Fintech and Public Finance

Public procurement is when the state or budget institutions buy goods, works or services from private companies. The entire process is strictly regulated by laws 44-FZ and 223-FZ to ensure transparency and competitiveness. The SKIF-BP system is used to automate procurement activities. The training service will help specialists master working with procurement procedures.

Source: term "Public procurement (44-FZ / 223-FZ)"

To start working in public procurement, you need to register a status (individual entrepreneur, LLC or self-employed), obtain a qualified electronic signature, open a special bank account for trading, register on the Gosuslugi portal and in the Unified Information System (UIS). After that, you can find tenders and submit applications. The SKIF-BP system is used to automate participation. The training service will help master the processes.

Source: term "Public procurement (44-FZ / 223-FZ)"

Legal entities, individual entrepreneurs, as well as individuals and self-employed citizens can participate in public procurement. Organizations in the process of liquidation or bankruptcy, companies with tax debts and offshore companies cannot participate. The SKIF-BP system is used to automate participation in procurement. The training service will help prepare specialists.

Source: term "Public procurement (44-FZ / 223-FZ)"

The official source of all public procurement is the Unified Information System (UIS) in the field of procurement (zakupki.gov.ru). Procurement plans, tenders, contracts and results are published there. Procurement also takes place on electronic trading platforms: Roseltorg, Sberbank-AST, RTS-tender. The SKIF-BP system is used to automate search and participation. The training service will help work effectively with procurement.

Source: term "Public procurement (44-FZ / 223-FZ)"

They make money on public procurement by supplying goods, performing works or providing services to government institutions. The main income is formed by participating in electronic auctions and competitions, where the customer pays for the contract performance. The profit ranges from 10% to 40% of the contract amount. The SKIF-BP system is used to automate participation. The training service will help master tender processes.

Source: term "Public procurement (44-FZ / 223-FZ)"

The amount of contract performance security is set from 0.5% to 30% of the contract amount. Advance security is 100% of the advance amount (if the supplier agreed to receive it). For contracts up to 20 million rubles, the bid security is 0.5-1%, over 20 million — 0.5-5%. The SKIF-BP system is used to manage security. The training service will help understand the procedures.

Source: term "Public procurement (44-FZ / 223-FZ)"

On public procurement, they earn from 10% to 40% of net profit from the contract amount. Supply of goods gives a margin of 10-15%, provision of services and performance of works — from 15% to 40%. Hired tender specialists earn from 40,000 to 120,000 rubles, experienced experts — up to 250,000 rubles. The SKIF-BP system is used to automate participation. The training service will help master tender processes.

Source: term "Public procurement (44-FZ / 223-FZ)"

The GIIS "Electronic Budget" is a state integrated information system for public finance management in Russia. It was developed by the Ministry of Finance and the Federal Treasury to automate the entire financial cycle: from expense planning and public procurement to accounting and reporting. The system unites thousands of budget process participants. Integration with the GIS is provided by the SKIF-BP system. The training service will help employees master working in the system.

Source: term "GIS "Electronic Budget""

The "Electronic Budget" system is created and maintained by the Ministry of Finance of the Russian Federation and the Federal Treasury. All participants of the budget process must work in the system: state and local government bodies, budget and autonomous institutions, commercial organizations participating in state contracts and control bodies. Integration with the SKIF-BP system is used for effective work. The training service will help prepare specialists.

Source: term "GIS "Electronic Budget""

To work in the GIIS "Electronic Budget", you will need to obtain a qualified electronic signature, configure your workstation using CIPF tools (CryptoPro), install certificates and submit an application for connection to the Federal Treasury office. Login is carried out through the Unified Budget System Portal with the selection of an electronic signature certificate. Integration with the SKIF-BP system is used to simplify work. The training service will help master the system.

Source: term "GIS "Electronic Budget""

The "Electronic Budget" was created to automate the planning, execution and control of state and municipal finances. It unites all levels of government in a single digital environment, ensuring transparency and accountability. The system automates budget planning, procurement management, accounting and treasury support. Integration with the GIS is provided by the SKIF-BP system. The design service will help configure integration.

Source: term "GIS "Electronic Budget""

The operators of the GIIS "Electronic Budget" are the Ministry of Finance of the Russian Federation and the Federal Treasury. For the centralized subsystems of the system and the budget.gov.ru portal, the operators are the Russian Ministry of Finance and the Federal Treasury. Integration with the SKIF-BP system is used for effective work with the GIS. The design service will help configure the integration architecture.

Source: term "GIS "Electronic Budget""

Yes, you can log in to the "Electronic Budget" system through Gosuslugi (ESIA), but it depends on the specific subsystem and your access rights. To receive support measures, authorization is possible only through Gosuslugi with a confirmed account and electronic signature. For budget institutions, login via ESIA is provided, but a Treasury certificate is required to sign documents. Integration with the GIS is provided by SKIF-BP. The training service will help configure access.

Source: term "GIS "Electronic Budget""

The full name of the "Electronic Budget" is the State Integrated Information System for Public Finance Management "Electronic Budget" (abbreviated — GIIS "Electronic Budget"). The system was developed for planning and control of budget operations. Integration with the SKIF-BP system is used for effective work with the GIS. The training service will help master working in the system.

Source: term "GIS "Electronic Budget""

Treasury support is strict state control over the spending of budget money. Instead of a regular bank, the state contract executor opens a personal account with the Federal Treasury. Before transferring funds, the Treasury checks exactly what they will be spent on, preventing misuse. The SKIF-BP system automates this process. The training service will help employees master the work.

Source: term "Treasury support"

Treasury support is a form of state control over the targeted spending of budget funds. Contract settlements go through a personal account at the territorial body of the Federal Treasury (UFK), opened and maintained in the GIIS "Electronic Budget". The Treasury checks every payment for compliance with the contract terms. The SKIF-BP system automates treasury support. The design service will help configure the processes.

Source: term "Treasury support"

Treasury support is applied to contracts under 44-FZ worth from 100 million rubles (regardless of the advance), as well as to contracts from 3 million rubles with an advance of more than 50%. For the state defense order — when the transaction amount is more than 300 thousand rubles. For subsidies and national projects, support is mandatory regardless of the amount. The SKIF-BP system helps automate accounting. The training service will help understand the rules.

Source: term "Treasury support"

A contract with treasury support is a contract in which settlements pass through special personal accounts at the Federal Treasury. The contract includes conditions on settlements through a personal account at the UFK, the contractor's obligation to provide information about subcontractors and a ban on transferring funds to bank accounts (except for wages and taxes). The SKIF-BP system automates the support of such contracts.

Source: term "Treasury support"

The disadvantages of treasury support: the complexity of the procedure and high time costs (every action requires approval with government bodies), payment delays (verification takes 1-5 working days), additional document flow. However, this ensures transparency and prevents misuse of budget funds. The SKIF-BP system minimizes these difficulties through automation. The training service will help master the processes.

Source: term "Treasury support"

The goals of treasury support: ensuring targeted use of budget funds, preventing misuse, reducing accounts receivable, increasing the efficiency of budget expenditures, transparency of funds movement and operational control over the execution of state contracts. The SKIF-BP system automates the achievement of these goals. The design service will help configure the system for your tasks.

Source: term "Treasury support"

Yes, you can. Transferring from a treasury (personal) account to a regular bank account is allowed, but strictly regulated. You can transfer funds for actually completed works, reimburse expenses or withdraw net profit after full contract execution. To do this, you need to create a payment order in the "Electronic Budget" system and attach supporting documents. The SKIF-BP system automates this process.

Source: term "Treasury support"

Open APIs (Open Application Programming Interface) are software interfaces that an organization publishes for external use by other developers, companies or government bodies. Unlike internal APIs, they are available outside the organization and allow different systems to exchange data without building individual integrations. In the financial sector, Open APIs are regulated by law: since 2022, the Bank of Russia has been implementing an open API standard for data exchange between banks and third-party financial service providers. Our SINTEZ-M platform provides a built-in Open API designer.

