You click “Transfer,” and instead of confirmation, you get a message: “Operation declined,” “Transfer suspended,” or “Access restricted.” The money seems to be in your account, but you can’t transfer it, the card may be declined, and the online bank flags a “suspicious operation.”
The first impulse is panic. The second is to call the first “security service” number you find or try the transfer repeatedly. Both options often worsen the situation and increase the risk of falling for scammers.
The proper approach is different:
- Understand which type of restriction triggered
- Check the notification in the app and do not click links from SMS or messengers
- Contact the bank only through official channels
- Find out the operation status and confirm the transfer’s legitimacy
- Save the case number and, if needed, prepare documents
- Watch for signs of fraud and end contact at the slightest doubt
Now, step-by-step and without legal jargon.
Five Types of Restrictions: How They Differ
Before doing anything, it’s important to understand what exactly the bank blocked. This affects the speed of resolution, your actions, and whether you can use the rest of your money.
Denial of a Specific Operation
The bank refused to complete one transaction: a transfer via SBP, card, or details. Other operations work normally.
Usually, this is the bank’s anti-fraud system reacting—an internal system monitoring suspicious operations. Typical reasons: unusual amount, new recipient, transfer at night, or from a new device.
Typical signs:
- In the app — status “operation declined by bank” or “transfer declined”
- Card and online bank work; other payments go through
- No “cooling-off period,” money remains in your account immediately
Sometimes the bank clarifies the operation was declined “without debiting funds”—a normal phrase for anti-fraud refusal.
Transfer Suspension During Cooling-Off Period
This is a new scenario for many, linked to Federal Law 161-FZ and anti-fraud measures.
If the recipient’s details are in the Bank of Russia’s database as linked to fraudulent transfers (e.g., the recipient is a “dropper” or has appeared in complaints), the bank must suspend the transfer for up to two days—a so-called cooling-off period.
Key points:
- Money does not reach the recipient and is not lost—it is effectively “on hold”
- Notification usually says: “transfer suspended up to 48 hours” or “during cooling-off period”
- During this two-day pause, the bank must contact you via official channels to confirm if you approve the operation
Possible outcomes:
- If you confirm the transfer, the bank may process it before 48 hours expire
- If you cancel, the money simply stays in your account
- If you do not respond, the transfer is automatically canceled after the cooling-off period
Important. Phrases like “transfer without voluntary consent” and “suspicious operation” in notifications are technical terms, not accusations. The bank verifies that this is your conscious transfer, not fraud pressure.
Card or Online Bank Block
Sometimes anti-fraud or security service restricts not just one operation but the entire instrument:
- Card is declined in stores and ATMs
- The app shows “access restricted,” “remote banking temporarily unavailable”
- SMS from the bank reports temporary card block “for security reasons”
Reasons can be innocent:
- Multiple incorrect PIN or password attempts
- Logging into online banking from a new device or foreign country
- Unusually high activity on the account in a short time
Key point: money in the account does not disappear. Even if the card is blocked due to suspicious activity, the account remains active. In extreme cases, you can:
- Withdraw cash at a branch with your passport
- Request an account statement and official explanation of the restriction
If the bank states the card is blocked “in accordance with 161-FZ,” this is also a fraud protection measure, not automatic confiscation.
Transfer Limits
Sometimes it seems the “bank won’t let you transfer money,” but it’s actually a transfer limit:
- Daily SBP limit
- Ceiling on transfers between your own accounts
- Limits on operation amounts in online banking
Simple signs:
- Notification or operation details mention a limit
- Smaller operations go through
- Changing limits in app settings resolves the issue
This is a technical restriction, not a “suspicious operation.” You can adjust it within reason without compromising financial security.
Restrictions under Federal Law 115-FZ
A separate, stricter case is when the bank refers to 115-FZ (anti-money laundering law). This is a different legal regime than usual anti-fraud under 161-FZ.
Signs it’s about 115-FZ, not a one-time suspicious operation:
- Notifications or support responses mention “115-FZ” explicitly
- The bank requests extensive documents on income sources and contracts
- Possible account blocks or refusal to process entire series of operations
This requires a separate strategy and often legal assistance. This article covers typical anti-fraud and cooling-off scenarios; we do not delve deeply into 115-FZ cases.
