Bank of Russia

How to Secure Your Gosuslugi Account Against Hacks and Recover Access After Takeover

Russia's Gosuslugi portal now holds far more than basic documents, including tax notifications, child records, data-sharing consents, and access to other government services, making account security critical. The guide stresses using a unique strong password, enabling two-factor authentication with TOTP or biometrics instead of SMS, and regularly reviewing active sessions and connected mobile apps. It details steps to add a trusted contact for recovery, audit consents granted to third parties, and monitor for unauthorized logins or statements. In case of suspicious codes or calls, users must never share verification codes and should immediately check actions in the system, revoke unknown consents, and contact support. If access is lost, recovery options include online password reset with passport data or in-person visits to service centers, followed by credit history checks and self-imposed credit bans via Gosuslugi starting March 2025. The advice also covers protecting the linked phone number and email to prevent SIM swaps and further fraud.

OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production

An in-depth OSINT probe into a Russian agricultural investment project promising 50-70% annual returns from garlic farming has revealed a likely import arbitrage operation sourcing produce from China and Uzbekistan. The project claimed ownership of over 300 hectares of fields, a proprietary seed fund, and guaranteed sales to major retailers including Magnit, Perekrestok, Pyaterochka, and Svetofor, yet public records show minimal profitability and heavy debt. Financial statements from linked cooperatives indicated just 2.2% net margin alongside loans exceeding annual revenue fourfold, pointing to reliance on continuous new investor capital. Registry checks confirmed no financial licenses, no seed-breeding status, and actual cultivated land far below advertised figures. Import declarations and equipment registrations further indicated the operation functions as a repackaging hub for foreign garlic sold under private labels. The parent group has been placed on the Bank of Russia blacklist, with related sites blocked by Roskomnadzor while Telegram channels continue aggressive marketing.

Aeroflot to Accept Digital Rubles for Ticket Purchases Starting September 2026

From September 1 2026 Aeroflot will begin accepting digital rubles as a payment method for airline tickets both on its website and in company sales offices. Customers choosing the new option online will see a QR code generated by the site that must be scanned in a participating bank application. The payment is then confirmed from the digital wallet hosted on the Bank of Russia platform and an electronic ticket plus receipt are issued automatically. The same QR-based flow will be used at physical ticket counters where the code appears on the terminal. Ordinary bank cards and other payment methods remain fully available and no physical digital cash is required. On the same date MTS will start accepting digital rubles through MTS Pay while Rostelecom and Megafon are also preparing their systems. Russian authorities have clarified that the digital ruble is the third official form of the national currency alongside cash and non-cash funds rather than a cryptocurrency.

Wildberries and Ozon to Accept Digital Rubles from September 1, 2026

Major Russian marketplaces Wildberries and Ozon will begin accepting digital rubles for purchases starting September 1, 2026. Ozon plans to introduce the new payment option first in a testing phase alongside bank cards and other methods before gradually rolling it out to all customers. Wildberries confirmed it will comply with requirements from the Bank of Russia and existing regulations without providing further details. From the same date, major banks must enable clients to open digital wallets, transfer funds, and pay for goods through their regular banking apps connected to the Central Bank platform. Operations with digital rubles will remain free for citizens. The rollout is mandatory for large merchants with annual revenue exceeding 120 million rubles that are served by major banks, with smaller businesses facing obligations in subsequent years based on revenue thresholds.

Central Bank of Russia Confirms Digital Ruble Will Be Free for Citizens with No Commissions

The Bank of Russia has announced that all operations with the digital ruble will be completely free of charge for individual citizens. Director of the National Payment Systems Department Alla Bakina stated that transfers and payments for private users will incur zero commissions. Businesses will still face fees, but the regulator promises they will be minimal and lower than standard bank rates for similar transactions. Starting 1 September, Russians will be able to open digital ruble wallets through mobile apps of systemically important banks and other payment-significant credit institutions. A dedicated button with the new currency logo will appear on the main screen of these applications. Payments will be made via a special QR code that buyers scan in their banking app before selecting the digital ruble wallet and confirming the transaction. Large retail chains with annual revenue exceeding 120 million rubles must begin accepting digital ruble payments from September, with the requirement later expanding to smaller merchants. The Bank of Russia emphasizes that the digital ruble represents a third form of the national currency alongside cash and bank deposits, available for voluntary use by citizens.

Bank of Russia Publishes Methodological Recommendations No. 3-MR on AI Security for Financial Market Participants

The Bank of Russia has released methodological recommendations No. 3-MR dated 16 June 2026, providing detailed guidance on ensuring information security during the development and use of artificial intelligence systems in the financial sector. The document builds on the earlier Code of Ethics for AI in finance and integrates with existing risk management, operational resilience, and data protection frameworks already familiar to credit institutions and other market participants. It introduces standardized terminology for AI-specific threats such as hallucinations, data drift, and poisoned datasets while outlining six risk categories and a four-stage AI system lifecycle model. Organizations are advised to apply threat modeling based on FSTEC methodology, implement proportional controls across data preparation, development, training, and operation phases, and maintain human oversight for high-risk automated processes. Special attention is given to supply chain risks involving third-party vendors and open-source components, requiring due diligence, provenance tracking, and contractual safeguards aligned with existing outsourcing standards. The recommendations remain non-binding yet signal clear regulatory expectations that are likely to influence future compliance checks and audits.

RZD Trunk Quantum Network Obtains FSTEC Attestation and Enters External Commercial Market

Russia’s state-owned railway operator RZD has successfully passed certification by the Federal Service for Technical and Export Control (FSTEC), confirming that its trunk quantum network meets the requirements for information systems of the second protection class. The attestation enables RZD to begin offering quantum-secured communication services to external organizations, including banks, industrial enterprises, medical institutions, and transport companies. Quantum key distribution technology allows any interception attempt to be detected because interference with the quantum channel alters the state of transmitted particles, providing a level of security far beyond conventional encryption methods. The network is already being tested by the Bank of Russia, the Federal Treasury, the Financial University, and several major banks, with potential clients also identified in the oil-and-gas, industrial, healthcare, and transportation sectors. The Ministry of Digital Development considers the technology sufficiently mature and has included further expansion of the quantum network through 2030 in the national “Data Economy” project roadmap. As a result, RZD is gradually transforming from a traditional carrier of passengers and cargo into an operator of protected digital highways.