Putin Orders FSB to Guarantee Critical Services During Internet Blackouts as Russia's Whitelist Model Expands
Putin Orders FSB to Guarantee Critical Services During Internet Blackouts
On June 1, 2026, Russian President Vladimir Putin issued a directive ordering Prime Minister Mikhail Mishustin and FSB Director Alexander Bortnikov to ensure uninterrupted access to critical online services during periods of mobile internet shutdowns. The order, published on the Kremlin's website, mandates that healthcare platforms, the Gosuslugi government services portal, and electronic payment networks remain accessible even when broader network restrictions are in place. Mishustin and Bortnikov were instructed to submit progress reports by July 1, 2026.
This directive represents a significant escalation in Russia's internet control strategy. Rather than treating shutdowns as temporary emergency measures, Putin's order effectively institutionalizes them as a permanent feature of Russian digital infrastructure. The directive follows an April 2026 cabinet session where Putin first publicly defended internet blackouts as necessary security measures against terrorist attacks and Ukrainian drone operations.
The Whitelist Model: From Targeted Bans to Default Blocking
Russia's approach to internet censorship has undergone a fundamental transformation. What began as targeted blocking of individual websites and services has evolved into a whitelist model where only state-approved services remain functional during shutdowns.
The whitelist registry, first introduced in September 2025 as a registry of socially significant services, initially comprised 57 websites including state news agency RIA Novosti, major banks, Gosuslugi, VKontakte, Odnoklassniki, the state messenger Max, Yandex services, and marketplaces like Ozon and Wildberries. The list has since expanded to include regional government sites, taxi services, and weather apps.
According to Kremlin statements, Putin's latest directive represents an ongoing refinement and expansion of our white list. This signals that the whitelist approach is not temporary but a core component of Russia's long-term internet strategy.
The FSB's Power Grab: From Surveillance to Control
The directive explicitly tasks the FSB with ensuring service continuity, marking a dramatic expansion of the security service's role in internet governance. Previously, online regulation was shared between civilian authorities including the presidential administration, the Ministry of Digital Development, and Roskomnadzor. Since mid-2025, the FSB's Second Service has lobbied for direct control over internet infrastructure.
The legal groundwork was laid in February 2026 when Putin signed legislation granting the FSB authority to demand mobile service shutdowns. The law removed any reference to security threats as a precondition and shielded telecom operators from liability for compliance. As lawyer Sarkis Darbinyan noted, Only the president can impose restrictions, and presidential decrees are even simpler than government decrees.
Independent Russian media reported that the FSB has been behind many new internet controls, including restrictions on Telegram and WhatsApp functions and crackdowns on VPN usage. The Ministry of Digital Development now admits it clears with security services which sites should remain accessible during outages.
Real-World Impact: Life Under Shutdown Conditions
The human cost of these policies has been severe. In March 2026, Moscow experienced mobile internet outages lasting up to 19 days, the first such shutdown in the capital since the 2022 invasion of Ukraine. The effects rippled through daily life:
- Electronic payment systems failed, forcing citizens to rediscover cash transactions
- Public toilets accepting only card payments stopped working
- Taxi and navigation apps became unreliable
- Banking apps malfunctioned, with some retailers allowing transactions without verifying account balances
- Delivery services, car-sharing, and online retailers suffered significant losses
According to OECD data, Russia previously had higher internet penetration than Italy, France, Germany, or Poland. The shift to a cash-and-paper-map existence has been jarring for millions of urban Russians who had come to depend on digital services for virtually every aspect of daily life.
The Technical Infrastructure: TSPU, SORM, and DPI
Russia's censorship capabilities rest on several layers of technical infrastructure:
- TSPU (Technical Means of Countering Threats): Deep packet inspection systems installed on every ISP network under the 2019 Sovereign Internet law. The Ministry of Digital Development plans to increase TSPU capacity 2.5 times by 2030, to 954 terabits per second, at a cost of approximately $186 million.
- SORM (System for Operative Investigative Activities): Long-established interception equipment that obliges telecom operators to store communications metadata and content for years and provide it to the FSB on demand. In February 2026, the FSB demanded major banks install SORM equipment.
- Protocol fingerprinting: TSPU systems identify VPN and proxy traffic by analyzing handshake patterns, packet sizes, and timing signatures.
- DNS poisoning: Russia's National Domain Name System returns false IPs for blocked services.
Magistrates' courts in Moscow and St. Petersburg have begun handing down convictions against internet providers for allowing traffic to bypass TSPU, with fines imposed in every recorded case.
VPN Usage Surges Despite Crackdown
Paradoxically, the intensification of censorship has driven VPN adoption to record levels. According to the VPN Guild non-profit association, downloads of VPN apps on Google Play grew 14-fold year-on-year in March 2026. An estimated 40% of Russian internet users now employ VPNs.
However, the cat-and-mouse game between censors and VPN providers has intensified. Roskomnadzor has used TSPU to disrupt specific VPN transport protocols. Standard protocols like OpenVPN and WireGuard are reliably detected and blocked within hours. Only advanced obfuscation methods such as VLESS with REALITY transport or AmneziaWG maintain effectiveness.
The Russian government has deployed multiple countermeasures:
- Blocking 469 VPN services by February 2026, a 70% increase from October 2025
- Instructing over 20 major websites and e-commerce platforms to block VPN users
- Introducing a 150 ruble per gigabyte surcharge on international mobile traffic above 15 GB
- Removing VPN applications from the Russian App Store
Max: The State-Controlled Alternative
As foreign platforms face restrictions, Russia has aggressively promoted Max, a state-backed messenger developed by VK. Modeled on China's WeChat, Max combines messaging with government services and lacks end-to-end encryption.
Putin designated Max as Russia's national messenger in 2025. Since then, state employees have been instructed to switch to the platform, with applications ranging from teacher-parent chats to patient-doctor correspondence. Official data claims over 107 million registered users, though actual usage is limited due to surveillance concerns.
Technical analysis revealed that Max's Android version sends traffic to third-party servers, probing accessibility of domains including Telegram, WhatsApp, and Google subdomains, while transmitting system parameters indicating whether a VPN is active. The Russian military has reportedly rejected Max as insufficiently secure for operational use.
What This Means for the Future
Putin's June 1 directive signals that internet shutdowns will become a routine feature of Russian digital life rather than exceptional measures. The whitelist model represents a structural transformation from an open internet to a controlled domestic network where every service must earn state approval to function during disruptions.
For VPN users and privacy advocates, the implications are clear:
- Standard VPN protocols face increasing detection and blocking
- Economic disincentives complement technical blocking
- The FSB's direct control over internet infrastructure removes civilian oversight
- Only advanced obfuscation protocols with decentralized architectures offer durable connectivity
As Russia approaches September 2026 parliamentary elections, analysts expect restrictions to tighten further. The Kremlin appears willing to accept significant economic costs and public discontent in exchange for maximal information control. For millions of Russians, the open internet is becoming a memory rather than a reality.