The framework that took effect on September 1

Federal Law No. 282-FZ, "On Digital Currencies and Digital Rights," entered into force on September 1, 2026 (official publication). The State Duma approved the framework on July 21, the Federation Council passed it three days later, and President Vladimir Putin signed it on August 4.

The law establishes a single framework covering cryptocurrency trading, custody, ownership records, digital rights, foreign digital instruments, and mining. It replaces earlier rules that permitted crypto ownership and mining without providing a complete domestic market structure — a patchwork that had left Russian users relying on unregulated exchanges and peer-to-peer channels. Exchanges and custodians still require approval, banks must finalize their products, and some enforcement provisions do not begin until 2027. For individual investors, the immediate change is a set of conditions governing what they may buy and in what amounts.

The approach mirrors a wider global pattern: jurisdictions from the European Union, whose Markets in Crypto-Assets regulation phases in through 2024–2025, to Hong Kong have sought to bring crypto trading inside licensed, supervised channels rather than ban it outright. Russia's version is distinctive in combining retail investment access with a hard prohibition on domestic payments.

How investor access now works

The framework divides individual investors into non-qualified and qualified groups. Both may trade through intermediaries, but their access differs. The split follows a classification Russian securities law has long used to scale retail exposure to complex instruments, extending a familiar gatekeeping logic to crypto.

Two gates for non-qualified investors

A non-qualified investor must pass a test covering cryptocurrency risk and may purchase only cryptocurrencies meeting the Bank of Russia's liquidity criteria. Purchases are limited to ₽300,000 per year through a single intermediary. The cap applies to purchases made through that provider, not to changes in the market value of assets already held.

The Bank of Russia's explanation does not publish a final token list. Bitcoin and Ether may appear to be obvious candidates, but neither should be considered eligible until the regulator or an authorized venue confirms it.

Qualified status removes the general ceiling

Qualified investors must also complete testing, but the central bank says they may trade without a general transaction limit. Platform controls, identity checks, and tax obligations still apply.

For most people, legal access now comes with three conditions: a knowledge test, an eligible-token list, and a ₽300,000 annual purchase limit through one intermediary. Investors meeting the higher qualification standard receive broader access. These rules determine who may invest; a separate part of the law determines which institutions may handle the transaction.

Who will operate Russia's crypto market

The law's biggest structural change sits between the investor and the blockchain. Existing financial firms can participate, while two crypto-specific roles enter the supervised market:

• Trading venues organize transactions and establish rules for how orders match.
• Brokers and management companies can provide access using their existing licences plus additional crypto requirements.
• Specialist crypto exchangers buy and sell digital currencies directly outside organized venues.
• Digital depositories maintain formal records of customers' rights to cryptocurrency and digital rights.

The Bank of Russia said exchanges will calculate market and weighted-average prices. Digital depositories will operate on principles similar to securities depositories, creating an official record of which customer owns what. The regulator will maintain registers of approved participants.

This model can give investors clearer legal claims, but it changes where trust sits. A blockchain may show one large wallet while the depository's ledger divides that balance among customers. Possessing a private key and holding a recorded legal claim are not the same thing. The distinction is not academic: in other markets, exchange failures have shown that recorded claims are only as strong as the institution and the legal regime behind them, which is why capital requirements and segregation rules carry real weight.

The central bank's initial package proposed minimum capital of ₽50 million to ₽250 million for digital depositories, depending on their activities (Bank of Russia announcement). A review of the exchange and depository proposals explains why firms need approval and working systems, not just a place in the law. Even then, regulated trading and custody do not change what cryptocurrency may be used for after it is purchased.

Where crypto can – and cannot – be used

Domestic payments remain prohibited

Russia has created a regulated route for cryptocurrency investment without accepting Bitcoin or stablecoins as domestic money. Payment for ordinary goods and services inside the country remains prohibited, so a shop cannot accept Bitcoin merely because a customer and merchant can complete the transfer onchain.

The legislation also restricts promotion of cryptocurrency as a domestic payment method. Crypto can still be exchanged for securities and recognized digital instruments, placing it inside the investment system rather than beside the ruble at checkout.

