The “whitelist” mode - under which mobile internet access is restricted to services approved by Russia's Ministry of Digital Development - has shifted from an emergency measure to a permanent fact of life across central Russia. In July, only 30.5% of mobile-network user sessions in the Central Federal District operated without restriction, according to data from network-monitoring developer Vigo, cited by Kommersant and based on analysis of roughly 1bn sessions - up 31% since January in the share of connections running under whitelist rules.

The whitelist rules were introduced as an emergency measure to drone threats but has since hardened into standard operating procedure. As IntelliNews reported, Moscow's mobile internet went dark ahead of Victory Day, one of a wave of restrictions that began circulating as legal groundwork for Iran-style blackouts back in January - and that groundwork has since become the everyday default rather than a one-off security measure tied to specific dates or events.

Border regions bear the heaviest cost. As of July 31, only about 12% of sessions in the Bryansk, Kursk and Belgorod regions ran unrestricted - the sharpest declines nationwide over six months, with the share of unrestricted sessions falling 70.6 percentage points in Bryansk, 69.8 points in Kursk and 65.8 points in Belgorod, per Vigo's data. Moscow is the partial exception: about 49% of connections in the capital and Moscow region ran without restriction in July, versus 43.9% in St Petersburg and 58.9% in Leningrad region - and the capital region is one of the few areas where the picture has barely worsened, or even improved slightly, over six months (up 4.7 percentage points in Moscow, 0.6 points in the Moscow region).

A list nobody can see

The whitelist is neither unified nor public. It is known to include the Gosuslugi state-services portal, government and e-voting sites, VK's social network and messenger, Yandex services, and marketplace and telecom-operator sites - but the ministry publishes no single, regularly updated register; instead several separately released lists exist, with no transparent selection criteria or open application process, and the specific lists vary by operator and region. To qualify, a resource must generally host its servers inside Russia and block users from hiding their IP address or using a proxy.

Even inclusion is no guarantee of access: CNews found that by late July, Sberbank - the country's largest bank - would not load on any of the “Big Four” operators' networks despite restrictions being in effect, underscoring how unreliable the whitelist mechanism remains even for services it is supposed to protect.

Mobile data consumption is collapsing nationwide as a result, Vedomosti reported in late July, citing SberMobile data: in the first half of 2026, mobile data use fell 40% in Voronezh, Ivanovo and Kursk regions and Krasnodar Krai, roughly 30% in Moscow and the Moscow region, and 22% nationally.

Operators are restructuring tariff plans and steering subscribers toward wired internet instead, Strategy Partners partner Sergey Kudryashov told Kommersant - but they have no way to recover the lost mobile traffic volume, leaving subscribers paying for access they increasingly cannot use, an “unused package effect” that is pushing more of them to switch providers. Revenue has not yet taken a major hit, TMT Consulting chief executive Konstantin Ankilov noted, because internet access is typically bundled with voice plans, and voice usage has actually risen as subscribers fall back on it during outages.

Operators built the whitelist system themselves, and have since acknowledged its flaws. The Bell reported the scheme originated with VimpelCom chief executive Sergey Anokhin, who proposed this spring moving beyond blanket shutdowns toward keeping full access for subscribers an operator can confidently identify as human rather than drone-piloting software - effectively conceding that the whitelist itself was only ever a “quick fix” rather than a real system.

The result is an economy quietly absorbing a permanent cost IntelliNews has already begun pricing: VPN-driven disruption to banks and marketplaces that one estimate put in thebns of dollars for 2025 alone, now compounding as Russia's small businesses buckle under a mix of taxes, weak demand and wartime disruption that increasingly includes simply not being reachable online.