This page addresses Russian regulations. It does not recommend circumvention tools, test connectivity in Russia, or establish the legal position of an individual reader.
- Is a VPN illegal to use in Russia? The short answer
- What the 2017 VPN law requires of service owners
- What the 2019 Sovereign Internet law covers
- What changed under Federal Law 281-FZ in 2025?
- VPN blocking and availability are separate from legal status
- What about tourists and visitors?
- Editorial scope, review dates and sources
- Frequently asked questions
Is a VPN illegal to use in Russia? The short answer
The Russian laws reviewed for this guide do not establish a general fine simply for an individual switching on a VPN. On 15 April 2026, Kremlin spokesperson Dmitry Peskov stated that Russian law did not then prohibit or penalize VPN use itself. That statement describes the position he gave on that date; it is not a guarantee about later enforcement or a substitute for examining an individual's circumstances.
Russia nevertheless places significant restrictions on VPN services, blocks access to some providers, and penalizes particular conduct. The distinction matters: ordinary use, operating a service, advertising a service, and intentionally accessing specifically prohibited extremist material are different legal questions.
This guide summarizes identified legal provisions and dated public reporting reviewed on 18 October 2026. It is general information, not legal advice, and does not determine every law potentially applicable to a resident, visitor or business.
What the 2017 VPN law requires of service owners
Federal Law No. 276-FZ, adopted on 29 July 2017, introduced restrictions principally directed at owners of software and hardware used to reach internet resources restricted in Russia. The framework is reflected in Article 15.8 of Federal Law No. 149-FZ.
Under that framework, relevant owners must comply with procedures involving the communications regulator and a federal information system identifying restricted resources. An owner that does not comply with the statutory duties may have access to its service restricted. These are obligations on operators; they should not be paraphrased as a general criminal or administrative ban on everyone who uses a VPN.
Sources: Federal Law 276-FZ; Article 15.8, as introduced.
What the 2019 Sovereign Internet law covers
Federal Law No. 90-FZ, signed on 1 May 2019, established measures concerning network routing, technical facilities and centralized traffic management intended to address threats to the stability, security and integrity of Russia's internet infrastructure. Its principal provisions came into force on 1 November 2019.
The law should not be described as a statute that explicitly bans VPN use or promises that every VPN connection will be identified. Reports of actual network disruption and blocking are separate evidence about implementation.
Sources: Official publication of Federal Law 90-FZ; Human Rights Watch, September 2026.
What changed under Federal Law 281-FZ in 2025?
Federal Law No. 281-FZ of 31 July 2025 amended Russia's Code of Administrative Offences. Its relevant VPN-related provisions generally took effect on 1 September 2025, with separately scheduled exceptions elsewhere in the law.
The provisions distinguish the conduct and the party involved:
| Conduct described in the statute | Provision | Who the cited penalties apply to | Fine stated in the statute |
|---|---|---|---|
| A covered service owner fails to follow the required regulator-interaction, federal-system connection, or restriction obligations | Code of Administrative Offences, Article 13.52, parts 1-3 | Individuals acting as covered owners; officials; legal entities | 50,000-80,000 RUB; 80,000-150,000 RUB; 200,000-500,000 RUB, respectively |
| A repeat violation of those same owner obligations | Article 13.52, part 4 | Individuals acting as covered owners; officials; legal entities | 100,000-200,000 RUB; 200,000-300,000 RUB; 800,000-1,000,000 RUB, respectively |
| Intentionally searching for and accessing material known to fall within the statute's specified extremist-material categories, including through a circumvention tool | Article 13.53 | Citizens | 3,000-5,000 RUB |
| Disseminating advertising for the access tools described in the statute | Article 14.3, part 18 | Citizens; officials; legal entities | 50,000-80,000 RUB; 80,000-150,000 RUB; 200,000-500,000 RUB, respectively |
These are not general fines for merely opening a VPN app. The 300,000-ruble figure appearing in Article 13.52 is an upper bound for officials in a repeat service-owner violation; it should not be attributed to an ordinary VPN user. The exact statutory elements and the scope of application matter.
Source: Federal Law 281-FZ, Article 1 (original amendment text). See also the law overview and commencement dates.
VPN blocking and availability are separate from legal status
Whether a VPN app is legal to use, whether a service is accessible on a particular network, and whether a provider complies with Russian rules are separate questions.
Human Rights Watch reported on 24 September 2026 that Russian authorities had intensified the blocking of circumvention services and pressure on app stores. Citing earlier reporting, HRW said that at least 469 VPNs had been blocked by February 2026. That is a dated reported count, not a live total or a claim that a majority of international VPN providers are blocked.
Zend2 has not performed or published verified Russia-network connectivity tests for this page. We do not identify any VPN product, obfuscation feature, server or protocol as reliably working in Russia. Connectivity may change and cannot be inferred from an app's marketing features.
What about tourists and visitors?
The federal provisions cited above were not found to provide a general tourist exemption from the rules they describe. Equally, those sources do not support claims that tourists are routinely fined or almost never subject to enforcement. Individual circumstances, conduct and applicable legal provisions matter. Seek qualified local advice where the consequences are important.
Editorial scope, review dates and sources
This article is a dated explanation of selected laws, not a continuously updated legal tracker. The Russian statutes and reporting were reviewed for this revision on 18 October 2026. Regulatory interpretation, official guidance and enforcement can change. A law's enactment date, an official's statement date, and the date of Zend2's review should never be treated as interchangeable.
Primary and dated reference material:
- Federal Law 276-FZ (2017) - framework for covered access-tool owners.
- Federal Law 90-FZ (2019) - network governance and centralized technical measures.
- Federal Law 281-FZ (2025), Article 1 - administrative-offence provisions and fine ranges.
- Interfax, 15 April 2026 - attributed statement concerning individual VPN use.
- Human Rights Watch, 24 September 2026 - reported provider blocking and app-store restrictions.
For background on VPNs generally, see What Is a VPN? and the Zend2 learning hub. These are informational links, not recommendations for bypassing restrictions in Russia.