254/) retrieved 2026-07-04 ### W5 Payment Corridor Dynamics Probable confirmed 2026-07-04 Russia's principal cross-border rails are SPFS (CBR's SWIFT-message alternative), a growing dependence on China's CIPS/UnionPay for RMB-denominated trade, and BRICS Pay as a nascent multilateral project still in pilot stage. Corridors are increasingly constrained by secondary-sanctions risk: Chinese banks have progressively restricted RMB processing for sanctioned Russian counterparties, and OFAC has formally flagged SPFS membership as a sanctions-designation risk for foreign banks. Mir's own international acceptance remains narrow (Armenia and breakaway Georgian territories in full; partial in Turkey, Kyrgyzstan, Uzbekistan and Kazakhstan via VTB). Standing sub-brief · as of 4 July 2026 130 words · last cycle 2026-10-04 #### Payment Corridor Dynamics OFAC has warned foreign financial institutions that SPFS membership may itself trigger Executive Order 14024 designation for operating in Russia's financial-services sector. Since early 2024, three of China's largest banks, ICBC, China Construction Bank and Bank of China, have stopped accepting payments from sanctioned Russian credit institutions, citing secondary-sanctions risk. BRICS Pay, demonstrated as a prototype in Moscow in October 2024 and intended to interoperate SPFS, CIPS, UPI and Pix, remained in planning and early pilot stages as of mid-2025. Mir's full international servicing remains limited to Armenia and Russia-backed breakaway Georgian regions, with partial acceptance in Turkey, Kyrgyzstan, Uzbekistan and Kazakhstan via VTB. #### Outlook Corridor access is likely to keep narrowing as secondary-sanctions de-risking continues, leaving BRICS Pay as the principal longer-term hedge still under construction. Periodic update · new data 2026-09-28 #### Payment Corridor Dynamics Cross-border settlement corridors involving Russia are increasingly bifurcated between a domestic-infrastructure track and a Western-sanctions-constrained track. On the domestic side, Russia's crypto/digital-financial-asset settlement mechanism under the 223-FZ experimental-legal-regime framework continues to be used for qualifying foreign-trade contract settlement. On the Western-facing side, the EU's 20th sanctions package, effective from 24 May 2026, banned support for the digital rouble and for the RUBx stablecoin reportedly used in Russian cross-border trade, sanctioned the A7 payment platform specifically, and prohibited EU persons from engaging in digital-rouble transactions from that date forward. This represents a direct corridor-level counter-response by the EU to Russia's own sanctions-resilience payments architecture, rather than a general sectoral sanctions measure; it targets the specific instruments (digital rouble, RUBx, A7) that Russia has built or used to route cross-border settlement around Western-facing correspondent channels. Confidence on the EU measure is held at Probable given T3 sourcing. #### Outlook The marker to watch is whether further EU, UK or US measures extend this corridor-targeting approach to additional Russian sanctions-resilience payment instruments beyond the digital rouble, RUBx and A7 platform already named. **Sources and findings (5)** 1. T1 [https://home.treasury.gov/news/press-releases/jy2725](https://home.treasury.gov/news/press-releases/jy2725) retrieved 2026-07-04 2. T2 [https://www.e3s-conferences.org/articles/e3sconf/pdf/2024/63/e3sconf_form2024_04026.pdf](https://www.e3s-conferences.org/articles/e3sconf/pdf/2024/63/e3sconf_form2024_04026.pdf) retrieved 2026-07-04 3. T3 [https://www.newsweek.com/china-russia-trade-problems-payment-settlement-ruble-yuan-sanctions-1881709](https://www.newsweek.com/china-russia-trade-problems-payment-settlement-ruble-yuan-sanctions-1881709) retrieved 2026-07-04 4. T3 [https://www.gisreportsonline.com/r/brics-payment-system/](https://www.gisreportsonline.com/r/brics-payment-system/) retrieved 2026-07-04 5. T3 [https://www.russiamatters.org/analysis/how-disastrous-would-disconnection-swift-be-russia](https://www.russiamatters.org/analysis/how-disastrous-would-disconnection-swift-be-russia) retrieved 2026-07-04 ### W6 Industry Structure & Commercial Probable confirmed 2026-07-04 