Source: term "Open APIs (Open API)"

Open APIs work through standardized requests to interface endpoints: an external system sends an HTTP request and receives a response in a machine-readable format, such as JSON or XML. The API provider publishes documentation and an API specification, and configures authentication and access rights. This allows external developers and systems to exchange data with the organization without individual integration. In the public sector, open APIs are used for interdepartmental electronic interaction via SMEV and access to government information systems.

Source: term "Open APIs (Open API)"

Open APIs are used in finance — for data exchange between banks and fintech services under the open API standard of the Bank of Russia; in the public sector — for interdepartmental electronic interaction and access to government information systems; and in business — for integrating partners and third-party developers into a digital ecosystem. Depending on the purpose, there are Public APIs (open to any developers), Partner APIs (available to authorized partners under a contract) and Open Government APIs (access to government data and services). Our SINTEZ-M platform allows creating and publishing REST APIs without writing code.

Source: term "Open APIs (Open API)"

Open APIs provide advantages to all parties. For the state: reduced costs for interdepartmental interaction, increased transparency of activities and the creation of an ecosystem of digital services for citizens and businesses. For business: rapid integration with government systems, access to new markets through partner APIs and reduced time to market. For users: a wider range of convenient services based on open interfaces and data.

Source: term "Open APIs (Open API)"

The development of Open API in the public sector is regulated by the Methodological Recommendations of the Ministry of Digital Development, which establish uniform requirements for API formats, protocols and security. For each application, you can automatically generate an OpenAPI specification (Swagger), configure authorization and access management. The SintezM platform supports all Open API requirements, including mandatory authentication through ESIA.

Source: term "Open APIs (Open API)"

An internal API is used only within an organization to connect its own systems, while an Open API is published for external developers, companies or government bodies and is usually regulated by standards and legislation. Open APIs require published documentation, authentication and access management. In the low-code ecosystem, our SINTEZ-M platform provides a built-in Open API designer that allows creating and publishing REST APIs without writing code.

Source: term "Open APIs (Open API)"

Implementation of Open APIs begins with defining an API strategy: deciding which data and functions to expose and whether to use public, partner or government APIs. The interfaces are then designed, documented in an OpenAPI specification (Swagger) and published with authentication and access management configured. Our SINTEZ-M platform includes a built-in Open API designer that automates this process. The design service will help develop the API strategy and architecture.

Source: term "Open APIs (Open API)"

RegTech is a technology that helps companies automatically comply with regulatory requirements (for example, the Bank of Russia, Federal Tax Service). These are programs that independently generate reports, check clients, track suspicious transactions and monitor legal changes. Instead of doing everything manually, companies automate these processes, saving time and reducing the risk of fines. In the public sector, RegTech functionality is implemented in the SKIF-BP system for budget accounting automation. The research service will help identify processes for automation.

Source: term "RegTech (regulatory technology)"

RegTech is a technology for automating compliance with regulatory requirements by companies (bottom-up). SupTech (Supervisory Technology) is the use of technology by regulators (for example, the Bank of Russia) to control the market (top-down). SupTech allows remotely monitoring compliance, detecting violations and analyzing risks across the entire financial system. The SKIF-BP system implements RegTech functionality for government institutions. Read more about the approaches in the technologies section.

Source: term "RegTech (regulatory technology)"

RegTech in Russia is digital technology that helps companies and government institutions automate compliance with regulatory requirements. In Russia, regtech is actively developing within the framework of digital transformation of public administration. Main directions: automation of budget reporting (through SKIF-BP), procurement monitoring under 44-FZ and 223-FZ, control of targeted use of budget funds, as well as KYC and AML for financial organizations. The design service will help implement RegTech solutions in your organization.

Source: term "RegTech (regulatory technology)"

RegTech solves the problems of compliance with regulatory requirements: it automates the preparation of reports for regulators, monitors transactions for signs of financial crimes, manages compliance risks and tracks changes in legislation. This reduces the cost of compliance and the risk of fines. In the public sector, RegTech functionality is implemented in the SKIF-BP system for budget accounting automation. Read more about the approaches in the technologies section.

Source: term "RegTech (regulatory technology)"

RegTech solutions are divided into four main categories: financial risk and capital management (ratio calculation, stress testing); corporate governance, risk and compliance (GRC — Governance, Risk, Compliance); cybersecurity and IT security (incident monitoring, data protection); countering financial crimes (AML, CFT, KYC). In the public sector, RegTech functionality is implemented in the SKIF-BP system for automating budget processes. The research service will help determine priority automation areas.

Source: term "RegTech (regulatory technology)"

The Bank of Russia uses SupTech to collect and analyze reporting data, monitor the compliance of financial organizations with regulations, detect violations and assess risks across the financial system. Automated data collection and machine-readable regulation allow the regulator to respond faster to emerging risks. The SKIF-BP system implements SupTech functionality for state financial control.

Source: term "RegTech (regulatory technology)"

SupTech is used by regulatory and supervisory bodies: central banks, financial market regulators, tax services and state financial control bodies. For example, the Bank of Russia actively uses SupTech tools to monitor the market and collect reports. In the public sector, the SKIF-BP system implements SupTech functionality for state financial control. Read more about the approaches in the technologies section.

Source: term "RegTech (regulatory technology)"

SupTech (Supervisory Technology) is technology used by regulatory bodies to digitalize supervisory activities. These are tools for collecting data, conducting inspections, detecting violations and assessing risks. If RegTech helps companies comply with requirements, then SupTech is a tool of the regulators themselves. In Russia, SupTech is actively used by the Bank of Russia. The SKIF-BP system implements SupTech functionality for state financial control. Read more about the approaches in the technologies section.

Source: term "SupTech (supervisory technology)"

RegTech (regulatory technology) automates compliance with regulatory requirements from the side of supervised organizations — banks, insurers and other market participants. SupTech (supervisory technology) is used by the regulators themselves, for example the Bank of Russia, to collect data, conduct inspections and assess risks. Thus, RegTech works bottom-up, and SupTech works top-down. The SKIF-BP system implements RegTech and SupTech functionality for the public sector.

Source: term "SupTech (supervisory technology)"

SupTech tools include systems for automated collection and analysis of reports, remote monitoring of compliance, machine-readable regulation, stress testing and risk analysis of the entire financial system. These technologies allow regulators to detect violations faster and reduce the burden of inspections on supervised organizations. In Russia, SupTech is actively used by the Bank of Russia. Read more in the technologies section.

Source: term "SupTech (supervisory technology)"

SupTech allows regulators to reduce the costs of collecting and processing data, increase the speed of detecting violations and assess risks across the entire financial system in real time. It also reduces the administrative burden on supervised organizations, since reporting becomes automated. This makes supervision more effective and transparent. The SKIF-BP system implements SupTech functionality for state financial control.

Source: term "SupTech (supervisory technology)"

RegTech and SupTech are two terms describing the application of technology for regulatory compliance and supervision. RegTech (regulatory technology) is a tool of supervised organizations for effective compliance. SupTech (supervisory technology) is a tool of regulators for control and supervision. In Russia, both directions are actively developing, especially in the financial and public sectors. The SKIF-BP system implements RegTech and SupTech functionality. Learn more in the technologies section.

Source: term "SupTech (supervisory technology)"

FinTech (financial technology) is a broad class of technologies that improve financial services: digital banking, payment processing, investment platforms. RegTech (regulatory technology) is a subset of FinTech aimed at helping financial institutions comply with regulatory requirements. RegTech automates reporting, transaction monitoring and risk management. SupTech is the technology of regulators for control. The SKIF-BP system implements RegTech and SupTech functionality for the public sector.

Source: term "SupTech (supervisory technology)"

RegTech is used by financial institutions (banks, insurance companies) to comply with regulatory requirements, manage risks and fight financial crimes. Regulatory bodies use SupTech to control the market. In the public sector, RegTech solutions are used to automate budget accounting and procurement control — these tasks are solved by the SKIF-BP system. The design service will help implement RegTech in your organization.

