What Happened
The Bank of Russia published its first approved list of cryptocurrencies for trading on licensed Russian exchanges on August 11, and it is short: Bitcoin, Ether, and USDT, the dollar-pegged stablecoin issued by Tether. The central bank said qualifying assets must show sufficient market capitalization, sufficient average daily trading volume, and at least 5 years of pricing history on foreign exchanges. XRP, despite clearing the age requirement, did not appear. Access is tiered by investor class. Nonqualified investors (the Russian legal category covering ordinary retail buyers) can purchase no more than 300,000 rubles' worth per year (about $3,600) through each intermediary, and only after passing a risk-knowledge test. Qualified investors face no purchase limits on listed assets. Moscow Exchange (MOEX) and SPB Exchange have been building infrastructure to host the market.
The list operationalizes a federal law signed by President Vladimir Putin on August 4, Russia's first comprehensive statute regulating digital currency trading, with core provisions taking effect September 1, 2026. The architecture is strict: buying, selling, and custody run exclusively through institutions licensed by the Bank of Russia (exchanges, brokers, asset managers, crypto exchangers, and digital depositories), with transaction oversight by Rosfinmonitoring, Russia's financial intelligence agency. Using cryptocurrency to pay for goods and services inside Russia remains prohibited; the ruble keeps its legal monopoly on domestic payments. The significant carve-out points outward: exporters and importers may settle cross-border trades in crypto without volume limits, subject to reporting and tax, formalizing the experimental legal regime Moscow has used since late 2024 to move trade payments around sanctions pressure on its correspondent banking.
Legal Is Not the Same as Permissionless
It is tempting to read the announcement as a sanctioned state embracing Bitcoin. The structure says otherwise. Every access point in the new regime is a licensed chokepoint: an intermediary that verifies identity, reports to Rosfinmonitoring, enforces the retail cap, and can be instructed by the state that licenses it. Nothing in the design requires, or even contemplates, users holding their own private keys. What Russia legalized is not permissionless money; it is a supervised financial product that references permissionless money, wrapped in the same custodial and reporting machinery as any brokerage account.
That pattern is not uniquely Russian. The United States absorbed Bitcoin demand into exchange-traded funds, South Korea routes it through registered exchanges under an ever-tightening Travel Rule, and the European Union licenses the ramp under its Markets in Crypto-Assets framework on similar logic. States have broadly stopped fighting crypto and started channeling it. Russia's version is simply the most explicit about the asymmetry: the state grants itself unlimited crypto settlement rails for foreign trade (the part that helps it survive sanctions) while rationing its own citizens to about $3,600 a year per intermediary. When the same law treats crypto as strategic infrastructure for the sovereign and a consumer hazard for the individual, the quantity caps are not really investor protection. They function like capital controls, applied at the ramp.
The USDT Pick Is the Tell
The strangest name on the list is the stablecoin. Tether, the issuer of USDT, maintains a freeze function in the token's contract and uses it. In March 2025 it froze roughly $28 million in USDT belonging to Garantex, a Russian exchange sanctioned by the US Treasury's Office of Foreign Assets Control (OFAC), and Garantex suspended operations the same day. In April 2026, Tether coordinated with OFAC on a freeze of approximately $344 million tied to wallets linked to Iran's central bank, among the largest single freezes in stablecoin history. By its own accounting the company has frozen more than $2.5 billion in connection with over 900 law enforcement requests, roughly half of them from US agencies. The Bank of Russia has now placed an asset with a foreign issuer's kill switch at the center of its licensed market.
There is a pragmatic reading, and it deserves stating. USDT is already the working rail of Russian cross-border trade: the experimental legal regime ran on it, and liquidity, not sovereignty, is what the central bank's selection criteria measure. Moscow may also calculate that USDT held through licensed Russian depositories in pooled accounts is harder for Tether to target than Garantex's identifiable hot wallets were. Perhaps. But the Garantex precedent shows how the mechanism actually works: the freeze arrived first, and the suspension of a functioning exchange followed within hours. Russian USDT exposure now sits under 2 authorities at once, the Kremlin's licensed perimeter and an offshore issuer that answers, in practice, to US law enforcement. Bitcoin is the only asset on the list with no issuer to receive the phone call.
What This Means for You
You do not need to live in Russia for this to be instructive. The new regime is a clean case study in the gap between legal access and key control, and that gap exists in every jurisdiction, including yours. An exchange account is a jurisdictional contact point: the place where your legal identity, your government, and your assets meet. Russia just built its entire domestic crypto market out of nothing but contact points. The concrete exercise this week is an inventory: for each asset you hold, ask who besides you can freeze or move it. A stablecoin balance carries issuer control (Tether and Circle can both freeze addresses, and both have). A custodial exchange balance carries custodial risk and answers to whichever states license the venue. Bitcoin on your own hardware wallet, with private keys you generated and control, is the only entry on that inventory with no issuer and no license to revoke.
The second lesson is about timing. Russia's caps demonstrate that access can be rationed at the ramp whenever a state decides to ration it, and rules of this kind rarely loosen once set. If self-custodyself-custodyHolding your own bitcoin keys rather than trusting an exchange or custodian. The maxim: not your keys, not your coins. is part of your plan, the documented pattern favors establishing it while the ramp is open: complete the withdrawal, verify your seed backup, and test a small restore before rules harden rather than after. Size stablecoin holdings to operational need (the amount you could accept losing to a freeze you cannot appeal) rather than treating them as long-term savings, and keep savings in the asset where seizure resistance is a property of the protocol, not a promise from an intermediary.
What to Watch
September 1 is the date the law's core provisions bite, and the first weeks of licensed trading will reveal the custody model: whether MOEX and SPB Exchange hold client assets in pooled wallets, whether withdrawal to self-custody is permitted at all, and what the mandatory risk test actually screens for. Watch Tether's posture: whether it services licensed Russian venues, says nothing, or freezes the first sanctioned actor caught inside one, and watch whether the US Treasury signals secondary-sanctions exposure for the exchanges themselves. Watch the list itself: expansion beyond 3 assets would suggest the framework is a market, while stasis would confirm it is a containment vessel. And watch the trade data, because the cross-border settlement carve-out, not the retail market, is the part of this law Moscow actually needs to work.