Russia’s T-Bank says QR-code crypto payments at the checkout are being used to disguise cash flows

T-Bank says it has identified a scheme in Russia that lets people pay for goods in stores with funds from crypto wallets via QR codes. For PSPs and banks, the key detail is not the gadgetry; it’s the way ordinary retail spend can be used to hide suspicious flows inside apparently normal card activity.

1. According to Alexander Yaroshevsky, deputy director of compliance at T-Bank, the setup involves kriptotemshchiki — users who want to spend crypto such as USDT anonymously — and droppers. When the buyer scans a QR code, a p2p platform instantly debits rubles from the dropper’s card to pay for the purchase and credits the dropper with cryptocurrency in return.
2. T-Bank said the structure can mask illegal financial flows as everyday spending on groceries or clothes. In practice, that means mundane-looking retail transactions can sit in the same stream as higher-risk activity and make bank anti-fraud monitoring harder to separate out.
3. The bank specifically warned that this kind of “warming up” of accounts can help suspicious transactions, including deposits into illegal online casinos, blend into the general transaction flow. That matters for acquirers and card issuers because it turns standard consumer spend into a laundering layer rather than a clean payment trail.
4. The Central Bank of Russia confirmed that the scheme is known and that recommendations to minimize it have already been sent to banks. So this is not a theoretical edge case; it is already on the radar of the local regulator and the banking system.

The useful takeaway for high-risk payment providers is simple: if retail-style card activity can be used to “heat up” accounts before suspicious deposits, then merchant profiling, transaction pattern checks, and source-of-funds controls need to be built for that behavior, not just for obvious high-risk descriptors.