Russia Approves First Crypto Exchanges And Custodians

17 min read
3 views
Oct 7, 2026

Russia just put its first crypto exchanges and custodians on the official register. The names are familiar, the rules are tighter than the headlines suggest, and one deadline still sits two years out.

Financial market analysis from 07/10/2026. Market conditions may have changed since publication.

I kept waiting for the fine print to swallow the headline. A country that spent years treating crypto like a tolerated grey zone does not usually flip a switch and hand out licenses with a smile. Yet that is roughly what just happened. The first names are now on the official registers, the market that opened at the start of September has real operators, and the banks everyone already uses are standing in the queue. If you only read the announcement, it sounds tidy. It is not tidy. It is a controlled opening with a long runway, a hard domestic payment ban, and a capital rule that tells lenders not to get too comfortable.

Four exchange operators. Five digital custodians. A transitional window that runs until 1 September 2027. Those three facts are the spine of the story. Everything else, from the retail purchase ceiling to the planned December launch windows, hangs off them. I have found that regulated crypto openings are judged less by the press release and more by who is allowed to hold the keys, who is allowed to deal, and what a normal customer can actually buy before a compliance officer clears their throat.

What The First Registrations Actually Unlock

The central bank admitted the first cohort under transitional provisions of the law on digital currency and digital rights, signed in August and effective from 1 September. Registration is not a gold medal. It is permission to operate while the remaining compliance work is finished. Firms must follow transaction and accounting rules from the day their names enter the registers. The rest of the framework can be completed over the next two years.

That split matters. A company can be live and still unfinished. Customers will see apps, tickers and custody screens long before every internal control looks like a finished securities shop. Perhaps the most interesting aspect is how ordinary the first names feel. This is not a parade of offshore brands. It is domestic banks and a handful of specialist firms stepping into a market the state has decided to supervise rather than ignore.

Who Landed On Each Register

The digital depository list is the custody side of the house. It includes the country’s largest lender, Sberbank, alongside VTB Bank, Atomyze, Voltari and Cloud Infrastructure. The crypto exchange operator list is shorter and overlapping: VTB, Zefir, Sistema Crypto and T Invest Lab. VTB is the only name that shows up on both, which is a useful clue. One institution wants to hold assets and also deal in them.

Those roles are not interchangeable. A digital depository records digital currencies and digital rights, processes transfers, and gives customers access to the identifier addresses where assets sit. Think of it as the record-keeper and the gate to the address, not the trading desk. An exchange operator can buy and sell digital currencies in its own name, using its own funds, outside organized trading venues. That is a dealer model, not a classic order-book exchange in the sense most retail traders picture.

Registration puts firms inside the rails. It does not turn every registered name into a full public marketplace on day one.

I would not treat the two lists as a ranking of ambition. Custody is the quieter business and, in my experience, the one regulators care about first. If you cannot see who holds what, trading rules are theatre. Recording assets, transfers and customer access is the boring work that makes later supervision possible. The dealer permission is narrower than a casual reader might assume. Own-name, own-funds activity outside organized venues is a specific lane, not a blank cheque to run any kind of venue.

Why The Transitional Window Is The Real Story

Immediate rules, delayed perfection. That is the bargain. From the registration date, transaction and accounting standards apply. The broader alignment with the digital currency law can wait until September 2027. Two years is a long time in crypto and a short time inside a large bank. Product teams will want screens live. Risk teams will want the manual finished. Both clocks are running.

Existing financial market participants can use a simplified admission path when they apply to operate as an exchange or a digital depository. That is why the first wave looks bank-heavy. The qualification standards for management and certain officers, the documentation pack, and the admission decision still exist. Simplified does not mean casual. It means a firm that already lives under financial supervision does not have to pretend it was born yesterday.

Draft operating rules published in July already sketched the capital floor for digital depositories. Minimum equity was set between 50 million and 250 million rubles, depending on the services offered. Working with open distributed ledgers, or providing post-trade settlement, pushes a firm toward the higher end. The logic copies securities depositories more than it copies a startup wallet. Records of assets, and records of which customers can reach the system, are not optional extras.

