
Mandatory app for new devices in Russia raises concerns over potential state-sponsored spying and privacy violations.
Academic researchers warn that the Russian-made 'Max' messenger app, now mandatory on new devices, functions as a surveillance tool capable of capturing user data, screenshots, and injecting code, potentially facilitating state monitoring of the Russian public.
AI-generated summary
The Russian government has mandated the installation of the Max app on all new digital devices. The app was developed by VK and is subject to Russian law, which allows the FSB access to user data.
Every new digital device in Russia is mandated to come equipped with a messenger app named Max.
But beneath its innocuous white-and-blue logo lies software that experts warn could allow the Kremlin to dramatically expand its capacity to spy on the Russian public.
The app, launched last year by Russian tech company VK, is not only a space for messaging and video calls but serves as a broader information system with the capacity to perform rigid surveillance on citizens.
New research conducted by academics has found tens of millions of people use the platform, which has the potential to serve as a âbackdoorâ to sweeping invasions of privacy that âundermine the confidentiality, integrity, and availability of informationâ.
The study conducted by academics at the University of Michigan, University of Calgary, Georgia Institute of Technology, and the Indian Institute of Technology, added that the âAndroid security model does not have any built-in mechanisms to constrain or audit a super-appâ.
By downloading the app, researchers found that Max can screenshot usersâ devices and the contents of mini-apps without their knowledge.
Even more worryingly, the app is also able to impersonate users without them knowing and has access to all information stored in apps including messages and payments.
The app also has the capacity to inject code into the mini-apps, which can be used to launch cyberattacks, one of the academics behind the study, Roya Ensafi, told The Guardian.
âWhat Max provides is the cleverest and also the scariest tactic by authoritarian governmentsâ to surveil their citizens, she said.
The Independent previously spoke to analysts who predicted the app could work as a âspy programmeâ, allowing Russiaâs FSB security service to establish rigid surveillance and that encrypted messaging apps such as WhatsApp would be banned.
With servers based in Russia, Max is subject to Russian law, which grants the FSB to have access to certain materials.
WhatsApp - the global messenger app used by more than 70 per cent of Russians - was banned in February 2026, pushing people towards using Max.
Telegram has faced a reduction in service, with the Russian government saying it has been used for violations of Russian law.
In June 2025, Max had one million users. By October this had climbed to 50 million, in December it rose to 75 million and by March 2026, this number had skyrocketed to 100 million, although the numbers are released by Max and have not been independently verified.
Russian opposition journalist Andrey Okun said last year that Max would be central to the Kremlinâs dream of constructing a âdigital gulagâ.
Writing for the Republic website, he said in comments reported by The Times: âThis will be a sterile space in which the authorities have complete control over the leisure time, motives and thoughts of citizens.â
Experts on Russian technology and surveillance say that the introduction of the app, which is said to have been developed on Vladimir Putinâs orders, is only the latest step in repeated measures to ramp up its ability to monitor the entire Russian online sphere.
âThis is a normalisation of Russia's surveillance of its internet use⊠it's part of a long, long process,â Keir Giles, author of Russiaâs War on Everybody, told The Independent.
âThe perceived threat from Western communications technology is not something that's new. It's something that has always been a focus for the Russian security services.â
Moscowâs security industry has for decades been frustrated by Russian citizens using foreign software such as Google, Skype and Hotmail, all of which made it much more difficult to read their messages, Mr Giles explained.
Western communications technologies have always been perceived as a threat by Russian security services. After years of trying to clamp down on services such as WhatsApp, the latest move to push Russians towards Max is âreally just tidying up at this pointâ, he added.
Popular apps such as WhatsApp - a messenger owned by Meta, which is designated as an extremist organisation by Russia - have now been banned.
âIt would be disruptive and unpopular to [ban it] without having a replacement available,â Mr Giles added.
Mark Galeotti, a veteran observer of Russian security and politics and director of Mayak Intelligence, told The Independent : âThe Russian state looks keen to be using sticks rather than carrots... just to kind of drive people towards Max.â
Pushing users towards Max is unlikely to have a significant impact on Russian opposition and activism against the government, Prof Galeotti explained, because they tend to avoid WhatsApp in favour of âmore seriously secureâ apps such as Proton Mail and Signal.
But it may prompt a significant change in âcasual dissentâ, he added. âThat's where it might have a freezing effect: people who might be under other circumstances willing to send messages with slightly scurrilous content about the Kremlin might think twice.â
Russia previously attempted to block the Telegram messaging app in 2018. But the attempt failed, and did not practically affect the availability of Telegram in Russia, leading it to be officially unblocked two years later. However, it is subject to restrictions.
Max has been contacted for comment.

As Trump prepares to meet Xi at the White House on Sept 24, AI safety concerns grow following warnings about rogue agent swarms and calls for global coordination. Trump delayed Taiwan arms sales and dismissed AI risks as a hoax, while China enforces strict AI regulations but resists constraints on technological rise. Experts see potential for narrow cooperation on AI incident notification despite deep distrust and competing narratives.

Apple has unveiled the iPhone Duo, its first foldable smartphone, marking a major design shift for the flagship series. The device is scheduled for an October release with a starting price of $1,999, announced alongside new iPhone 18 Pro models and Siri AI updates.

GoPro has launched the Mission 1 Pro ILS, a cinema-focused camera featuring a Micro Four Thirds lens mount and a 1-inch sensor. While it offers superior image quality for professionals, it lacks waterproofing and electronic lens controls, requiring manual operation.

The Austrian Academy of Science, Mistral, and Sail Reply are launching Apollo, an advanced large language model trained on 600 million Ancient Greek words to help scholars restore damaged papyrus fragments.

Meta's new AI model Muse overtook ChatGPT as the top iOS free app with over 730,000 downloads in five days, boosting Meta shares over 20% and driving the Nasdaq and Magnificent Seven ETF to record highs, while global leaders including Trump, Xi, and Zelenskyy prepare for meetings in New York and Washington D.C. amid AI and geopolitical tensions.

Meta's Muse AI personal agent app launched on September 8 and has surpassed 2.5 million downloads in the U.S., topping iOS free app charts ahead of ChatGPT, Claude, and Grok. The app allows users to direct AI agents for web tasks like form filling and email organization, with free and paid subscription tiers. Amazon has blocked Muse from its site over privacy and security concerns, while Shopify is partnering with Meta for agentic checkout. Meta's stock rose over 11% on Monday amid the app's success.