Russian Bank Websites Become Inaccessible on Major International Browsers Amid Security Certificate Revocations

Several major Russian bank websites have become inaccessible or flagged as insecure on widely used international browsers such as Google Chrome, Safari, Firefox, and Microsoft Edge. This situation stems from the revocation of TLS/SSL certificates by foreign certification authorities, which has direct implications for US companies conducting business with Russian financial institutions.

Background and Technical Impact

According to multiple reports, leading Russian banks including Sberbank, VTB, Alfa-Bank, Rosselkhozbank, Promsvyazbank, Uralsib, and Bank Saint Petersburg are affected by the sudden loss of trusted security certificates. These certificates are essential for establishing encrypted and authenticated connections between users and bank websites.

International browsers now label these sites as "not secure," requiring users to manually override warnings to access the pages. This automatic blocking occurs because the TLS/SSL certificates issued by foreign authorities have been revoked, leaving Russian banks reliant on domestically issued certificates that international browsers do not recognize.

“The revocation of security certificates by international authorities has effectively isolated Russian banking sites from standard global browser trust ecosystems.”

Russian browsers like Yandex Browser, which integrates support for domestic certificates, continue to provide seamless access to these bank websites. Yandex Browser remains the most widely used browser within Russia and is actively promoted in the country’s largest social media platforms.

Sanctions and Security Certification Withdrawal

The root cause of the certificate revocations is linked to growing international sanctions against Russia following its 2022 invasion of Ukraine. In June, Japanese certification authority GlobalSign began withdrawing TLS/SSL certificates from Russian domains. The banks affected are among those targeted by the European Union’s 21st sanctions package adopted in late July 2023.

This revocation affects approximately 15,000 to 20,000 Russian domains, creating significant challenges not only for browser access but also for applications and services that require strict certificate validation.

Consequences for US Businesses and International Commerce

For American companies that maintain partnerships, conduct transactions, or provide services involving Russian banks, this development introduces new operational hurdles. Secure online communication channels are essential for financial transactions, customer verification, and information exchange. Interruptions to these channels raise compliance and cybersecurity concerns.

Moreover, US firms relying on browser-based tools for business with Russian counterparts face increased risks of disrupted workflows and potential data privacy issues. Given that Russian browsers collect extensive user data under their privacy policies, switching customers or employees to Yandex Browser to bypass security warnings may not be a viable or secure option for US entities.

Broader Implications and Outlook

This situation highlights the intersection of geopolitical tensions with digital infrastructure and cybersecurity. The fragmentation of trust frameworks in internet security protocols complicates cross-border business, especially for sectors such as finance that rely heavily on encrypted communications.

US companies should assess their exposure to Russian counterparties and plan for alternative communication and transaction methods. Close monitoring of both regulatory developments and technical changes in security certification is essential to mitigate risks.

As security certificate ecosystems become increasingly politicized, international businesses may face prolonged challenges accessing Russian digital services through conventional means. This could accelerate the adoption of localized internet governance models and proprietary technologies that diverge from global standards.