Biometrics in banks, transport, and Gosuslugi (Госуслуги): where control is lost
Biometrics in Russia are collected centrally in the Unified Biometric System (Единая биометрическая система, EBS). A template consists of two components: a face image and a voice sample. Collection takes place in banks when banking products are issued, in MFCs when applications are submitted, and on the side of government services. Use covers three typical scenarios: logging in to a bank by face, paying for metro travel through Face Pay, and identification on Gosuslugi.
Submitting biometrics is voluntary, but in practice it is often processed “by default” when opening an account or receiving a service. Refusing biometrics is a right established by Federal Law No. 572 “On the Unified Biometric System.” The refusal procedure is simple: it is submitted through Gosuslugi or at an MFC, and the template is deleted from the EBS.
Below is a neutral breakdown of how the EBS is organized, where data is collected, where it is used, and what refusal procedures exist.
In brief
- The EBS stores biometric templates: face + voice, linked to SNILS.
- Collection takes place in banks when a product is issued, in MFCs, and through Gosuslugi.
- Use: bank login, Face Pay in the metro, identification on Gosuslugi.
- Submitting biometrics is voluntary (Federal Law No. 572, Article 4).
- Refusal is done through Gosuslugi or an MFC; the template is deleted from the EBS.
What the EBS is and how biometrics get into it
The system is centralized. The operator is Tsentr Biometricheskikh Tekhnologiy (Центр биометрических технологий, Center for Biometric Technologies), a subsidiary of Rostelecom. It is regulated by Federal Law No. 572 “On the Unified Biometric System,” which came into force in 2023.
What is collected
A biometric template consists of two parts: a face image, meaning a front-facing photo, and a voice sample, meaning a recording of a short phrase. It is stored as a mathematical template linked to SNILS and Gosuslugi. The original photo and audio recording themselves are not stored permanently — only the derived template used for comparison is stored.
Where it is collected
The main channel is banks. When issuing a deposit, card, or loan, the operator offers to “go through biometrics.” In MFCs, this happens when submitting applications for government services. Directly through Gosuslugi, it is used for remote services that require stronger identification. Since 2024, some procedures, such as account confirmation, can be completed through biometrics.
Who gets access
Banks get access for remote account opening and transaction confirmation. The metro gets access for Face Pay if the user has connected to the service. Government bodies get access within a regulated set of procedures. Operators’ access to the EBS is regulated and logged.
Where and how biometrics are used
| Context | What happens | User control |
|---|---|---|
| Submission at a bank | The template is uploaded to the EBS and linked to SNILS | You can refuse when the product is issued |
| Submission at an MFC | The same: separate consent is processed | You can choose not to sign the consent |
| Face Pay in the metro | The template is compared with the database when passing through | Connection and disconnection in the Metro Moskvy (Метро Москвы, Moscow Metro) app |
| Logging in to a bank by face | Biometric login instead of a password | You can use a password/SMS as an alternative |
| Gosuslugi, digital ID | Stronger confirmation of operations | The alternative is an in-person visit to an MFC |
| Remote banking services | Opening an account without visiting an office | The alternative is an in-person visit to a bank |
How to check right now
Open Gosuslugi, the “Profile” → “Biometrics” section. The exact name may change; search for “unified biometric system.” There you can see whether a template has been submitted, which banks and operators have received consent, and whether there are active connections. If a template has been uploaded, you can submit a deletion request directly from this section. The request is processed within the established period, usually several business days.
Also check your bank app: in the security settings section there is usually a “face login” switch, which can be turned off independently of the EBS. For Face Pay in the metro, use the Metro Moskvy app, payment section.
More details about the integration of biometrics with Gosuslugi are in the official help section at gosuslugi.ru and in the digital ID section at gosuslugi.ru/digital_id.
Warning signs vs false alarm
A warning sign is that biometrics have been submitted, but you do not remember when or where. This is a typical situation: consent for the EBS is often processed during a banking operation “in passing.” In this case, it makes sense to submit a request to delete the template and, in the future, refuse biometrics when applying for new products.
A false alarm is the fear that “refusing biometrics will not change anything anyway.” Refusal works within the legal framework: the EBS operator is required to delete the template upon request. This does not turn off street cameras, which work with their own reference databases, but it removes biometrics from the register that banks and services have access to.
What to do next
- Check the biometrics section on Gosuslugi to see whether there is an active template.
- If a template has been uploaded and you do not use biometric services, submit a deletion request.
- In your bank app, turn off face login if you do not need it.
- When applying for new banking products, read consents carefully: biometrics are often enabled by default.
- At an MFC, refuse the offer to “go through biometrics” when submitting applications unrelated to it.
- Do not upload a photo to the Metro Moskvy app if you do not plan to use Face Pay.
- Keep in mind that refusal from the EBS does not affect street cameras: these are different systems with different databases.
Disclaimer: this material is for informational purposes and is not legal advice. For a specific situation, consult a lawyer. Federal Law No. 572 “On the Unified Biometric System” is the current version including changes from 2024–2026; for the up-to-date text, check consultant.ru.
Conclusion
The EBS is a centralized system with a clear structure and an established right of refusal. User control on the collection side, meaning consent at a bank or MFC, and on the storage side, meaning a deletion request through Gosuslugi, is real, not declarative. Biometrics are convenient for remote operations, but their absence does not remove access to banking and government services: all biometric procedures have alternative paths through in-person presence or password/SMS.