
The Bank of Russia is building a surveillance apparatus for digital assets at the same time the Russian state relies on those assets to circumvent Western financial restrictions. The contradiction reveals how governments actually think about crypto.
Summary
- The Bank of Russia added 2,600 crypto wallets to a monitoring system used by banks and law enforcement after more than 1 billion rubles flowed into the addresses during the first half of 2026.
- More than 74% of pyramid schemes identified by the regulator used cryptocurrencies to attract funds, down from 84% in 2025 but still the dominant payment channel for financial fraud in Russia.
- Russia simultaneously uses cryptocurrency for international trade settlement to circumvent Western sanctions, with the government legalizing crypto for cross border payments in late 2024 and expanding the framework through 2025 and 2026.
- China, India, and Russia are all building domestic blockchain surveillance infrastructure while encouraging or tolerating cross border crypto settlement, creating a bifurcated system where crypto is monitored internally and weaponized externally.
- The number of entities flagged for illegal financial activity fell 31% from the first half of 2025, but illegal lending doubled over the same period, with some lenders offering loans denominated in USDT at specified exchange rates.
The Bank of Russia published its first half 2026 enforcement data this week, and the headline number, 2,600 crypto wallets flagged for suspected illegal activity, tells one story. The context around that number tells a completely different one.
What the blacklist actually does
The 2,600 wallets were added to an information system that Russian banks and law enforcement agencies use for digital compliance, client risk assessments, and financial investigations. The system does not freeze wallets on chain. It cannot. What it does is flag associated bank accounts, payment processors, and fiat on ramps within the Russian financial system.
When a wallet appears on the list, any Russian bank processing a transaction linked to that address receives an alert. The bank can then apply restrictive measures, which during the first half of 2026 resulted in actions against more than 500 payment details used for illegal financial activity.
The regulator also sends flagged data to law enforcement and the Federal Antimonopoly Service. That led to more than 330 administrative cases during the period. Authorities restricted access to over 11,800 online resources belonging to suspected illegal market participants and pyramid schemes.
The infrastructure is substantial. This is not a token gesture. The Bank of Russia has built a working crypto surveillance system that connects wallet addresses to bank accounts, social media pages, Telegram channels, and website registrations. The 2,600 wallets are the latest additions to a database that has grown steadily since 2024.
The pyramid scheme pattern
The numbers reveal a clear pattern. In 2024, the Bank of Russia identified more than 3,490 entities with characteristics of pyramid schemes. In 2025, more than 4,600 crypto wallets were flagged as receiving payments from pyramid organizers. In the first half of 2026, the wallet count dropped to 2,600 and the entity count to 2,891, a 31% decline.
The decline could reflect either successful enforcement or a shift in methods. The Bank of Russia’s data suggests the latter. Pyramid schemes have not disappeared. They have moved deeper into crypto native infrastructure.
More than 74% of identified pyramid schemes used crypto to attract funds in the first half of 2026, down from 84% in 2025. The remaining schemes used foreign payment services or cash. Organizers operated through more than 940 websites, 120 Telegram channels, and over 2,500 social media pages.
The schemes themselves have evolved. In 2024, the central bank warned that scammers were using meme coins and tap to earn games to attract victims. In 2026, the dominant formats are pseudo investment projects offering exposure to crypto, income from mining operations, or investments in data centers supposedly supplying computing capacity to miners. Some promoted digital tokens said to track gold prices.
The sanctions evasion parallel
This is the section a competitor could not have written, because it requires holding two contradictory Russian state positions in view at the same time.
In late 2024, Russia legalized cryptocurrency for cross border payments. The law allows Russian companies to settle international trade using digital assets, bypassing the SWIFT messaging system and the Western banking infrastructure that implements sanctions. Through 2025 and 2026, the framework expanded, with Russian officials publicly describing crypto as a tool for maintaining trade flows with China, India, Turkey, and the UAE.
At the same time, the Bank of Russia is building an increasingly sophisticated domestic surveillance apparatus for the same technology. The 2,600 wallet blacklist is part of a system that monitors, tracks, and restricts crypto activity within Russia’s borders.
