Putin signs a Russian law requiring that internet platforms verify new users' identities via state-approved systems during registration, effective December 2023
Context & Ripple Effects
The December 2023 registration mandate extends a decade-long sequence rather than starting one: the 2016 anti-terrorism law first forced communication providers to store calls, messages, and metadata, then the 2018 rules made messaging apps identify every user by checking data against mobile carriers. The 2017 VPN ban closed the main escape hatch from those controls.
First-order effects
- Every internet platform serving Russian users must integrate state-approved identity systems into signup flows before December 2023, ending anonymous account creation on any covered service.
- Platforms that cannot or will not run state verification face the same compliance-or-exit pressure created by the 2021 law requiring large foreign tech companies to open local offices.
Second-order effects
- Foreign platforms must weigh whether Russian daily audiences justify building state-ID integration, pushing some toward geo-blocking Russian users rather than absorbing the compliance burden.
- Users seeking anonymity are pushed toward workarounds precisely where the 2017 VPN ban has narrowed them, concentrating enforcement demand on the remaining unblocked channels.
Third-order effects
- If the pattern holds, verified state identity becomes the default precondition for participating in the Russian internet — shifting platform design worldwide toward jurisdiction-specific registration stacks, with the state as gatekeeper of access rather than a regulator of content after the fact.
The trend: Russia is methodically moving identity control upstream — from stored communications, to messaging apps, to the point of account creation itself — making state-approved ID the entry ticket to online services.