VPN Regulation in Belarus: What's Different from Neighboring Russia

Is a VPN legal in Belarus?

Yes, in the narrow legal sense: there is no Belarusian statute that makes it a crime for an individual to download a VPN app and use it. That is the same starting point as the answer to "is a VPN legal in Russia," and it is why the two countries get discussed together so often — both governments regulate VPN-adjacent activity primarily through obligations placed on telecom operators and service providers, not through a law that names an individual user as the target. But treating Belarus as simply "Russia's smaller copy" undersells both how differently the two legal frameworks are built and how differently the real-world risk of internet use plays out for an ordinary person in each country.

Belarus's framework for controlling internet access is, in some respects, older than Russia's. The foundational decree dates to 2010, and a rule specifically addressing "anonymizing" tools — the category VPNs, proxies, and Tor all fall under in this kind of regulation — was adopted in 2015, two years before Russia's equivalent 2017 law. What makes Belarus meaningfully different in practice isn't the VPN-specific rule itself, which is similarly narrow in scope to Russia's, but everything built around it: a historically centralized state telecom gateway that gives authorities a single practical choke point rather than a distributed network of ISPs to police, a pattern of blunt nationwide or regional internet shutdowns tied to specific political events rather than continuous protocol-level filtering, and — the part that matters most for anyone weighing personal risk — a dramatically expanded set of "extremism" and mass-media laws, enforced aggressively since the disputed 2020 presidential election, under which people have faced serious legal consequences for content they read, shared, or were merely subscribed to, independent of whether a VPN was involved at all.

This guide walks through what Belarusian law actually regulates, how the 2015 anonymizer rule works, why the country's internet infrastructure has historically differed from Russia's, what happened around the 2020 election and its aftermath, and — critically — why the "extremism" laws matter more to personal risk in Belarus than the VPN-specific rules do.

What does Belarusian internet law actually regulate?

The foundational instrument is Presidential Decree No. 60, "On Measures to Improve the Use of the National Segment of the Internet," signed by President Alexander Lukashenko in February 2010. Rather than targeting VPNs specifically, Decree No. 60 built the general regulatory architecture that everything since has operated within: it required internet service providers to identify users accessing the internet from public places such as internet cafes and libraries, gave state bodies authority to compile and enforce a national registry of restricted online resources, and established the Operational and Analytical Center (OAC) — a body operating directly under the president — as the key state authority overseeing Belarus's internet infrastructure and information security.

A separate strand of regulation runs through Belarus's Law "On Mass Media," amended in 2014, which expanded the definition of what counts as a "mass medium" to include many online news resources and required their registration, while also giving the Ministry of Information authority to block access to unregistered or offending online resources without needing a prior court order. That combination — a broad registry-and-blocking regime for content, plus an infrastructure-oversight body (the OAC) sitting above the telecom sector — is the general shape of Belarusian internet law, and it's the same shape into which the VPN-specific rule described below was later inserted, rather than VPNs being addressed by a standalone law of their own the way some coverage implies.

The 2015 rule on "anonymizers" and VPNs, explained

The provision most directly relevant to is a VPN legal in Belarus is a 2015 regulatory decision issued jointly by the OAC and the State Communications Committee — frequently referenced in digital-rights reporting as Resolution No. 6/8 — which required telecommunications operators to restrict access to "anonymizers": a category the decision defines broadly enough to cover VPN services, proxy servers, and similar tools, when those tools are being used to reach a resource that is already on the national restricted list. In other words, the rule doesn't target VPN use in general — it targets the specific act of using an anonymizing tool as a workaround to something that has already been separately blocked.

Structurally, this is close to what Russia's 2017 law (Federal Law No. 276-FZ) later did: obligations placed on providers and network operators rather than on individual users, tied to enforcement of an existing government blacklist rather than a freestanding ban on VPN software. The Belarusian version came first, is narrower in its formal drafting, and — importantly — has never been paired with anything resembling the sustained, nationwide deep-packet-inspection campaign against VPN protocols that Russia has run since around 2021. In practice, most commercial VPN traffic in Belarus has not faced the kind of protocol-level disruption that has made VPN connections in Russia progressively less reliable; Belarus's more disruptive interventions have instead tended to come as blunt, event-driven shutdowns, covered further down.

