The legislature has approved a large-scale package of anti-fraud measures that will significantly change the operations of banks and telecom operators.

Starting in September 2027, a limit of no more than 20 payment cards per individual will be introduced.

For oversight purposes, a unified accounting system will be created, into which banks will begin transmitting data on individual taxpayer identification numbers (ITINs) and card numbers starting in the fall of 2026.

In the communications sector, citizens will be given the right to block incoming calls from abroad through Gosuslugi (Gosuslugi).

A strict rule for subscribers will also be introduced: they will be able to terminate their communications contracts no earlier than 90 days after receiving the number.

Furthermore, a database of device IMEI numbers will be created, and operators will be required to suspend service for numbers found to be engaged in illegal activity, under threat of compensating customers.

Conclusion:

It is important to update standard contract forms with clients to include provisions for remote device virus scanning and specific rules for terminating communications contracts.