What the Bank of Russia published
The Bank of Russia page describes a draft instruction covering the scope, timing, procedure and conditions for retaining and providing information. Its description expressly refers to Article 40 of Federal Law No. 282-FZ of August 4, 2026 and to interaction with the federal executive authority responsible for security.
The draft also refers to requirements for hardware and software and measures for non-compliance. Publishing a draft signals the direction of proposed regulation; the final text, its scope and its effective date can only be determined through the formal process.
Who the draft may affect
By its wording, the draft concerns how crypto-market participants handle information and provide it in cases set by law. That is not the same as a rule governing every private transaction made through a self-custodied wallet, and a headline alone cannot establish the obligations of a particular person or company.
The precise addressees must be determined from the effective law, the final regulation and an organization's status. Exchanges, intermediaries, operators and infrastructure providers should follow the official final text and assess applicability with qualified advisers.
Why a draft is not an effective requirement
A draft, consultation, adoption, official publication and entry into force are distinct legal stages. Until that process is complete, the draft does not by itself show that a new procedure already applies or that consequences attach to non-compliance.
Regulatory stories often compress a complex process into a strong conclusion. A more reliable approach is to check the official project page and primary documents, distinguish the statute from a proposed instruction and avoid legal or financial conclusions based on a summary.
What to watch next
Market participants can follow the Bank of Russia project page, the final version and official explanations of timing and scope. Data-retention processes, information security and vendor arrangements should be evaluated only after the exact operative text is compared with the organization's actual activities.
For users of crypto services, this publication does not replace ordinary caution: check who receives your data, read service terms and distinguish binding requirements from marketing or fraud. For a Bitcoin operation, independently verify the network, address, fee and amount received.