What to Do Right Now
If the bank blocked your transfer or card, the first minutes are about clarity and safety, not arguing with the operator.
Step 1. Read the Notification Carefully
Open the bank app or online banking—not SMS or messenger messages.
Pay attention to:
- How the status is worded: “operation declined,” “transfer suspended,” “access restricted”
- References to 161-FZ, “cooling-off period,” or “suspicious operation”
- Whether a time frame is indicated: “up to 48 hours,” “temporary restriction,” etc.
- What the bank asks you to do: just informing or requesting confirmation
What you should definitely not do:
- Do not click links from SMS, emails, or messengers
- Do not enter login/password on any linked pages, even if they look like the bank’s site
- Do not call numbers from suspicious SMS senders
The bank may send SMS about the block, but the full details are in the official app.
Step 2. Contact the Bank via Official Channel
The bank always has several safe channels:
- Chat in the bank app — the most convenient, everything is recorded in writing
- Official phone number on the back of your card
- Number from the official bank website — open the site directly, not via message links
Key filter:
- You initiate the call or chat
- You dial the number manually, not via suspicious SMS “Call” links
- You do not follow messenger invitations from “bank employees”
Safety rule: if the contact initiator is not you but the “security service,” treat the conversation as a potential scam attempt.
Step 3. Find Out Operation Status and Reason
When connected to the bank, ask direct questions:
- Is this a final refusal or a temporary suspension?
- Is the suspension related to the 161-FZ cooling-off period or something else?
- Are there additional restrictions on the card, account, or online banking?
- Can you use the rest of the money in the account?
Request a written comment in chat or by phone with the reason. Also:
- Write down the case number (ticket)
- Save a screenshot or text of the response if in chat
This helps if you need to follow up or dispute with the bank.
Step 4. Confirm Identity and Payment Purpose
The bank must verify the transfer is not fraudulent or done “without voluntary consent.” They may ask for:
- Identity confirmation: password phrase, control question, passport data
- Explanation of the operation: who and why you are transferring money
- Supporting documents — especially for large transfers or payments to entrepreneurs, self-employed, freelancers
Typical documents:
- Sales, lease, contract, or service agreements
- Invoice, work completion certificate, receipt
- Messenger or email correspondence showing agreement and amount
- Receipt between individuals
This is normal anti-fraud procedure. The system ensures the operation is voluntary and matches your usual behavior.
Security note. Never share:
- CVV/CVC code
- PIN code
- Online banking or app passwords
- Codes from SMS or push notifications If asked for any of these, end the conversation immediately.
Step 5. Save the Case Number
After communication, ask for:
- Case or complaint number
- Brief description of what the bank promises to do and by when
Record this in notes or save a screenshot. If the situation drags on, you won’t have to explain everything repeatedly—the operator will see the history by case number.
Step 6. Prepare Documents if Needed
If the bank requests “documents for the operation,” it’s not always a huge package. Start with what you have:
- Contract, invoice, certificate, or receipt
- Messenger correspondence: agreement, amount, details
- Screenshots from the service where you found the contractor or product (e.g., website, marketplace)
- Any documents showing payment purpose and your relation to the deal
Simple criterion: an independent person looking at the documents should understand the operation is real and not a typical fraud scheme.
Send documents only via:
- Official chat in the app
- Secure form on the website
- In person at a branch
Any “bank employees” in messengers are scammers.
Case Study: Transfer for Repairs Held for Two Days
Ilya transferred 78,500 ₽ to a contractor for kitchen repairs. It was the first transfer to this recipient, the amount was higher than usual, and it was from a new card he had only used in stores before.
Ilya clicked “Transfer via SBP” and saw the status: “transfer suspended for 48 hours.” Operation details mentioned “suspicious operation” and referenced 161-FZ.
What he did first was a mistake:
- Tried sending the same amount again, but “by card number” — declined again
- Nervously refreshed the transaction feed and waited for an SMS “from security service”
Only later did he open the notifications section in the app and read the proper explanation: “Transfer suspended during cooling-off period. To confirm, contact the bank.”