Source: term "SupTech (supervisory technology)"

The Mir payment system is a Russian national payment system that provides payment operation services and issues bank cards. It was created to ensure the independence of Russia's payment infrastructure from external factors. The operator is NSPK JSC, owned by the Bank of Russia. Mir cards are used for social payments and everyday settlements. The SKIF-BP system supports interaction with NSPK.

Source: term "Mir national payment system"

The Mir payment system belongs to the state. Its operator is the National Payment Card System (NSPK) JSC. 100% of NSPK JSC shares are owned by the Central Bank of the Russian Federation. This guarantees the independence of the system from external factors and state control over the payment infrastructure. The SKIF-BP system is integrated with NSPK for budget payments.

Source: term "Mir national payment system"

The national payment system of Russia is a financial infrastructure for uninterrupted non-cash settlements. The main operator is NSPK JSC. The basis of the system is the national payment card Mir and the Fast Payment System (FPS) from the Bank of Russia, which allows instantly transferring money and paying for goods by phone number or QR code. The SKIF-BP system supports interaction with NSPK.

Source: term "Mir national payment system"

Visa is an international payment system (USA) operating worldwide. Mir is a national payment system of Russia operating within the country and in a limited number of friendly countries. Due to sanctions, Visa cards issued in Russia do not work abroad. Social payments (pensions, benefits) are transferred only to Mir cards. The SKIF-BP system supports the transfer of budget payments to Mir cards.

Source: term "Mir national payment system"

The Mir card is issued by all major Russian banks: SberBank, T-Bank, Alfa-Bank, VTB, Gazprombank, Promsvyazbank, Sovcombank, Rosselkhozbank and others — more than 150 banks in total. The full current list is available on the official website of the Mir payment system. For social payments and budget transfers, the SKIF-BP system integrated with NSPK is used.

Source: term "Mir national payment system"

The Mir national payment system is a Russian non-cash payment system that ensures the independence of the country's payment infrastructure. The operator is NSPK JSC, owned by the Bank of Russia. Mir cards are used for everyday payments, cash withdrawal and receiving social payments. The system supports contactless payment via Mir Pay and QR code transfers. The SKIF-BP system is integrated with NSPK for budget settlements.

Source: term "Mir national payment system"

The Mir payment system is a card-based national payment system: money is moved using Mir bank cards. The Fast Payment System (FPS) is a service of the Bank of Russia for instant transfers by phone number or QR code, which works without cards. Both are operated by the NSPK and complement each other in the Russian payment infrastructure. The SKIF-BP system is integrated with NSPK for budget settlements.

Source: term "Mir national payment system"

More than 300 Russian banks are connected to FPS, including all systemically significant ones: Sberbank, VTB, T-Bank, Alfa-Bank, Gazprombank, Rosselkhozbank, Sovcombank, Promsvyazbank. By law, all banks with a universal license must be connected to FPS. The full list is available on the official FPS website.

Source: term "Fast Payment System (FPS)"

Disadvantages of FPS: no cashback when paying by QR code, irrevocability of transfers (an erroneous payment cannot be cancelled), limits on free transfers (up to 100,000 rubles per month), risk of fraud (instant crediting), technical limitations (you need a smartphone with the internet). For business — the risk of human factor and the complexity of splitting payments.

Source: term "Fast Payment System (FPS)"

Via FPS you can transfer up to 100,000 rubles per month to other people without commission. If exceeded — a commission of 0.5% (maximum 1,500 rubles). Between your own accounts in different banks — up to 30,000,000 rubles per month. The maximum amount of one transfer is 1,000,000 rubles.

Source: term "Fast Payment System (FPS)"

FPS works around the clock and instantly, uses only the phone number (no need to know the card number or details) and allows making transfers without commission (up to the limit). Regular transfers require a card number or full bank details, can take from hours to days and are often subject to a commission. FPS also allows paying for goods by QR code.

Source: term "Fast Payment System (FPS)"

FPS is beneficial for individuals: instant transfers without commission up to the limit, convenience (only a phone number is needed), safety (no need to hand the card to the cashier). For business: savings on acquiring (commission 0.2–0.7% versus 2–3%), instant crediting of revenue, ease of connection (only a QR code is needed).

Source: term "Fast Payment System (FPS)"

Payment via FPS is dangerous due to the irrevocability of transfers — an erroneous payment cannot be cancelled. Fraudsters can force you to transfer money under the guise of a "safe account" or pay for goods by QR code to a personal account. The bank can suspend a suspicious transfer or block the account under Law 115-FZ. It is recommended to verify the recipient before transferring.

Source: term "Fast Payment System (FPS)"

Sber charges a commission for FPS transfers in three cases: the 100,000 ruble monthly limit is exceeded (0.5% commission), a transfer between your own accounts with different phone numbers (the system may consider the recipient another person) and a transfer from a credit card (standard cash withdrawal commission). Limits can be tracked in the mobile application.

Source: term "Fast Payment System (FPS)"

A citizen's digital profile is a set of reliable personal data of a person stored in state information systems (Ministry of Internal Affairs, FNS, Rosreestr, SFR) and combined on the basis of the Gosuslugi portal. It serves for secure and fast identity confirmation when receiving services. Instead of collecting paper certificates, you give the organization temporary access to your data through the interdepartmental electronic interaction system.

Source: term "Digital profile"

A digital profile allows the bank to automatically receive reliable data about the client from state sources. This relieves the client of the need to personally provide documents. Result: reduction of time for identification and product registration (loan, deposit, card). Banks use this information to comply with 152-FZ requirements and combat fraud.

Source: term "Digital profile"

Refusing to use a digital profile is possible: it is enough not to give consent to access your data when organizations request it. A digital profile is a voluntary service that simplifies receiving services, but is not mandatory. You can revoke previously issued consents at any time through the personal account on the Gosuslugi portal, ensuring full control over your personal data.

Source: term "Digital profile"

To create a digital profile, you need to have a confirmed account on the Gosuslugi portal. It is created automatically during registration and identity confirmation (through online banking, MFC or electronic signature). The digital profile itself does not require separate activation — it is formed automatically from data already available in state information systems. To work with the profile, an electronic signature is used to confirm consents.

Source: term "Digital profile"

The citizen's digital profile includes more than 80 types of information: passport data, SNILS, INN, driving license, information about real estate and vehicles, income and work experience data, education information, social benefits and status. Access to this data is strictly controlled and provided only with your consent through the identification and authentication system.

Source: term "Digital profile"

An organization's digital profile (CDP) is a set of current information about a company (LLC, JSC, IE), stored in state information systems and combined on the basis of the Gosuslugi infrastructure. It eliminates the need to manually collect and provide certificates, speeding up interaction with banks and government bodies. Access to the profile is carried out through the legal entity's personal account on Gosuslugi.

Source: term "Digital profile"

You can confirm income through a digital profile via the Gosuslugi portal or the taxpayer's personal account. In the "Income" section you can get a 2-NDFL certificate in electronic form, which is certified by an electronic signature and has legal force. This eliminates the need to visit the tax inspectorate. To access this data, authentication via ESIA is used.

Source: term "Digital profile"

Digital transformation of the public sector is the comprehensive introduction of digital technologies into the activities of government bodies to improve the quality of management and public services. In the Russian Federation it is implemented within the framework of the national program "Digital Economy" and the federal project "Digital Government". It covers the transfer of services to electronic form, automation of internal processes and data-driven management. Our SINTEZ-M low-code platform is used to build such solutions.

Source: term "Digital transformation of the public sector"

Digital transformation of the public sector works through five key directions: automation of internal processes, transfer of public services to electronic form, development of channels of interaction with citizens, use of data for decision-making and ensuring information security. Each direction is implemented as concrete projects with measurable indicators. The design service will help plan such projects.

Source: term "Digital transformation of the public sector"

Digital transformation of the public sector is applied at all levels of government — federal, regional and municipal. It covers public services delivered through the Gosuslugi portal, budget processes, interdepartmental electronic interaction, healthcare, education and social protection. The goal is to make services faster and more convenient for citizens and businesses.