As with the Russia guide's treatment of 276-FZ, it's worth being precise about what the 2015 rule does and doesn't say: it does not create a criminal or administrative penalty for an individual who personally installs and uses a VPN app. The obligation runs to the telecom operator, requiring it to technically restrict the anonymizing tool's ability to reach blacklisted resources — not to punish the person using it. That distinction is easy to lose in secondary coverage that shorthands the rule as "Belarus banned VPNs," which overstates what the actual text does.

How is Belarus's approach different from Russia's?

Since the two countries are constantly discussed together — and since Belarus and Russia coordinate closely on security and telecommunications policy under their Union State framework — it's worth laying out the actual differences point by point rather than treating "post-Soviet authoritarian internet restriction" as a single undifferentiated category.

Timing and legal drafting. Belarus's anonymizer rule (2015) predates Russia's VPN law (2017) by two years, and is a regulatory decision issued by an executive body (the OAC, jointly with the State Communications Committee) rather than a statute passed through parliament, whereas Russia's 276-FZ went through the State Duma as ordinary federal legislation. That's a difference in legal mechanism, not necessarily in ultimate authority — both are backed by the full weight of their respective states — but it reflects Belarus's generally more centralized, decree-driven style of governance.

Infrastructure and enforcement style. Russia's more aggressive recent enforcement runs through distributed deep-packet-inspection equipment (installed at individual ISPs under the 2019 "sovereign internet" law) that can selectively target specific VPN protocols nationwide while otherwise leaving connectivity intact. Belarus has historically relied on a far more centralized point of control — for decades, the state telecom operator historically known as Beltelecom held an effective monopoly over the country's connection to the international internet backbone, meaning the state didn't need to coordinate across many independent ISPs to affect nationwide access; it could act at a single gateway. That centralization has made Belarus's most visible interventions look less like Russia's protocol-by-protocol filtering and more like blunt, whole-network disruptions during specific political moments, discussed in the next section.

Where the real personal risk sits. This is the most consequential difference. In Russia, the legal framework aimed at individuals has stayed comparatively narrow — providers and public promotion of circumvention tools, not private use, as the sibling guide to this one explains in detail. In Belarus, a parallel and much more aggressively enforced body of law — covering "extremist" content, materials, and organizations — has, since the 2020 election and subsequent crackdown, been used to bring serious criminal cases against individuals over online content itself: what they read, shared, subscribed to, or were a member of in a messaging app, independent of whether a VPN was used to access it. That means the honest answer to personal risk in Belarus has to weigh a second, harsher body of law that has no direct equivalent enforcement intensity in Russia's current framework — covered fully further down.

What hasn't changed. In both countries, the formal VPN-specific rule targets providers and infrastructure, not the individual act of connecting to a VPN, and in neither country does simply having a VPN app installed constitute a standalone criminal offense under the VPN-specific provisions themselves. Where the countries diverge is what surrounds that baseline.

Why did Beltelecom's gateway monopoly matter?

Understanding Belarus's internet infrastructure history helps explain why the country's restrictions have tended to look different in practice from Russia's, even where the underlying legal goals are similar. For a long period, Beltelecom — the state-owned telecom operator — held a state-sanctioned monopoly on Belarus's connection to international internet backbone infrastructure. Every byte of traffic crossing Belarus's border to and from the wider internet passed through infrastructure the state directly controlled, which is structurally quite different from a country with many independent ISPs each operating their own international links.

That centralization gave Belarusian authorities a much simpler practical lever than Russia has had to build: rather than needing to install specialized deep-packet-inspection equipment across a large, more fragmented ISP landscape the way Russia's 2019 sovereign-internet law set out to do, disrupting or restricting Belarus's international connectivity has historically been achievable at a much smaller number of chokepoints. This is a large part of why Belarus's most visible internet-restriction events — discussed next — have tended to take the form of broad connectivity disruptions during specific windows of time, rather than the sustained, selective, protocol-targeting campaign Russia has run against VPN traffic specifically since 2021.

