Russia Proposes Legislation To Criminalize Unlicensed Crypto Operations

bitcoinistPublished on 2026-04-19Last updated on 2026-04-19

Abstract

Russia has introduced a bill to criminalize unlicensed cryptocurrency operations, proposing prison terms of up to four years for individuals and up to seven years for organized groups. The legislation would require all digital asset services to register with or obtain a license from the central bank. This follows earlier regulations restricting retail crypto purchases to ₽300,000 annually per broker and banning banks from processing payments to unlicensed foreign platforms. The Supreme Court has raised concerns over the lack of justification for criminal penalties in the current draft.

In a recent development, the Russian government has introduced a bill before its lower legislative house to criminalize the operation of unregistered crypto services in the country.

Unlicensed Crypto Operators To Face Up To Four Years In Prison

In a bill proposal to the lower house of the Federal Assembly of Russia, the State Duma, Russian lawmakers proposed criminal liability for entities engaging in activities related to the organization and circulation of cryptocurrencies and other digital assets without regulatory approval from the country’s central bank.

The draft law’s explanatory note read:

In accordance with the proposed Article 1717, it is proposed to introduce criminal liability for carrying out activities related to the organization of digital currency circulation without registration 0037822-UCH-2026 (7.1) or without a special permit (license) in cases where such a permit (license) is mandatory.

According to this proposed bill, individuals could incur as high as $4,000 in fines and get a prison sentence of up to four years (or more severe penalties if part of an organized group) for running an unlicensed digital asset operation. “The same act committed by an organized group, or involving the infliction of damage or the extraction of income on a particularly large scale, would be punishable by compulsory labor for up to five years or imprisonment for up to seven years,” the draft proposal said.

If signed into law, the ensuing criminal cases will be investigated by investigators from the Investigative Committee and the Federal Security Service (FSB). It is worth noting that the Supreme Court (SC) did not accept the bill in its current form, stating the lack of a “reasoned justification” in the explanatory note for criminal penalties for illegal crypto circulation.

Russia Continues Crypto Legislation Regime In 2026

This proposed legislation comes after a host of bills were presented in March, including criminal penalties for entities involved in illegal crypto mining and mining infrastructure operators. Notably, the Russian government approved signed new legislations, allowing retail access only through regulated intermediaries.

As Bitcoinist reported, retail “non-qualified” investors are subjected to an annual purchase limit of about ₽300,000 (around $3,700) per broker or intermediary, while “qualified” investors are required to pass tests and transact only through authorized platforms. Meanwhile, banks were banned from process payments to unlicense foreign platforms.

While these new Russian laws (passed and proposed) seems to put the matter of regulatory clarity to bed, their seemingly stringent approach has been called into question in the crypto crowd over the past few months.

The price of BTC on the daily timeframe | Source: BTCUSDT chart on TradingView

Related Questions

QWhat is the maximum prison sentence proposed for individuals operating unlicensed crypto services in Russia?

AIndividuals could face up to four years in prison for running an unlicensed digital asset operation.

QWhich Russian government bodies would investigate criminal cases under this proposed crypto legislation?

ACriminal cases would be investigated by investigators from the Investigative Committee and the Federal Security Service (FSB).

QWhat was the Supreme Court's response to the proposed bill on unlicensed crypto operations?

AThe Supreme Court did not accept the bill in its current form, stating it lacked a 'reasoned justification' for criminal penalties in the explanatory note.

QWhat is the annual purchase limit for retail 'non-qualified' investors of cryptocurrency in Russia?

ARetail 'non-qualified' investors are subject to an annual purchase limit of about ₽300,000 (around $3,700) per broker or intermediary.

QWhat additional penalties are proposed for organized groups involved in unlicensed crypto operations?

AFor organized groups, the penalties could include compulsory labor for up to five years or imprisonment for up to seven years.

Related Reads

An Open-Source AI Tool That No One Saw Predicted Kelp DAO's $292 Million Vulnerability 12 Days Ago

An open-source AI security tool flagged critical risks in Kelp DAO’s cross-chain architecture 12 days before a $292 million exploit on April 18, 2026—the largest DeFi incident of the year. The vulnerability was not in the smart contracts but in the configuration of LayerZero’s cross-chain bridge: a 1-of-1 Decentralized Verifier Network (DVN) setup allowed an attacker to forge cross-chain messages with a single compromised node. The tool, which performs AI-assisted architectural risk assessments using public data, identified several unremediated risks, including opaque DVN configuration, single-point-of-failure across 16 chains, unverified cross-chain governance controls, and similarities to historical bridge attacks like Ronin and Harmony. It also noted the absence of an insurance pool, which amplified losses as Aave and other protocols absorbed nearly $300M in bad debt. The attack unfolded over 46 minutes: the attacker minted 116,500 rsETH on Ethereum via a fraudulent message, used it as collateral to borrow WETH on lending platforms, and laundered funds through Tornado Cash. While an emergency pause prevented two subsequent attacks worth ~$200M, the damage was severe. The tool’s report, committed to GitHub on April 6, scored Kelp DAO a medium-risk 72/100—later acknowledged as too lenient. It failed to query on-chain DVN configurations or initiate private disclosure, highlighting gaps in current DeFi security approaches that focus on code audits but miss config-level and governance risks. The incident underscores the need for independent, AI-powered risk assessment tools that evaluate protocol architecture, not just code.

marsbit17m ago

An Open-Source AI Tool That No One Saw Predicted Kelp DAO's $292 Million Vulnerability 12 Days Ago

marsbit17m ago

Trading

Spot
Futures
活动图片