Runet gets a new boss: The Bell exclusive

Russia’s internet crackdown has shifted to the FSB’s Second Service, which has been given a free hand to intensify blocking of WhatsApp and Telegram calls and pressure VPN use. More than 90 million Russians use Telegram monthly, and searches for “VPN” rose from 12 million in December 2025 to 16 million in March 2026, underscoring growing user demand as restrictions tighten. The measures are already hurting businesses and adding to political discontent, with Putin’s approval rating falling to 67.8% in early April from 75.1% in January.

Analysis

The key marketable signal is not “more censorship” but a regime change in execution: when enforcement shifts from bureaucratic regulation to a security-service mandate, the slope of repression steepens and reversals become much less likely. That matters because the primary economic damage is now second-order — higher customer-acquisition costs, lower ad monetization, and more churn for any consumer internet business that depends on persistent engagement and low-friction payments. The immediate losers are platforms with large mass-market user bases and firms selling digital ads or mobile services into a more fragmented, less reachable audience.

The bigger spillover is to the local tech stack around circumvention and compliance. VPN, DNS, proxy, and endpoint-security demand should stay elevated for months, not days, because users do not abandon access habits once they’ve been forced to route around controls; they harden them. That creates a durable benefit for foreign privacy tools, enterprise security vendors, and cloud/network infrastructure names that sell “resilience” rather than pure connectivity, while domestic telecoms face a lose-lose: more capex for filtering, more political blame for outages, and no ability to price through the friction.

The political read-through is more important than the internet read-through: declining approval alongside visible, daily inconvenience raises the odds of an eventual tactical easing, but only if the enforcement machine starts generating elite pushback or measurable macro damage. Absent that, this is a classic ratchet — short-term noise can reverse a specific block, yet the institutional winner remains the security apparatus. The contrarian point is that the crackdown may be overestimated as a direct GDP shock and underestimated as a medium-term productivity tax: the first-order hit is manageable, but the cumulative effect is lower business velocity, weaker consumer time allocation, and more capital flight into offshore or gray-market digital channels.

Key Decisions for Investors

• Long a basket of global cybersecurity/privacy names on weakness for 3-6 months; prioritize firms with consumer VPN, endpoint, and identity exposure. Risk/reward improves if Russia continues tightening, because demand is sticky and relatively insensitive to local macro.
• Short Russian domestic internet-adjacent exposure where accessible via derivatives or offshore vehicles over 1-3 months; the best setup is names monetizing mass consumer attention, since engagement decay tends to show up before hard revenue downgrades.
• Pair trade: long non-Russian network-security / DNS / privacy infrastructure beneficiaries, short emerging-market consumer internet proxies with similar valuation multiples. The spread should widen as compliance and routing costs rise while ad load and session duration fall.
• For event-driven traders, buy short-dated optionality only if there is credible reporting of elite backlash or an official rollback. Otherwise, sell upside into any headline-driven easing attempt; enforcement changes are likely to be tactical, not structural.
• Avoid broad Russia macro shorts as the primary expression; the cleaner trade is on digital infrastructure friction. The macro damage is real but slow-moving, while the security-driven policy path can persist longer than consensus expects.