Key points
- Restrictions on VPNs and civilian apps have intensified since July 2025 to suppress dissent and enhance surveillance.
- Organizations face risks including data exposure, communication disruptions and potential sanctions violations.
- A fully sovereign internet is unlikely in the near term due to technical and political limitations.
Organizations and individuals operating within Russia face escalating operational risks as the Kremlin intensifies internet restrictions. Since mid-2025, authorities have tightened controls on digital communications, virtual private networks and civilian platforms. These measures aim to suppress domestic political dissent and enhance state surveillance capabilities across the country.
The Kremlin is systematically limiting access to widely used communication applications and causing regular mobile internet outages. According to Recorded Future, these actions represent a marked escalation from pre-2024 censorship approaches. The government is also instituting requirements that place both Russian and foreign entities under increased surveillance, complicating daily operations for businesses and their employees.
Context on Kremlin Objectives
Insikt Group assesses that the Kremlin’s primary goals are facilitating extensive surveillance while maintaining global connectivity. Authorities seek to develop national infrastructure under their control to enable isolation if necessary. However, technical and political constraints make a fully sovereign internet unlikely in the near term. Instead, Moscow is likely pursuing extensive monitoring with strict but not absolute controls on circumvention tools.
Who Is Affected and Why
Individuals and organizations in Russia are subject to increased risks of surveillance and sensitive data exposure. Corporate tools and digital applications may face disruptions, and emergency communications could become challenging. Entities with indirect exposure to Russia face heightened risks of supply-chain disruptions and sanctions violations. Over the longer term, restricted open-source information will complicate assessments of the political and economic situation.
Our take on the response
The Kremlin is likely using managed shutdowns to test its ability to isolate the Russian internet. Falling approval ratings and economic strain may incentivize further restrictions despite public dissatisfaction. Authorities will likely continue deterring VPN use by forcing platforms to support blocks and increasing costs, rather than punishing individual users directly. This suggests a focus on systemic control rather than individual prosecution.
What affected people can do
Teams usually advise checking whether corporate communication tools remain accessible and functional during outages. Users should verify that sensitive data is encrypted at rest and in transit to mitigate surveillance risks. Monitor official channels for updates on service disruptions and legal requirements. Be wary of follow-up scams that may exploit confusion during outages or new regulations. Verify the authenticity of any urgent requests for credentials or financial information through alternative, trusted communication methods before responding.
Background: VPNs
If virtual private networks are banned, your encrypted traffic tunnel disappears. You lose the ability to mask your location or bypass local censorship. Your internet service provider can now see every site you visit. You face legal risks for attempting to circumvent the ban. Your data remains visible to local networks.
Read the full guide: What happens if VPNs are banned: impact on privacy and connectivity
What to do and how to stay safe: Russia
- Review current connectivity options and ensure backup communication methods are established for critical operations.
- Encrypt sensitive data both at rest and in transit to protect against potential surveillance or interception.
- Monitor official government announcements and trusted news sources for updates on internet restrictions and outages.
- Educate staff on recognizing phishing attempts or scams that may arise during periods of digital instability or confusion.
Step-by-step guide: Detect Online Tracking: Signs in Logs, Browsers and Network Traffic
General security guidance from the Breach Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When did the Kremlin intensify its internet restrictions?
The Kremlin intensified restrictions on digital communications and infrastructure since mid-2025, with systematic tightening beginning in July 2025.
Is Russia likely to achieve a fully sovereign internet soon?
No, technical and political limitations make it unlikely that the Kremlin will achieve a fully sovereign internet in the near term.
What are the primary risks for organizations operating in Russia?
Organizations face risks including surveillance, exposure of sensitive data, disruptions to corporate tools, challenges in emergency communications and legal risks.