  • Transaction and accounting rules start the day a firm enters a register.
  • Full alignment with the wider law can run until 1 September 2027.
  • Depository equity floors sit between 50 million and 250 million rubles.
  • Simplified admission is available to firms already inside the financial system.
  • Own-name dealing and custody recording are separate permissions.

Is two years generous? For a bank rebuilding ledgers, vendor contracts and staff certifications, it is workable. For a customer who assumes “registered” means “finished,” it is a trap. I would read every early product page with that lag in mind. The logo can be familiar. The control environment can still be mid-build.


How The Banks Plan To Show Up In Apps

Sberbank’s place on the depository register lands just before a product date the lender has already circled. The target for crypto trading and custody is 1 December, with infrastructure meant to cover trading, settlement and digital depository services. Bitcoin, Ether and USDT are expected among the first supported assets. Access is planned through the bank’s existing online, investment and business platforms rather than a separate island app.

That distribution choice is the commercial point. Tens of millions of people already open those apps for salaries, cards and brokerage. Adding a custody tile is a different acquisition problem from convincing someone to download a new wallet. It is also a different risk problem. A banking app that starts showing coin balances will be judged by people who have never thought about seed phrases.

VTB is on a similar clock. Deputy chief executive Vitaly Sergeichuk has said the bank expects to open digital currency trading to a wide range of investors through VTB My Investments as early as November, with its own crypto exchange following in December. November for access, December for the exchange. Close enough that customers may not notice the sequence. Compliance teams will.

There is a second Sberbank thread worth keeping beside the trading launch. In August the lender disclosed plans to accept Bitcoin, Ether and USDT as collateral for loans once the required approvals are in place. Collateral is not the same product as a buy button. It pulls crypto into credit decisions, haircuts and margin calls. Even if that product waits, the intent signals how a universal bank thinks: not only custody and dealing, but balance-sheet uses that look like the rest of its book.

What A Retail Buyer Can And Cannot Do

The September framework put trading, custody and certain cross-border transactions under central bank supervision. Retail access is real and capped. Non-qualified investors can buy eligible cryptocurrencies worth up to 300,000 rubles a year through each intermediary, after a suitability test. Qualified investors do not face that same annual purchase ceiling, though testing requirements remain.

Three hundred thousand rubles is not a fortune and it is not nothing. At recent exchange rates it is a few thousand dollars of annual buying power per intermediary. The “per intermediary” wording is the detail people will probe. A customer who passes the test at more than one registered firm could, on a plain reading, stack allowances. Whether supervisors later close that reading is an open question. I would not build a strategy on a loophole that has not been stress-tested.

Bitcoin, Ether and USDT were flagged by the central bank as assets that could meet retail criteria on liquidity and trading history. That trio matches what Sberbank expects to support first. It is a short menu. Anyone hoping for a long tail of smaller tokens inside a bank app is likely to wait, or to stay outside the regulated lane entirely.

Investor typeAnnual buy capTest requiredLikely first assets
Non-qualified300,000 rubles per intermediaryYes, suitability testBitcoin, Ether, USDT
QualifiedNo same annual ceilingTesting still appliesBroader, still supervised
Corporate, cross-borderSeparate approved-use rulesDepends on the channelSettlement, not shopping

One prohibition did not soften. Cryptocurrencies still cannot be used to pay for ordinary goods and services inside the country. You can be allowed to buy a coin and still be barred from spending it at a shop. That is the policy in one sentence. The regulated market is an investment and settlement perimeter, not a payments revolution on the high street.

The Cross-Border Lane Is A Different Product

Separate rules permit approved use of digital currencies in certain cross-border transactions. For companies that have struggled with correspondent banking, that lane is the practical reason the law exists at all. A legal route for foreign-trade settlement is not the same thing as a retail brokerage tile, even if both sit under the same statute.

I keep the two stories apart on purpose. Retail caps, suitability tests and a domestic payment ban describe a supervised investment product. Approved cross-border use describes a trade-finance workaround. Mixing them produces bad forecasts. A December app launch does not, by itself, mean exporters will settle invoices in stablecoins next quarter. It means the legal shelf now has a space where that activity can be attempted inside the rules.

