In short: using a VPN in Russia is not prohibited by law - there is no liability for the mere fact of using the technology. The fines everyone has heard about concern two other things: advertising VPN services (50,000-80,000 roubles for individuals, up to 500,000 for companies) and deliberately searching for material from the federal list of extremist content (3,000-5,000 roubles). Here is how the regulation is built, who it applies to, and what changed by 2026.
A timeline of the regulation
2017 - law 276-FZ. The first dedicated law: it did not ban VPNs but required services operating in Russia to connect to a state system and filter access to resources on the register. Services that do not do this are restricted - which is what the regular news about yet another VPN that “stopped working” is about.
2024 - a ban on promotion. Rules came into force prohibiting the distribution of information that advertises or promotes means of access to restricted resources. Guides, roundups and recommendations that help reach resources on the register fell under the ban. At this stage the liability lay mainly with distributors of information and with platforms.
July 2025 - the law on fines. Signed on 31 July 2025, in force from 1 September 2025. Two key novelties. First, monetary liability for advertising VPN services: 50,000-80,000 roubles for individuals, 80,000-150,000 for officials, 200,000-500,000 for legal entities. Second, the new Article 13.53 on searching for extremist material.
2026 - practice. The rules began to be applied noticeably: in February 2026 a court fined Google 22.8 million roubles for distributing advertising of VPN services (the amount exceeds the base range because of repetition and turnover). Requirements for platforms to restrict suspicious connections were tightened.
Article 13.53: what people are actually fined for
The article’s wording is “searching for knowingly extremist material and obtaining access to it, including through hardware and software means of access to resources whose access is restricted”. The fine is 3,000 to 5,000 roubles.
The key words here are “knowingly” and “deliberate”. This is about material on the federal list of extremist content (around 5,500 entries), and a violation counts as one only when intent is proven - the person deliberately looked for a specific prohibited item, understanding that it was prohibited. The authors of the law stated publicly that monitoring the search queries of all citizens and checking browsers without procedural grounds is not envisaged, and that using resources whose access is restricted is not in itself a violation.
What follows practically: clicking a link by accident is not a violation; using a VPN is not a violation; a VPN becomes an aggravating factor only in combination with a proven deliberate search for extremist material, because it complicates the argument that it happened by chance.
Advertising a VPN: why this concerns business, not users
The fines of 50,000-500,000 roubles are for advertising and promoting VPN services, that is, for distributing information: posts with promo codes, roundups of services for reaching restricted resources, sponsored integrations by bloggers. This is what platforms and content authors are fined for - users who distribute nothing are not covered by these rules.
The regulator has set out the markers of prohibited information: describing ways to reach resources on the register, advice and endorsement of using such means, download links in that context, and persuading people that such access is attractive. Note that every marker involves a link to resources whose access is restricted - information about a VPN as a technology (how encryption works, what protocols are) and corporate use do not fall under the ban.
Frequently asked questions
So is a VPN banned or not? It is not banned. There is no liability in law for using a VPN as a technology - both the ministry and the authors of the laws have confirmed this repeatedly. What is prohibited is advertising and promoting services for reaching restricted resources, and deliberately searching for extremist material.
Can I be fined for having a VPN app installed? No. Having the app is not a violation. The violations are distributing advertising and deliberately searching for prohibited material, which has to be proven.
What about a corporate VPN for work? Entirely legal. Corporate networks, remote access to work systems and protecting employee data are ordinary IT practice that the regulation does not touch.
Is it legal to use a VPN to reach Russian services from abroad? Yes. Russian banks, Gosuslugi and streaming services are not restricted inside Russia - access to your own accounts from abroad has nothing to do with any of the prohibitions. How it works technically is covered in a VPN with a Russian IP.
Where can I see what is prohibited to search for? The federal list of extremist material is public and published on the justice ministry’s site. Article 13.53 applies only to entries on that list.
A disclaimer
This article is an informational review of legislation, not legal advice: in a specific situation the decision is made by a lawyer working from the current wording of the rules. We update the text as the regulation changes.
How changes on the networks affect connections in practice is covered in why a VPN may stop working and what to do.
