Kremlin tightened internet controls since mid-2025, raising surveillance and operational risks for organizations and individuals in Russia.
Key points
- Russia intensified internet restrictions and VPN bans starting in mid-2025
- Operational risks include surveillance, data exposure, and communication disruptions
- A fully sovereign internet is unlikely soon due to technical limitations
The Kremlin has escalated its control over digital communications and infrastructure within Russia since mid-2025. These measures aim to suppress political dissent and enhance state surveillance capabilities.
What happened
According to Recorded Future, the Kremlin intensified restrictions on digital communications and infrastructure starting in mid-2025. These actions likely aim to suppress domestic political dissent and conduct digital surveillance. Insikt Group notes that this represents an escalation from pre-2024 censorship approaches.
Since July 2025, authorities systematically tightened access to civilian communications applications and virtual private networks. Regular mobile internet outages occurred across Russia. New requirements placed Russian and foreign individuals and firms under increased government surveillance.
The Kremlin likely views these measures as necessary to make it harder for elites or the public to coordinate dissent. Insikt Group assesses Moscow also seeks to hinder Ukrainian drone strikes against critical infrastructure.
Despite these efforts, technical and political limitations will likely prevent a fully sovereign internet in the near term. Moscow will likely exert extensive censorship and monitoring while maintaining global connectivity.
Why it matters
This situation illustrates the concept of a sovereign internet, where a state isolates its digital infrastructure from global networks. It also highlights state-sponsored surveillance, where governments monitor communications to control information flow and suppress dissent. Organizations must understand these risks to protect their data and operations in restrictive environments.
The fix
No patch or fix has been confirmed yet for these broad policy changes. Organizations cannot rely on a single technical solution to bypass state-level internet controls and surveillance.
Why it matters
Teams usually assess their exposure to regions with strict internet controls to understand potential risks. Check whether your operations rely on connectivity that could be disrupted by state-managed shutdowns. Evaluate how new surveillance requirements might impact your data handling and compliance obligations in these jurisdictions.
What to do and how to stay safe: Russia
- Review your organization's presence in Russia to identify exposure to new internet restrictions.
- Ensure you have alternative communication channels that do not rely on local infrastructure.
- Monitor for updates on legal requirements regarding data surveillance and reporting.
- Once the vendor provides an update, implement any recommended security configurations for affected tools.
Step-by-step guide: What Does End-to-End Encryption Mean on Messenger: The Real Privacy Impact
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When did Russia start tightening its internet controls?
The Kremlin intensified restrictions on digital communications and infrastructure since mid-2025, according to Recorded Future.
What are the main goals of these internet restrictions?
The primary objectives are facilitating extensive surveillance and developing national internet infrastructure under Kremlin control, per Insikt Group.
Will Russia achieve a fully sovereign internet soon?
No, technical and political limitations make it unlikely that Russia will establish a fully sovereign internet in the near term.
