Russia's Ministry of Digital Development (Mintsifry) has announced that mandatory age verification for online platforms is the country's "nearest agenda item" - a move that could reshape how millions of Russians access the internet and further threaten the privacy that VPN users rely on.
Shadaev's Statement at SPIEF-2026: A Focus on Censorship
On June 6, 2026, Maksut Shadaev, head of Russia's Ministry of Digital Development, made the announcement at an IT breakfast session held on the sidelines of the St. Petersburg International Economic Forum (SPIEF). Speaking about protecting younger generations online, the minister said: "The issue of integrating age identification mechanisms into platforms will definitely come before us. This is our nearest agenda."
Shadaev noted that "Europe and many developed nations" are already pursuing "stringent restrictions" in this direction. He said Russia's ministry is currently studying how the online gaming platform Roblox implements age verification - a notably ironic example, given that Russia itself blocked Roblox in December 2025 over alleged "extremist and terrorist content."
No legislative timeline or specific technical details were announced. But the statement carries weight: it signals that age-linked internet access is moving from parliamentary discussion to ministerial priority.
How Existing Infrastructure Threatens Digital Privacy
Russia has been building toward this moment for years. In October 2025, State Duma deputy Anton Nemkin (a former FSB officer) advanced a proposal to require identity verification for accessing online content, specifically through Russia's state digital infrastructure:
- ESIA - the Unified System of Identification and Authentication, which underpins the Gosuslugi government services portal
- UBS - the Federal Unified Biometrics System, which holds facial recognition and biometric data
Nemkin's proposal claimed these systems could "verify age without directly transmitting passport data to third-party platforms," positioning the state as a centralized identity broker. In practice, this means a platform would receive only an age-confirmed signal - but the state itself would log which platform was accessed, by whom, and when.
The scope was also revealing: the proposal defined "adult content" broadly to include not just pornography but also materials with "foul language, violence, and propaganda of antisocial behavior" - a definition wide enough to encompass independent news sites, political commentary, or any content that authorities designate as harmful.
De-Anonymization Is the Explicit Goal of the State
Russia's officials have been unusually candid about their long-term objectives. Deputy Chairman of the State Duma Andrei Svintsov stated directly that internet anonymity for Russian users would disappear within "three years, five at most." The government is also developing a "super-app" that would combine digital ID, government services, and payments into a single state-controlled interface.
Age verification, in this context, is not a child protection measure deployed in isolation - it is one piece of a broader de-anonymization architecture. Each new requirement to authenticate identity before accessing online content creates a new data point in a system that operates under Russia's SORM-3 surveillance laws, which require internet providers and platforms to give the FSB direct access to user communications and metadata.
What This Means for VPN Users in Russia
Russia already has approximately 25 million regular VPN users, a number that has surged since 2022 as the government accelerated its blocking of independent media, social networks, and messaging apps. VPNs allow access without revealing location or identity to Russian infrastructure - precisely the capability that mandatory identity verification would undermine.
The conflict between VPN use and age verification operates on two levels:
- Platform-level authentication: A VPN masks your IP address but cannot replace an identity credential. If platforms must verify users through ESIA before granting access, a VPN alone is insufficient - users would need a verified state account to log in.
- Blocking escalation: Foreign platforms that refuse to implement Russian state verification may face accelerated blocking - making reliable VPN access even more critical, and giving authorities more justification to intensify their anti-VPN technical measures.
For users already inside Russia's internet environment, the practical response is to use a VPN provider with a verified no-logs policy, strong obfuscation protocols to bypass deep packet inspection, and servers outside Russian jurisdiction. Providers like Mullvad, ExpressVPN, and NordVPN operate under legal frameworks that offer substantially stronger privacy protections than Russian law permits.
Russia Is Not Alone - But Democratic Context Matters
Shadaev's "Europe is doing it too" framing reflects a real global trend. Australia banned social media for users under 16 in December 2025. Japan began considering similar restrictions in April 2026. France, Spain, Germany, and India have all advanced various forms of age verification legislation. The UK's Online Safety Act mandates age verification for adult content sites.
However, there is a critical distinction between how democracies and authoritarian governments implement these systems. In most Western countries, age verification is designed to be privacy-preserving, using third-party services that confirm age without revealing full identity to the platform. In Russia, the system runs through state-controlled infrastructure subject to FSB access - meaning the same biometric record that confirms your age also records your online activity.
As IDTechWire noted in its analysis of the earlier ESIA proposal, the system would create "a permanent, queryable link between verified state identity and private online consumption habits, effectively ending anonymity for accessing broadly-defined 'adult' content under the guise of child protection."
What Comes Next for Internet Freedom Legislation
Shadaev's SPIEF announcement follows a familiar Russian legislative pattern: a proposal surfaces in a high-profile public forum, gauges reaction, and either advances to formal legislation or is quietly shelved. The October 2025 Duma proposal on ESIA-based verification suggests the legislative groundwork is already being laid.
Observers expect any initial law to target social media access for minors, mirroring Australia's approach. But Russia's track record - where "child protection" laws have repeatedly evolved into tools for broader access restriction and content control - suggests that scope expansion is not a hypothetical risk but a historical pattern.
For now, age verification remains a stated priority rather than enacted law. But as Shadaev himself put it: this issue will definitely come before them.
