Starting September 1, 2025, Russian banks will be required to ensure that customers withdrawing cash from ATMs are not being manipulated by fraudsters. The Bank of Russia has outlined nine indicators for credit institutions to identify potentially fraudulent ATM withdrawals.
If a transaction matches any of these criteria, the bank must immediately notify the customer and limit their ATM cash withdrawals to ₽50,000 per day for 48 hours. Customers who need to withdraw larger amounts can do so at bank offices. Notification methods will be specified in agreements between banks and customers, with SMS messages or push notifications typically used.
The signs of possible fraud include unusual behavior during cash withdrawals. Banks will monitor transactions that occur at atypical times, involve unexpected amounts, or take place at unfamiliar ATM locations. They will also watch for unconventional withdrawal methods such as using QR codes or digital (virtual) cards instead of physical payment cards.
Another indicator is if a customer’s phone activity changes significantly at least six hours before a transaction, especially if there is an increase in SMS or instant messages from unknown numbers.
Banks may suspect fraud if a customer withdraws cash within 24 hours after taking out a loan or microloan, raising their withdrawal limit (including on credit cards), transferring over ₽200,000 via the Faster Payments System from another bank account, or closing a deposit worth the same amount early.
Additional suspicious signs include changing the telephone number used for online banking login and receiving information—possibly from mobile operators—that suggests changes in the device’s characteristics or malware installation. Criteria specific to tokenized card withdrawals have also been established.
“
