The banking lobby went on the attack. The NSFR sent a letter to the Ministry of Digital Development and the Central Bank with comments on the anti-fraud package 3.0 even before its adoption - the bankers see the three provisions not as protection against fraudsters, but as a regulatory trap for their business. The claims are specific. The first is the legislative determination of an exhaustive list of situations in which a citizen has the right to give consent to the processing of personal data. For the banks, this freezes the product line: any new financial product will require amendments to the law, not internal compliance. The second is the ban on SMS aggregators. A bank that sends 10 million messages a month loses its volume assumption when switching to direct contracts with operators. The costs will increase by 10-20 million rubles. monthly. The third is ESIA's monopoly as the only tool for simple remote identification when issuing cards. Alternative authentication schemes using INN, ADIB and confirmation of physical ownership of the device are prohibited. The banks propose to reverse the logic of the regulation: instead of a list of permitted cases of data processing, there is an exhaustive list of prohibited cases, leaving the citizen the right to decide independently in other situations. Behind this is the protection of the unit economy of personalized offers, where the margin rests on the accuracy of the score. If anti-fraud 3.0 takes place in its current form, the costs will be passed on to customers through the cost of the service, and the identification market will de facto take shape around the government infrastructures - with all the resulting consequences for competition.

The banking lobby went on the attack. The NSFR sent a letter to the Ministry of Digital Development and the Central Bank with comments on the anti-fraud package 3.0 even before its adoption - the bankers see the three provisions not as protection against fraudsters, but as a regulatory trap for their business. The claims are specific. The first is the legislative determination of an exhaustive list of situations in which a citizen has the right to give consent to the processing of personal data. For the banks, this freezes the product line: any new financial product will require amendments to the law, not internal compliance. The second is the ban on SMS aggregators. A bank that sends 10 million messages a month loses its volume assumption when switching to direct contracts with operators. The costs will increase by 10-20 million rubles. monthly. The third is ESIA's monopoly as the only tool for simple remote identification when issuing cards. Alternative authentication schemes using INN, ADIB and confirmation of physical ownership of the device are prohibited. The banks propose to reverse the logic of the regulation: instead of a list of permitted cases of data processing, there is an exhaustive list of prohibited cases, leaving the citizen the right to decide independently in other situations. Behind this is the protection of the unit economy of personalized offers, where the margin rests on the accuracy of the score. If anti-fraud 3.0 takes place in its current form, the costs will be passed on to customers through the cost of the service, and the identification market will de facto take shape around the government infrastructures - with all the resulting consequences for competition.