RAQAMLI TO‘LOV INFRATUZILMASIDA MOLIYAVIY XATARLARNI BOSHQARISH VA AXBOROT XAVFSIZLIGINI TA’MINLASH MEXANIZMLARI

Vaxabov Bobur Alisherovich

mustaqil tadqiqotchi

Toshkent Kimyo xalqaro universiteti

E-mail: boburvaxabov@gmail.com

Annotatsiya. Raqamli to‘lov infratuzilmasining tez kengayishi to‘lovlarni tez, arzon va qulay amalga oshirish imkoniyatlarini oshirayotgan bo‘lsa-da, ayni vaqtda moliyaviy xatarlarning texnologik va institutsional tabiatini murakkablashtirmoqda. Mazkur maqolada raqamli to‘lov ekotizimida kredit, likvidlik, operatsion, firibgarlik, kiberxavfsizlik, ma’lumotlar yaxlitligi va uchinchi tomon texnologik qaramligi bilan bog‘liq xatarlarni kompleks boshqarish mexanizmlari tadqiq etiladi. Tadqiqotning metodik asosini institutsional tahlil, risk-matritsa, indikatorli baholash, qiyosiy tahlil va ssenariy modellashtirish tashkil etadi. O‘zbekiston Respublikasi Markaziy bankining 2024–2025-yillardagi rasmiy hisobotlari hamda to‘lov infratuzilmasi bo‘yicha ma’lumotlari xalqaro prinsiplar bilan taqqoslanib, amaldagi nazorat arxitekturasining kuchli va zaif jihatlari aniqlanadi. 2025-yilda to‘lov infratuzilmasi hajmining sezilarli kengayishi bilan bir qatorda Markaziy bank kiberxavfsizlik va anti-frod yo‘nalishlarida yangi nazorat vositalari, xavfsiz ulanishlar va kiberxavfsizlik reyting tizimini joriy qilgan. Tadqiqot natijasida “aniqlash–baholash–oldini olish–aniqlash–javob–tiklash–qayta baholash” sikliga asoslangan integratsiyalashgan model taklif etildi. Modelda riskka proporsional nazorat, real vaqt monitoringi, xavfsiz API, mustaqil testlar, incident reporting, biznes uzluksizligi va iste’molchi zararini tezkor qoplash mexanizmlari bir butun boshqaruv konturiga birlashtiriladi.

Kalit soʻzlar: raqamli to‘lovlar, moliyaviy xatar, kiberxavfsizlik, axborot xavfsizligi, firibgarlik, operatsion barqarorlik, risk-menejment, to‘lov infratuzilmasi, anti-frod, moliyaviy texnologiyalar.

МЕХАНИЗМЫ УПРАВЛЕНИЯ ФИНАНСОВЫМИ РИСКАМИ И ОБЕСПЕЧЕНИЯ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ В ЦИФРОВОЙ ПЛАТЕЖНОЙ ИНФРАСТРУКТУРЕ

Вахабов Бобур Алишерович

независимый исследователь

Ташкентский международный

химический университет

E-mail: boburvaxabov@gmail.com

Аннотация. Быстрое расширение цифровой платежной инфраструктуры повышает скорость, доступность и удобство расчетов, но одновременно усложняет структуру финансовых и технологических рисков. В статье рассматриваются механизмы комплексного управления кредитным, ликвидным, операционным, мошенническим, кибернетическим риском, риском нарушения целостности данных и зависимостью от третьих технологических провайдеров. Методологическая основа включает институциональный анализ, матрицу рисков, индикаторную оценку, сравнительный анализ и сценарное моделирование. На основе официальных материалов Центрального банка Республики Узбекистан за 2024–2025 годы проведено сопоставление национальной практики с международными принципами безопасности платежных систем и операционной устойчивости. В результате предложена интегрированная модель, построенная по циклу «идентификация–оценка–предотвращение–обнаружение–реагирование–восстановление–переоценка». Она объединяет риск-ориентированный надзор, мониторинг вблизи реального времени, защищенные API, независимое тестирование, отчетность по инцидентам, непрерывность бизнеса и механизмы оперативного возмещения потерь клиентов.

Ключевые слова: цифровые платежи, финансовый риск, кибербезопасность, информационная безопасность, мошенничество, операционная устойчивость, управление рисками, платежная инфраструктура, антифрод, финтех.