The Russian payments/banking market is highly concentrated around Sberbank, VTB and TBank (Tinkoff), which dominate both card issuance/acquiring and increasingly cooperate on shared infrastructure (e.g. the Fintech Platform LLC QR joint venture). The independent electronic-payment-systems and aggregator segment (excluding NSPK/SBP) is itself concentrated, with the top five firms holding over 90% share, and continues to grow at a roughly 25% CAGR. Standing sub-brief · as of 4 July 2026 122 words · last cycle 2026-07-04 #### Industry Structure & Commercial Dynamics Sberbank, Alfa-Bank and TBank together hold more than 80% of Russia's acquiring market and formed Fintech Platform LLC in January 2026 to jointly develop payment solutions, including QR-code payments. The independent electronic-payment aggregator segment is similarly concentrated: the top five firms, JMoney, Robokassa, CloudPayments, Financial Technology Center and Evotor, hold 92-93% share, with the segment reaching ₽70.1 billion by end-2025, a roughly 25% compound annual growth rate since 2021. VTB is separately repositioning its commercial strategy toward trade finance with friendly jurisdictions such as China and India, targeting 30% of Russia's external trade-settlement volume by 2026. #### Outlook Concentration among the largest bank-affiliated players is likely to deepen as shared infrastructure ventures such as Fintech Platform LLC scale. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia](https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia) retrieved 2026-07-04 2. T3 [https://interfax.com/newsroom/top-stories/109064/](https://interfax.com/newsroom/top-stories/109064/) retrieved 2026-07-04 3. T3 [http://tadviser.com/index.php/Article:Acquiring_(processing)](http://tadviser.com/index.php/Article:Acquiring_(processing)) retrieved 2026-07-04 4. T4 [https://grokipedia.com/page/VTB_Bank](https://grokipedia.com/page/VTB_Bank) retrieved 2026-07-04 5. T4 [https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-market](https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-market) retrieved 2026-07-04 ### W7 Legal & Litigation Probable confirmed 2026-07-04 Bank-license revocation remains the CBR's primary enforcement tool against payments-adjacent misconduct (AML/CFT breaches, technical/shell-company exposure), exercised under the Banking Legislation framework (Bank of Russia Law, Insolvency Law 40-FZ/127-FZ) with DIA-administered temporary administration and depositor payout. In parallel, the US Treasury/OFAC has progressively designated Russian banks (including Gazprombank and 50+ internationally-connected banks) and flagged SPFS membership as a sanctions-risk vector, materially shaping the correspondent-banking and litigation-exposure landscape facing Russian payment institutions. Standing sub-brief · as of 4 July 2026 115 words · last cycle 2026-07-04 #### Legal & Litigation The Bank of Russia revoked CB Novy Moskovsky Bank's licence on 23 January 2026, citing low-quality loan debt and suspicious transactions linked to technical companies, with the Deposit Insurance Agency appointed temporary administrator. The Bank of Russia revoked Qiwi Bank's licence in February 2024 for systemic AML/CFT violations, including transfers to crypto exchanges, illegal casinos and bookmakers, disrupting the Qiwi wallet and Contact ecosystem. OFAC designated Gazprombank and more than 50 internationally connected Russian banks, plus more than 40 securities registrars and 15 finance officials, under Executive Order 14024. #### Outlook Licence revocation remains the Bank of Russia's primary enforcement lever, while OFAC designations continue to shape correspondent-banking litigation exposure for Russian institutions. