This English executive brief introduces the complete Russian-language research article. The full study separates historical source evidence from original analysis and labels hypothetical calculations. It is available through the link below.
Read the complete study in Russian ↗The following is Human Fintech’s analysis
Design for the life of the account.
Identity proofing, authentication and recovery solve different problems. A successful initial check does not establish that every later instruction comes from the same authorised person. Recovery can become the weakest route into the account if support teams are measured only on speed. Conversely, rigid controls can exclude legitimate customers and generate expensive manual work. The design should state what evidence is needed for each action and who can approve an exception.
Measure secure recovery and accessibility.
Review the entire recovery journey, including escalation, changes to authenticators and the customer’s ability to regain control. Measure false rejection and unresolved cases alongside fraud and completion rates. Accessibility is part of whether the intended customer can actually use the service; it should not be treated as a cosmetic adjustment. The Russian study uses NIST guidance and W3C explanations as analytical foundations. It does not certify a product, establish compliance or claim that one authentication method fits all risks.
Sources for the full study.
[1] National Institute of Standards and Technology. NIST SP 800-63-4: Digital Identity Guidelines. Финальная редакция, июль 2025. Разграничение установления личности, аутентификации и федерации.
[2] World Wide Web Consortium. Understanding Success Criterion 3.3.8: Accessible Authentication (Minimum), WCAG 2.2. Пояснение критерия доступности аутентификации; не является проверкой конкретного приложения.
[3] National Institute of Standards and Technology. SP 800-63B-4, Authenticator Event Management. Управление событиями жизненного цикла и понятие восстановления доступа.
Black Fintech.
Black Fintech continues the discussion of trust, algorithmic control and responsibility. Part III explores the digital power of money; part IV examines debt, scams and digital control.
Complete English edition, PDF + EPUB. Read the first 30 pages free, with no sign-up.