Russian hosts must verify clients and block VPNs

The Ministry of Digital Development has drafted legislation to tighten server rental rules in the fight against fraud. VPN and proxy service owners who fail to meet Roskomnadzor's requirements will be denied access to Russian hosting services.

Computing resources can only be rented after mandatory identity verification. Hosting providers will be required to report the purpose of server use and check clients against a unified registry of violators.

If a client is found in the Roskomnadzor registry, they will be denied service for one year. Switching to another provider will become impossible due to the centralized system for checking and storing user personal data.

Hosting providers will also be required to disconnect servers upon request from law enforcement agencies when necessary to counter cyberattacks. Additionally, sites requiring login must store authentication logs for three years.

• Mandatory identity verification for server renters
• Annual hosting ban for violators of RKN rules
• Equipment disconnection at the request of special services
• Storage of user authentication data for three years

The draft law was published on the portal for regulatory legal acts for public discussion. Currently, the project supports only a few voices, while sixteen participants oppose it.

The new rules are scheduled to enter into force on March 1, 2028. The initiative aims to strengthen control over internet infrastructure usage and prevent illegal activities.