The Central Bank of Russia issued a regulation tightening banks’ obligations to support fraud victims and strengthen safeguards for young customers. The measures are phased in from 29 March 2025 and 1 October 2025. From 1 October 2025, large banks, including those operating in the payment services market, must add mobile-app functionality allowing customers to promptly report a fraudulent transfer and obtain an electronic certificate about the transfer for submission to police. Mobile apps must also enable customers to respond to the bank’s question on whether they carried out a transaction after the bank receives an enquiry from the regulator, in a process used when victims contact police and law enforcement requests data from the Bank of Russia. From 1 October 2025, all banks must accept complaints from individuals who transferred cash via an ATM to fraudsters’ accounts using tokenised (digital) cards, regardless of whether the individual is a customer of that bank. From 29 March 2025, all banks must notify parents or legal representatives when a customer aged 14 to 18 is issued a card and about all transactions through the young person’s accounts, with the notification procedure and method set out in the bank agreement.
Central Bank of Russia 2025-03-18
Central Bank of Russia mandates in-app fraud reporting for large banks by 1 October 2025 and parent notifications for 14 to 18 accounts from 29 March 2025
The Central Bank of Russia has issued new regulations to enhance fraud victim support and safeguard young customers, effective from 29 March 2025 and 1 October 2025. Large banks must implement mobile-app features for reporting fraudulent transfers and responding to regulatory inquiries, while all banks must accept complaints related to ATM cash transfers to fraudsters' accounts. Banks are also required to notify parents or legal representatives of transactions involving customers aged 14 to 18.