Back on September 1, 2025, the MAX messenger became mandatory in Russia: smartphone manufacturers were forced to pre-install it on all devices to avoid losing access to the Russian market. You’d think that’s as far as it could go, right? But now the Ministry of Digital Development may mandate confirmation of significant online actions through the MAX messenger as part of the third anti-fraud measures package. This was reported by Forbes, citing sources. For the average user, the story matters for one reason: if the regulation is adopted, the usual methods of logging in and confirming transactions in banks, marketplaces, and services could be replaced or supplemented with mandatory codes sent through the national messenger. Below, we break down what is actually known and whether you need to change anything right now.

The list of mandatory actions through MAX is planned to be expanded

Confirmation Codes Through MAX — What Are They For

According to the publication, the proposal concerns the third anti-fraud measures package, which is being prepared for review. Forbes writes that a source in the IT industry revealed the idea, and two more contacts from the industry and telecom sector confirmed it. According to one of them, a similar regulation had been discussed before but didn’t make it into the final version of the second package.

In the text of the second package, which was adopted in the first reading, there were already amendments about confirming legally significant actions through MAX and SMS. The wording caused disputes: SMS and the messenger were listed with a comma between them, and it was unclear whether confirmation through both methods was required simultaneously or just one would suffice. What exactly counts as “significant actions” was not explained in the bill — the list was supposed to be established by the government.

Government services now through MAX

At the same time, the Ministry of Digital Development directly stated that “such a measure is not being considered.” They added that the third package is currently being coordinated with interested agencies and the industry, and all initiatives are being developed with a balance of security and user rights in mind. Simply put, there is no official bill with this regulation yet — there is a discussion that sources have shared.

How the Internet Will Work Through MAX

The main problem is the vagueness of the wording. “Significant actions” could potentially include a huge number of operations: logging into an account, transferring money, changing settings, placing an order. According to an expert, this concept most likely refers to two-factor authentication — that is, a second verification step in addition to a password.

If the regulation is adopted in a strict form, for you this could mean that some operations will have to be confirmed specifically through MAX, even if you currently use a more convenient and reliable method within an app. Many banks have long had confirmation through one-time keys and email, and tying everyone to a single messenger looks like an attempt to impose it. Incidentally, this has already happened when Government Services started requiring a confirmation code through MAX.

What to Do If Confirmation Codes Start Coming Through MAX

For now, no action is needed: there is no law, and the discussion could end the same way as with the second package. However, it’s already worth taking care of installing MAX on Android if you haven’t done so yet. After all, the trend is obvious: the messenger is becoming mandatory.

Confirmation codes are planned to be funneled into MAX

If the law is passed, you won’t be able to get by without MAX, even though there are many reasons not to use the government messenger:

  • the app being forced upon users;
  • lack of end-to-end encryption;
  • unstable service performance;
  • absence of important features available in other messengers.

It’s worth following this topic if you actively use banks, marketplaces, and government services — they will be affected first if this regulation is ultimately adopted. Also keep in mind that behind the phrase “confirmation of significant actions” there may be an attempt to make MAX a mandatory channel where you currently have a choice.