T-Bank and the Bank of Russia say crypto payments via QR codes at retail checkouts are being used to extend the life of droppers’ cards

T-Bank and the Bank of Russia have pointed to a new retail payment scheme: shoppers pay with cryptocurrency through QR codes at the checkout, while the bank says the setup is really about keeping so-called dropper cards active. For PSPs and acquirers, the interesting part is not the crypto angle alone, but the way a seemingly ordinary card payment can be wrapped around a digital-asset transfer and slipped past compliance screens.

1. According to T-Bank, QR codes for payment are generated at self-service checkout counters in stores. A customer with USDT stablecoins in a crypto wallet uses a Telegram bot to pay for the item by photographing the QR code instead of scanning it with a banking app.
2. T-Bank says the QR code is then passed to a dropper, who completes the payment from their own card, while the customer’s cryptoassets are debited. In other words, the card transaction and the crypto transfer are separated, which makes the retail leg look ordinary on the surface.
3. The bank says the scheme brings together two groups: people who want to pay for normal purchases with cryptocurrency, and operators of dropper cards who need to create the appearance of normal everyday card activity. T-Bank’s point is that this can hide suspicious transactions from bank compliance systems.
4. The Bank of Russia defines droppers as people whose bank cards are used for illegal transactions, including cashing out stolen money, cash withdrawals, and transfers on behalf of shadow-business operators. The regulator says a person can become a dropper both consciously and unknowingly, under pressure from criminals.
5. Digital asset payments are prohibited in Russia. The State Duma has postponed consideration of a bill on state regulation of the crypto market; the Central Bank and the Ministry of Finance had expected the law to be adopted by 1 July, but that did not happen.

For high-risk payment providers, the practical takeaway is simple: if a merchant flow looks like a standard retail card payment but is actually being used as a bridge for crypto-funded activity, the merchant may not even realize crypto was part of the chain. That is exactly the kind of structure that turns routine checkout monitoring into a compliance problem.