Russia to Require Confirmation for Key Online Actions
A new draft law aims to curb online fraud and strengthen protection for users of digital services.
The Russian government has submitted a draft law to the State Duma that would introduce mandatory confirmation of significant online actions on Russian websites starting September 1, 2026. According to the authors, the goal is to enhance user protection and reduce the number of digital fraud cases.
Two-Channel Verification
The bill proposes that legally significant online actions be confirmed through two channels at the same time. When carrying out an important operation on a website, users would receive a one-time code via SMS and, in parallel, a notification in the MAX messenger. The action would only be completed after confirmation through both channels. This approach is intended to reduce the risk of unauthorized access, even if one of the channels is compromised.
Account Settings Under Control
The proposed rules would apply to operations requiring heightened security measures. These could include changes to account settings on the Gosuslugi public services portal or the national messenger, work with personal data, and other sensitive actions. The specific list of operations would be approved by the government.
Against Fraudulent Calls
The bill also tightens anti-fraud requirements for banks. It proposes banning calls from foreign numbers unless the subscriber has given prior consent. The measure is expected to reduce the volume of intrusive and fraudulent calls that users frequently encounter.
Children Online
A separate section of the draft law focuses on child safety online. It would require social networks to verify users’ ages using government databases. Parents would also be obliged to notify mobile operators if a SIM card is being used by a child.
The government could be granted the authority to set special rules for children’s access to online resources, including limiting the list of permitted websites. These measures are intended to better protect minors from harmful content and online abuse.
Coming Into Force Next Year
The draft law is currently undergoing its first reading, with the date of the next review yet to be announced. If adopted, it is set to enter into force on September 1, 2026.