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T1 [https://www.akm.ru/eng/news/the-central-bank-revoked-the-license-for-banking-operations-from-the-national-bank-of-ukraine/](https://www.akm.ru/eng/news/the-central-bank-revoked-the-license-for-banking-operations-from-the-national-bank-of-ukraine/) retrieved 2026-07-04 2. T3 [https://www.themoscowtimes.com/2024/02/21/russian-central-bank-revokes-qiwi-banks-license-a84183](https://www.themoscowtimes.com/2024/02/21/russian-central-bank-revokes-qiwi-banks-license-a84183) retrieved 2026-07-04 3. T1 [https://home.treasury.gov/news/press-releases/jy2725](https://home.treasury.gov/news/press-releases/jy2725) retrieved 2026-07-04 4. T1 [https://www.cbr.ru/eng/banking_sector/bank_laws_e/](https://www.cbr.ru/eng/banking_sector/bank_laws_e/) retrieved 2026-07-04 5. T3 [https://sanctionsnews.bakermckenzie.com/ofac-sanctions-dozens-of-russian-parties-targeting-the-russian-financial-system-including-gazprombank-and-issues-russia-related-general-licenses-faqs-and-alert/](https://sanctionsnews.bakermckenzie.com/ofac-sanctions-dozens-of-russian-parties-targeting-the-russian-financial-system-including-gazprombank-and-issues-russia-related-general-licenses-faqs-and-alert/) retrieved 2026-07-04 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-07-04 Merchant acquiring is concentrated among Sberbank, VTB, Alfa-Bank and TBank, with Sberbank ranked among Europe's largest acquirers by transaction volume. Interchange-driven commission compression has pushed internet-acquiring rates toward ~1% at major banks, while marketplace-driven e-wallet volumes and QR/biometric payment volumes are both growing rapidly, reflecting a shift of acquiring risk and volume toward digital/marketplace rails. Standing sub-brief · as of 4 July 2026 79 words · last cycle 2026-07-04 #### Merchant Acquiring & Risk Major acquirers, including Sberbank, Otkritie, VTB, Tinkoff and Promsvyazbank, lowered internet-acquiring commissions to roughly 1%, driven by lower interbank interchange fees. E-wallet volume reached ₽13.3 trillion in 2025, up 1.6 times year-on-year across 8.8 billion operations, while QR-code and biometric payments grew 1.4 times to ₽5.7 trillion, per Bank of Russia data reported in March 2026. #### Outlook Acquiring economics are likely to keep compressing as digital-wallet and QR volumes continue to outpace traditional card-present acquiring. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [http://tadviser.com/index.php/Article:Acquiring_(processing)](http://tadviser.com/index.php/Article:Acquiring_(processing)) retrieved 2026-07-04 2. T3 [https://interfax.com/newsroom/top-stories/109064/](https://interfax.com/newsroom/top-stories/109064/) retrieved 2026-07-04 3. T1 [https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia](https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia) retrieved 2026-07-04 4. T3 [http://tadviser.com/index.php/Article:Acquiring_(processing)](http://tadviser.com/index.php/Article:Acquiring_(processing)) retrieved 2026-07-04 5. T3 [https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia](https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia) retrieved 2026-07-04 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-07-04 Product development is centred on the digital ruble/universal-QR-code rollout, the mature Faster Payments System (SBP), and rapid growth in embedded/BNPL credit and marketplace-linked loyalty-payment products (e.g. Orange Pay). A Tatarstan regional pilot has tested CBDC smart-contract functionality for conditional public-fund disbursement, indicating a programmability use case beyond simple retail payments. Standing sub-brief · as of 4 July 2026 96 words · last cycle 2026-09-05 #### Product Innovation & Market Development The Faster Payments System had 226 participating banks and had processed 50.8 billion transactions worth ₽269.6 trillion since its 2019 launch, as of 1 June 2026. X5 Group and Alfa-Bank launched Orange Pay on 2 April 2026 for Pyaterochka and Perekrestok shoppers, combining a loyalty programme, digital wallet and debit card into one QR code. A Tatarstan pilot separately tested digital-ruble smart-contract functionality and conditional-spending mechanisms for public funds. #### Outlook Product development is likely to keep converging loyalty, wallet and QR functionality, while digital-ruble programmability trials expand beyond simple peer-to-peer payments. Periodic update · new data 2026-09-21 #### Product Innovation & Market Development Russia's digital-ruble commercial launch on 1 September 2026 is being framed and pursued as sanctions-resilience infrastructure at the institutional level, even as voluntary retail demand for the product remains weak. A public