Then he did the right thing:
- Messaged support chat, provided the suspended transfer number
- Briefly explained: repair under contract, contractor is an individual entrepreneur
- Attached a photo of the contract and a screenshot of correspondence with the contractor
- Asked if the operation could be processed without waiting the full 48 hours
Within 30–40 minutes, the operator replied that the bank confirmed the operation’s legality and transferred the money the same day, without waiting for the cooling-off period to end.
What worked:
- Stopped making chaotic repeated transfers
- Contacted through the official app chat
- Immediately prepared simple but sufficient documents
When a Call Is from Scammers
The bank’s anti-fraud works quietly: algorithms suspend the transfer, the bank shows a notification in the app. Sometimes the bank may call, but always through its own channels.
Scammers actively impersonate the “bank security service” amid your alarm from messages like “transfer declined by bank” or “card blocked.”
Signs you’re not talking to the bank:
1. Call via messenger. WhatsApp, Telegram, Viber are not bank channels for such calls. Even if the screen shows “Security Service,” “Bank of Russia,” or your bank’s name—it’s fake.
2. Pressure and ultimatums. “You’re losing money right now,” “you must urgently transfer to a safe account,” “you have 5 minutes to save funds.” The bank does not communicate this way. In the legal cooling-off period, you have up to 48 hours to decide.
3. “Safe account” or “Bank of Russia account.” Such accounts do not exist for clients. Any request to transfer money “for protection” is a classic scam.
4. Requests for codes and passwords. If asked for:
- SMS or push notification codes,
- CVV on the back of the card,
- PIN code,
- online banking login and password—
this is not the bank. Official staff ask only identification questions, never data that can be used to withdraw money.
5. Role substitution. Phrases like “we are from the Bank of Russia security service, your bank is breaking the law,” “we see a transfer without voluntary consent, canceling urgently” are attempts to cause panic.
Correct reaction:
- Calmly end the call
- Independently call your bank using the number on your card or website
- Check if you really have suspicious operations or blocks
Main rule: the more the caller pressures urgency and fear, the higher the chance it’s a scam.
What to Do If the Transfer Was Not Yours
Sometimes anti-fraud is too late, and you see a fraudulent transfer in your statement: you didn’t make it, but the money is gone.
Here, time is counted not in minutes but in hours.
Action sequence:
-
Immediately call the bank using the official number Report the operation was unauthorized and ask to block the card and remote banking immediately.
-
Request to record the disputed operation Clearly state: “The operation is unauthorized, I did not perform it or share login or confirmation codes.”
-
File a dispute claim The bank will guide you on the form: via app, mail, or in person. Do this the same day you notice the problem or learn about the transfer.
-
Change all critical passwords After blocking the card and resolving with the bank, change your internet banking password, PIN for the new card (when received), and passwords for email and messengers if you suspect a leak.
By law, the bank must review the claim. Chances of refund are higher if:
- You acted quickly,
- Did not share codes or passwords with third parties,
- The account history shows the operation is unusual and out of pattern.
How to Appeal Inclusion of Details in the Bank of Russia Database
If your details (account, card, phone for SBP) are in the Bank of Russia’s special database used to detect fraud, consequences include:
- Transfers from others to you are suspended during the cooling-off period
- Banks more often flag operations as “suspicious”
- Clients complain the “bank won’t let money be transferred” to your account
This happens if:
- Your details were involved in disputed or clearly fraudulent transfers
- You unknowingly participated as a “dropper” (received money and forwarded it)
- The bank mistakenly classified your details as risky
If you are sure your operations are legitimate and claims are unfounded, the process is:
-
Contact your bank Preferably in writing: via chat with formal request, website form, or branch statement. Ask if your details are in the suspicious operations database and why.
-
Describe the situation and attach documents Show the operations are real: contracts, invoices, certificates, correspondence, account statements.
-
Ask the bank to initiate a request to the Bank of Russia Only your bank sends requests for correction or removal from the database. Clients cannot do this directly.
-
If the bank doesn’t respond, contact the Bank of Russia Use the online reception on cbr.ru to submit an appeal: describe the situation, attach copies of bank responses and documents.
The process is slow, but the clearer your position and documents, the higher the chance your details’ status will be reviewed.
Common Mistakes That Delay Resolution
When the “bank stopped the transfer” or “card blocked due to suspicious operation,” people often act automatically. This breaks the situation.
