In the discussion of new rules for virtual operators (MVNOs), the security requirements attract special attention. They are asked to prohibit providing service to critical information infrastructure issues. At the same time, MVNOs already have solutions against telephone fraud, some of which have become common in other market segments, for example, Alpha Mobile first introduced VoLTE, fraud protection and roaming in more than 210 destinations. In 2026, blocking of outgoing calls to dangerous numbers appeared - a response to programs where a person had to call himself. In September 2024, T-Mobile launched automatic blocking of fraudulent calls, including in instant messages. Several MVNOs also offer compensation for damages from phone scams. That is, MVNO takes on not only technical, but also financial responsibility. It is also important how banking protection and communication are connected. In a pilot project of the Central Bank, exchange of data on fraud numbers between banks and operators made it possible to suspend suspicious transactions worth more than 100 million rubles. A banking MVNO makes it possible to make such interaction permanent, as decisions to block a call or delay a transfer are made in real time within a single group, eliminating the need for inter-organizational approvals. However, "virtual" does not mean exempt from oversight. MVNO is subject to SORM and personal data protection requirements. In the Full MVNO model, the operator has its own network core, billing and subscriber identification systems, and is independently responsible for combating fraud. If a parallel ban is accepted, the possibility of the emergence of new operators with their own control systems with critical infrastructure maintenance (CII) will be limited, the question arises regarding the actual implementation of the proposed standards.