The market has partially diversified since Beltelecom's early monopoly years, with additional licensed operators now present, but the state retains close regulatory control over the telecom sector generally through the OAC and the State Communications Committee, and a meaningful degree of practical centralization over international connectivity has persisted. That matters for a VPN user in a very concrete way: a VPN's effectiveness depends on the underlying internet connection actually functioning, and a government with the ability to disrupt connectivity broadly can affect VPN access simply by affecting internet access itself, without needing to identify or target VPN traffic specifically at all.

What happened to internet access around the 2020 election and after?

The single most consequential event for understanding real-world internet restriction in Belarus is the disputed presidential election held on August 9, 2020, and the mass protests that followed the announcement of the official results. In the days immediately surrounding the election, independent internet-monitoring organizations widely documented a severe, largely nationwide disruption to internet access in Belarus — mobile data service became effectively unusable for an extended period, and access to a wide range of websites and communication platforms, including several VPN services people were attempting to use to reach blocked resources or communicate securely, was significantly degraded or unreachable.

This is a materially different pattern from anything documented in Russia around a specific election. Rather than a sustained technical campaign against VPN protocols carried out over months and years, Belarus's most severe restriction was concentrated in an intense, short-duration window tied directly to a specific political event, consistent with the centralized-gateway infrastructure described above making that kind of blunt, whole-network action logistically simpler than it would be in a country with a more distributed ISP landscape. In the weeks and months that followed the election, human rights and press-freedom organizations continued to document more targeted blocking of independent news sites, messaging platforms, and specific online resources associated with the protest movement, alongside periodic further disruptions tied to subsequent politically sensitive dates.

The practical lesson for anyone thinking about VPN use in Belarus is that the single biggest risk to connectivity itself has historically been tied to timing around major political events rather than being a constant, steady-state condition the way Russia's DPI-based filtering has become. A VPN that works reliably in Belarus on an ordinary week is not a guarantee that the same will be true during a period of heightened political tension, and that risk is broader than VPN traffic specifically — it can affect internet access as a whole.

Does mobile internet face different rules than fixed-line access?

In practice, yes — mobile connections have historically been the more exposed side of Belarus's internet-restriction toolkit, and it's worth understanding why before assuming a VPN on a phone behaves the same way a VPN on a home broadband connection does. Belarus, like a number of countries in the region, has long required SIM cards to be registered against a verified identity, consistent with the general user-identification approach Decree No. 60 set out for public internet access points back in 2010. That identity link means mobile traffic is, structurally, easier for a network operator to associate with a specific person than traffic from an unregistered home connection or a public Wi-Fi network might be — a VPN changes what the destination and content of that traffic look like to the operator, but it doesn't change the fact that the underlying mobile account itself is already tied to an identity at the registration level.

Mobile networks were also the most visibly affected layer during the August 2020 disruption described above — several independent monitors specifically noted that mobile data service degraded more severely and for longer than fixed-line broadband did during that period, which is broadly consistent with mobile infrastructure being a smaller number of operators to coordinate against, and with mobile data being the connection method most associated with on-the-ground protest coordination and documentation at the time. A practical implication for anyone relying on a VPN in Belarus is that a fixed-line connection, where available, has historically proven somewhat more resilient during acute disruption events than a mobile data connection alone — worth keeping in mind rather than assuming both behave identically under stress.

Is personal VPN use itself a crime in Belarus?

No — and this is worth stating as plainly as the equivalent answer for Russia, because the two countries get conflated so often. Neither Decree No. 60 nor the 2015 anonymizer rule creates a criminal or administrative offense for the basic act of installing a VPN app and using it for ordinary browsing, work, streaming, or privacy. The obligations those instruments impose sit with telecom operators and infrastructure providers, requiring them to restrict anonymizing tools' ability to reach already-blacklisted resources — they don't define personal VPN use itself as prohibited conduct.

