In Uzbekistan, minimum requirements for cybersecurity and protection against fraud in remote financial services have been approved
  • 01.21.2026
    By Resolution of the Board of the Central Bank of the Republic of Uzbekistan dated January 21, 2026 No. 3759, the Regulation on minimum requirements for ensuring information and cybersecurity, as well as preventing cases of fraud in the provision of remote financial services to individuals by credit and payment organizations and payment system operators, has been approved. The document was registered by the Ministry of Justice of the Republic of Uzbekistan on January 21, 2026 and is set to enter into force on April 22, 2026.

    Competent authorities
    The Regulation was developed and approved by the Board of the Central Bank of the Republic of Uzbekistan, which establishes minimum standards for credit organizations, payment organizations, and payment system operators in the provision of remote financial services to individuals.

    Main objectives of the document
    The Regulation is aimed at strengthening the protection of users of remote financial services, enhancing information and cybersecurity in the banking and payment sectors, as well as developing practical measures to prevent fraud in online transactions.

    Main requirements
    According to the approved requirements:
    client identification checks during registration and use of mobile applications of banks and payment systems have been strengthened, including mandatory verification of the phone number and user data;
    users are allowed to link to an account only their own bank accounts, cards, and electronic wallets or those belonging to close relatives, while P2P transfers are limited to such accounts;
    credit and payment organizations are required to apply biometric identification methods with “liveness” detection in order to exclude the possibility of identity confirmation using static images;
    after three incorrect attempts to enter a one-time code, access to the application is temporarily blocked, and login attempts from a new device require re-identification;

    Significance for the banking system
    The approved Regulation will become an important step in adapting Uzbekistan’s banking sector to the digital transformation of financial services, will ensure more reliable protection of consumer rights, and will reduce the risks of using online platforms for fraudulent purposes.