Russia is dialling up the pressure on VPNs – but stopping short of an outright ban

Pressure on VPNs in Russia is once again increasing. The country's government is looking to introduce charges on international internet traffic, and Russian-made apps are scanning devices for the presence of VPNs.

The country has a long history of targeting usage of the best VPNs, but has never enforced an outright ban. The privacy tools are incredibly popular in the country and millions rely on them to navigate internet censorship.

The best Russia VPNs will still work in the country, but using them may get a lot harder with surveillance increasing. However, the technical details of how data limits will be monitored and enforced is unclear and its implementation is likely to be delayed.

Charges on international internet traffic

From May 1, 2026, the Russian government wanted the country's major mobile operators and digital platforms to introduce charges on "international" internet traffic.

150 rubles (~$2) would be charged for every gigabyte of international traffic exceeding 15 GB per month. Connecting to a VPN server changes the perceived location of your IP address. So, Russian users connecting to foreign servers in order to bypass internet restrictions would see their data capped – even with premium VPN plans.

15 GB is enough for daily browsing, and is around the limit set by many of the best free VPNs. However, streaming, gaming, or torrenting could eat through this limit in a matter of hours.

This move would significantly nullify the effectiveness of VPNs and see the Russian government restrict the privacy tools without having to ban them outright.

However, implementing this measure isn't easy – in fact, it's nigh on technically impossible. Reports from the Russian business newspaper, Vedomosti, covered by The Moscow Times, suggest the May 1 date is unachievable and there will be a delay.

How international traffic will be classified is a major stumbling block, with some Russian services relying on foreign IP addresses to operate. Operators will have to change billing systems and tariff plans so charges can be recorded in real-time.

The time taken for changes to be made is estimated to be up to six months. Some operators have asked for a delay, and one could be granted until 2028.

Although not confirmed, it is expected that charges and data limits will also affect tourists visiting Russia. eSIMs make use of local Russian mobile networks so would be subject to the same restrictions. However, it appears as though it's only mobile data that is impacted – not Wi-Fi.

Amnezia is an open-source VPN company, created by Russian internet activists. It said: "The key takeaway is that this has evolved beyond simple VPN detection: it is now about controlling all international traffic."

"Any connection leaving the local infrastructure will likely face restrictions, regardless of the technology used. It's not yet clear how these restrictions will be implemented, but we are currently exploring potential solutions to reduce the burden on users."

Devices scanned

In a more sinister move to target VPNs, users face the possibility of their devices being scanned to determine the presence of a VPN.

Internet advocacy group RKS global investigated 30 Russian-made Android apps, and found that 22 actively detected VPN connectivity status, as well as whether a VPN was downloaded on the device. 19 of the 22 sent VPN status data to a server, meaning it could potentially be accessed by Russian authorities

Yandex Browser and Yandex Maps, social media service VKontakte, and banks T-Bank and Sberbank Online were some of the most invasive. The Yandex apps had four detection methods, while the other apps had three. All but Yandex Maps sent VPN status data to a server. T-Bank recorded VPN connection status, and Yandex Browser was the only app to search for Tor.

The VPN response

The increase in VPN surveillance and detection will harm both major VPN companies and smaller applications, created by individual activists and enthusiasts.

Amnezia founder, Mazay Banzaev, warned "the process of detection and blocking will now happen much faster."

Banzaev said: "Major Russian IT companies can scan device network settings, routing and DNS configurations, the presence of VPN and proxy services at the system level, as well as connection behavior. This data is expected to be transmitted to Roskomnadzor for further blocking of specific IP addresses and VPN services."

Users are already encountering app restrictions, errors, and blocking messages, and Banzaev said some users "have started boycotting such services and deleting apps to protest against these restrictions."

The accuracy of detection methods has been questioned, and Banzaev believed "corporate VPNs, virtual environments, and other legitimate use cases – as well as users without VPNs – could potentially be flagged as suspicious."

He added that Amnezia is working to mitigate user impact and continue its VPN function. Banzaev said "the goal is to ensure stable access and maintain privacy without the need to constantly turn the VPN on and off when using different services."

How to protect yourself

Amnezia recommended a number of steps users can take to combat device scanning:

Use websites instead of apps

Amnezia said using websites over apps was "the simplest approach" to reducing your risk. Sites have "fewer tracking capabilities" and work well with split tunneling.

Split tunneling

Most leading VPNs offer split tunneling, and it allows you to determine which of your traffic is protected by a VPN and which isn't.

In this case, you'd access Russian apps without the VPN connection, reducing the chance of spyware detection. However split tunneling doesn't offer total protection and more sophisticated scanning methods can still detect the presence of a VPN on your device.

Router VPN

Installing a VPN on your router removes the need for a VPN on your device. All Wi-Fi enabled devices can benefit from VPN protection. The only downside to a router VPN is – unless you have a portable router – you can't protect yourselves on the go, and mobile data is covered.

Use a second phone

A more radical step is to use a second phone. Have one device for all Russian apps, with no VPN installed. You can then use a second phone for all apps you want VPN protection for and also use this to bypass internet restrictions.