poll found that 51 percent of surveyed citizens do not intend to use the digital ruble, a signal that runs directly counter to the scale of the mandatory-adoption programme being rolled out across the banking sector. This gap between institutional mandate and consumer intent is the central product-development tension in this market this cycle: the product is being pushed into the market through regulatory compulsion on banks and large retailers rather than pulled into the market by organic consumer preference. This pattern, mandated institutional adoption proceeding despite weak voluntary retail demand, indicates that the primary driver behind the digital ruble's development is state and institutional adoption objectives rather than a market-development strategy built around consumer value proposition. For product-development purposes, this means near-term transaction-volume growth is likely to track the phased mandatory-adoption timeline (systemically important banks from 2026, universal-licence banks and mid-size retailers from 2027, remaining banks and small retailers from 2028) far more closely than it tracks any organic consumer-adoption curve. #### Outlook The key product-development metric to watch is whether voluntary transaction volume, as distinct from mandated institutional capability, begins to grow independently of the compliance deadlines once the digital ruble is live and available to the public from 1 September 2026. A continued wide gap between mandated bank/retailer capability and actual voluntary consumer usage through the 2027 and 2028 tranches would confirm that this product's market development is being driven entirely by regulatory mandate rather than demand-side pull. **Sources and findings (5)** 1. T1 [https://www.cbr.ru/eng/psystem/](https://www.cbr.ru/eng/psystem/) retrieved 2026-07-04 2. T3 [https://interfax.com/newsroom/top-stories/112257/](https://interfax.com/newsroom/top-stories/112257/) 3. T3 [https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia](https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia) retrieved 2026-07-04 4. T4 [https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-market](https://www.marketdataforecast.com/market-reports/russia-cards-and-payments-market) retrieved 2026-07-04 5. T3 [https://www.cryptotimes.io/2026/07/03/russia-announces-september-1-digital-ruble-commercial-rollout/](https://www.cryptotimes.io/2026/07/03/russia-announces-september-1-digital-ruble-commercial-rollout/) retrieved 2026-07-04 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-07-04 Under Article 8(3.13) of the NPS Law (161-FZ), banks are financially liable to individual clients for improperly implemented anti-fraud measures where payment details match the CBR's authorised-fraud database, though the law's direct reimbursement impact remains small relative to bank-initiated voluntary reimbursements. Fraud volumes are large and rising (telecom/social-engineering scams causing tens of thousands of daily victims), prompting a 2025-2026 legislative package (state anti-fraud information system, SIM-card controls, marketing-call limits) and CBR pressure on banks over complaint-handling delays and transaction-blocking transparency. Standing sub-brief · as of 4 July 2026 149 words · last cycle 2026-07-04 #### Consumer Protection & APP Fraud Under Federal Law 161-FZ, Article 8(3.13), banks are financially liable to individual clients for improperly implemented anti-fraud measures where payment details match the Bank of Russia's authorised-fraud database, though statutory reimbursements totalled only ₽1.23 million in 2024. Credit institutions instead paid ₽2,713.58 million in voluntary fraud-victim reimbursements in 2024, 9.9% of losses, up from ₽1,378.76 million, 8.7% of losses, in 2023, with card fraud the most frequent category at 821,870 incidents. A new Cyberbez legislative package introduces a state anti-fraud information system, SIM-card issuance controls, marketing-call limits and bank compliance obligations, against a backdrop of an estimated 50,000-70,000 daily fraud victims per a Sberbank deputy chairman and a record single-case loss of ₽450 million. #### Outlook Voluntary reimbursement is likely to remain the dominant redress