Centralized exchange in Russia
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Russia with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Registration with Bank of Russia as a DFA operator or intermediary (exchanger/depository) via application/notification process
- Full AML/CFT compliance under Federal Law No. 115-FZ, supervised by Rosfinmonitoring and Bank of Russia
- Transaction monitoring and reporting of suspicious transactions to Rosfinmonitoring
- KYC procedures including de-anonymization procedures for all users
- Retail users must pass a Bank of Russia competency test before being allowed to transact
- Tax reporting: transactions exceeding 600,000 RUB per year must be reported to the Federal Tax Service
- Mandatory reporting of foreign wallets and transactions to tax authorities by residents
- Travel Rule obligations: Not yet implemented in Russia; no specific legislative action exists, though FATF standards would apply theoretically
Key Restrictions
- Entity must have Russian legal status (local incorporation required); foreign platforms without Russian licenses are prohibited
- No domestic payments in crypto — using digital currency as payment for Russian goods/services is banned under the 2020 DFA Law
- Exchanges and exchangers with monthly turnover ≥3.5 million RUB may serve users directly; those below must use licensed intermediaries
- Retail annual purchase cap: 300,000 RUB (~$3,700) via one intermediary; qualified investors face no limits
- Only Bank of Russia-approved 'highly liquid' cryptos may be offered to retail investors
- Custody providers (digital depositories) must not lend client assets (no rehypothecation)
- Custody providers are not liable for blockchain malfunctions or issuer blocks
- Criminal liability for unlicensed operations: fines ($1,300–$13,000), forced labor, or 4–7 years imprisonment
Key Risks
- Criminal penalties for operating without Bank of Russia approval (up to 7 years imprisonment) create severe enforcement exposure
- Regulatory framework is still evolving — comprehensive bill 'On Digital Currency and Digital Rights' pending State Duma submission creates uncertainty
- Sanctions-related complexity: international trade crypto exception (2024) may expose operators to secondary sanctions risk
- Travel Rule not yet implemented, creating compliance gap with FATF standards and possible reputational/examinations risk
- Retail limits (300K RUB annual cap) and mandatory competency tests restrict addressable market size for retail-facing exchanges
- Prohibition on domestic crypto payments limits utility of the platform for Russian residents
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Bank of Russia (Central Bank of the Russian Federation): Establishes AML regulations for financial institutions, supervises compliance, issues and revokes licenses based on AML adherence, and provides guidance on AML best practices. The Bank also proposes crypto-specific rules and maintains registration of digital financial asset operators.
Rosfinmonitoring (Federal Financial Monitoring Service): Russia's lead agency for combating money laundering and terrorist financing. It analyzes financial transactions, ensures institutional compliance with AML/CFT standards and Federal Law No. 115-FZ, and enforces Enhanced Due Diligence requirements.
Federal Tax Service of Russia: Handles tax-related compliance, requiring individuals and organizations to report cryptocurrency holdings and transactions exceeding certain thresholds (notably 600,000 rubles).
Exchanges: Licensed entities with Russian legal status (crypto exchanges, brokers, fiduciary managers) are required. Banks and brokers can obtain crypto exchange licenses via a simplified notification process tied to existing financial permits, subject to prudential requirements set by the Bank of Russia.
Custody Providers: Specialized digital depositories must be licensed or registered in the Bank of Russia's register to maintain records of cryptoasset rights and register wallets. They face restrictions like no lending of client assets and no liability for blockchain malfunctions or issuer blocks.
Payment Processors/Exchangers: Exchangers (for crypto-fiat or crypto-crypto conversions) require inclusion in the Bank of Russia's register. Those with monthly turnover ≥3.5 million rubles can serve users directly; below that, they must use licensed intermediaries. Platforms without Russian licenses are illegal.
AML/KYC: Implied through mandatory intermediary routing, de-anonymization procedures, transaction monitoring, and tax reporting. Retail users must pass a Bank of Russia competency test; residents report foreign wallets/transactions to tax authorities.
Local Presence: Entities must have Russian legal status; foreign platforms without licenses are prohibited for domestic operations.