Source: term "Digital transformation of the public sector"

Digital transformation provides tangible advantages: faster delivery of public services, reduced bureaucracy and fewer opportunities for corruption, transparency of government bodies and lower administration costs. Data-driven management allows making management decisions based on analysis of large volumes of data. This improves the quality of interaction between the state, citizens and businesses.

Source: term "Digital transformation of the public sector"

The requirements for digital transformation are set by the national program "Digital Economy" and the federal project "Digital Government". Each government body must appoint a digital transformation leader (CDO), achieve target indicators of digital maturity and transfer priority services to electronic form. The mandatory use of domestic software also applies within the framework of import substitution. Our SINTEZ-M platform helps meet these requirements.

Source: term "Digital transformation of the public sector"

Digital transformation in business is aimed at increasing profit and competitiveness, while in the public sector it is aimed at the quality and accessibility of public services for citizens. Public sector projects are more strictly regulated: they are carried out within national programs, require the achievement of target indicators of digital maturity and are subject to import substitution requirements. They also place higher demands on information security.

Source: term "Digital transformation of the public sector"

Implementation begins with an assessment of the current level of digital maturity and the appointment of a digital transformation leader (CDO). A roadmap is then developed: priority services are transferred to electronic form, internal processes are automated and a data management system is introduced. Employee training and information security are also important elements. The design service will help plan the implementation.

Source: term "Digital transformation of the public sector"

Payment orders, letters of credit, collection (incasso), checks and payments via the FPS. RBS systems are used by business.

Source: term "Non-cash payment"

In cash settlement money is transferred physically. In non-cash settlement funds are transferred between bank accounts. Non-cash is more transparent and controlled.

Source: term "Non-cash payment"

A payment order, invoice, works acceptance certificate or delivery note. An electronic receipt is issued for FPS payments.

Source: term "Non-cash payment"

All settlements pass through Federal Treasury accounts. The Electronic Budget GIS and treasury support are used.

Source: term "Non-cash payment"

In the Fast Payment System the transfer is instant by phone or QR code, with no commission up to a limit.

Source: term "Non-cash payment"

Using CIPF, multi-factor authentication, fraud monitoring and staff training.

Source: term "Non-cash payment"

Simplified tax accounting, reduced risks, automated settlements and faster transactions via RBS systems.

Source: term "Non-cash payment"

RBS (remote banking services) is the ability to manage accounts without visiting a branch via internet banking, a mobile app or SMS, including transfers via the FPS.

Source: term "Remote banking services (RBS)"

Transfers, payment for goods and services, opening deposits, obtaining loans, currency exchange, card blocking. Payroll projects for business.

Source: term "Remote banking services (RBS)"

Modern RBS uses multi-factor authentication, TLS encryption and fraud monitoring. CIPF is used for legally significant operations.

Source: term "Remote banking services (RBS)"

Open an account, sign an RBS contract, obtain electronic signature keys and install a client-bank.

Source: term "Remote banking services (RBS)"

In some banks RBS denotes the Bank Service Agreement — the basic document regulating all terms of cooperation with the bank.

Source: term "Remote banking services (RBS)"

Biometric authentication, artificial intelligence, open APIs, the digital ruble, chatbots.

Source: term "Remote banking services (RBS)"

Certified CIPF, integration with ESIA, SMEV, Electronic Budget, and compliance with 187-FZ for CII.

Source: term "Remote banking services (RBS)"

KYC is a procedure in which a bank verifies who you are and where your money comes from. OCR recognition and biometric identification are used.

Source: term "Know Your Customer (KYC)"

A passport, INN, SNILS and address confirmation. For legal entities — constituent documents and beneficiary data.

Source: term "Know Your Customer (KYC)"

Basic KYC takes 5-15 minutes. Standard verification 1-3 business days. Enhanced (EDD) up to 2 weeks.

Source: term "Know Your Customer (KYC)"

You will not be able to open an account or use financial services. The bank may block an existing account.

Source: term "Know Your Customer (KYC)"

KYC is client identification. AML is a broader system that includes KYC, transaction monitoring and interaction with regulators (115-FZ).

Source: term "Know Your Customer (KYC)"

OCR, MRZ recognition and biometric identification reduce the procedure to 5-15 minutes.

Source: term "Know Your Customer (KYC)"

Stricter requirements, remote identification via ESIA and biometrics, AI-based risk assessment systems.

Source: term "Know Your Customer (KYC)"

Banking secrecy is a legal obligation of banks and other financial organizations to keep secret all information about their clients: their personal data, account status, amounts and recipients of transfers. This protects your finances and personal life from prying eyes.

Source: term "Banking secrecy"

Banking secrecy includes the client's passport data, information about accounts and deposits (their numbers, opening dates, currency), balances, details of all operations (transfers, withdrawals, deposits), as well as information about income and assets if it became known to the bank. The bank is not entitled to disclose these data without the client's consent.

Source: term "Banking secrecy"

The bank is obliged to disclose information about a client only upon an official request from authorized state bodies: courts, the tax service, bailiffs, the police, customs and some others. Data are also transferred to credit history bureaus to form a credit rating. In all other cases, disclosure of information is illegal.

Source: term "Banking secrecy"

Banking secrecy protects information about the bank's clients, while commercial secrecy protects the company's own secrets (technologies, strategies, client bases). Banking secrecy is strictly established by law, while a company determines commercial secrecy itself. At the same time, the bank uses both regimes simultaneously: banking secrecy for depositor data, commercial secrecy for its own internal developments.

Source: term "Banking secrecy"

Serious liability, up to criminal liability under Article 183 of the Criminal Code of the Russian Federation, is provided for disclosing banking secrecy. This can be a fine of up to 500,000 rubles, corrective labor or imprisonment for up to two years. The guilty parties can also be held to disciplinary, civil or administrative liability.

Source: term "Banking secrecy"

Not only the banks themselves, but also audit organizations, the Central Bank of the Russian Federation, deposit insurance organizations, as well as their employees are obliged to maintain banking secrecy. They must keep secret information about the operations, accounts and deposits of clients and correspondents.

Source: term "Banking secrecy"

Banking secrecy is protected at the level of laws — the Civil Code of the Russian Federation (Art. 857) and the Law "On Banks and Banking Activity" (Art. 26). These acts determine which information is secret, to whom it can be disclosed, and what liability violators bear. In the event of a data leak, the client can demand compensation through court.

For additional protection of confidential information in electronic document workflow, our solutions — SINTeZ-M and SKIF-BP — provide reliable encryption and access control.

Source: term "Banking secrecy"

Cyber fraud is deception on the internet when attackers use digital technologies to steal your money or personal data. They can call you on behalf of the bank, create a fake website or hack a friend's account on social networks. The main goal is to make you voluntarily transfer money or disclose passwords. Read more about how protection systems work in the article on fraud monitoring.

Source: term "Cyber fraud"

The most frequent schemes: calls from the "bank security service" demanding a transfer of money to a "safe account", phishing (fake websites of banks and stores), hijacking accounts on social networks to ask for money, investment scams with a guaranteed income, and deepfakes — faking the voice or video of relatives/management with a request for an urgent transfer. Learn how to recognize these schemes in our information security section.

Source: term "Cyber fraud"

Fraudsters use pressure and urgency: "your money is being stolen", "take out a loan to transfer it to a safe account". They demand immediate action and do not give time to think or consult. Real bank and state employees never request SMS codes, the card CVV code or ask to transfer money to other accounts. SINTeZ-M — our solution for secure document workflow — will help protect your data.

Source: term "Cyber fraud"

Immediately block the card through the mobile application or the bank hotline. Collect all evidence: screenshots of correspondence, transfer receipts, links to websites. Contact the police with a fraud report. Also file a chargeback (payment return) application with your bank if the payment was made by card. A more detailed instruction is in the Questions and answers section.

