In 2025 and the first half of 2026, 326 databases containing approximately 1.175 billion records of Russian citizens were leaked. This volume is double the combined number of public leaks in Latin America, the Middle East, Africa, the Asia-Pacific region, and other CIS countries.
Under Federal Law No. 115-FZ, financial institutions must verify a client's identity using original documents. Failure to comply can result in fines for MFIs of up to 400,000 ₽, with repeat violations leading to exclusion from the state registry. Banks face fines ranging from 100,000 ₽ to 1 ₽ million depending on the violation.
Data protection regulations under Law No. 152-FZ impose penalties for mass leaks of personal data. Fines can reach 15 ₽ million for standard data and 20 ₽ million for biometric data, with repeat offenses triggering turnover-based penalties of 1% to 3%, capped at 500 ₽ million.
Smart Engines offers the Sherlock anti-fraud platform, which performs over 600 checks, including analyzing NFC chips, visual elements, and machine-readable zones. The system uses explainable AI to detect document tampering, generative AI artifacts, and screen captures without transmitting data to the cloud.