1. Chaotic repeated transfers
Trying to send the same money:
- in a different amount,
- to another recipient,
- from another card,
without explaining to the bank only increases anti-fraud suspicion. The system sees a series of unusual transactions and tightens restrictions further.
Rule: until the reason for refusal or suspension is clear, do not try to “force” the operation repeatedly.
2. Calling the number from SMS
Classic scheme:
- The “bank” sends an SMS about operation refusal
- The SMS includes a “security service” number
- The stressed person immediately clicks “Call”
In reality, the sender and number may be fake, and you reach scammers.
Safer approach: always dial the bank number manually from:
- the back of your card,
- the official website you enter yourself.
3. Trying to resolve via social media
Even if it’s the bank’s official social media account, staff there do not have access to your accounts or operations. They can only redirect you to support or the official site.
While you chat in comments, the cooling-off period ticks, and necessary actions are not taken.
4. Waiting for it to “resolve itself”
Transfer suspension under 161-FZ can end automatically: if you don’t confirm, money returns after 48 hours.
The problem is:
- if you want to complete the transfer, you often need to contact the bank;
- if you worry the operation is fraudulent, it’s better to check with the bank.
The longer you wait, the longer you live in uncertainty.
5. Sending documents to a “bank employee” in messenger
Scammers like to offer “to speed up verification”:
“Send the contract and passport via WhatsApp, I’ll forward it to security.”
The real bank does not ask for documents in messengers. Only:
- secure chat in the app,
- personal account on the website,
- branch office.
When to Visit a Branch in Person
Much can be resolved remotely, but some situations save nerves with a branch visit:
- The bank cannot clearly identify you by phone or chat
- Original documents are required for disputed operations
- You need to file a paper claim disputing an operation or clarifying status in the Bank of Russia database
- Restrictions relate to 115-FZ, and the bank invites you for personal communication
What to bring:
- Passport
- Cards and account documents
- All papers and printed screenshots related to the questioned operations
At the branch, ask for:
- Written confirmation of restrictions (certificate or statement)
- A copy of your claim with a receipt stamp
This makes it easier to track deadlines and, if needed, escalate to the Bank of Russia or a lawyer.
How to Reduce Stress from Blocks with a Personal Money System
Control over money starts not when everything goes smoothly, but when something goes wrong: transfer delay, SBP failure, “transfer declined by bank” on the worst day.
If you:
- track expenses and income,
- know the amounts on each account and card,
- understand where your financial cushion is and where money for current expenses is,
any anti-fraud disruption feels calmer. It’s not “the bank took all the money,” but a specific technical situation:
- one card blocked—but you have a backup on another account,
- transfer suspended for 48 hours—but you pay mandatory bills from another source,
- online bank temporarily unavailable—but you have cash reserves.
This resilience is not about the “right bank” but a simple, clear money system you build yourself. You can create it in any app, spreadsheet, or notebook. At Kopium, we help you see:
- which accounts you have,
- what operations go through each,
- where the reserve is and where money for regular payments is (more about the cushion in the financial reserve article, and about stable monthly spending in monthly spending stability).
The clearer your everyday money, the less likely a one-time “card blocked due to suspicious operation” message will unsettle you.
Do This Now—Before You Forget
A small checklist that works even if everything is fine right now:
-
Save the bank’s official number Add to contacts the number from the back of your card and the website—so you don’t have to search online in a stressful moment.
-
Check operation notifications. Enable push notifications and (if needed) SMS about debits and transfers—so you spot suspicious operations faster.
-
Review transfer limits. Go to online bank settings and check if limits match your real transfer amounts. Don’t raise them “to the max” unnecessarily—it’s about financial security.
-
Prepare for large transfers. If planning a big payment to a new recipient (repairs, purchase, prepayment), save the contract, invoice, and correspondence in advance—it’s easier to show the bank later.
-
Remember two safety rules. Don’t click links from SMS and messengers when it concerns money. And never, under any circumstances, share SMS codes, CVV, or passwords.
Calmly reacting to “bank blocked the transfer” is a skill. It’s convenient to practice it when there’s no emergency: set up bank contact channels, limits, money tracking, and basic safety rules. Then in a real situation, you’ll act by a clear scenario, not emotions.
