The fight against cybercrime: new control and surveillance standards

This material (information) is produced, distributed and (or) sent by a foreign agent Roskomsvobod or concerns

Activities of a foreign agent "Roskomsvoboda". 18+

The mincifers have prepared three bills that find the system of registration of gadget identifiers and the ban on the operators to provide communication for subscribers with devices absent in this list. There will be new fines and even criminal punishments for non -fulfillment of new requirements. Some norms will affect miners.

Photo: canva

Minzifra posted for public discussion three new bills that are included in the second package of measures to combat cyber abuse. The changes will affect the law “On communication”, Criminal Code, Code of Criminal Procedure and Administrative Code.

The document “On Amendments to Certain Legislative Acts of the Russian Federation (in terms of counteracting offenses committed using information and communication technologies)”, in particular, it is proposed to create a centralized system for accounting for user equipment identifiers (apparently, we are also talking about IMEI).

Communication operators must form their own bases and synchronize them with the state. A kind of “white” and “black” lists of devices that determine the admission to Russian networks are introduced.

Operators undertake (at the request of the subscriber) to block the calls from numbers that are not included in the national numbering system, and inform subscribers about the origin of the call. Legal entities during calls must transmit information about themselves, displayed by the called side. Program change in devices identifiers is prohibited. Violation of these requirements entail administrative or criminal liability.

VoIP services and virtual PBXs should use domain names corresponding to the Russian system and be registered in special registers. Hosting providers providing infrastructure for such services are also subject to registration. Violation of requirements is the basis for administrative fines. The goal is to bind Internet telephony to Russian jurisdiction and the exclusion of anonymous digital traffic.

The bill also introduces the obligation of operators to transfer funds to check the operations for signs of fraud. If there are suspicions, they should request information from the state system "GIS Antifrod". If the client number appears in the database as compromised (for example, infected with malicious software), the operator can temporarily block electronic payments.

If the operator conducted the operation, despite the presence of signs of fraud, he is obliged to compensate the client for damage. Compensation period is no more than 30 days from the date of submission of the application. The condition is the presence of a document on initiating a criminal case against attackers.

These provisions are aimed at strengthening the responsibility of financial organizations and communication operators for the prevention of theft, as well as to protect citizens from the consequences of digital crimes. The entry into force is scheduled for March 1, 2026.

The second bill is “On amendments to the Criminal Code of the Russian Federation and the Code of Criminal Procedure of the Russian Federation”.

The Criminal Code of the Russian Federation introduces new corpus delicti related to the illegal use of equipment identifiers, their fake and use for hiding personality.

An aggravating circumstance is recognized by the use of anonymous technology. Sanctions for digital fraud, illegal access to information and interference with communication networks are tightened.

A new article 272.2 is introduced, which punishes an malicious impact on the information system, the information and telecommunication network, computer information or the power supply network with fines or even deprivation of liberty up to 4 years. A group of persons - up to 8 years with a fine of up to 2 million rubles.

Norms for confiscation and then storage of digital currency are also established.

The third bill introduces administrativeity for non-compliance with the legislation on the number of SIM cards per person, for servicing subscribers on unregistered equipment, transferring calls from unidentified numbers and refusing to provide data to the state system. Particular attention is paid to the maintenance of foreign citizens.

Fines vary from 100,000 to 2,000,000 rubles, depending on the subject of the offense (individual, individual entrepreneur, legal entity).

A new article of the Code of Administrative Offenses is proposed - 15.49, which sets responsibility for illegal mining. Miners are required to register and transmit information about the assets and wallets. Fines reach 2 million rubles.

It is possible to confiscate cryptocurrency obtained outside the legal field. It is also reminded of a ban on cryptocurrency calculations for tax residents of the Russian Federation.

Although the declared goal of bills is to counteract digital fraud and strengthening security, its provisions form an infrastructure suitable for systemic control over citizens and business. Centralized bases of identifiers, a ban on the use of unresolved devices, mandatory identification of subscribers - all this creates the conditions for total monitoring of telecommunication activity.

In combination, the norms allow not only to track and limit technical means of communication, but also to intervene in financial transactions, setting tough frames for user digital behavior.

Thus, tools formally aimed at combating crimes can be used as a mechanism of preventive control, administrative pressure and restriction of digital independence of citizens and business.