The contradiction is not accidental. It reflects a deliberate policy architecture: crypto is a weapon when pointed outward and a threat when pointed inward. The Russian state wants its exporters to use crypto to sell oil and gas to sanctioned buyers. It does not want its citizens to use crypto to run pyramid schemes, evade taxes, or move capital abroad without state oversight.
This dual use framework is not unique to Russia.
The global surveillance pattern
China banned crypto trading domestically in 2021 but has not prevented Chinese companies from participating in cross border crypto settlement through Hong Kong, which legalized crypto exchanges in 2023. The Chinese government’s blockchain based service network, BSN, operates infrastructure that could support tokenized trade settlement while domestic crypto activity remains illegal.
India imposed a 30% tax on crypto gains and a 1% tax deducted at source on all crypto transactions in 2022, effectively creating a tracking system that gives the government visibility into every domestic crypto trade. At the same time, India participates in Project mBridge, a cross border central bank digital currency initiative that includes China, Thailand, and the UAE, designed to settle international trade without relying on the U.S. dollar.
The pattern is consistent across all three countries. Build surveillance infrastructure domestically. Permit or encourage crypto based settlement internationally. The technology is the same. The regulatory treatment depends entirely on the direction of the money flow.
The USDT lending market
The Bank of Russia’s report revealed an unexpected detail: illegal lenders are now offering loans denominated in Tether’s USDT stablecoin. The number of identified illegal lenders doubled from the first half of 2025, reaching 999 compared with 467 a year earlier.
These services offer borrowers loans in USDT or rubles converted at a specified exchange rate. The borrower receives stablecoins or their ruble equivalent, and repayment terms reference the USDT exchange rate.
The growth in crypto lending outside the regulated system reflects the same dynamic driving the wallet blacklist. Russians want access to dollar denominated financial products. Western sanctions have cut off access to U.S. bank accounts and dollar transfers. USDT provides a synthetic dollar exposure that the formal banking system cannot offer.
The Bank of Russia linked part of the illegal lending increase to tighter requirements for legal lenders, which limited access to borrowing for customers with high debt burdens. By restricting formal credit, the regulator inadvertently expanded demand for crypto denominated alternatives.
The Clarity Act and GENIUS Act context
The U.S. regulatory response to crypto sits at the other end of the spectrum from Russia’s approach, and the comparison is instructive.
The Clarity Act lost its legislative window in August 2026. The GENIUS Act missed its statutory deadline by four months. American regulators are still debating which agency has jurisdiction over crypto, while Russia has already built and deployed a working surveillance system.
The difference is not about capability. The U.S. has more sophisticated financial surveillance infrastructure than Russia. FinCEN, OFAC, and the IRS all monitor crypto transactions. The difference is about coherence. Russia has decided what it wants crypto to do, a tool for sanctions evasion abroad and a monitored asset class at home, and has built infrastructure accordingly. The U.S. has not reached consensus on what crypto is, let alone what it should do, and the regulatory gaps reflect that indecision.
What the 2,600 number means for Western enforcement
Western sanctions enforcement agencies should be reading the Bank of Russia’s report carefully, though not for the reasons the Bank of Russia intended.
The 2,600 wallet blacklist demonstrates that Russia has developed the technical capacity to trace crypto flows, link wallet addresses to real world identities, and connect on chain activity to bank accounts. That same capacity, if applied to outbound flows, would allow the Russian state to monitor and facilitate sanctions evasion with full visibility into the transaction chain.
OFAC has sanctioned hundreds of crypto wallets linked to Russian entities since 2022. But the Bank of Russia’s report suggests that Russia’s own monitoring infrastructure may be more comprehensive than what Western agencies have built. Russia is not just tracking wallets; it is tracking the social media pages, Telegram channels, and websites associated with each flagged entity.
The implication is that Russia’s crypto surveillance is not primarily defensive. It is an intelligence asset that gives the state visibility into both domestic fraud and international capital flows, allowing it to suppress the former and facilitate the latter.
