By spring 2026, Russia had cemented a new, inverse logic of blocking: only what’s on the list is allowed, everything else is unavailable. This is not pointwise blocking of individual sites but a fundamentally different model. We explain what it means in practice and how to prepare in advance so you’re not left without connectivity.
A blacklist in reverse
It used to work by a clear scheme: Roskomnadzor blocked specific resources, and everything else stayed available by default. That’s a “blacklist” - only what’s listed is forbidden.
A whitelist flips the logic. Now, during restrictions, only a pre-approved set of services works, and anything not on it stops opening - including most familiar foreign sites. By default everything is closed; only the listed items are open.
The list is compiled by the Ministry of Digital Development. By spring 2026 it had passed a hundred services and keeps updating: in April alone it was expanded twice. It’s a living document, not a one-off decision.
What’s on the list and what isn’t
The criterion for inclusion is not the owner’s country but the physical location of servers in Russia. That’s why some foreign retailers with local infrastructure made the list, while some services Russian in spirit did not.
Note the last item: in whitelist mode, the tools for restoring access themselves come under restriction. That’s exactly why they need to be set up in advance, not at the moment everything has already gone dark.
What it looks like for the user
Whitelist mode is, for now, tested in waves rather than permanently. It may switch on for an hour or two, or hold for several days. As of March 2026 the mode had been rolled out in 68–71 regions, across all four “big four” mobile operators - MTS, MegaFon, Beeline, Tele2.
The easiest way to learn the restrictions have switched on is via local Telegram channels - while you still have connectivity. Technically the filtering runs on the TSPU equipment installed at operators. It looks at the server name at the start of the secure connection (the TLS SNI field): if the domain is on the whitelist, the connection passes; if not, it’s dropped. So the only reliable insurance is a pre-configured secure connection, such as Russian VPN by Tainet, which we’ll return to below.
What to do in advance
The main principle of preparation is simple: do everything while the regular internet still works. At the moment the mode kicks in, installing and configuring anything will be too late.
Where to get a stable connection
Whitelists hit stability first of all: even permitted services sometimes won’t open under load, while everything familiar outside the list drops entirely. Russian VPN by Tainet solves the problem from the side whitelist mode can’t reach so easily: the connection is encrypted in full, and the network entry point is moved outside.
A Russian VPS, meanwhile, remains a guaranteed entry point from inside the country, while protocols like VLESS+REALITY hide the very type of traffic - to the equipment it looks like an ordinary website visit. It’s worth setting the connection up in advance - you can try the service for free: sign up in the Telegram bot or in your account, then from $0.10 a day.
Tainet - a stable connection with no complicated setup. Sign up through the Telegram bot or in your account, support is real people, from $0.10 a day.
Try it →Frequently asked questions
Are whitelists permanent or temporary?
For now the mode is switched on in waves, but the trend is clear: the list expands, the geography of tests grows. It’s wiser to prepare for it to stick rather than disappear.
Why do even permitted services sometimes lag?
When the mode switches on, millions of people hit a short list of services at once, and the load on them spikes. Plus the filtering equipment itself doesn’t work perfectly.
Can I tell in advance the mode is about to switch on?
There usually are no official announcements. The most workable signal is local Telegram channels and chats, where people report loss of access in real time.
Bottom line
Whitelists are not a one-off action but a gradually cementing model. You need to prepare for them while the internet still works: install the local services you need and set up a stable secure entry point in advance. At the moment the mode switches on, there’ll be no time left to configure. If you would rather start from the basics, there is a breakdown of how a VPN connection is put together.
If this article describes your situation, Tainet handles it without the technical hassle: connect through the Telegram bot or in your account, from $0.10 a day. Questions go to support - we answer fast.