Identity checks are already tighter than a casual wallet signup. Customers opening accounts with digital depositories must provide an individual taxpayer identification number, the INN, as part of identity and transaction monitoring. The financial intelligence body has said the identifier will improve transparency around crypto transactions. Transfers above set thresholds require information on payer and recipient. If you wanted anonymity, this market is the wrong door.

Capital Rules That Keep Banks On A Short Leash

Admission to the register is one constraint. Balance-sheet math is another. Draft prudential rules would cap a lender’s combined risk from cryptocurrencies and foreign digital instruments at 1 percent of capital. Direct holdings, derivatives and other linked instruments fall inside that frame. Crypto exposure and certain customer positions would carry a 1,250 percent risk weight.

A 1,250 percent weight is the regulatory way of saying “treat this like something that can go to zero, and then some.” Even a small book consumes a large slice of capital. The 1 percent cap then limits how far a bank can lean in while it learns the market. Reporting on turnover in the affected instruments, and new prudential ratios, are expected from January 2027. Cryptocurrencies and foreign digital instruments would not qualify as collateral when banks calculate provisions for potential losses.

That last point sits in tension with the loan-collateral plans mentioned earlier. Customer collateral and regulatory collateral are different animals. A bank may hope to lend against a client’s coins under one approval path, while being told those same coins do not count when the bank itself sets provisions. Until both texts are final, product teams and treasury teams are reading different drafts. I would not assume the friendlier reading wins.

Prudential sketch, as proposed:
  Combined crypto and foreign digital risk cap: 1% of capital
  Risk weight on relevant exposure: 1,250%
  Reporting and new ratios: expected January 2027
  Coins as collateral for bank provisions: not qualifying

For the first registered exchanges and depositories, the immediate requirements began when the names hit the registers. Each firm now follows the transaction and accounting rules while it finishes the remaining changes by September 2027. The capital proposals, if adopted as drafted, will shape how large the bank-owned slice of this market can become. A 1 percent cap does not kill the business. It keeps it a side desk.

What “Exchange” Means Here, And What It Does Not

Language is doing a lot of work. In everyday crypto speech, an exchange is a venue with an order book, listings and a public ticker. In this framework, a crypto exchange operator buys and sells digital currencies in its own name and with its own funds, outside organized trading venues. That is closer to a dealer or an over-the-counter desk than to a global matching engine.

Does that matter to a retail client who just wants a buy button? Less than lawyers think, on day one. The client sees a price, confirms, and the coin appears in custody. It matters a great deal for market structure. Own-account dealing means the firm is the counterparty. Spreads, inventory and internal risk limits set the experience. There is no promise of deep outside liquidity just because a name is registered.

Organized venues can still arrive later. The current permission is explicit about activity outside those venues. Reading the first registrations as the birth of a national order-book complex overstates what was signed. Reading them as irrelevant understates it. A supervised dealer-and-custodian stack, plugged into bank apps, is a real market even if it never looks like the offshore platforms people already know.

The Specialist Names Beside The Banks

Banks will get the headlines because people already bank with them. The registers are not only banks. Atomyze, Voltari and Cloud Infrastructure sit on the depository side. Zefir, Sistema Crypto and T Invest Lab sit with VTB on the operator side. Specialist firms can move faster on product design. They also lack the deposit base and the brand trust that a universal bank brings to a first-time buyer.

I expect a split customer base. Cautious first-timers will tap the bank app they already trust, accept the short asset list, and live inside the annual cap. More active traders will compare spreads and withdrawal rules at the specialist operators, then discover that the same law, the same taxpayer identifier and the same payment ban apply. The regulated lane is a lane. It is not a menu of philosophies.

Competition inside that lane could still be useful. Custody fees, settlement speed and the quality of the suitability test are all places a smaller firm can differentiate without breaking the statute. If every operator copies the bank app experience, the specialist names will struggle to justify themselves. If they handle address access and record-keeping with fewer delays, they earn a role even when the logo on the debit card is bigger.


A Practical Timeline Worth Keeping

Dates are scattered across the announcement, the product plans and the draft rules. Pulled into one line, they tell a clearer story than any single quote.

