The Russian Ministry of Digital Development (MinTsifry) is discussing measures to strengthen oversight of VPN services that mask themselves as legitimate websites and hide their IP addresses from official blocklists.
Hosting providers would be required to independently identify suspicious IP addresses and report them to regulators for potential blocking. Currently, addresses of legitimate services are added to a special list to avoid accidental blocking, but the same mechanism is exploited by VPN applications designed to circumvent network restrictions.
The proposal also introduces a tiered trust system for hosting clients based on the strength of their identity verification. Users authenticated only via phone or bank card could have services terminated within 30 minutes upon violations, while those verified through Gosuslugi, the Unified Biometric System, or a full contract would receive more time to resolve issues.
Non-compliant hosting providers risk being labeled as unreliable, resulting in restrictions that limit client access to a narrow whitelist of approved resources such as government portals, banks, and marketplaces.
Industry participants warn that these restrictions could worsen IPv4 address shortages and drive legitimate businesses toward foreign hosting providers, according to RBC.
