From Poisoning to Firewalls

An internal unit of the FSB is driving a new wave of restrictions on Russia’s internet, according to the independent outlet The Bell. The agency’s Second Service, which focuses on protecting the constitutional order and countering terrorism, is now behind measures ranging from blocking WhatsApp and Telegram to targeting virtual private networks (VPNs), the report said.

Participants at a recent meeting at Russia’s Digital Development Ministry described an unusual level of pressure. According to one attendee cited by The Bell, officials distributed written orders instructing companies to combat VPN use, required signatures, and quickly collected the documents, warning of consequences for noncompliance.

Several industry sources said the Second Service has recently taken a direct role in shaping internet policy. One IT professional told The Bell it was the first time in decades he had seen a representative of the unit at such a meeting. "Everything changed because they took over the initiative. Now they are everywhere and decide everything," he said. In recent weeks, inspections were reportedly conducted at major payment services to determine whether users were paying VPN providers. Some companies were instructed to halt such transactions immediately.

The shift appears to have begun at least last summer. One source said the Second Service pushed for restrictions on voice calls in WhatsApp and Telegram in August. Another said the head of the unit, Alexei Sedov, met with Russian President Vladimir Putin around the same time and promised to "restore order" online.

Details of that meeting remain unclear. However, shortly before restrictions were introduced, state news agency TASS reported that suspects in the Crocus concert hall terrorist attack had been recruited via Telegram chats. 

Historically, internet regulation in Russia has been handled by technical units within the FSB, including its information security and scientific divisions. Industry veterans told The Bell that the Second Service had not previously been involved in key initiatives related to the internet in Russia. The unit’s mandate has traditionally been political. It oversees extremism cases, monitors opposition activists, and plays a role in designating organizations as undesirable. 

The Second Service traces its roots to a Soviet-era KGB department responsible for combating dissent. In recent years, it has drawn attention for its alleged role in the 2020 poisoning attempt on opposition leader Alexei Navalny.

Industry figures describe the transfer of internet oversight from technical specialists to the Second Service as a significant shift. One former IT executive said the change reflects a view among senior officials that technical units were not sufficiently focused on national security.

The push for tighter controls has also placed pressure on Digital Development Minister Maksut Shadayev, who has publicly defended policies that sources say originate from security agencies. Once seen as an effective advocate for the tech sector, Shadayev is now navigating increasingly hardline proposals.

Some of the most stringent measures have reportedly been scaled back. Security officials proposed requiring companies to detect VPN use and automatically fine SIM card owners via government services, according to a source familiar with the discussions. The fines proposal was ultimately dropped. At the latest meeting on VPN restrictions, participants said Shadayev appeared resigned and did not strongly challenge the measures under consideration.