What new requirements have been introduced for the remote issuance and reissuance of bank cards?
For the remote issuance and reissuance of bank cards, financial institutions are required to use two-factor authentication, including biometric identification. Bank cards may only be linked to Kazakhstan-registered mobile phone numbers, which reduces the risk of using foreign SIM cards in fraudulent schemes. In addition, limits have been introduced on the number of bank cards that may be issued to a single client: no more than five cards per client per bank; no more than ten cards per client across all banks; for high-risk non-resident clients — no more than one card for a period of up to 12 months. These measures are intended to prevent the mass issuance of bank cards to a single individual for use in illegal financial schemes. The relevant amendments were introduced by Resolution No. 56 of the Management Board of the Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market dated 16 August 2024, approving the Rules for Biometric Identification by Banks, Organizations Providing Certain Types of Banking Services, and Microfinance Organizations.