Russia blocks 2-factor SMS for Telegram and WhatsApp

Russian network operators have begun blocking SMS and calls from WhatsApp and Telegram. This is intended to block the codes necessary for 2-factor authentication (2FA) for new or existing accounts of the messenger services. In parallel, a restriction on the number of SIM cards that individual citizens can own is being implemented.

This is reported by the Russian IT news website kod.ru reports. According to the report, the blockade of SMS and calls had not yet been fully implemented by all network operators as of October 30. However, it is likely only a matter of days until the officially mandated measure is consistently implemented. WhatsApp is a service of the US company Meta Platforms, which is classified as “extremist” by the Russian Federation and is banned. Telegram was founded in 2013 by a pair of Russian brothers who now operate the service from Dubai. Signal and Viber have already been blocked in Russia since 2024. Recently, network operators, at the behest of the state, have also been trying to restrict the use of Telegram and WhatsApp not only in the Russian Federation itself but also in occupied territories such as Crimea.

The two messaging operators have reacted to the blockade. If a Telegram user has an open session on another device or multiple accounts and an active session in at least one account, Telegram sends the 2FA code via the open channel. In addition, Telegram and WhatsApp are calling on existing users in Russia via the app to provide their email address. It is advisable to use an address hosted by a foreign provider. If authentication becomes necessary, Telegram and Meta will then send the 2FA codes via email. However, this only helps if customers actually provide their email addresses, and it does not help with setting up new accounts.

P2P SMS could help

Telegram has come up with a trick for this: it invites Russian Android users to allow their phones to send up to 100 SMS per month. Then Telegram can send the 2FA codes via private Russian mobile phones within the country. This is intended to circumvent censorship. However, this is risky for the participants, as they could attract the suspicion of the regime, which can be unhealthy.

According to kod.ru, Telegram is currently testing this procedure with a few Russian users. Participation in the Peer-to-Peer Login Program is voluntary. For a certain number of SMS actually sent, participants receive a gift link for a premium Telegram subscription as a thank you, which can be passed on to third parties. Premium users are not shown ads, can send larger files, and benefit from faster downloads and other advantages.

The Peer-to-Peer Login Program is not yet available for iPhones, likely because iOS prevents the Telegram app from sending SMS. Incidentally, Telegram users can additionally secure their account with a so-called cloud password; an email address can also be provided for this in case the cloud password is forgotten. Ideally, this should not be the same address used for 2FA codes.

Authorities block millions of SIM cards

From now on, Russian citizens are only allowed to own a maximum of 20 SIM cards, and immigrants a maximum of ten. This is tracked through a state register, where everyone can also view the SIM cards registered under their name online. Here, every Russian can also prohibit the reissuance of SIM cards under their name.

Network operators have access and must not only observe these settings but also automatically block excess SIM cards. Kod.ru quotes: According to authorities, this currently affects 89,000 Russians and 37,000 immigrants who have more SIM cards than allowed. In total, more than seven million connections were shut down at once in early November: 6.5 million for Russian citizens and 757,000 for immigrants.

(ds)