  1. July: draft operating rules, including depository capital ranges, were published.
  2. August: the digital currency law was signed, and loan-collateral intentions were disclosed.
  3. 1 September: the main framework took effect.
  4. Early October: the first four operators and five custodians entered the registers.
  5. November: VTB has pointed to wider investor access through its investment app.
  6. 1 December: Sberbank’s target for trading and custody, with VTB’s own exchange expected the same month.
  7. January 2027: prudential reporting and new ratios are expected to begin.
  8. 1 September 2027: end of the transitional period for full alignment.

None of those later dates is a guarantee. Product targets slip. Draft capital rules can be rewritten. The registration dates, by contrast, have already happened. That is the part I trust most. A name on a register is a fact. A December launch is a plan.

How This Sits Next To The Old Grey Market

People did not wait for a register to buy Bitcoin. Peer-to-peer desks, foreign platforms and informal brokers have been part of the landscape for years. A legal domestic route does not erase that history in a quarter. It gives banks and supervisors a channel they can see, and it gives cautious capital a reason to come inside.

Will volume migrate? Some of it, especially salaried buyers who want the purchase to appear on a statement they can explain. A lot of it will not. Annual caps, short asset lists and a domestic spending ban leave plenty of demand that the regulated product cannot serve. The interesting policy question is whether supervisors treat the outside market as a shrinking residual or as a competitor they still need to police.

In my experience, dual markets last longer than reformers expect. The official lane gets the advertising and the taxpayer identifier. The unofficial lane gets the assets, the hours and the use cases the statute left out. Pretending one replaces the other in the first year is how commentary goes stale.

Risks That The Headline Skips

Registration reduces some risks and concentrates others. A customer who buys through a supervised depository has a named firm, a record and a complaint path. That is better than a chat-app broker. The same customer now has bank-style operational risk: app outages, frozen accounts, and a compliance review that can pause a transfer because a field was missing.

Counterparty risk changes shape rather than vanishing. If the operator deals in its own name, the client’s trade is with the firm. Capital floors and a proposed 1 percent exposure cap are meant to keep that firm from betting the franchise. They do not make inventory risk disappear. A sharp move in Bitcoin still has to be absorbed by someone.

Legal risk sits in the transition itself. Rules that apply now, and rules that must be met by 2027, create a period where a product can be offered under a standard that later tightens. Early customers should assume terms can be revised. That is normal in a new regime. It is still worth reading the account agreement twice.

  • Domestic payment use remains prohibited, so “ownership” is not “spendability.”
  • Suitability tests can block a purchase even after an account exists.
  • Taxpayer identifiers tie activity to a person in a way offshore wallets did not.
  • Bank capital caps may limit how much inventory a dealer can hold.
  • Cross-border approval is a separate permission, not a side effect of a retail account.

What Investors Outside The Country Should Notice

This is not a listing event for global tokens, and it is not an invitation for foreign platforms to set up shop unchecked. It is a domestic infrastructure decision. The assets named for retail, Bitcoin, Ether and USDT, are already the most liquid coins on earth. Local registration does not change their global supply. It can change a slice of marginal demand, and it can change how Russian companies settle a portion of trade.

Stablecoins are the sensitive piece. USDT appearing on a bank’s first-asset list tells you the product designers care about a dollar-linked unit, not only about a volatile coin. That choice fits both retail hedging and trade settlement. It also imports whatever confidence, or doubt, the market already has in that stablecoin’s reserves. A domestic register does not audit a foreign issuer.

Price impact is easy to overstate. A few thousand dollars of annual retail buying power per intermediary, even multiplied across a large population, is a slow drip next to global daily volume. The larger swing factor is institutional and corporate use, and that swing factor is capped by the 1 percent capital idea and by the need for explicit cross-border approval. I would treat the story as market-structure news, not as a near-term demand shock.

Questions The Registers Do Not Answer Yet

A few gaps are large enough to shape the next year of coverage. Fee schedules are not in the registration notice. Withdrawal rules, to an external address versus inside the depository, are not spelled out for customers. The exact content of the suitability test is still something each intermediary will implement under the central bank’s standards. Insurance, if any, for custody failures has not been described in the same breath as the register.

