In 2026, businesses have acquired an invisible but very strict controller. It doesn't call, doesn't warn, and doesn't give a second chance. It simply changes color — green, yellow, or red. And this color determines whether you can pay suppliers, salaries, or even use your money tomorrow.

This is about the "bank traffic light" system — the Central Bank's "Know Your Customer" (KYC) platform, which evaluates each business based on dozens of criteria and transmits its risk level to banks.

👮‍♀️ How the bank traffic light actually works

Since 2022, the Bank of Russia has essentially maintained a "digital dossier" on every legal entity and individual entrepreneur: analyzing tax burden, account movements, counterparties, cash, business structure, and the economic sense of transactions. The output is three statuses: green, yellow, red.

Green: you are understandable and predictable

The bank sees:

• taxes are reasonable relative to turnover;
• there are real expenses: rent, employees, purchases;
• payment purposes are specific, with contracts and dates;
• no transit of "money in and out" without logic.


Result: minimal control, rare requests, smooth operations.

Yellow: you are under scrutiny

The system detects deviations:

• turnover is growing, taxes are not;
• atypical counterparties and schemes have appeared;
• the share of cash withdrawals has increased;
• money is being shuffled back and forth without obvious purpose.


What the bank does: asks questions, requests documents, selectively halts transactions. Yellow is not a verdict, but a warning. Ignoring it is a direct path to the red zone.

Red: Federal Law 115-FZ is triggered

Here it's not about "risk," but about restrictions:

• internet banking is disabled;
• corporate cards are blocked;
• most transfers become impossible.


Typically, only taxes, salaries for "old" employees, mandatory payments, and repayment of previously taken loans remain.

🗓 What exactly changed in 2026

The traffic light has been around for a while, but in 2026 the rules have tightened.

1. Bank + Federal Tax Service (FTS) integration in near real-time
The FTS and banks synchronize data on turnover and taxes. If the tax burden is significantly lower than the industry average (benchmark — from 0.9% of turnover and above), questions are almost inevitable.

2. They look not only at you, but also at the chain
The KYC platform considers not only your transactions but also the connections of your counterparties up to 2–3 levels. One "red" partner can drag down the entire chain, even if your own payments are formally clean.

3. More criteria and triggers
The algorithms include dozens of parameters: transaction splitting, atypical cash flow patterns, strange business structures, sudden changes in account behavior. Cash is under special scrutiny: frequent withdrawals, especially immediately after deposits, and a cash share above ~30% are serious reasons to trigger yellow or red.

4. Rosfinmonitoring has been strengthened
Rosfinmonitoring can suspend transactions and obtain more data on payments, including transfers to individuals. All this happens without your involvement: you only see the result.

⚠️ Main triggers that turn a business "red"

To simplify all regulations into practice, businesses usually end up in the risk zone due to five things.

1. Tax gap
Turnover exists — taxes are almost absent or noticeably below market.

2. Opaque payments
Descriptions like "for services," "payment under contract" without number, date, or specifics.

3. Suspicious counterparties
Working with companies already in the red zone, or with transit chains.

4. Cash without logic
Money is regularly withdrawn, but there is no documentary or economic explanation.

5. Ignoring bank requests
Silence in response to document requests is one of the strongest signals for the algorithm: "something is being hidden."



Yellow zone: still dialogue with the bank. Red — a situation where decisions are made without you.

In the second part
we will cover what is usually learned only after a block:

• how to respond to initial bank requests and avoid sliding into the red zone;
what to do when access to the account is restricted;
• which mechanisms actually work in 2026 and why some businesses recover while others "fall out" of the banking system.