News about VPNs in Russia moves fast, and headlines often mix three very different things: laws that are already in force, rules that officials have announced, and ideas that were floated and later dropped. For an ordinary person, the difference matters a lot. A proposal in a newspaper is not an obligation, and a dropped plan can still come back.

This explainer sorts the main measures into those groups, with dates and sources, as of October 2026. It is a news summary, not legal advice. Laws and their interpretation change, so check current official sources or a qualified lawyer if you need certainty about your own situation.

The background: rules aimed at VPN providers

Most Russian VPN rules have targeted providers and advertisers, not individual users. According to Meduza's timeline published on 8 October 2026, Article 15.8 of the federal information law took effect on 1 November 2017. It requires VPN services and similar tools to filter access to resources on the official register of restricted sites. Large-scale restriction of non-compliant VPN services began in 2021.

That approach continues. ComNews, citing an interview the federal communications regulator gave to RIA Novosti, reported on 26 February 2026 that the regulator was restricting access to 469 VPN services as of the end of February 2026. It referred to government decree No. 127 of 12 February 2020 on centralised management of the public communications network.

Laws in force since September 2025

A package of amendments signed in July 2025 took effect on 1 September 2025, according to OVD-Info. It contains three parts that are often confused:

  • Fines for searching for extremist materials. Intentionally searching for materials officially classed as extremist carries a fine of 3,000 to 5,000 rubles. Human Rights Watch noted on 24 July 2025 that the law targets "intentional" searches, including searches made through a VPN. The fine is linked to the search for prohibited material, not to having a VPN app installed.
  • Fines for advertising VPN services. OVD-Info lists fines of 50,000 to 80,000 rubles for individuals, 80,000 to 150,000 rubles for officials and 200,000 to 500,000 rubles for legal entities.
  • VPN use as an aggravating circumstance. A separate change to the Criminal Code means that using a VPN while committing a crime can be treated as an aggravating circumstance. Meduza reported on 30 April 2026 that the outlet Verstka had found the first criminal cases applying this, both involving buying drugs online.

On the question many readers ask first, Meduza wrote on 30 April 2026 that using a VPN in Russia was still legal. We found no later source in our research saying that this has changed, but you should verify the current position yourself.

New rules in 2026: platforms, payments and hosting

In 2026 the pressure shifted to companies that people use every day.

  • Platforms checking for VPNs. According to Meduza, in spring 2026 major Russian platforms began refusing service to users with a VPN switched on at the Digital Development Ministry's request; we cover the details in Why some apps refuse to work with a VPN.
  • App Store payments. From 1 April 2026, at the ministry's request, MTS, Beeline, MegaFon and T2 stopped letting customers top up Apple ID balances from their mobile accounts. Meduza also reported that Apple has removed dozens of VPN apps from the Russian App Store since 2022.
  • Hosting. According to Meduza's 8 October 2026 timeline, an amendment of 26 June 2026 means Russian hosting providers may not supply computing capacity to VPN services that do not comply with Article 15.8.

If you rely on a government or banking app that refuses to work, this is the likely reason: the restriction is applied by the service itself, following official requirements.

Proposals that were floated, changed or dropped

Fines for ordinary VPN users

On 31 March 2026, Digital Development Minister Maksut Shadayev said administrative liability for VPN use was one option, but that his ministry did not favour it and was looking for a "complex compromise", Meduza reported. Fines could return to the agenda if that failed. As of the sources we reviewed, no fine for simply using a VPN had been adopted.

A fee for international mobile traffic

In March 2026 the ministry proposed charging mobile subscribers for international traffic above 15 GB per month. According to the BBC Russian service, as cited by Meduza, the price discussed was about 150 rubles per extra gigabyte. Operators count VPN traffic as international, so this would have hit VPN users. Meduza reported on 30 April 2026 that it had been due to start as early as 1 May, but operators asked for a delay.

On 7 July 2026, Deputy Minister Ivan Lebedev told the State Duma: "Fees for foreign traffic are not being considered."

However, Meduza's 8 October 2026 timeline cites the BBC Russian service as reporting that the government has proposed raising the free international allowance to 50 GB and applying a charge only on 5G networks for now. This conflicts with the July statement. As of October 2026, treat it as an unresolved proposal, not a rule.

Pending bills

Meduza's October timeline also describes a draft anti-fraud bill that would require companies to notify the regulator when they use corporate VPNs, and would create a register of people who use rented servers to run VPN services. People added to it could be barred from contracts with Russian hosting providers for a year. This was a draft, not law, at the time of writing.

Where the money is going

Spending tells you where policy is heading. Meduza, translating a Forbes Russia report, wrote on 6 October 2026 that the draft budget allocates nearly 60 billion rubles over three years to the system for filtering and blocking internet traffic. The money goes to the Main Radio Frequency Center. Two years earlier, the plan for the same system over the same length of time was 32 billion rubles.

Quick summary: in force vs proposed

In force (as of October 2026, per the sources above):

  • Filtering duties for VPN providers (since November 2017)
  • Fines for intentionally searching for extremist materials (since 1 September 2025)
  • Fines for advertising VPN services (from 1 September 2025, according to OVD-Info)
  • VPN use as an aggravating circumstance in crimes (law passed in 2025)
  • Hosting providers barred from serving non-compliant VPN services (amendment dated 26 June 2026)

Applied by ministries and companies, not by a new law for users:

  • Major platforms denying service to VPN users (from April 2026)
  • No Apple ID top-ups from mobile balances (from 1 April 2026)

Proposed, dropped or unresolved:

  • Fines for ordinary VPN users (discussed, not adopted)
  • Fee for international mobile traffic (dropped in July 2026; a revised idea reported in October 2026)
  • Corporate VPN notification and a hosting register (draft)

What you can do

  • Read the date on every headline. Many viral posts describe plans from spring 2026 that were later dropped.
  • Separate tools from content. Under the 2025 law, the fines concern searching for prohibited material and advertising VPNs.
  • Install apps only from official sources. Fake "VPN" apps that steal data are common wherever VPN demand is high. Whatever service you use, including VPNRice for Android, download it from the developer's own site or an official app store.
  • Learn what a VPN actually does and does not do, so you can judge claims calmly. Our guide What is a VPN? explains the basics.
  • Check local law before relying on any tool, and follow updates from reliable, dated sources.