Published on: 2026-06-09
Source: Central Bank of Russia – Central Bank of Russia –
An important disclaimer is at the bottom of this article.
The bank will be obliged to reimburse the client for funds stolen by fraudsters as a result of hacking the online bank using malicious software. This norm is contained inlaw(“Antifraud 2.0”), which was adopted by the State Duma, will come into effect in 2027.
To prevent such searches, credit organizations must, with the client’s permission before conducting the operation, check whether there are any malicious programs on the device where the online bank is installed. If such programs are detected, the bank must reject the operation, notify the client about it, and offer to carry it out from another secure device or at the bank’s office.
The law establishes the terms for obtaining information about a person indatabase on fraudulent operations, which limits remote banking services. Thus, upon the first inclusion in the database, information about the person will be deleted after 1 year; upon repeated and subsequent entries, this period will be 3 years. Data will be removed from the database prematurely if information is received from the authorized bodies about the termination of criminal prosecution for fraud. At the same time, as before, the person retains the rightdispute inclusionrequisites in the database.
The document establishes that one person may have no more than 20 payment cards opened in total across all banks. This measure is aimed at preventing cases of mass issuance of cards for and to transfer to fraudsters who withdraw and cash out laundered money.
The law introduces financial liability for non-compliance with anti-fraud requirements for telecom operators. The rules will operate similarly to the banking system, where each transfer undergoes verification forsigns of fraudBanks do not bear material responsibility for violating the requirements for preventing fraud claims. Telecom operators, on their part, will identify fraudulent calls and apply measures to protect citizens from fraud. In case of a claim for money, the side that failed to fulfill its obligations—either the telecom operator or the bank—will compensate for losses. Details of the informational interaction between banks and telecom operators based on the state information system “Antifraud” will be additionally worked out.For communication operators, the compensation mechanism will be established by a separate Government resolution in agreement with the Bank of Russia.
Photo preview: TippaPatt / Shutterstock / Fotodom
Please note; this information is raw content obtained directly from the information source. It represents an accurate report of what the source claims and does not necessarily reflect the position of MIL-OSI or its clients.