State messenger MAX: why you should not register unless you need to
MAX is a national messenger based on VK infrastructure and integrated with the digital ID of Gosuslugi (Госуслуги). Registering in it by default means transferring to VK and its related services a phone number, name, and link to a Gosuslugi account; when extended functionality is enabled, it also means contacts from the address book, messaging metadata, and the history of government services received through the messenger.
MAX itself is a legal Russian service; the issue is not “illegality,” but that registration in it significantly expands the user’s digital profile, which is already concentrated in one ecosystem (Gosuslugi, digital ID, biometrics in the EBS (ЕБС)). For those who do not use it for work or for another necessity, refusing to register remains a fully legal option.
Below is a neutral overview of what MAX collects by default, what its jurisdiction is, and in which cases avoiding registration makes sense from a privacy point of view.
In brief
- MAX is a national messenger based on VK and integrated with the digital ID of Gosuslugi.
- Jurisdiction is Russia; data is processed under Russian personal data law and stored in the Russian Federation.
- Registration requires a phone number and SMS confirmation; extended functionality requires linking to Gosuslugi.
- Contacts, metadata, login logs, and the history of correspondence with government bodies are available to the service operator under the law.
- Registration in MAX is voluntary; refusing it does not block access to Gosuslugi or other services.
What MAX is and how it works
MAX is part of the “national messenger” strategy announced in 2024–2025. Technically, it is built on VK infrastructure (see Interfax on the status and preinstallation of MAX) and integrated with the state identification system.
Jurisdiction and data operators
The service operates under Russian personal data law (Federal Law 152-FZ) and communications law. The servers and the legal entity acting as operator are in the Russian Federation. This means that, within the law, user data can be requested by government bodies according to the established procedure — as with any Russian service.
Link to digital ID
MAX can be used to receive a number of government services — this is handled by integration with the digital ID of Gosuslugi (see the Gosuslugi FAQ on digital ID). Without connecting this link, most of the messenger’s “government” functionality is unavailable, but basic messaging works.
What is mandatory during registration
A mobile phone number (Russian Federation segment by default), SMS confirmation, and basic profile data (name). When extended functions are activated — linking to Gosuslugi and access to the device’s contacts.
What is collected and why
| What is collected | When | Purpose stated by the operator |
|---|---|---|
| Phone number | Mandatory during registration | Account identification |
| Name and profile photo | During registration | Visibility to contacts |
| Contacts from the address book | When permission is granted in the app | Finding friends in the service |
| Messaging metadata (with whom, when, volume) | Automatically | Service operation, statistics |
| Contents of correspondence with government bodies | When contacting them through MAX | Provision of government services |
| Login and device log | Automatically | Account security |
| Geolocation when sent | With permission | Geotags, nearby services |
How to check right now
If the app is already installed, check in your smartphone settings which permissions MAX has (contacts, microphone, camera, geolocation, background activity) and disable those that are not needed. In the app itself, check the “Security” or “Sessions” section: the list of active devices, the link to Gosuslugi, and the visibility of your phone number to others.
If you have not started registering yet, assess whether there is a real need. Other messengers with end-to-end encryption by default remain an alternative (Signal, Telegram secret chats), although their legal status in the Russian Federation changes periodically. It is also worth checking in parallel whether your full name appears in the public wanted database of the MVD (МВД) — this is a separate risk not related to MAX.
Warning signs vs false alarms
A warning sign is pressure from an employer, bank, or government body demanding that MAX be installed as a condition of service. Installing software under threat of denial of service is a separate legal situation that should be discussed with a lawyer. Also watch for sudden messages “from Gosuslugi via MAX” asking you to confirm data: this is a typical phishing scheme.
A false alarm is the mere existence of a national messenger and its preinstallation on new devices. Preinstallation does not make registration mandatory: the app can be left inactive, sometimes deleted, or, as a last resort, disabled in settings.
What to do next
- Assess the real need to register: a work chat, correspondence with government bodies, or a specific use case.
- If you register, do not link your digital ID unless necessary; basic functionality works without it.
- Review the app’s permissions (contacts, geolocation, camera, background activity) and leave only those you need.
- Do not use MAX for private correspondence — it is not positioned as a secure messenger with end-to-end encryption by default.
- For sensitive topics, choose messengers based on end-to-end encryption and an independent jurisdiction.
- If installation is imposed by an employer, record the demand in writing and consult a lawyer before signing agreements on access to personal data.
Disclaimer: this material is for informational purposes and is not legal advice. For a specific situation, contact an attorney. The legal status, registration requirements, and feature set of MAX may change; for up-to-date information, check consultant.ru and the official documentation of the service operator.
Conclusion
MAX is a legal Russian service that has a specific function (national communication plus a gateway to Gosuslugi) and a specific cost in the form of expanding the user’s digital profile. Registration remains voluntary, and for most private tasks there is no real need for it. The decision whether to “install it or not” should be made consciously, with an understanding of what data is transferred and to whom, rather than by default or under pressure.