MECHANISMS FOR MANAGEMENT OF FINANCIAL RISKS AND ENSURING INFORMATION SECURITY IN DIGITAL PAYMENT INFRASTRUCTURE

Vakhabov Bobur Alisherovich

Independent Researcher

Tashkent International University of Chemistry

E-mail: boburvaxabov@gmail.com

Abstract. The rapid expansion of digital payment infrastructure improves the speed, affordability and accessibility of transactions, while simultaneously increasing the complexity of financial and technology-related risks. This article examines an integrated risk-management framework for credit, liquidity, operational, fraud, cybersecurity, data-integrity and third-party technology risks in the digital payment ecosystem. The methodology combines institutional analysis, risk matrices, indicator-based assessment, comparative analysis and scenario modelling. Official data and reports of the Central Bank of Uzbekistan for 2024–2025 are assessed against international principles of payment-system security and operational resilience. The study finds that the national ecosystem has strengthened its cybersecurity and anti-fraud capacity through enhanced controls, secure interconnections and cyber-risk assessment tools, but the growing scale of digital transactions requires a more integrated risk architecture. A seven-stage model — identify, assess, prevent, detect, respond, recover and reassess — is proposed. The model integrates proportional supervision, near-real-time monitoring, secure APIs, independent testing, incident reporting, business continuity and rapid consumer-loss remediation into a single governance cycle.

Keywords: digital payments, financial risk, cybersecurity, information security, fraud, operational resilience, risk management, payment infrastructure, anti-fraud, financial technology.

https://doi.org/10.5281/zenodo.22086538

https://zenodo.org/records/22086538

Foydalanilgan adabiyotlar

1. O‘zbekiston Respublikasi Markaziy banki. Information about issued banking cards, POS-terminals, ATM’s and Self-Service Kiosks as of 1 January 2026, transactions through POS-terminals in January–December 2025. Toshkent, 2026.

2. Central Bank of the Republic of Uzbekistan. Annual Report 2025. Tashkent, 2026.

3. Central Bank of the Republic of Uzbekistan. Financial Stability Report for 2024. Tashkent, 2025.

4. Central Bank of the Republic of Uzbekistan. Financial Stability Report for H1 2025. Tashkent, 2025.

5. CPMI-IOSCO. Principles for Financial Market Infrastructures. Bank for International Settlements and International Organization of Securities Commissions, 2012.

6. Basel Committee on Banking Supervision. Principles for operational resilience. Bank for International Settlements, 2021.

7. National Institute of Standards and Technology. Cybersecurity Framework (CSF) 2.0. Gaithersburg, MD, 2024.

8. ISO/IEC 27001:2022. Information security, cybersecurity and privacy protection — Information security management systems — Requirements. International Organization for Standardization, 2022.

9. O‘zbekiston Respublikasi qonunchilik to‘plami. To‘lov tizimlari operatorlari va to‘lov xizmatlarini yetkazib beruvchilarning axborot xavfsizligi va kiberxavfsizligini ta’minlashga oid normativ talablar, 2024.

10. O‘zbekiston Respublikasi. “Shaxsga doir ma’lumotlar to‘g‘risida”gi O‘RQ-547-son Qonun va 2026-yil 26-martdagi O‘RQ-1125-son o‘zgartirishlar.

11. O‘zbekiston Respublikasi Prezidenti. Uyushgan jinoyatchilik va kiberjinoyatlarga qarshi kurashish takomillashtiriladi. 12.03.2026.

12. O‘zbekiston Respublikasi. “Kiberxavfsizlik to‘g‘risida”gi O‘RQ-764-son Qonun, 15.04.2022.

13. European Union Agency for Cybersecurity (ENISA). Threat Landscape for Financial Sector and related cybersecurity guidance. ENISA publications.

14. BIS. Operational resilience and technology risk management: selected supervisory principles and practices. Bank for International Settlements, Basel.

15. World Bank. The Global Findex Database 2021: Financial Inclusion, Digital Payments, and Resilience in the Age of COVID-19. Washington, DC, 2022.

16. Arner, D.W., Barberis, J., Buckley, R.P. The evolution of FinTech: A new post-crisis paradigm? Georgetown Journal of International Law, 47, 2016.

17. Gomber, P., Koch, J.-A., Siering, M. Digital Finance and FinTech: current research and future research directions. Journal of Business Economics, 87, 2017.

18. Ozili, P.K. Impact of digital finance on financial inclusion and stability: A review of empirical evidence. Digital Finance and Financial Stability literature.