What would prove this analysis wrong
Two developments would undermine the dual use thesis.
First, if Russia restricts crypto for cross border settlement, reversing the 2024 legalization, it would indicate that domestic surveillance concerns have overridden the sanctions evasion utility. Any legislative moves to curtail the cross border framework would signal a shift.
Second, if Western enforcement demonstrates the ability to trace and block Russian crypto based sanctions evasion at scale, the utility of the external channel diminishes. Chainalysis and Elliptic provide tracing capabilities to OFAC, but the question is whether those capabilities can match the volume and sophistication of state facilitated evasion.
What to watch
Bank of Russia second half 2026 report. The trajectory matters more than any single number. If wallet blacklistings accelerate while the entity count continues declining, it means enforcement is shifting from entity level to wallet level surveillance, a more granular and technically sophisticated approach.
Russian cross border settlement volume. Public data is scarce, but estimates from Chainalysis and the Russian central bank’s own disclosures provide directional signals. An increase in reported crypto settlement volumes would confirm that the dual use framework is expanding.
OFAC sanctions on Russian crypto wallets. The frequency and specificity of OFAC designations targeting Russian crypto wallets indicate how much visibility Western agencies have into the flows the Bank of Russia is simultaneously monitoring and facilitating.
China and India surveillance actions. Similar wallet blacklisting or monitoring announcements from the People’s Bank of China or the Reserve Bank of India would confirm that the domestic surveillance plus external settlement pattern is becoming a standard framework among major non Western economies.
USDT lending growth in Russia. If the illegal lending count continues doubling, it would signal that crypto has become the primary channel for credit access outside the formal banking system, making the surveillance task exponentially harder.
What did the Bank of Russia do with the 2,600 wallets?
The Bank of Russia added 2,600 crypto wallet addresses to a monitoring system used by Russian banks and law enforcement for compliance checks and financial investigations. The system flags associated bank accounts and payment processors, enabling banks to restrict transactions linked to those addresses.
Why is Russia blacklisting crypto wallets while using crypto for sanctions evasion?
Russia treats crypto differently depending on the direction of capital flow. Domestic crypto activity is monitored and restricted to prevent fraud, tax evasion, and capital flight. Cross border crypto settlement is facilitated to maintain international trade flows despite Western sanctions.
How many pyramid schemes in Russia use crypto?
More than 74% of pyramid schemes identified by the Bank of Russia in the first half of 2026 used cryptocurrencies to attract funds. The figure was 84% in 2025 and 77% in 2024.
What is USDT lending in Russia?
Illegal lenders in Russia are offering loans denominated in Tether’s USDT stablecoin, providing borrowers with synthetic dollar exposure that the formal banking system cannot offer due to sanctions. The number of identified illegal lenders doubled from the first half of 2025.
Are other countries doing the same thing?
China, India, and Russia all follow a similar pattern: building domestic blockchain surveillance while participating in cross border crypto or digital currency settlement frameworks. Each monitors internal flows while permitting or facilitating external ones.
How does this affect Western sanctions enforcement?
Russia’s crypto surveillance infrastructure demonstrates technical capacity to trace and monitor crypto flows. That same capacity, applied to outbound flows, allows the state to facilitate sanctions evasion with full visibility. Western enforcement agencies face a counterparty that understands the technology at an operational level.
Can the blacklisted wallets still be used?
The blacklist does not freeze wallets on chain. Blockchain transactions are permissionless and cannot be blocked by the Bank of Russia. The restrictions apply only within the Russian banking system, where associated accounts and payment processors can be flagged or blocked.
Is this a sign that crypto regulation is getting stricter globally?
This is educational analysis, not investment advice. Russia’s approach reflects a broader global trend toward domestic crypto surveillance, but each country’s framework is shaped by its specific policy goals. The direction is toward more monitoring, not less, regardless of jurisdiction.
Disclosure: This content is provided by a third party. Neither crypto.news nor the author of this article endorses any product mentioned on this page. Users should conduct their own research before taking any action related to the company.