channel even as the Cyberbez package and further legislative packages under preparation target fraud at its telecom and social-engineering source. no periodic updates on record for this sub-brief ** Sources and findings (6)** 1. T1 [https://www.cbr.ru/eng/analytics/ib/operations_survey/2024/](https://www.cbr.ru/eng/analytics/ib/operations_survey/2024/) retrieved 2026-07-04 2. T1 [https://www.cbr.ru/eng/analytics/ib/operations_survey/2024/](https://www.cbr.ru/eng/analytics/ib/operations_survey/2024/) retrieved 2026-07-04 3. T1 [https://www.cbr.ru/eng/analytics/ib/operations_survey/2024/](https://www.cbr.ru/eng/analytics/ib/operations_survey/2024/) retrieved 2026-07-04 4. T3 [https://interfax.com/newsroom/top-stories/116481/](https://interfax.com/newsroom/top-stories/116481/) retrieved 2026-07-04 5. T3 [https://dig.watch/updates/digital-fraud-declines-in-russia-after-rollout-of-cyberbez-measures](https://dig.watch/updates/digital-fraud-declines-in-russia-after-rollout-of-cyberbez-measures) retrieved 2026-07-04 6. T3 [https://english.news.cn/20251211/878c4708723c416689e33375f24a62ff/c.html](https://english.news.cn/20251211/878c4708723c416689e33375f24a62ff/c.html) retrieved 2026-07-04 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/russia/#sec-dom-D7) Probable confirmed 2026-07-04 Sentinel.gi payments-context position: Rosfinmonitoring (FSFM) remains Russia's central AML/CFT authority under Federal Law 115-FZ, reporting directly to the President and retaining recognition within the Eurasian Group (EAG) despite its FATF and Egmont Group membership being suspended in 2023. FATF has specifically flagged Russia's virtual-asset/crypto-intermediary regulation as a compliance gap (Recommendation 15 downgraded to 'Partially Compliant'), and domestic AML enforcement has already produced a payments-relevant licence revocation (Qiwi Bank, Feb 2024) tied to crypto-exchange and illegal-gambling transfers. Standing sub-brief · as of 4 July 2026 118 words · last cycle 2026-07-04 #### AML/CFT & Financial Crime Sentinel.gi reporting: Rosfinmonitoring remains the federal executive body for AML/CFT, reporting directly to the President; its FATF and Egmont Group membership was suspended in 2023, though it retains Eurasian Group recognition. FATF has downgraded Russia's Recommendation 15 rating on virtual assets from Compliant to Partially Compliant, citing insufficient regulation of crypto intermediaries. Rosfinmonitoring has proposed a bill package to license crypto exchanges, including transaction-data collection and Travel Rule-aligned information-sharing obligations. This module is sourced from the Sentinel.gi feed; original illicit-finance analysis remains with the Financial Intelligence Monitor. #### Outlook The Recommendation 15 downgrade is likely to keep pressure on Rosfinmonitoring's crypto-exchange licensing proposal as the principal near-term remediation vehicle; further illicit-finance analysis sits with FIM. no periodic updates on record for this sub-brief ** Sources and findings (13)** 1. T3 [https://www.themoscowtimes.com/2024/02/21/russian-central-bank-revokes-qiwi-banks-license-a84183](https://www.themoscowtimes.com/2024/02/21/russian-central-bank-revokes-qiwi-banks-license-a84183) retrieved 2026-07-04 2. T? FIM (sentinel.gi) per-JID baseline profile — Russia — Russia's FATF membership has been suspended since 24 February 2023; it remains bound to implement FATF Standards nominally but retains active membership only in the Eurasian Group (EAG). Its FIU (Rosfinmonitoring) is directly subordinated to the presidency and has unilaterally curtailed cooperation with 'unfriendly' states, per the EU Council's December 2025 technical assessment. Beneficial-ownership reforms have increased, not reduced, structural opacity. 3. T1 FIM (sentinel.gi) regulatory_horizon_register (issue FIM-BASE-HRZ-002) — EU sanctions regime renewal deadline 4. T1 FIM (sentinel.gi) regulatory_horizon_register (issue FIM-BASE-HRZ-001) — Expiry of OFAC GL 131G Lukoil (LIG) divestment authorization 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-005) — Gap: sourcing-thinness 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: political-constraint 7. