According to independent analyses, the Russian ‘super app’ allegedly possesses capabilities that go far beyond those required for an ordinary messaging platform.
Since becoming president of Russia twenty-six years ago, Vladimir Putin has understood a simple truth about political power in the twenty-first century: whoever controls information controls society. For years, he has tightened his grip on television, newspapers, radio stations, websites, and social media. Independent journalism has been branded “foreign influence”, and opposition figures have been imprisoned or driven into exile. Internet censorship has expanded dramatically since he ordered the full-scale invasion of Ukraine in 2022.
Now, Putin’s control appears to be entering a far more intrusive phase, not simply controlling what Russians read, but potentially monitoring everything they do. At the centre of this new digital landscape is MAX, a state-backed “super-app” developed by the Kremlin-linked technology company VK. Marketed as Russia’s answer to China’s WeChat, and pre-installed by law on all new phones and tablets sold in Russia, MAX promises to combine messaging, banking, government services, shopping, payments and digital identity into a single application. Convenient? Of course, but convenience has often been the most effective disguise for surveillance. The question confronting users is not whether MAX offers useful services; it is whether the price of that convenience is the surrender of privacy itself.
Reports published by cybersecurity researchers, investigative journalists and international organisations paint a deeply troubling picture. According to independent analyses, the application allegedly possesses capabilities that go far beyond those required for an ordinary messaging platform. Researchers claim hidden code allows extensive monitoring of users’ devices, while investigators argue that the app’s architecture creates unprecedented opportunities for state surveillance. VK and the Kremlin reject these accusations, of course, insisting that MAX is secure and complies with Russian law. But in an authoritarian state where the intelligence services wield enormous influence over technology companies, such assurances inspire little confidence.
One of the most disturbing allegations concerns unauthorised monitoring of users’ devices. Independent researchers have reported that MAX contains hidden functionality capable of capturing screenshots and accessing information generated within the application ecosystem. If accurate, such capabilities would allow authorities to reconstruct not merely conversations but an individual’s financial transactions, communications and digital behaviour. The implications extend well beyond ordinary privacy concerns. Modern smartphones contain intimate portraits of their owners. They record relationships, political beliefs, financial activities, travel histories, medical appointments and personal photographs. A government with unrestricted access to such information possesses a level of social control that previous generations of secret police could scarcely imagine.
The allegations become even more alarming when researchers suggest that the application could impersonate users by sending messages or images without their knowledge. Whether or not such functionality is ever employed, its reported existence raises profound questions about authenticity in digital communication. If citizens cannot be certain that messages genuinely originate from friends or colleagues, trust, the foundation of every society, begins to erode.
Equally troubling are claims that MAX operates with unusually privileged access to mobile operating systems, allowing it to inject code into integrated mini-applications. Cybersecurity experts have warned that such capabilities resemble those found in sophisticated malware rather than conventional consumer software. Again, these findings remain disputed by VK. But they deserve careful scrutiny precisely because the stakes are so high.
Perhaps the greatest danger lies not in any single technical feature but in the philosophy underpinning the project itself. MAX is designed to become indispensable. Messaging is only the beginning. The application aims to integrate banking, government documentation, payments, healthcare services, digital identification and commercial transactions into one centralised platform. This concentration of personal information creates an irresistible resource for any security service.
History offers sobering lessons about governments that accumulate excessive information about their citizens. The Soviet Union maintained vast paper archives through the KGB. East Germany’s Stasi assembled files on millions of people using human informants. Those surveillance systems required armies of bureaucrats and years of painstaking work. Artificial intelligence changes everything. Today’s algorithms can analyse billions of messages in seconds, identify social networks automatically, detect behavioural patterns, predict future activity and flag individuals considered politically undesirable. Combined with comprehensive smartphone data, such systems transform surveillance from selective observation into continuous monitoring. The result is what scholars increasingly describe as digital authoritarianism.
Researchers have also criticised the absence of default end-to-end encryption within MAX. Unlike encrypted messaging platforms where communications remain unreadable even to service providers, critics argue that MAX routes user metadata and potentially accessible communications through infrastructure controlled by VK, a company closely associated with the Russian state. While metadata may sound harmless, it is anything but. Knowing who contacted whom, when, from where and how frequently can reveal almost as much as reading the conversation itself. Intelligence agencies around the world have long recognised metadata as one of the most valuable forms of digital intelligence.
Equally significant are reports that the application detects virtual private networks (VPNs), which millions of Russians have relied upon to bypass internet censorship. VPNs have become essential tools for accessing blocked news websites, independent journalism and social media platforms unavailable through Russia’s increasingly restricted internet. An application capable of identifying attempts to circumvent censorship would strengthen the state’s ability to enforce information control. That matters because surveillance is rarely an end in itself. Its ultimate purpose is behavioural change.
Citizens who believe they are being watched begin censoring themselves. They avoid sensitive discussions. They hesitate before reading independent media. They withdraw from political debate. The fear of surveillance often proves more powerful than surveillance itself, and this is precisely why authoritarian governments invest so heavily in monitoring technologies. The objective is not necessarily to arrest millions of people. It is to persuade millions to remain silent.
International concern reflects these broader implications. The European Union has imposed sanctions on VK and entities associated with MAX, citing concerns over alleged surveillance activities and the platform’s links to the Russian state. Press freedom organisations have similarly warned that journalists, activists and government critics face heightened risks if communications become concentrated within a state-backed ecosystem. Whether every technical allegation ultimately proves accurate is almost secondary to the larger issue. A society in which one government-linked application mediates communication, identity, payments, official documentation and daily commerce concentrates extraordinary power in the hands of the state. That concentration should alarm defenders of liberty everywhere.
Russia is unlikely to remain unique. Governments across the world increasingly recognise the attraction of integrated digital ecosystems. Artificial intelligence, biometric identification and cashless payments offer remarkable convenience. They also provide unprecedented opportunities for monitoring populations. Technology itself is neither democratic nor authoritarian. Its character depends upon the institutions that govern it. In societies protected by independent courts, free media, robust privacy laws and competitive elections, digital innovation can empower citizens. In authoritarian systems lacking meaningful checks and balances, identical technologies become instruments of coercion.
MAX therefore represents something much larger than another messaging application. It is a warning about the future relationship between citizens and the state.
In his book Nineteen Eighty-Four, the well-known British author George Orwell imagined a world in which Big Brother watched through television screens fixed to the walls of every home. Reality has become considerably more sophisticated. Today, people voluntarily carry powerful surveillance devices in their pockets, checking them hundreds of times each day.
The most effective surveillance state therefore no longer needs to force its way into private lives. It merely needs citizens to download the app.
John Dobson is a former British diplomat who also worked in UK Prime Minister John Major’s office between 1995 and 1998. He is currently a visiting fellow at the University of Plymouth.
