Russia’s Ministry of Digital Development, citing anti-fraud security concerns, is phasing out SMS login verification codes on the mobile version of the state public services platform Госуслуgi, with priority shifting to authentication methods including the domestic IM tool MAX, TOTP, and biometrics. SMS login will remain available temporarily on the desktop web version. This move will further shrink the use cases for government-related A2P SMS services.
The adjustment will be officially rolled out between December 2025 and January 2026. Given that users have leaked SMS verification codes in a large number of fraud cases, authorities announced the gradual phase-out of SMS login on mobile devices. Alternative authentication methods include MAX push verification codes, TOTP authenticators, and biometrics, with SMS only retained for the desktop web version. In February 2026, platform-specific discrepancies emerged: some iPhone users were forced to redirect to MAX to obtain verification codes when logging in, with no other authentication options available, while Android users still had multiple login methods to choose from. This triggered discussions about differentiated treatment across platforms.
From May to September 2026, the integration between MAX and the government services platform continued to deepen. On September 1, MAX launched a digital identity feature that allows users to link their MAX account to Госуслуgi, which can be used for government service scenarios such as travel QR code scanning and digital driver’s license display. Meanwhile, all smartphones manufactured after September 1, 2025 are required to come pre-installed with the MAX app, ready for use right out of the box, further expanding the user base of this channel.
From the perspective of cross-border A2P business, government SMS verification scenarios are continuously migrating to domestic IM platforms. However, the desktop side still retains the SMS channel, so SMS will not be completely eliminated. Service providers need to pay attention to the structural changes in traffic from Russian government notifications and verification codes.
