The Central Bank plans to oblige banks to register new customers in their mobile applications using identification through the Russian centralized unified biometric system (EBS). Now this process mainly takes place by phone number, which the attackers forge or use methods to deceive bank customers.
As blocking measures for non-compliance with this instruction, the Central Bank will limit the ability for banks to issue loans and open deposits to customers in mobile applications.
Experts believe that on the one hand, the Central Bank plans to motivate users to take biometrics in this way, and on the other hand, to block unauthorized access to banking mobile applications of customers by intruders.
Market representatives clarified that in order not to lose the opportunity to conduct basic transactions with individuals, banks and financial organizations should, at their own expense, finalize mobile applications, add a block with the EBS to them, activate its connection with the Unified State Information System, test the EBS identification and explain to customers, what is needed.
Moreover, the Central Bank explained that the new instruction "will not apply to applications that the bank closes within six months after the entry into force of the instruction, of which the credit institution must notify the regulator within a month from the instruction begins to take effect."
The regulator actually gave banks with a universal license until September 1 to implement new features in mobile applications, if they have not already been built in there.
According to the expert, in order to connect the mechanism for using the EBS in a mobile application, a medium-sized bank will need to spend up to 10 million rubles on software development, and a large one - up to 15 million rubles. Moreover, after that, such a situation can be created that users will stop accessing mobile applications, since they will not want to take the EBS, but will visit bank offices or go to those where there are no EBS requirements yet.
During 2022, the Ministry of Digital Development planned to transfer the previously collected biometric data of clients of commercial systems (banks and commercial companies) to the state EBS for their protection and processing in one place. Then these companies will be able to provide services for the identification and authentication of their customers using biometrics from the EBS.
December 30, 2021 The state unified biometric system has been launched in Russia. Then the government clarified that the participation of citizens in the submission of data for the state EBS will be completely voluntary, and in no case will it become mandatory.
In early December, the Ministry of Digital Development announced that it would allow collecting user biometrics online through a mobile application to be used as one of the factors for two-factor authentication on the Gosuslug portal. According to the department, it is safe and convenient.
In October 2021, InfoWatch President Natalya Kasperskaya advised Russian residents not to hand over biometric data, as there is no understanding yet of how they will be protected.
bbabo.Net