There is also the question of what happens to a client who fails the test, or who hits the annual cap in March and wants to buy again in June. Does the app simply grey out the button? Does it offer a path to qualified status? Banks are good at saying no. They are less practiced at explaining a crypto-specific no without sounding like a terms-and-conditions page.

Another open item is competition with the state’s own digital ruble project. A supervised crypto stack and a central bank digital currency can coexist, and many countries are trying exactly that. They can also be steered so that one is for investment experiment and the other is for payments. Given the domestic payment ban on crypto, the split is already hinted at. How firmly it is enforced will tell you whether this opening is a parallel market or a fenced garden.

The useful test is simple. Can a normal customer buy, hold and later sell a small amount of Bitcoin inside a bank app, with a paper trail, without being told the product is paused? If the answer stays yes through a volatile quarter, the register meant something.

How I Would Read The Next Announcements

More names will apply. Simplified admission for existing market participants makes a second wave likely, especially among brokers who already run investment apps. I would watch whether new entrants land on one register or both. A custody-only registration is a service business. A dual registration is a bid to own the client relationship end to end.

I would also watch asset lists. If December really opens with Bitcoin, Ether and USDT and nothing else, the central bank’s liquidity screen is doing what it was drawn to do. If a lesser-known token appears in a bank app early, either the criteria were looser than described or someone moved ahead of the text. Neither would surprise me. Both would be worth a closer look.

Capital rules deserve the same attention as product dates. A final 1 percent cap, with a 1,250 percent risk weight, tells bank boards this is a franchise add-on. A softer final text would tell them it can become a line of business. Until that text lands, December launches are customer-facing experiments sitting on top of an unfinished prudential frame.

A Note On Expectations

It is tempting to file this under “crypto goes mainstream” and move on. The more accurate file is “a large financial system built a narrow, supervised door.” Mainstream would mean paying for groceries. That remains banned. Mainstream would mean uncapped retail access. That is reserved, loosely, for qualified investors who still sit for tests. Mainstream would mean banks free to warehouse risk. The draft math says otherwise.

What did change is legitimacy for a defined set of firms. Sberbank on a depository register is a different social fact from a Telegram broker with a logo. VTB on both lists is a statement that dealing and custody are meant to live inside institutions the public already recognizes. The specialist names keep the door from being a pure bank cartel. Together they are the first populated version of a market that, on paper, opened on 1 September.

I will be more convinced when the apps do what the calendars promise, when a non-qualified buyer completes the test and sees the cap enforced cleanly, and when a corporate settlement clears under the cross-border rules without a quiet exception. Registers are the start of that evidence. They are not the evidence itself.

Bottom Line For Readers Tracking The Market

Russia has registered its first four crypto exchange operators and five digital custodians under a law that took effect on 1 September. Sberbank is in as a custodian. VTB is in as both custodian and operator. The others, Atomyze, Voltari, Cloud Infrastructure, Zefir, Sistema Crypto and T Invest Lab, fill out a first cohort that mixes banks with specialists. They can operate now, under transaction and accounting rules, while they finish full alignment by 1 September 2027.

Retail buying is real, tested and capped at 300,000 rubles a year per intermediary for non-qualified clients. Qualified clients escape that ceiling and not the tests. Domestic spending stays illegal. Cross-border use is a separate approved path. Bank exposure, if the drafts hold, stays a sliver of capital with a heavy risk weight. Sberbank is aiming at 1 December for trading and custody. VTB is talking about November access and a December exchange.

That is a structured opening, not a free market and not a ban. If you remember only one distinction, remember dealer versus depository, and cap versus prohibition. The first tells you who is allowed to do what. The second tells you how far a household, or a bank, is allowed to go. Everything else in the next two years is implementation.

]]>
❝
Compound interest is the most powerful force in the universe.
— Albert Einstein
Author

Steven Soarez passionately shares his financial expertise to help everyone better understand and master investing. Contact us for collaboration opportunities or sponsored article inquiries.

Related Articles

?>