Source: term "Cyber fraud"

Criminal liability for cyber fraud in Russia is provided under Article 159.6 of the Criminal Code of the Russian Federation. For damage up to 250,000 rubles — up to 3 years of imprisonment. For major damage (from 250,000 rubles) — up to 5 years. For especially large scale (from 1 million rubles) or by an organized group — up to 10 years of imprisonment. The criminals are also obliged to compensate the damage to the victims. Read more about the legal aspects in the article on electronic signature.

Source: term "Cyber fraud"

Use strong passwords and enable two-factor authentication (2FA) for all accounts. Never disclose SMS codes and the card CVV code to anyone. Check website addresses before entering data. If someone calls from a "bank" — hang up and call back on the official number. Regularly check your credit history through Gosuslugi to notice foreign loans.

For additional protection of your data in electronic document workflow, use SINTeZ-M and SKIF-BP — they provide reliable encryption and secure document transfer.

Source: term "Cyber fraud"

If you paid for goods but the seller disappeared, contact your bank with a request for payment return (chargeback). Also file a report with the police and file a complaint about the fraudulent website with Roskomnadzor so that it is blocked. Leave a review on themed forums — this will help other users avoid falling for the scheme. About how to protect your business from fraudsters, read the article on attestation testing.

Source: term "Cyber fraud"

Fraud is any type of deception committed on the internet. It can be the theft of money from a bank card, a fake website that extracts passwords, or click inflation in advertising by bots. The main goal of fraud is to deceive the system and obtain illegal benefit. Anti-fraud systems are used for protection, as described in detail in the article Fraud monitoring.

Source: term "Fraud"

The main types of fraud: banking (theft of money from cards, phishing), advertising (click inflation by bots), e-commerce (purchases on stolen cards, multi-accounting), corporate (employee fraud) and cryptocurrency (scam projects, phishing wallets). About protection from corporate fraud, read the article DLP systems.

Source: term "Fraud"

Fraud and scam are practically synonyms. Both terms mean fraud. The difference is that fraud is more often used in the banking sphere and corporate security, while scam is used in the internet space (phishing sites, fake investment projects, fake lotteries). In essence, scam is one of the types of fraud.

Source: term "Fraud"

Anti-fraud systems analyze user behavior in real time. They check geolocation, the device, typing speed, transaction history. If the system notices something unusual — for example, logging in from a new device at 3 a.m. — the operation is blocked. Read more about the operating principles in the article Fraud monitoring.

Source: term "Fraud"

Criminal liability for fraud in Russia is provided under Article 159 of the Criminal Code of the Russian Federation. If the damage is up to 2,500 rubles, it is an administrative violation. From 2,500 rubles — up to 2 years of imprisonment. From 250,000 rubles — up to 5 years. From 1,000,000 rubles — up to 10 years. For cyber fraud, Article 159.6 of the Criminal Code applies.

Source: term "Fraud"

An integrated approach is required to protect a business from fraud: implementing anti-fraud systems, training employees in cybersecurity rules, using multi-factor authentication and data encryption. Regular information security audit will help identify vulnerabilities before fraudsters use them. For secure document workflow, use SINTeZ-M, and for data encryption — SKIF-BP.

Source: term "Fraud"

Ad fraud is the inflation of advertising impressions and clicks using bots. The advertiser pays for non-existent users, and the budget is wasted. Signs of ad fraud: abnormal traffic spikes at night, high CTR with zero sales, identical IP addresses. Anti-fraud systems that filter out bots help combat this.

Source: term "Fraud"

Fraud monitoring is a system that monitors your financial operations and blocks suspicious transactions. For example, if you usually buy groceries in a supermarket, and the system sees an attempt to withdraw a large amount in another country — the operation is blocked. This protects your money from fraudsters. Read more about types of fraud in the article Fraud.

Source: term "Fraud monitoring"

The system analyzes hundreds of parameters: geolocation, device, operation time, transaction history. First it creates a digital profile of your usual behavior. If something unusual happens — for example, a login from a new device at night — the operation is blocked or sent for confirmation. About how systems use machine learning, read the article Machine learning.

Source: term "Fraud monitoring"

Fraud monitoring protects business from financial losses, increases client trust and helps comply with the requirements of regulators, including 152-FZ. The system automatically blocks fraudulent operations, reducing the load on the security service and minimizing losses.

Source: term "Fraud monitoring"

A fraud monitoring specialist analyzes suspicious operations, configures system rules, develops risk models and investigates incidents. He works with big data, uses machine learning and interacts with other departments — the security service, the legal department and IT. About the profession of a security specialist, read the article SOC.

Source: term "Fraud monitoring"

An antivirus protects your device from malicious programs, while fraud monitoring protects your financial operations from fraudsters. The antivirus works on the local device, fraud monitoring — on the servers of the bank or payment system. Together they provide comprehensive protection: the antivirus from viruses, fraud monitoring from financial losses.

Source: term "Fraud monitoring"

When choosing a system, pay attention to scalability, analysis speed, the use of AI and ML, the possibility of integration with the existing infrastructure and the availability of detailed reporting. The optimal solution depends on the volume of transactions and the specifics of your business. To select a solution, contact experts — for example, conduct an information security audit.

Source: term "Fraud monitoring"

Such cases are rare but possible. If an operation is blocked, you will receive a notification. You can confirm the operation by responding to the SMS or a call from the bank, or contact the support service. Modern systems based on machine learning constantly reduce the number of false positives. About how such systems work, read the article Artificial intelligence.

Source: term "Fraud monitoring"

Bitcoin is digital money that is not controlled by banks and states. It exists only on the internet, and its quantity is strictly limited — only 21 million coins. Bitcoin allows you to transfer money to anyone and anywhere without intermediaries, fees and account freezes. Read more about blockchain technology in the article Cryptocurrency.

Source: term "Bitcoin"

The bitcoin exchange rate constantly changes. Today 1 BTC costs approximately $59,000–$60,500 (about 4,650,000–4,750,000 rubles). You can see the exact figure for the current moment on exchanges like Binance or Kraken, as well as on aggregators like CoinMarketCap. The price depends on supply and demand on the market.

Source: term "Bitcoin"

You can buy bitcoin in Russia in several ways: through crypto exchanges (Bybit, OKX), P2P platforms (transactions between users), online exchangers or offline offices. To buy, you will need a bank card or cash. About how to secure your crypto assets, read the article CIPF.

Source: term "Bitcoin"

Yes, bitcoins can be exchanged for rubles, dollars or euros. For this, use crypto exchanges (Binance, Bybit), P2P platforms or online exchangers. The fastest way is P2P trading, where you sell bitcoin directly to another person and receive money on a bank card.

Source: term "Bitcoin"

For 1000 rubles you can buy approximately 0.00021–0.00022 BTC, since 1 bitcoin costs about 4.6–4.7 million rubles. The exact amount depends on the current exchange rate. To buy such a small amount, it is convenient to use P2P platforms or online exchangers that work with small transactions.

Source: term "Bitcoin"

Bitcoin can crash due to strict regulation, network vulnerabilities or mass selling by large investors. However, complete devaluation is unlikely, since bitcoin has a strong community and institutional investors. In the event of a market collapse, many investors use the dollar-cost averaging (DCA) strategy, buying the asset on the decline. Read about investment strategies in the article Cryptocurrency.

Source: term "Bitcoin"

Elon Musk does not publicly disclose the exact amount of his personal crypto assets. However, his companies hold significant reserves: Tesla — about 11,509 BTC, SpaceX — about 8,285 BTC. Also, according to his father, Elon and his brother Kimbal may own about 23,400 BTC together. The current status of corporate reserves can be tracked on the Bitcoin Treasuries platform.

Source: term "Bitcoin"

Cryptocurrency is digital money that is not controlled by banks and states. It exists only on the internet, is protected by cryptography and often has a limited quantity. Bitcoin is the most famous cryptocurrency, but there are thousands of others: Ethereum, Tether, Solana. Read more about bitcoin in the article Bitcoin.

