FSB Plans to Monitor Users of 12 Popular Messengers
On December 19, 2024, a large number of internet services were added to Russia’s official registry of information dissemination organizers (ORI). Many of these services are not only popular but also play a crucial role for both Russian citizens and billions of users worldwide. Most are used for communication and messaging.
According to Russian law, information dissemination organizers are required to provide user data—including details about their actions and interactions—to the FSB (Federal Security Service) upon request. This includes messages, calls, and video communications.
The most notable addition to the registry is the American messenger WhatsApp, which has over 2 billion users globally. (Source)
Earlier this year, many Russians reported issues with WhatsApp. Experts believe these disruptions were caused by Russian authorities testing the blocking of popular messengers, which Roskomnadzor (the Russian communications regulator) attributed to foreign DDoS attacks on telecom operators. During regional internet shutdowns, WhatsApp is often among the first services to be blocked, as seen earlier this year and recently during attempts to disconnect Chechnya, Dagestan, and Ingushetia from the global internet.
It’s worth noting that WhatsApp is the only Meta service (Meta is designated as an “extremist organization” and banned in Russia) that is not blocked. Facebook and Instagram have been banned since 2022 by order of the Prosecutor General’s Office.
Other Messengers Added to the Registry
- Skype (USA): Source
- Wire (Switzerland): Source
- Element (UK): A free, cross-platform messenger with end-to-end encryption. Source
- KakaoTalk (South Korea): Popular mainly in Southeast Asia. Source
- Session (Australia): An open, anonymous, decentralized messenger built on the Oxen ecosystem, supporting end-to-end encryption and minimizing metadata use. Source
- DUST (USA): Source
- Pinngle Safe Messenger (Armenia): Source
- Status (Switzerland): Source
- Keybase (USA): Source
- Trillian (USA): Source
- Crypviser (Germany): Source
What Does Inclusion in the Registry Mean?
Being added to the ORI registry requires service providers to store user data, information about their actions and interactions, messages, photos, audio and video calls (if available), and to provide this information to the FSB. Law enforcement must have constant access to this data via special equipment, which the service providers are required to install at their own expense.
It is unclear whether these companies are aware of their inclusion in the registry or how closely they plan to cooperate with Russian authorities. Hopefully, the services themselves will clarify their positions soon.
Update (December 21, 2024): Roskomnadzor has confirmed that WhatsApp has been added to the ORI registry.