Payer Information Transfer

In comlliance with the federal law “On combating the legalization (laundering) of proceeds from crime and the financing of terrorism” № 115-FZ of August 07, 2001, upon the occurence of the conditions specified by the law and on behalf of an agent bank, QIWI transfers the payer information to the provider.

The QIWI services generate a digital payer registry and send it to the certain address specified by the provider, signed and encrypted. On the provider’s side the registry should be processed in accordance with current legislation.

Payer registry format

Payer registry is a plain text file with the following format:

• File name: QIWI_PAYER_service_id_YYYYMMDDn.csv, where:

  • <service_id> — partner’s service identifier in QIWI systems;
  • <YYYY> — year;
  • <MM> — month;
  • <DD> — reporting date;
  • <n> — serial number of the registry for the reporting day.

• The lines contain payments data:

  <txn_id> <payer's last name> <payer's first name> <payer's patronym, if applicable> <payer's account number> <payer's taxpayer identification number (INN)> <payer's registration address>

Fields on each line are separated by tab symbol. Line feed symbols may be x0D x0A as well as just x0D.

The QIWI system includes only data that was transferred in payments, and only from successful payments in the registry.

Payer registry example

12345678 → Ivanov → Ivan → Ivanovich →  → 123456789012 → Moscow, Green St., bld.17
12345678 → Petrov → Pyotr → Petrovich → 40802810000000000001 →  →  
12345678 → Sidorov → Sidor →  →  →  → 614015, Perm Krai, Perm, ul. Lenina, d.23

Registry Encryption

The registers are encrypted and signed with a digital signature (UKEP, UNEP) generated in accordance with GOST R 34.11-2012/34.10-2012. Registers for providers who are not residents of the Russian Federation can be encrypted and signed with an RSA key.

General Algorythm

1. Generate or obtain a digital signature:

   UKEP, UNEPRSA

   An UKEP may be obtained in any accredited certification authority (CA).

   An UNEP may be generated in your own CA. If you don’t have a CA, request a UNEP from QIWI. Send a request to skzi@qiwi.com with a copy to your supporting manager; in the subject line of the letter, indicate: CA user registration_Organization name and then follow the instructions in the response letter.

   RSA keys can be generated using client software, such as the OpenSSL utility. The key length can be 1024, 2048 or 4096 bits.

   Generate a self-signed certificate, or create a certificate request, send it to QIWI, and then generate a certificate based on the request signed by QIWI.

   Only registers for providers who are not residents of the Russian Federation can be encrypted and signed with an RSA key.

2. Submit your digital signature public key (certificate) to QIWI. Using this certificate, QIWI will encrypt and sign registries sent to the provider.

Please submit certificates and certificate requests in an archived file (.zip or .rar)

The actions described above are performed only once.

Once you have the registry, decrypt it and verify the signature using your digital signature’s private key.