Criminal law protection of citizens’ digital identity: challenges in countering offenses involving electronic signatures in the Republic of Kazakhstan and the Russian Federation

The article examines current organizational, legal, and criminal law challenges in ensuring information security amidst the total digitalization of electronic document management in Kazakhstan and Russia. The rapid growth of digital institutions and electronic digital signatures (EDS) is accompanied by a surge in high-tech crimes utilizing social engineering, generative artificial intelligence, and digital identity theft.The authors classifymodern cyberthreats within financial transactions and analyze gaps in current substantive and procedural laws of both countries regarding the qualification of offenses against digital authentication methods. The methodological framework comprises systems analysis, the formal-legal approach, and comparative law. The scientific novelty lies in substantiating the need to recognize digital identity and electronic signatures as independent objects of criminal law protection. Based on the findings, a practical framework of interagency measures is proposed across four levels: socio-preventative, administrative-control, material-technical, and criminal-legal. Specifically, the study substantiates implementing a state SMS-notification system for EDS activity, granting prosecutors authority to conduct unannounced IT audits of personal data operators, upgrading cyber police units with Big Data laboratories, and criminalizing unauthorized Deepfake use and unlawful EDS acquisition with mandatory imprisonment.

1. Brenner S.W. (2021) Cybercrime: Criminal Threats from Cyberspace. Santa Barbara: ABC-CLIO, 296 p. URL: https://ecommons.udayton.edu (accessed: 18.06.2026) (In English)

2. Obshhestvenno-politicheskaja gazeta «Vremja»: jelektronnoe mezhdunarodnoe izdanie . 2024. URL: https://time.kz/news/events/2024/05/30/ushherb-na-144-mlrd-tenge-prichinili-moshenniki-v-2023-godudesyatkam-tysyach-kazahstantsev (data obrashhenija: 20.05.2026) (In Russian)

3. Tokaev K.-Zh.K. (2024) Spravedlivyj Kazahstan: zakon i porjadok, economic growth, obshhestvennyj optimizm: Poslanie Prezidenta Respubliki Kazahstan narodu Kazahstana ot 2 sentjabrja 2024 goda // Kazahstanskaja pravda. URL: https://adilet.zan.kz/rus/docs/K24002024_1 (data obrashhenija: 15.05.2026) (In Russian)

4. Tokaev K.-Zh.K. (2025) Kazahstan v jepohu iskusstvennogo intellekta: aktual’nye zadachi i ih reshenija cherez cifrovuju transformaciju: Poslanie Glavy gosudarstva narodu Kazahstana ot 8 sentjabrja 2025 goda // Informacionno-pravovaja sistema normativnyh pravovyh aktov RK «Әdіlet». URL: https://adilet.zan.kz (data obrashhenija: 10.05.2026) (In Russian)

5. European Union Agency for Cybersecurity (ENISA). Securing Electronic Signatures and Public Key Infrastructure: Threat Landscape and Mitigation Strategies. – Athens: ENISA Digital Reports, 2025. 78 p. URL: https://www.enisa.europa.eu (accessed: 01.07.2026) (In English)

6. Zakon Respubliki Kazahstan «Ob iskusstvennom intellekte» ot 17 nojabrja 2025 goda № 230-VIII ZRK // Informacionno-pravovaja sistema normativnyh pravovyh aktov RK «Әdіlet». 2025. URL: https://adilet.zan.kz/rus/docs/Z2500000230 (data obrashhenija: 12.05.2026) (In Russian)

7. Zhdanov Ju.N., Ovchinskij V.S. (2020) Kiberpolicija HHI veka. Mirovoj opyt. M.: Mezhdunarodnye otnoshenija, 288 p. (In Russian)

8. Ugolovnoe pravo Respubliki Kazahstan: Osobennaja chast’: v 2 t.: uchebnik dlja vuzov (2016) / otv. red. I.I. Rogov, K.Zh. Baltabaev, A.I. Korobeev. Almaty: Jetı jarğy. V. 2. 500 p. (In Russian)

9. Smith R.G., Shepherd R. (2024) Digital Identity Theft and Cyber-Fraud: International Legal Responses. London: Palgrave Macmillan, 312 p. URL: https://www.taylorfrancis.com (accessed: 02.07.2026) (In English)

10. Kshetri N. (2023) Economics and cybercrime: The role of artificial intelligence in social engineering // Journal of Cybersecurity Research. Vol. 14. No. 2. P. 115–132. URL: https://www.scirp.org (accessed: 03.07.2026) (In English)

11. Wang F., Johnson L. (2024) Proactive Cyber-Governance: Unannounced IT Audits and Regulatory Sanctions for Data Operators // Stanford Law and Policy Review. Vol. 35. No. 2. P. 211–239. URL: https://arxiv.org (accessed: 02.06.2026) (In English)

12. Maurer T., Nelson M. (2024) The Technological Asymmetry in Cyber Forensics: Big Data vs. Transnational Cybercrime // International Journal of Digital Crime and Forensics. Vol. 16. No. 1. P. 45–62. URL: https://www.researchgate.net (accessed: 25.06.2026) (In English)

13. Koops B.J., Leenes R. (2023) Identity Regulation in the Information Society: criminal-legal protection of digital identifiers // Computer Law & Security Review. Vol. 48. P. 105–124. URL: https://scholar.google.com (accessed: 20.06.2026) (In English)

14. Villasenor J. (2022) Deepfakes and the Law: Criminalizing Synthetic Media in Civil Transactions // Harvard Journal of Law &Technology. Vol. 35. No. 3. P. 401–425. URL: https://www.researchgate.net(accessed: 10.06.2026) (In English)

15. Zashhitu personal’nyh cifrovyh dannyh grazhdan nuzhno zakrepit’ v Konstitucii – Tokaev. – Tekst: jelektronnyj // KazTAG: Mezhdunarodnoe informacionnoe agentstvo. – 2026. – URL: https://kaztag.kz/ru/news/zashchitu-personalnykh-tsifrovykh-dannykh-grazhdan-nuzhno-zakrepit-v-konstitutsii-tokaev (data obrashhenija: 07.09.2026)