The Bank of Russia has approved admission rules for crypto exchanges and digital depositories to operate in the Russian market; registration in the regulator's registry is required. The rules take effect on October 5, 2026. Applications will be reviewed within 30 business days for exchanges and 60 business days for depositories.

Staff Requirements and Ownership Disclosure

The head of an exchange must have a higher education and at least one year of relevant experience; the head of a depository must have at least two years of relevant experience. Exchanges are required to disclose owners of stakes exceeding 10% and their controlling persons, as well as confirm the amount of their own funds through reports, statements, and asset documentation.

Backup Systems and Domain Rights for Exchanges

Exchanges must confirm the existence of both primary and backup software and hardware systems, as well as rights to the website domain name.

HSM, Activity Logs, and Security Assessments for Depositories

Depositories managing crypto wallets must use hardware security modules certified to meet FSB requirements. They are required to record actions by clients and employees related to operations and collect device identification data such as IP addresses, phone numbers, and other identifiers. Measures include vulnerability testing, DDoS protection, and independent information security assessments.