Source: term "Cryptocurrency"

Cryptocurrencies are divided into several types: coins (Bitcoin, Ethereum), altcoins (Solana, Cardano), stablecoins (USDT, USDC, pegged to the dollar) and tokens (utility or unique NFTs). Each type performs its own function. About how tokens differ from coins, read the article Token.

Source: term "Cryptocurrency"

Yes, you can really earn real money on cryptocurrency, but it is a high-risk market. Ways to earn: long-term investing (HODL), active trading, staking (passive income) and participation in new projects (AirDrop). The return is directly proportional to the risks — you can both multiply your capital and lose it completely. About investment strategies, read the article Fintech.

Source: term "Cryptocurrency"

The most popular cryptocurrencies by capitalization: Bitcoin (BTC) — the first and most famous, Ethereum (ETH) — a platform for smart contracts, Tether (USDT) — the most popular stablecoin pegged to the dollar. The top also includes Solana (SOL), Binance Coin (BNB) and XRP. Read more about bitcoin in the article Bitcoin.

Source: term "Cryptocurrency"

You can buy cryptocurrency in Russia through crypto exchanges (Bybit, OKX), P2P platforms (transactions between users), online exchangers or offline offices. To buy, you will need a bank card. Please note: cryptocurrency cannot be used as a means of payment within the country; the ruble remains the only legal tender.

Source: term "Cryptocurrency"

The safest way to store large amounts of cryptocurrency is cold wallets — hardware devices (Ledger, Trezor) that store keys offline. For small amounts and active trading, hot wallets on exchanges are suitable, but they are less secure. Never store recovery phrases and private keys online or share them with third parties.

Source: term "Cryptocurrency"

A coin is a base asset with its own independent blockchain (Bitcoin, Ethereum). A token is created on top of an existing blockchain, most often Ethereum, and can perform various functions: access to platform services (utility tokens), representation of shares in real assets (security tokens) or confirmation of ownership rights (NFT).

Source: term "Cryptocurrency"

A token is a digital unit created on the basis of an existing blockchain. It is like special coupons or tickets inside a project's ecosystem. Tokens can be a currency, shares, access keys or confirmation of ownership. Unlike coins (Bitcoin, Ethereum), tokens do not have their own blockchain. Read about what cryptocurrency is in the article Cryptocurrency.

Source: term "Token"

A coin (Bitcoin, Ethereum) has its own blockchain and is used to pay fees in its network. A token does not have its own blockchain and is created on the basis of someone else's (for example, on Ethereum). In simple terms: a coin is your own currency in your own country, a token is special coupons inside that country. Read about bitcoin in the article Bitcoin.

Source: term "Token"

The main types: utility tokens (give access to services), security tokens (digital shares), governance tokens (vote rights), NFT (unique tokens for art or collectibles) and stablecoins (pegged to the dollar). Each type performs its own function. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Token"

The cost of a token depends on its type and market situation. Stablecoins (USDT, USDC) always cost about $1. Utility and governance tokens can cost from fractions of a cent to thousands of dollars — their price is determined by supply and demand on the market. The rate of a specific token can be seen on exchanges like Binance or CoinGecko.

Source: term "Token"

You can create a token without programming in a few minutes through special generator platforms (CreateMyToken, Smithii). You need to connect a crypto wallet (MetaMask), pay the network fee and fill in the name, ticker and number of tokens. For complex tokens with additional functions, a smart contract programmer is required. Read about creating crypto projects in the article Cryptocurrency.

Source: term "Token"

NFT (Non-Fungible Token) is a unique token that cannot be exchanged for another one-to-one. Regular tokens (USDT, UNI) are fungible — one dollar equals another dollar. NFTs are unique — each unit has its own characteristics and value. NFTs are used to confirm ownership of digital art, collectible items and game items.

Source: term "Token"

Buying tokens involves high risks. Many tokens are fraudulent projects (scams) that can disappear with investors' money. Even legitimate tokens can fall sharply in price due to market volatility. Invest only those funds whose loss will not be critical for you, and thoroughly study projects before buying. Read about protection from fraudsters in the article Fraud.

Source: term "Token"

Cryptanalysis is the science of how to break ciphers without a key. If cryptography creates locks to protect data, then cryptanalysis tries to find master keys for them. Cryptanalysts look for vulnerabilities in encryption algorithms to make security systems more reliable. Read about how encryption works in the article Data encryption.

Source: term "Cryptanalysis"

Cryptography is the science of protecting data with encryption. Cryptanalysis is the science of breaking ciphers. They are like two sides of the same coin: cryptographers create locks, cryptanalysts check how reliable they are. Without cryptanalysis, cryptography could not develop — knowing vulnerabilities allows fixing them. Read about data protection methods in the article Cryptographic information protection.

Source: term "Cryptanalysis"

The main methods: ciphertext-only attack (there is only encrypted data), known-plaintext attack (there are plaintext-encrypted pairs), chosen-plaintext attack (you can encrypt your own data), linear and differential cryptanalysis (statistical methods for block ciphers). Each method is suitable for different types of ciphers. Read about how algorithms work in the article Data encryption.

Source: term "Cryptanalysis"

Cryptanalysts are specialists who break ciphers and look for vulnerabilities in security systems. They work in cybersecurity companies, government agencies and research centers. Read about professions in IT security in the article Information security.

Source: term "Cryptanalysis"

Modern ciphers (AES-256, RSA-2048) are considered cryptographically strong — they cannot be broken in a reasonable time even using the most powerful computers. However, theoretical vulnerabilities may exist, and cryptanalysts constantly look for them. The emergence of quantum computers could change the situation — they are capable of breaking RSA and ECC in a few hours. Read about cryptographic strength in the article Data encryption.

Source: term "Cryptanalysis"

Linear cryptanalysis is a method of breaking block ciphers based on finding linear dependencies between input and output data. The analyst builds mathematical approximations that relate plaintext, ciphertext and key with high probability. It is especially effective against the DES cipher. This method was developed in 1993 by Japanese cryptographer Mitsuru Matsui. Read about block ciphers in the article Data encryption.

Source: term "Cryptanalysis"

The foundations of cryptanalysis were laid by the Arab mathematician Al-Kindi in the 9th century. He invented the method of frequency analysis — counting the frequency of letters in a text for decryption. This method remained the main way of breaking ciphers for a thousand years until more complex encryption algorithms appeared. Read about the history of cryptography in the article Electronic signature.

Source: term "Cryptanalysis"

A key pair is two keys: a public and a private one. The public key can be given to everyone — messages for you are encrypted with it. The private key is kept secret — you decrypt messages and sign documents with it. It is like a mailbox: the public key is the address of the box, the private key is your personal key to it. Read about how encryption works in the article Data encryption.

Source: term "Key pair"

The public key can be freely distributed — data is encrypted with it. The private key must be kept secret — data is decrypted and digital signatures are created with it. Losing the private key means losing access to all protected information. Read about key storage in the article Certification authority.

Source: term "Key pair"

A key pair is used in electronic signatures for confirming documents, in SSL/TLS for secure websites (HTTPS), in SSH for secure access to servers and in cryptocurrencies for confirming transactions. It is the foundation of all modern digital security. Read about its application in documents in the article Electronic signature.

Source: term "Key pair"

A key pair can be created using specialized software (OpenSSL, CryptoPro CSP) or through a certification authority when obtaining an electronic signature. Generation algorithms: RSA, ECC, GOST R 34.10. To protect it, the private key is written to a secure medium (token) and protected with a PIN code. Read about creating keys in the article Cryptographic information protection.

Source: term "Key pair"

Losing the private key means losing access to all information encrypted with it and the inability to create digital signatures. The private key cannot be recovered — it needs to be reissued through a certification authority. Therefore, private keys are stored on secure media and backup copies are made. Read about key protection in the article Certification authority.

Source: term "Key pair"

Rutoken is a physical medium (token) for storing the key pair of an electronic signature. The private key is stored on the token and never leaves it, which ensures maximum security. Using the key requires entering a PIN code. Rutoken is used for signing documents, reporting and participating in procurement. Read about electronic signatures in the article Electronic signature.

