10:16, 16 September 2025 Page views 643 views

New antifraud measures of the Central Bank have applied significance. Security issues are in the focus of the Moscow PLUS-Forum

(no votes)

The round table “Security of Payments and Cash Circulation” was held in the framework of the International PLUS-Forum “Payments and Cash Circulation”. 

The moderator was independent expert Alexey Golenishchev (anti-fraud, cybersecurity; 20+ years with top commercial banks and a mega-regulator).

He invited the discussion participants represented by top managers of the largest Russian banks, NSPK, vendors of cybersecurity solutions, telecom operators and experts in forensics, anti-fraud and information security, to give their answers to the following questions:

• The current level of banknote security as a countermeasure to fraudsters.

• Cybersecurity and cyber resilience of banking and the payments industry. The roles and tasks of all market participants in ensuring them. Are we fighting together or is everyone for himself? The specifics of the current period.

• Improving legislation.

• Social engineering as an element of economic warfare against the Russian banking sector and Russian citizens

According to Petr Alferov, Director of Fraud Level Management, Beeline, the top priority is to ensure the continuity of customer protection. To this end it is important for market participants to collaborate in the creation of some kind of cross-sector protection.

Dmitry Revyakin, Head of Corporate Interests Protection at the Security Department, VTB Bank, emphasized that 2025 turned out to be full of innovations in the field of security, and most of them have practical significance. “We need to wait until law enforcement practice is accumulated, and a single all-Russian information system for data exchange is created, that would include all major market participants, from banks and telecom operators to pawnshops, gold buyers, real estate companies, etc.” As Alexey Ipatov, Executive Director of the Anti-Fraud Department, Sber, noted, today even the largest market participant is not able to successfully resist criminals alone - only in coalition with other players. Unfortunately, there is no “silver bullet” in the form of legislation here - fraudsters already have a new scenario ready far before new legislative initiatives come into force.

Vyacheslav Kasimov, Head of Information Security at MKB, noted: if we take the topic of the suspicious transaction indicators for the ATM network that the Central Bank has created, this is a very correct approach, since it forces banks to protect not only their own but also others’ clients.

Answering the moderator's question about new requirements imposed today on forensics and crime investigation against the backdrop of the intensified fight against fraud in the digital environment, Olga Tushkanova, Head of Research Institute   criminalistics dpt., Investigative Committee of the Russian Federation, noted that the level of specialized education and competence remains the top priority.

Answering the moderator's question about how a bona fide client mistakenly included in the Central Bank's “black list” can regain access to banking services, independent expert Nikolay Pyatizbyantsev ironically suggested getting a new passport since all other options, in his opinion, do not guarantee 100% success today.

Georgy Dorofeev, Deputy Director of the Operations and Technology Department of NSPK, answered the question about the role of NSPK in the fight against social engineering. He noted that in the framework of the Mir payment system, when the operator identifies suspicious transactions in the transaction flow, the anti-fraud system promptly transmits information to the banks participating in the Mir PS.

Alexey Sidoryuk, Branch Director, Positive Technologies, noted that the average organization has now more than a hundred IT contractors, which significantly expands the vector of attacks by criminals. In turn, certain models of generative intelligence significantly reduce the entry threshold for cybercriminals. In this context, it is important that the attack speed may not exceed the speed of cyber defense. The expert called the statement “security can be measured in money” a very correct thesis.