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-006) — Enforcement: UK FCDO / OFSI — A7 Network crypto exchanges, banks and individuals, including HTX (formerly Huobi) 8. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: OFSI (HM Treasury) — Sabre Global Technologies Limited (SGTL) 9. T2 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-003) — Sanctions: EU listing 10. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: European Council / European Commission — Russian energy, banking, shadow fleet and crypto sectors 11. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-004) — Sanctions: OFAC licence-change 12. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: regulatory-failure 13. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: enforcement-absence ### W12 Correspondent Banking, Settlement & Access Probable confirmed 2026-07-04 EU's 21st sanctions package (adopted ~29 July 2026) added 33 more Russian credit/financial institutions to the Art.5ae/Annex XIV transaction ban effective 13 Aug 2026 and extended the ban to financial-messaging-service use; UK added 31 fresh designations to its Russia sanctions list on 1 Oct 2026. Standing sub-brief · as of 4 July 2026 98 words · last cycle 2026-10-11 #### Correspondent Banking, Settlement & Access OFAC's Executive Order 14024 designation of Gazprombank and more than 50 internationally connected Russian banks materially curtails their correspondent-banking access to the international financial system. Bank of China, ICBC and China CITIC Bank have stopped processing yuan-denominated payments for Russian banks in response to US secondary-sanctions pressure, pushing sanctioned sectors toward non-banking channels. As correspondent access has tightened, the Bank of Russia has shifted to permit a supervised cryptocurrency-for-cross-border-payments experiment. #### Outlook The bank-versus-non-bank access asymmetry is likely to widen further as correspondent de-risking continues, pushing more settlement activity toward crypto-enabled and bilateral channels. Periodic update · new data 2026-10-11 #### Correspondent Banking, Settlement & Access Russia's correspondent-banking and settlement-access picture moved further toward bifurcation this cycle. Effective 25 January 2026, the EU extended its prohibition on connecting to Central Bank of Russia financial-messaging systems beyond SPFS, its original and sole target, to also cover the Mir card system and the SBP Faster Payments System. This closes two further conventional rails to EU-connected counterparties, leaving SPFS, Mir and SBP all now outside the permitted connectivity perimeter for EU-domiciled institutions. At the same time, domestic use of these same rails continues to scale substantially. Bank of Russia payment-system statistics, a Tier-1 primary source, record 493.9 million Mir cards issued as of 1 April 2026 and show that SBP processed 50.8 billion transactions worth RUB 269.6 trillion through 226 participating banks as of 1 June 2026. These figures describe a domestic settlement infrastructure of very large scale that now operates entirely outside EU-system connectivity following the January 2026 extension, rather than a system reliant on, or materially disrupted by, that connectivity. The practical effect for any institution assessing correspondent-banking exposure to Russia is that settlement and access questions now separate cleanly along a domestic/international axis: domestic rails (Mir, SBP, the digital rouble) continue to scale largely independent of EU-connectivity restrictions, while cross-border access for EU-connected counterparties has narrowed to whatever remains outside the SPFS/Mir/SBP exclusion, principally non-bank channels such as crypto-based settlement under 282-FZ. #### Outlook Whether the EU, US or UK extend financial-messaging restrictions further, for example to any successor or supplementary domestic messaging system Russia may develop, or instead focus enforcement attention on the crypto-based settlement channels that have emerged alongside the January 2026 extension, is the key correspondent-banking-and-access development to watch. **2 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Correspondent Banking, Settlement & Access The structural spine of this module for