Source: term "Key pair"

Storing the private key on a computer is not recommended due to the risk of infection with viruses and malware that can steal the key. To store private keys, secure hardware media are used — tokens (Rutoken, eToken) or smart cards. They isolate the key from the operating system and require physical access to use. Read about data security in the article Digital footprint.

Source: term "Key pair"

The most reliable way to store cryptocurrency is hardware (cold) wallets — Ledger and Trezor. They store private keys offline, isolating your assets from hackers, viruses and phishing sites. For long-term storage of large amounts this is the best choice. However, even a hardware wallet will not protect you from losing the seed phrase, so keep it in a reliable place.

Source: term "Crypto wallet"

For beginners and regular transfers — Trust Wallet (mobile) or MetaMask (browser extension). For maximum security of large amounts — hardware devices Ledger or Trezor. For active trading — wallets on Bybit or OKX exchanges. The choice depends on your goals and the volume of operations. Read about working with cryptocurrencies in the article Cryptocurrency.

Source: term "Crypto wallet"

You can withdraw money through P2P platforms (Binance P2P, Bybit P2P), online exchangers (BestChange) or cryptocurrency exchanges with a card withdrawal function. The most popular way is P2P trading, where you sell cryptocurrency to another user, and he transfers rubles to your card via SBP or bank transfer. Read about withdrawal methods in the article Payment gateway.

Source: term "Crypto wallet"

Opening a software wallet (Trust Wallet, MetaMask) is completely free. Hardware wallets (Ledger, Trezor) cost from $60 to $150 depending on the model. Exchange wallets are also free, but exchanges charge a fee for withdrawing funds and may charge for inactivity. Read about fees in the article Cryptocurrency.

Source: term "Crypto wallet"

Yes, you can, and it happens more often than you think. If a user loses the physical device (cold wallet) and has not saved a backup of the seed phrase (a sequence of 12 or 24 words for recovery), access to the cryptocurrency is lost forever. You can also lose funds if the seed phrase is compromised (stolen, photographed, entered on a phishing site). Therefore, it is important to store the seed phrase in a reliable place separate from the wallet.

Source: term "Crypto wallet"

A non-custodial wallet is a wallet where you fully control your private keys. Only you have access to the funds, and no one can block or freeze them. Examples: Trust Wallet, MetaMask. A custodial wallet is a wallet on an exchange or with a third-party service, where the keys are stored by the provider. You trust your funds to a third party that can restrict access or be hacked. For long-term storage, non-custodial wallets are recommended.

Source: term "Crypto wallet"

Main protection measures: use a hardware wallet for large amounts, never store the seed phrase in digital form (only on paper in a safe), enable two-factor authentication (2FA) for all exchange accounts, use antivirus software on devices, check recipient addresses before sending a transaction (especially when copy-pasting, as there are viruses that substitute addresses). Read about the security of crypto assets in the article Information security.

Source: term "Crypto wallet"

A smart contract is a self-executing program in the blockchain that automatically fulfills the terms of a deal. It is like a digital vending machine: if the condition is met (for example, you transferred money), the contract automatically executes the action (transfers the goods or service). Without intermediaries and bureaucracy. Read about blockchain technology in the article Blockchain.

Source: term "Smart contract"

To create a smart contract, you need to choose a blockchain (for example, Ethereum), write code in Solidity (or another language for the chosen blockchain), compile it and deploy it in the network. For simple contracts, the online environment Remix IDE is used. You need to pay a network fee (gas) for publishing the contract. Read about development in the article Open source software.

Source: term "Smart contract"

A regular address in the blockchain is just a wallet for storing and sending funds, controlled by a private key. A smart contract is a program that is stored at its own address and can automatically perform actions upon receiving a transaction. A smart contract has its own address, like a wallet, but it is controlled by code, not by a person. Read about working with wallets in the article Crypto wallet.

Source: term "Smart contract"

No, after deployment in the blockchain, a smart contract cannot be canceled or changed (unless the developer provided an update mechanism in advance). This is one of the key properties of the blockchain — immutability. Therefore, before publishing a contract, its code must be carefully checked, tested and undergo a security audit. Read about security risks in the article Information security incident.

Source: term "Smart contract"

Currently, Ethereum is the most popular and mature platform for smart contracts. Binance Smart Chain (BSC), Solana, Tron, Polygon, Avalanche and other blockchains are also actively used. The choice depends on fees (gas), transaction speed, available development tools and the required functionality. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Smart contract"

A smart contract audit is a check of its code for vulnerabilities, errors and logical problems by professional companies (CertiK, Hacken, Trail of Bits, OpenZeppelin). An audit is necessary to identify potential problems before deploying the contract, in order to avoid the theft of funds or incorrect operation. Without an audit, using a smart contract is extremely risky.

Source: term "Smart contract"

Gas is a unit of measurement of the computing resources needed to perform an operation in a smart contract. Each operation (read, write, computation) requires a certain amount of gas. Users pay for gas in the cryptocurrency of the network (for example, ETH in Ethereum). The cost of gas depends on the complexity of the operation and the load of the network. Under high load, fees can increase significantly.

Source: term "Smart contract"

DeFi is a financial system that works without banks and intermediaries. All operations (loans, deposits, currency exchange) are performed automatically using smart contracts in the blockchain. You fully control your money through private keys. Read about blockchain technology in the article Blockchain.

Source: term "Decentralized finance (DeFi)"

The main directions of DeFi: decentralized exchanges (DEX) for exchanging cryptocurrencies, crypto lending for issuing and receiving loans, staking and yield farming for receiving rewards for locking assets, as well as stablecoins for stable payments. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Decentralized finance (DeFi)"

DeFi is associated with high risks. For beginners, it is safer to start with well-known and tested protocols (Aave, Uniswap, Compound), use small amounts and carefully study the fees. It is also important to keep funds in a reliable non-custodial wallet. Read about security in the article Information security incident.

Source: term "Decentralized finance (DeFi)"

In traditional banks, your money is stored in accounts controlled by the bank. The bank can freeze the account, restrict operations or charge fees. In DeFi, you fully control your funds through private keys. There are no intermediaries, no bureaucracy, but also no deposit insurance and support service. Read about the comparison in the article Blockchain.

Source: term "Decentralized finance (DeFi)"

The most popular DeFi protocols: Uniswap and PancakeSwap (decentralized exchanges), Aave and Compound (lending), Lido (staking), MakerDAO (issuance of the DAI stablecoin). The choice of platform depends on the network (Ethereum, BSC, Solana, Polygon) and your goals. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Decentralized finance (DeFi)"

Impermanent loss is a temporary loss of value when providing liquidity to DEX pools. It arises when the price of one of the tokens in the pair changes compared to the moment of depositing funds. Losses become permanent (realized) only when funds are withdrawn from the pool. The more the price has changed, the greater the loss. This risk is especially relevant in high market volatility.

Source: term "Decentralized finance (DeFi)"

In Russia, DeFi protocols are formally not prohibited, but they do not have a clear legal status. According to Federal Law 259-FZ “On Digital Financial Assets”, cryptocurrencies are recognized as property, but their use for settlements is limited. DeFi platforms are not regulated by the Bank of Russia. It is recommended to monitor changes in legislation and consult lawyers on taxation issues.

Source: term "Decentralized finance (DeFi)"

A cryptographic protocol is a set of rules by which computers securely exchange data. It defines how to encrypt information, verify each other and make sure that the data was not forged. It is like a secret language on which two parties agree. Examples: HTTPS (TLS), SSH, VPN (IPsec). Read about encryption in the article Data encryption.

Source: term "Cryptographic protocol"

The most popular cryptographic protocols: TLS/SSL (protection of websites and HTTPS), SSH (remote server management), IPsec (VPN), PGP/GPG (email encryption), Kerberos (authentication in corporate networks). Each solves its own security tasks. Read about connection protection in the article VPN.