Foreign trade follows different rules

Foreign trade receives different treatment. The Bank of Russia says exporters and importers may use cryptocurrencies in cross-border settlements without the domestic purchase limits applying in the same way (central bank statement). They may transact through intermediaries or directly and can use different wallets and cryptocurrencies. Russian officials had for years publicly discussed using crypto in cross-border settlements amid sanctions-related constraints on conventional payment channels, and this carve-out codifies that separation between the domestic and external uses of crypto.

For residents investing abroad, access comes with a reporting trail. The central bank says foreign purchases must use foreign bank accounts. Crypto acquired through Russian intermediaries may be transferred abroad through regulated channels, while holdings recorded overseas must be reported to tax authorities.

The law does not erase self-custody or every foreign transaction. Moving assets to a personal wallet or overseas service, however, does not remove Russian legal and tax obligations. Domestic payment restrictions and cross-border permissions serve separate purposes.

Why the 2027 rules still matter

Existing participants have until July 1, 2027, to obtain approvals and adapt their operations. From that date, residents generally will have to conduct covered transactions through authorized market participants, subject to exceptions. Banks will also gain controls to reject payments suspected of supporting unauthorized crypto businesses. Additional safeguards against transfers made without customer consent follow in September 2027.

This staged rollout explains why legal activation does not place a crypto button in every banking app. Sber has targeted December 1 for trading and depository infrastructure, as detailed in a report on its planned crypto launch. Alfa-Bank has also discussed a digital custody service.

Those plans point toward a bank-led market, but they do not confirm supported assets, withdrawals, or liquidity. A licence permits a service; it does not make that service competitive.

The supporting rules are still developing

The rollout also depends on rules for leveraged trading and the balance sheets of financial intermediaries. In July, the Bank of Russia published proposed requirements for accepting cryptocurrency as margin collateral, executing short sales, and calculating when a leveraged position must be closed (proposal).

The proposed rules would allow both investor groups to use margin, although non-qualified investors would remain subject to their purchase limits. Risk ratios would determine when a broker must restrict or liquidate a position; ordinary brokerage controls cannot prevent a volatile asset from crossing those thresholds quickly.

A separate Bank of Russia proposal addresses institutional resilience (central bank release). Intermediaries would count only exchange-admitted cryptocurrencies toward their own resources. Cryptocurrency could account for no more than 25% of the assets counted toward an intermediary's own funds and would have to be recorded with a digital depository.

Together, the proposals would let crypto enter institutional balance sheets while preventing intermediaries from treating it like cash or low-risk capital. That rollout is easy to confuse with a separate change: Russia expanded a completely different form of digital money on the same day.

The digital ruble is a separate system

The digital ruble's wider rollout also began on September 1, creating an obvious source of confusion. It is not a cryptocurrency covered by the new market in the same sense as Bitcoin.

The digital ruble is issued by the Bank of Russia and represents national currency. Bitcoin and other decentralized cryptocurrencies are not state-issued and carry no government guarantee. Major banks must provide digital-ruble infrastructure, but individuals choose whether to open an account. The shared date does not merge the systems. Crypto investors must still determine which services are legally allowed to handle their money and assets.

What investors should check before using a service

The most useful evidence of implementation will come from provider registers and final product terms, not launch announcements. Before depositing money or cryptocurrency, investors should establish:

• whether the exact legal entity appears in a Bank of Russia register;
• which cryptocurrencies it is authorized to offer;
• whether customers can withdraw assets to personal wallets;
• who controls the private keys and how holdings are separated;
• how the ₽300,000 purchase limit is calculated;
• which trading fees, custody charges, and spreads apply;
• and what transaction or holding information must be reported for tax purposes.

The legal entity matters more than the brand on an application, as the closure of nine unregistered exchange points showed how authorities were already scrutinizing businesses connecting bank money with cryptocurrency before the framework took effect.

Russia has chosen supervised access rather than an open crypto market. The next test is whether investors accept the limits and custody model offered by licensed providers or continue relying on personal wallets and foreign platforms where permitted. That outcome will depend less on the law's start date than on the assets, fees, withdrawal terms, and safeguards that approved services ultimately provide. The most concrete signposts to watch are the Bank of Russia's first participant registers, the publication of the eligible-token list, and whether Sber and Alfa-Bank meet their announced infrastructure timelines.

The article is for informational purposes only and does not constitute financial, investment, tax, or legal advice. Cryptocurrency rules and implementing regulations may change, and readers should verify current requirements with official Russian authorities.