Russia is the bank-versus-non-bank access asymmetry playing out under successive EU sanctions packages. The EU's 21st sanctions package, adopted 23 July 2026, extended transaction bans to 33 additional Russian credit and financial institutions and to 4 non-EU banks, narrowing the pool of correspondent-banking relationships available to Russian financial institutions and to non-EU banks that might otherwise intermediate on their behalf. This is a continuation of a multi-package pattern of successive correspondent-banking access narrowing rather than a standalone one-off measure, and no offsetting easing was identified this cycle. Confidence is held at Probable given T3 sourcing for the specific designation figures, though the underlying pattern of successive EU sanctions-package correspondent-banking tightening is well corroborated across the broader sanctions-tracking record. #### Outlook The marker to watch is whether subsequent EU sanctions packages continue the pattern of extending transaction bans to additional non-EU banks acting as intermediaries for Russian institutions, which would further narrow the correspondent-banking access asymmetry between bank and non-bank channels. Periodic update · new data 2026-09-21 #### Correspondent Banking, Settlement & Access Correspondent-banking access for Russian financial institutions continues to narrow across two parallel and reinforcing tracks. OFAC maintains a standing alert stating that any foreign financial institution joining Russia's SPFS messaging system, built as a domestic alternative to SWIFT, may be designated for operating or having operated in the financial services sector of the Russian Federation economy pursuant to Executive Order 14024. This is a direct, primary-source articulation of the legal risk facing any foreign institution considering SPFS participation as a substitute for SWIFT-based correspondent messaging. Separately, the EU's 21st sanctions package, adopted 23 July 2026, heavily targeted the banking sector specifically, with more than 90 banks and financial institutions among the 168 to 170 new entity designations added under that package. This is the analytical spine of the correspondent-banking picture this cycle: the bank-versus-non-bank access asymmetry is not just about which institution type is designated, but about how designation activity concentrated specifically in the banking sector narrows the pool of correspondent relationships available to Russian banks specifically, while non-bank payment-institution and e-money-issuer channels are not the primary locus of this cycle's designation activity. The combined effect of these two tracks is that SPFS becomes functionally more important as an alternative messaging channel for Russian institutions precisely as it becomes legally riskier for any foreign institution to connect to it. This creates a correspondent-access environment where the domestically available alternative and the externally imposed legal risk are moving in opposite directions simultaneously, a structural tension rather than a resolved state. #### Outlook Watch for whether any foreign financial institution is actually designated for SPFS participation under the OFAC alert's stated theory, which would be the first direct test of whether this is an operative enforcement risk or a deterrent-only signal. Further EU or US banking-sector-concentrated designations in the coming cycle would continue to narrow the correspondent-access pool for Russian banks and should be tracked as a continuation of this cycle's trend. **Sources and findings (5)** 1. T1 [https://home.treasury.gov/news/press-releases/jy2725](https://home.treasury.gov/news/press-releases/jy2725) retrieved 2026-07-04 2. T3 [https://sanctionsnews.bakermckenzie.com/ofac-sanctions-dozens-of-russian-parties-targeting-the-russian-financial-system-including-gazprombank-and-issues-russia-related-general-licenses-faqs-and-alert/](https://sanctionsnews.bakermckenzie.com/ofac-sanctions-dozens-of-russian-parties-targeting-the-russian-financial-system-including-gazprombank-and-issues-russia-related-general-licenses-faqs-and-alert/) retrieved 2026-07-04 3. T3 [https://www.newsweek.com/russia-dealt-payments-blow-bank-china-1916891](https://www.newsweek.com/russia-dealt-payments-blow-bank-china-1916891) retrieved 