Russia slowly trying to splinter its internet from rest of world, analysts say

Russia has increasingly blocked Telegram on more than 500 networks with reported access issues across 15 regions including Moscow and St Petersburg, and has imposed mobile internet blackouts (including a full shutdown in central Moscow) that disrupted banking and voice services. Authorities have been testing shutdowns for at least a year and plan to replace foreign messaging with a state-controlled app 'Max', raising the prospect of routine, economy-wide connectivity constraints that could materially impair payments, retail activity and telecom operations.

Analysis

Russia’s measured, network-by-network approach creates a durable but incremental market disruption rather than a single shock; that favors vendors who sell continuously to enterprises (security, routing, satellite fallback) over one-off consumer plays. Because the state is experimenting with the minimum level of breakage that still achieves control, expect an asymmetric rollout: more frequent short blackouts in population centers within 3–9 months, punctuated by deeper regional cuts during military or political pressure points.

Second-order winners are companies that supply non-terrestrial connectivity, remote-access tooling, and centralized enterprise security orchestration — not consumer social apps. Conversely, firms with large ad or cloud exposure to Russian traffic face permanent TAM shrinkage and rising collection/operational costs; domestic consolidation into state-controlled platforms will compress margins and redirect revenue to sanctioned or state-aligned contractors.

Key risks and reversals: inexpensive circumvention (wider VPN adoption, peer-to-peer mesh, or scaled satellite arrays) can blunt the state’s leverage within a 6–24 month window, and severe economic fallout could force partial rollbacks. The market likely underprices sustained enterprise-security spending but may overprice the ease of permanent geographical splintering; position sizing should reflect a multi-quarter-to-multi-year horizon with discrete catalyst checks every 30–90 days.

Key Decisions for Investors

• Buy CRWD (CrowdStrike): initiate a 6–9 month call spread (buy ATM call, sell +20% strike) to capture accelerated enterprise security spend from corporate VPN/remote access demand. Target 25–40% upside; max loss = premium (~100% of debit). Monitor quarterly guidance; tighten or take profits on a 20% move higher.
• Buy IRDM (Iridium) or VSAT (Viasat): take 9–12 month LEAP calls or a modest outright position to play non-terrestrial fallback demand. Reward skew 30–60% if governments and corporates pay up for satellite resilience; principal risk is Starlink/SpaceX displacement and regulatory barriers — cap exposure at 2–3% of tech allocation.
• Buy NET (Cloudflare): accumulate 3–6 month calls or stock for asymmetric upside from traffic routing and edge security services as Russian routing becomes more brittle. Expect 20–35% upside if enterprise and CDN spend shifts; hedge with a 10–15% trailing stop on the equity leg.
• Short YNDX (Yandex) or Russia-exposed ad/consumer internet proxies: use 1–6 month puts or short exposure to reflect TAM loss, increased compliance costs, and state consolidation. Target 30% downside; key risks are state subsidies, forced mergers, or delisting mechanics — size as a tactical, high-conviction short (no more than 1–2% NAV).