Security Certificate Revocation Disrupts Access to Major Russian Bank Websites Worldwide

Major Russian banks have encountered widespread access issues on popular international web browsers, including Google Chrome, Safari, Firefox, and Edge. These browsers have begun flagging their websites as insecure following the revocation of their TLS/SSL security certificates by foreign certification authorities. This development poses significant implications for digital banking security and user trust in the Russian financial sector's online presence.

Background and Technical Impact

Leading Russian banks such as Sberbank, VTB, Alfa-Bank, Rosselkhozbank, Promsvyazbank, Uralsib, and Bank Saint Petersburg have been unable to open automatically in browsers administered outside Russia. Attempts to access these sites trigger warnings stating that the connection is not secure, requiring users to manually bypass browser security prompts to proceed. While some banks, for example T-Bank, remain accessible without warnings, the majority face these restrictions.

The root cause is the revocation of TLS/SSL certificates issued by foreign certification authorities like Japan-based GlobalSign. These certificates authenticate websites and enable encrypted connections, essential for secure online banking transactions. The revocations began mid-June 2023 and intensified following Western sanctions imposed after Russia's invasion of Ukraine, particularly the EU's 21st sanctions package enacted in late July 2023.

Consequently, many Russian websites have transitioned to domestic security certificates issued by Russian certification centers. However, these are not recognized by international browsers, leading to widespread security alerts for users abroad.

"The revocation of international TLS/SSL certificates forces Russian banks to rely on domestic certification, which currently lacks global recognition, impacting the accessibility and perceived security of their digital services internationally."

Implications for Digital Banking and Cybersecurity

The shift to domestic certificates affects not only user access via browsers but also compatibility with various applications that enforce strict certificate validation. This situation raises concerns about the security and continuity of digital banking services for international users and partners. The reliance on Russian browsers, such as Yandex Browser—which fully supports domestic certificates—is increasing, particularly within the Russian internet ecosystem.

Yandex Browser has emerged as the primary platform where these Russian bank websites operate without restrictions. However, cybersecurity experts have raised privacy concerns regarding Yandex’s data collection policies. According to its privacy policy, Yandex collects extensive user information, including personal data, browsing history, geolocation, social interactions, and more, with the possibility of sharing this data with third parties as legally required. This trade-off between accessibility and privacy intensifies the challenges for users balancing secure banking access and data confidentiality.

The ongoing certificate revocations highlight vulnerabilities in the Russian digital financial infrastructure amid geopolitical tensions. They emphasize the critical need for resilient, internationally recognized security frameworks that sustain safe access to banking services globally.

Market and Regulatory Outlook

Industry experts estimate that between 15,000 to 20,000 Russian domains could be affected by the certificate revocations, indicating a broad impact across the Russian digital economy. This disruption may prompt accelerated development of Russia’s sovereign internet infrastructure and domestic cybersecurity solutions to circumvent dependence on foreign authorities.

At the same time, the heightened promotion of Yandex Browser in Russian digital platforms—such as its integration into VKontakte’s user menus—reflects a strategic push to consolidate domestic digital ecosystems amidst growing international isolation.

The evolving landscape presents considerable challenges and opportunities for fintech companies, digital banks, and cybersecurity providers operating in or with Russia. Stakeholders must navigate compliance with international sanctions, maintain secure digital operations, and address user privacy concerns in an increasingly fragmented internet environment.