Russia Mandates “Max” Super-App as Primary Messaging Platform, Raising Surveillance Concerns

Over the past 18 months, tens of millions of Russians have been required to install Max, a violet-blue button app created by VKontakte. Marketed as a patriotic alternative to Telegram and WhatsApp, Max bundles banking, messaging and government services into a single “super-app” ecosystem of “mini-apps.” Forensic analysis by Roya Ensafi, an associate professor of computer science at the University of Michigan, found that Max can screenshot users’ devices, read messages and payment data stored in its mini-apps, impersonate users and inject code into those mini-apps—capabilities that could enable state-directed cyberattacks.

The Guardian

State institutions have pressured employees and students to migrate to Max. In St Petersburg, university student Daniil said he downloaded Max before the academic year after being told that campus access required a QR code generated by the app. Public-sector workers, university staff, teachers and schoolchildren have faced similar mandates.

The Guardian

Russian authorities present Max as a sovereign communications platform, emphasizing its role in “protecting national digital infrastructure.” VKontakte and Max were approached for comment but have not responded. The government’s narrative contrasts with the continued popularity of Telegram and Signal among many elites, who reportedly keep separate devices for Max while using preferred apps on their primary phones.

The Guardian

Ensafi’s research adds nuance to the debate over Max’s surveillance reach. She notes that Max cannot breach apps such as Telegram and WhatsApp when they are installed, but both foreign services are banned in Russia, limiting alternatives. Users interviewed by the Guardian described the app as “very similar to Telegram” in design but expressed widespread privacy worries. Ensafi warned that Russia’s rapid rollout of Max—achieved in roughly a decade—serves as a “wake-up call” for the world, highlighting an aggressive shift toward digital authoritarianism.

The Guardian

• “We have studied Russia’s escalation of internet control for the past decade,” — Roya Ensafi, an associate professor of computer science at the University of Michigan

The Guardian

• “Using Max feels like you never quite know who else might be watching,” — Nikolai, a 34-year-old consultant in Moscow

The Guardian