Digital depositories are required to maintain records of rights to cryptoassets, register wallets, and face restrictions like prohibiting lending of client coins to others. (https://forklog.com/en/the-end-of-shadow-trading-russias-forthcoming-crypto-market-rules/)
Exchanges and exchangers with monthly turnover ≥3.5 million rubles can serve users directly, while smaller ones must use licensed intermediaries; all must be licensed or registered with the Bank of Russia. (https://forklog.com/en/the-end-of-shadow-trading-russias-forthcoming-crypto-market-rules/; https://crypto.news/russia-clears-draft-laws-to-tighten-crypto-trading-and-limit-retail-participation/)
Mandatory licensing for intermediaries: Covers digital exchanges, custodial services, trading platforms, and DFA operators; banks, brokers, and securities firms can provide services after authorization.
Simplified process for banks/brokers: Existing financial institutions may use a "notification process" tied to current banking licenses, rather than full standalone applications.
Criminal liability for unlicensed operations: Entities organizing digital currency circulation without Bank of Russia approval face fines ($1,300–$13,000), up to 4–7 years imprisonment, or forced labor; applies to exchanges and large operators.
Registration as DFA operators: Russian banks/exchanges must register with Bank of Russia, which maintains the registry and supervises operations.
Compliance with KYC, competency tests for retail (via intermediaries), and reporting thresholds (e.g., transactions >600,000 RUB/year to tax authorities).
Bank of Russia approves "highly liquid" cryptos for retail and enforces via registry maintenance.
Retail limits: Annual purchases capped at 300,000 RUB (~$3,700–$3,800) via one intermediary; requires knowledge test. Qualified investors (e.g., high income >20M RUB/year, finance master's) face no limits.
Prohibitions: No domestic payments with crypto; reporting mandatory for large transactions. International trade exception since 2024.
Bank of Russia (Central Bank of Russia): Primary regulator; proposes/implements rules, supervises financial institutions, registers digital financial asset (DFA) operators, establishes experimental regimes, and bans domestic crypto payments.
Rosfinmonitoring (Federal Financial Monitoring Service): Handles anti-money laundering (AML) and counter-terrorism financing (CFT); monitors transaction data from crypto providers.
2020 Law on Digital Financial Assets (DFAs): Legalizes crypto transactions but prohibits use as payment for domestic goods/services; mandates reporting of transactions over 600,000 rubles to tax authorities.
2024 Law: Permits digital currency payments in international trade to bypass sanctions, creating an exception to the domestic ban.
Proposed 2026 Framework (to be adopted 2026, retail implementation by July 1, 2026): Legalizes buying/selling digital currencies and stablecoins as monetary assets for retail/qualified investors under tests/caps; allows licensed financial firms (exchanges, brokers) to offer services; permits purchases abroad via foreign accounts with tax reporting; prohibits privacy coins.
Adoption and effective date: No adoption or effective date; Russia's FATF suspension requires it to still meet standards in theory, but no evidence of legislative action specific to the Travel Rule for VASPs exists in available data.
Threshold amounts: Not applicable, as no implementation; FATF globally recommends $1,000/€1,000 for virtual asset transfers.
VASPs covered: Not applicable; the rule would target Virtual Asset Service Providers (VASPs) handling transfers, aligning traditional wire transfer standards.
Technical implementation requirements: No Russian-specific requirements; globally, VASPs must collect, transmit, and retain originator/beneficiary data (e.g., names, addresses, account numbers) with interoperability challenges noted, but no mandated protocols like SWIFT equivalents for crypto.
Penalties for non-compliance: None specified for Russia; globally, many jurisdictions lack enforcement frameworks despite laws (59% without actions as of 2025).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange may operate in Russia only as a locally incorporated entity licensed/registered with the Bank of Russia as a DFA operator or intermediary, subject to AML/CFT obligations under 115-FZ, retail caps (300K RUB/year), a domestic crypto payments ban, and criminal liability for unlicensed operations; the comprehensive regulatory framework is still pending final adoption.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?