
Banks will be required to return stolen funds to customers within a month.
Refunds — under the law
Amendments have been made to the Federal Law "On the National Payment System" and a number of other regulations. According to the document, if a bank received from the state information system data about a suspicious number or fraudulent activity, but nevertheless executed the order and debited money from the account, it must reimburse the lost amount to the customer.
The refund period is no later than 30 calendar days from the moment the victim files a claim and provides the ruling initiating a criminal case into the theft.
Telecom operators under supervision
An important part of the amendments concerns telecom operators. They will be required to identify "grey" numbers and record suspicious calls and SMS messages. This data will be transmitted to a unified state system for combating crimes using information and communication technologies.
Banks, in turn, will be able to use this information when deciding whether to block suspicious transactions.
Protection of applications and services
Financial organizations will be required to ensure the protection of their applications and online services from malware.
If a virus or suspicious activity is detected in the client's system, the bank must reject the operation and inform the client that the transfer can only be made in person at a branch.
Why this matters
According to the Bank of Russia, in 2024 Russians lost tens of billions of rubles due to telephone and internet scammers. The new law is aimed at reducing the number of such incidents and shifting the main burden of responsibility onto banks and telecom operators, which have the resources to prevent attacks.
Experts note that these measures may change practices in working with customers: from mass blocking of suspicious transactions to stricter requirements for the quality of mobile applications and cybersecurity systems.
Другие Новости Кирова (НЗК)





Banks will be required to return stolen funds to customers within a month.
Starting in 2026, credit institutions will be required to reimburse customers for funds stolen by fraudsters within 30 days from the date of the claim. This deadline is set out in a new package of amendments introduced by the Government of the Russian Federation into existing legislation.