- Статьи
- Economy
- Consciousness token: in the Russian Federation will limit the deposit of money on virtual cards


Banks are preparing to restrict the deposit of money on virtual cards issued less than two days ago. This was reported to Izvestia by the largest players in the market. They plan to join the new security service from the NSPC, which is going to be launched in the spring of 2025. This is necessary to combat the scheme of fraud with tokenized cards, which works like this: people are persuaded to link an intruder's card to their wallet, for example in Mir Pay, and put cash on it through an ATM. The market believes that this method of deception accounts for every second theft by social engineering, and the banks' restrictions will help prevent them.
Restrictions on depositing funds on virtual cards
To combat fraudsters, the National Payment Card System (NPC - the operator of the "Mir" cards) plans to launch a new service from spring 2025, which will be optional, the company told Izvestia. It will allow to limit the operations of depositing money on tokenized (or virtual) cards if they were issued less than two days ago.
We are talking about cards that are generated in a banking application or in a separate special utility (for example, Mir Pay) and stored on the mobile device where they are issued. But it is possible to issue several tokens to one physical "plastic" on different devices.
Such a service was required, because in Russia now massively spreads the method of deception with tokenized cards, wrote "Izvestia". Attackers persuade the client to tie in his electronic wallet, for example in Mir Pay, a certain virtual card, and then through an ATM to transfer cash to it allegedly for the sake of their salvation. True, the owner will never see them again. At the same time, the person does not worry about security, as he uses his own phone.
Despite the fact that smartphone payments now work only on Android devices, this method of deception is becoming widespread, reported "Izvestia" in the Central Bank. According to Sber's estimates, about half of the stolen funds are now withdrawn through a scheme where attackers convince the victim to install a mobile payment system application on the smartphone and link a bank card to the device, which belongs to the fraudsters.
That is why the largest banks are interested in implementing the NSPK service and limiting the deposit of funds to newly created virtual cards. VTB told Izvestia that they support its implementation - however, the bank has already restricted the deposit of funds on tokenized cards for any amount from 30 thousand rubles.
They plan to launch the service in PSB (they are already working on its implementation), as well as in OTP Bank and Dom.RF Bank. OTP specified that they have already set up security rules for depositing funds on virtual cards: they are flexible enough and work regardless of the amount of a single transaction, but taking into account the total figure for the period. Novikom Bank, Pochta Bank and BBR Bank will also consider the possibility of implementing the NSPC service.
Why fraudsters ask to issue a virtual card
Itis planned that the "cooling off period", during which it will be impossible to deposit money on the newly created virtual card, will be two days. During this time, the client can come to his senses and get out from under the influence of attackers, believe the NSPC.
- Of course, each person has an individual threshold of gullibility and suggestibility. However, the "cooling off period" for crediting to "fresh" virtual cards should be enough for the victim to be noticed by relatives, close ones, bank employees and to raise reasonable doubts in her about the correctness of her actions," says Evgenia Lazareva, head of the project of the People's Front "For the Rights of Borrowers".
However, according to her, in some cases, phone scammers can "lead" the victim and influence her for a week or even a couple of months, talking on the phone as long as a person believes and something can be taken from him. That is why the new tool will not be a panacea, but it will definitely be able to reduce the interest of attackers to this method of deception.
The Central Bank did not promptly answer Izvestia's question about the regulator's attitude to the introduction of a service to restrict cash deposits on newly created virtual cards. However, earlier the Bank of Russia stated that credit organizations should be legally obliged to limit replenishment of the account in the amount of more than 50 thousand rubles within 48 hours from the moment of issuance of a virtual card. Such a measure, among other things, is already included in the bill on the "cooling off period" for loans, which the State Duma passed in the first reading in January.
If the authorities do oblige banks to implement this measure, market players will be able to do it faster and more efficiently with the help of the NSPC service.
However, the launch of the service requires time to work out the nuances, the largest banks said. For example, financial organizations may face a problem when, in case of unsuccessful attempt to deposit funds, cash remains in a third-party ATM, said Anton Zamaraev, Head of Information Security Department of OTP Bank.
On the one hand, the victim still part with his money, and then he will be able to get it back only through several instances. But on the other hand, fraudsters have no chance to convince a person to transfer funds in another way - and the money is safe.
Переведено сервисом «Яндекс Переводчик»