Source: term "Cryptographic protocol"

TLS (Transport Layer Security) is a cryptographic protocol that ensures secure data transmission on the internet. It is used in HTTPS (the padlock in the browser), protects email, messengers and other applications. TLS replaced the outdated SSL. The modern version is TLS 1.3 (2018), which is significantly faster and more secure than previous versions. Read about connection security in the article Data encryption.

Source: term "Cryptographic protocol"

Encryption is a mathematical algorithm for transforming data (for example, AES, RSA). A protocol is a set of rules that determine how to use these algorithms, when and in what sequence. The protocol manages the process, encryption is a tool inside this process. For example, TLS is a protocol that uses AES algorithms for encryption and RSA for key exchange. Read about keys in the article Key pair.

Source: term "Cryptographic protocol"

This is a protocol that ensures the security of data transmission over the network. It protects information from interception, forgery and unauthorized access. Examples: TLS, SSH, IPsec. Cryptographic network protocols are used in corporate networks, the internet, mobile communications and secure government systems. Read about network protection in the article Firewall.

Source: term "Cryptographic protocol"

The main threats: man-in-the-middle attack (MITM), cryptanalysis (breaking the algorithm), implementation attack (errors in code), social engineering and side-channel attack (execution time analysis). For protection, regular software updates, use of certificates, multi-factor authentication and employee training are used. Read about protection from threats in the article Information security.

Source: term "Cryptographic protocol"

In Russian government systems (for example, Electronic Budget, SMIV), cryptographic protocols with support for domestic cryptographic information protection (for example, GOST 28147-89, GOST R 34.10-2012) are used. This ensures data protection in accordance with the requirements of 152-FZ and 187-FZ. TLS protocols with Russian cryptography are used, as well as specialized protocols for secure interagency interaction.

Source: term "Cryptographic protocol"

Hashing is the conversion of data into a unique string of fixed length (a hash). It is like a digital fingerprint: even a minimal change in the data completely changes the hash. It is impossible to restore the data from the hash back. Read about encryption in the article Data encryption.

Source: term "Hashing"

Encryption is reversible — data can be decrypted with a key. Hashing is irreversible — the original data cannot be restored from a hash. Encryption hides data, hashing verifies integrity. A key is needed for encryption, but not for hashing. Read about encryption in the article Data encryption.

Source: term "Hashing"

For general purposes — SHA-256 and SHA-3. For storing passwords — bcrypt, Argon2 or scrypt. They are specially slow, which protects against password guessing. MD5 and SHA-1 are considered outdated and insecure. Read about security in the article Information security.

Source: term "Hashing"

In the blockchain, each block contains the hash of the previous block. This links the blocks into a chain and makes the system immutable — if you change one block, all subsequent hashes will change, and the network will notice the forgery. Hashing is also used in mining. Read about the blockchain in the article Blockchain.

Source: term "Hashing"

Hashing is not encryption; it has no key and no inverse function. We do not “hide” the data, but compress it to a fixed length, losing part of the information. Therefore, it is impossible to restore the original data from just one hash. Read about encryption in the article Data encryption.

Source: term "Hashing"

Blockchain is a digital database that stores information in the form of a chain of blocks. It has no central server — copies are stored by thousands of participants. Data cannot be changed or deleted retroactively. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Blockchain"

Transactions are collected into a block, the block receives a unique digital fingerprint (a hash) and is linked to the previous block. Thousands of computers verify the correctness of the block and add it to the chain. After that it is impossible to change it. Read about hashing in the article Hashing.

Source: term "Blockchain"

Blockchain is a technology (a database), while cryptocurrency is one of the ways to use it. Like the internet and email: the internet is a technology, email is an application. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Blockchain"

Public (open to everyone), private (restricted), consortium (managed by a group of organizations) and hybrid (combines features of different types). The choice depends on the tasks: public for cryptocurrencies, private for corporate systems. Read about choosing an architecture in the article Client-server architecture.

Source: term "Blockchain"

Scalability — public blockchains process few transactions per second (Bitcoin — ~7). Also high energy consumption during mining. To solve these problems, new solutions are being developed (Layer 2, Proof of Stake). Read about scaling in the article Server cluster. To study related concepts we also recommend familiarizing yourself with Blockchain fork and Cryptanalysis.

Source: term "Blockchain"

A payment gateway is an intermediary between an online store and a bank. It accepts card data, encrypts it, transmits it to the bank for processing and returns the answer. Without it, online payment would be impossible. Read about payments in the article Cashless payments.

Source: term "Payment gateway"

The client enters card data → the gateway encrypts the data and sends it to the bank → the bank checks the availability of funds and conducts an anti-fraud check → returns the answer → the gateway passes the answer to the store → the client sees the result. The whole process takes a few seconds. Read about security in the article PCI DSS.

Source: term "Payment gateway"

YooKassa (Yandex.Kassa), Robokassa, CloudPayments, PayU, Sberbank acquiring. The choice depends on the volume of payments, payment methods, the commission and the required level of integration. Read about choosing in the article Fintech.

Source: term "Payment gateway"

A payment gateway is a specialized service for processing payments. An API gateway is a common “gatekeeper” for all requests to microservices. A payment gateway can be considered as one of the services that hides behind an API gateway. Read about API gateways in the article API gateway.

Source: term "Payment gateway"

Usually 1.5-4% of the transaction amount plus a fixed fee (for example, 5-10 rubles). Aggregators have higher commissions, but easier connection. With direct integration with a bank the commissions are lower, but integration is more complex. Read about commissions in the article Cashless payments.

Source: term "Payment gateway"

Mining is the extraction of cryptocurrency using computers. Computers solve complex mathematical problems, and whoever finds the answer first receives a reward in the form of coins. It is like a digital gold mine. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Mining"

Profitability depends on the cryptocurrency rate, network difficulty, the cost of electricity and the power of the equipment. For an accurate calculation use mining calculators. On average, the payback period of an ASIC miner is 12-24 months. Read about profitability in the article Bitcoin.

Source: term "Mining"

Mining in Russia is legal, but requires compliance with rules: registration in the registry for individual entrepreneurs and legal entities, payment of taxes and declaration. For violations — fines up to 2 million rubles with confiscation of equipment and criminal liability up to 5 years. Read about the law in the article Cryptocurrency.

Source: term "Mining"

The choice depends on the rate and difficulty. The most popular are Bitcoin (requires ASIC), as well as altcoins on graphics cards. Follow the news and use calculators to calculate profitability. Read about choosing in the article Cryptocurrency.

Source: term "Mining"

Yes, but there are nuances: high energy consumption, noise, heating and restrictions on the electrical grid. For home mining, graphics cards or small ASICs are suitable. But keep in mind — the payback may be lower due to high electricity tariffs. Read about legality in the article Cryptocurrency.

Source: term "Mining"

A fork is the division of the blockchain into two independent branches. Like a fork in the road: one group follows the new rules, another remains on the old ones. As a result, two different cryptocurrencies may appear. Read about the blockchain in the article Blockchain.

Source: term "Blockchain fork"

A hard fork is an incompatible change that creates a new cryptocurrency. The old version does not accept blocks from the new one. A soft fork is a backward-compatible update. The new version is stricter, but blocks from the old version are still accepted. A soft fork does not create a new currency. Read about cryptocurrencies in the article Cryptocurrency.

Source: term "Blockchain fork"

Bitcoin → Bitcoin Cash (2017, increase of the block size), Ethereum → Ethereum Classic (2016, return of stolen funds), Bitcoin → Bitcoin Gold (2017, change of the mining algorithm). These are only the most famous examples. Read about Bitcoin in the article Bitcoin.

Source: term "Blockchain fork"

For updating the protocol (adding functions, improving security), resolving conflicts in the community, experiments and testing new ideas. Also, cryptocurrency holders receive coins of the new currency in the same quantity. Read about the development of the blockchain in the article Blockchain.

Source: term "Blockchain fork"

Network instability in the first days, confusion with similar currency names, replay attacks (when a transaction is repeated in another network) and a reduction in overall security due to the division of the hash rate. Therefore, it is important to be careful and wait for protection against attacks. Read about security in the article Blockchain.

Source: term "Blockchain fork"