2026-07-04 4. T3 [https://cepa.org/article/the-slow-strangulation-of-russia-sanctions/](https://cepa.org/article/the-slow-strangulation-of-russia-sanctions/) retrieved 2026-07-04 5. T4 [https://grokipedia.com/page/VTB_Bank](https://grokipedia.com/page/VTB_Bank) retrieved 2026-07-04 ### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Probable confirmed 2026-07-04 Within the trailing 12 months, Russian payments commercial activity has centred on bank-led infrastructure joint ventures and marketplace/loyalty-payment product launches rather than conventional M&A or external venture funding, reflecting the isolation of the domestic fintech investment market from global capital flows (overall Russian startup funding fell sharply year-on-year through early 2026). Standing sub-brief · as of 4 July 2026 142 words · last cycle 2026-10-18 #### Commercial Intelligence (M&A, Investment & Product) Sberbank, Alfa-Bank and TBank registered Fintech Platform LLC on 13 January 2026, with charter capital of ₽1 million; Sberbank-linked Digital Assets holds 45%, and Alfa-Bank and TBank hold 27.5% each, to jointly develop payment solutions including QR-code payments. X5 Group and Alfa-Bank launched Orange Pay on 2 April 2026 for Pyaterochka and Perekrestok shoppers, combining a loyalty programme, digital wallet and debit card into one QR code; the deal value was not publicly disclosed. Russian fintech equity funding fell 94.32% year-on-year to $3.82 million across four rounds in the period to March 2026, against $67.3 million across five rounds in the same 2025 period, reflecting isolation from international venture capital. #### Outlook Commercial activity is likely to stay concentrated in domestic bank-led infrastructure ventures and marketplace-linked product launches, with international venture capital and cross-border M&A largely absent. Periodic update · new data 2026-10-18 #### Commercial Intelligence & Fintech AK&M reported on 11 October 2026 that Wildberries (RVB Group), Ozon, MTS and Yandex are interested in acquiring a stake in JSC National Payment Card System (NSPK), the operator of Russia's Mir card system and SBP fast-payment system, citing sources described as close to the central bank. This is a rumoured, not a signed or announced, commercial event: amount is not publicly disclosed, no signed date applies, and the report rests on a single outlet relying on anonymous sourcing, uncorroborated by a second source this period. If such a transaction were to materialise, it would represent a notable shift in ownership structure for critical national payments infrastructure, bringing major e-commerce, telecommunications and technology platforms into direct ownership proximity with the Mir and SBP rails. At this stage, however, the item should be treated strictly as a reported commercial interest rather than a transaction. #### Outlook Whether any of the four named parties, or NSPK itself, issues a confirming or denying statement is the next development to watch. A second corroborating source, or an official announcement, would be needed to move this item from a rumoured interest to a confirmed commercial development. **Sources and findings (4)** 1. T3 [https://interfax.com/newsroom/top-stories/109064/](https://interfax.com/newsroom/top-stories/109064/) retrieved 2026-07-04 2. T3 [https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia](https://tadviser.com/index.php/Article:Electronic_payment_systems_in_Russia) retrieved 2026-07-04 3. T1 [https://cbr.ru/eng/press/event/?id=25774](https://cbr.ru/eng/press/event/?id=25774) retrieved 2026-07-04 4. T4 [https://tracxn.com/d/geographies/russia/3OiAv3pREWpxnktEnzWFLMRoVxxhum89HRzgsDbSV1o](https://tracxn.com/d/geographies/russia/3OiAv3pREWpxnktEnzWFLMRoVxxhum89HRzgsDbSV1o) retrieved 2026-07-04 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Russia| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{"legal_accessibility": {"per_product": {"account_to_account": "regulated", "cards": "regulated", "prepaid_emoney": "licensed-emi"}}}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 79 finding(s), 126 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).