Russia's Ministry of Digital Development to Bind M2M SIM Cards to Devices and Restrict Unauthorized Calls Starting 2027

The Russian Ministry of Digital Development has proposed new regulations requiring companies and individual entrepreneurs to register M2M SIM cards and associated equipment in the ESIA system. The rules, scheduled for launch on September 1, 2027, aim to combat fraud by preventing the misuse of these cards for anonymous calls and mass messaging. Each M2M SIM card will be strictly tied to a specific device, with changes to identifiers allowed only once per month except in cases of loss or damage. Operators will gain access to a unified platform for managing SIM cards, including activation, deactivation, status checks, location tracking via base stations, and service suspension for discrepancies. All relevant data such as owner INN, operator details, equipment type, identifier, and installation address must be submitted through Gosuslugi or operator platforms. Voice calls will be limited to one minute, white lists for contacts can be updated monthly, and mass SMS or auto-dialing will be banned except for authorized senders.

AntiMalwareAugust 10, 2026Translated from Russian

Read at source

The Russian Ministry of Digital Development has put forward a draft regulation that will require all Russian companies and individual entrepreneurs to register their M2M SIM cards and the connected equipment in the ESIA system.

The new rules are planned to take effect on 1 September 2027. Under the proposal, devices such as ATMs, payment terminals, sensors, and smart meters will receive digital passports, and their SIM cards will be permanently linked to specific hardware.

Operators will be allowed to offer businesses a single management platform for M2M numbers. Through this platform companies will be able to activate or deactivate SIM cards, verify equipment status, determine device location via base stations, and block service in case of loss or malfunction.

Registration in ESIA will require the following data: SIM number, owner’s INN, operator information, equipment type and name, device identifier, and installation address. Data can be submitted either via the Gosuslugi portal or through the operator’s own platform.

Each M2M SIM card must be rigidly bound to one device. Changing the device identifier will be permitted no more than once per month, except in cases of breakdown or loss. If the information in ESIA does not match the actual equipment, the operator must suspend service until the records are corrected.

Communication controls will also be tightened. Companies will be able to create white lists of allowed numbers for calls and SMS. Voice calls will be limited to one minute, while mass messaging and auto-dialing will be prohibited except for pre-approved senders. Updates to white-list contacts will likewise be restricted to once per month.

The Ministry explains the initiative as a measure against fraudsters who currently exploit M2M SIM cards for anonymous mass calling and messaging because these cards can be used for ordinary mobile voice services. The new framework is intended to confine M2M cards to their original purpose of transmitting telemetry data from ATMs, meters, and similar equipment.

Gosuslugi ESIA

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Policy & Regulation

Policy & Regulation

Russian Minister Proposes Blocking All SIM Cards Linked to Fraudsters Banned in MAX Messenger

The head of Russia's Ministry of Digital Development, Maksut Shadaev, has suggested extending account bans in the MAX messenger to a broader set of mobile restrictions. Under the proposal, operators would be required to disconnect not only the number used in a fraudulent account but also any other SIM cards belonging to the same individual. The measure would also introduce a cooling-off period preventing the person from registering new numbers after a ban. Officials aim to make it significantly harder for scammers to resume operations following enforcement actions. Key implementation details, including how ownership and involvement in fraud will be verified, remain unspecified in the initial statement. The initiative specifically targets fraud prevention and does not apply to every account suspension in the messenger.

AntiMalwareOct 29, 2026Translated from Russian

Policy & Regulation

Russia Ready to Disclose Source Code of Social Networks, Messengers and AI Models

Russian Minister of Digital Development Maksut Shadaev announced that the country is prepared to open the source code of its domestic social networks, messengers, and video services to international partners. Shadaev stated that Russia will show the internal structure of these platforms and allow joint modification of algorithms. The proposal was presented at the Platform of Sovereign Development exhibition and reported by TASS. He contrasted Western IT products, described as opaque black boxes, with Russia's new approach of transparency to avoid what he called digital colonialism. The same offer extends to Russian foundational AI models, which could be adapted to foreign legislation, cultural requirements, and security standards. No specific products, repository links, timelines, or licensing terms were provided during the speech.

AntiMalwareOct 29, 2026Translated from Russian

Policy & Regulation

Russia Mulls Mandatory Two-Week IMEI Registration for Foreign Smartphones via Gosuslugi

Russian authorities are discussing a new rule requiring owners of smartphones imported without customs clearance or purchased abroad to register the devices through the Gosuslugi portal within two weeks. Failure to register would result in the device being blocked from Russian mobile networks. The Ministry of Digital Development is preparing the requirements, which remain under discussion with possible changes to timelines and details. Devices already operating in Russia before April 2027 would be exempt and continue working without restrictions. Officially imported equipment would be added to the registry automatically. The measure is expected to significantly impact gray-market sellers, potentially forcing up to 70 percent of them out of the market and driving price increases of up to 40 percent for some models.

AntiMalwareOct 29, 2026Translated from Russian