What creates real exposure in Belarus, more so than in Russia, is what the VPN is used to access, read, share, or discuss — and this is precisely where Belarus's risk profile diverges from its neighbor's. Belarus's expanded "extremism" and mass-media laws, covered in detail in the next section, have been applied since 2020 to prosecute people for online conduct that has nothing to do with VPN use as such: subscribing to a Telegram channel later designated "extremist," sharing a news article, or being a member of an online chat group. Using a VPN doesn't create that exposure, and not using one doesn't remove it — the exposure comes from the content and the conduct, which is the same underlying principle the Russia guide makes about that country's law, just applied here to a considerably more aggressively enforced set of statutes.

Do "extremism" laws create additional risk beyond VPN use?

Yes, and for anyone weighing personal risk in Belarus specifically, this matters more than the VPN-specific rules do. Belarus's Ministry of Internal Affairs maintains a list of material and organizations formally designated "extremist," and that list has been expanded dramatically since the 2020 crackdown to include a large number of independent media outlets, opposition-linked Telegram channels, and other online resources. Belarusian human rights organizations — including Viasna, one of the country's most prominent human rights groups — have documented a large and sustained number of criminal cases brought under Belarus's extremism-related Criminal Code provisions against individuals for conduct as limited as subscribing to, sharing, commenting on, or even simply viewing content later designated "extremist," in some cases discovered through searches of a person's phone at a border crossing or during a routine stop.

This is a fundamentally different kind of legal risk than anything the VPN-specific rules create, and it doesn't hinge on whether a VPN was used at all. A person who read a now-banned news outlet's website directly, without any VPN, and a person who used a VPN to reach the same content face exposure from essentially the same underlying law — the extremism designation attaches to the content and the conduct of engaging with it, not to the method of connection. If anything, a VPN is more often discussed in this context as a tool people use defensively, to reduce the chance that their access to a particular resource is directly visible to their own internet provider, rather than as something that itself creates legal jeopardy.

Belarusian authorities have also been widely reported to conduct device searches — including demands to unlock phones and inspect messaging apps — at borders and during detentions connected to protest activity, in a manner that goes well beyond what network-level VPN blocking alone would address. A VPN protects the contents and destination of live network traffic; it does nothing to protect message history, photos, or app data already stored on a device that a person is later compelled to unlock. That distinction is genuinely important for anyone in Belarus whose situation involves political or human-rights-related risk, and it's a gap that no VPN, regardless of provider, is designed to close.

This guide is written for general informational purposes about how Belarusian internet regulation is structured, not as security guidance for people facing active political or legal risk. If that describes your situation, treat this article, and general consumer VPN advice in general, as background rather than complete guidance, and look to organizations that specialize in digital security for journalists, activists, and human-rights defenders operating under conditions of state surveillance for guidance tailored to your actual threat model. Our guides to VPN use for journalists and VPN use for human rights defenders cover some of the general considerations in more depth, but neither is a substitute for situation-specific expert guidance.

A brief timeline: how did Belarus's internet regulation evolve?

As with Russia's framework, Belarus's rules didn't arrive as a single law — they built up over more than a decade, and the sequence explains a lot about why today's situation looks the way it does.

2010 — Presidential Decree No. 60 establishes the foundational regulatory architecture: user identification requirements at public access points, a national registry of restricted resources, and the Operational and Analytical Center's authority over internet infrastructure.

2014 — Amendments to the Law "On Mass Media" expand the definition of regulated "mass media" to cover many online resources, introduce a registration requirement, and give the Ministry of Information power to block unregistered or offending resources without prior judicial approval.

2015 — The OAC and State Communications Committee issue the joint decision (commonly referenced as Resolution No. 6/8) requiring telecom operators to restrict "anonymizers," including VPN services, when used to reach an already-blacklisted resource — the provision most directly analogous to Russia's later 2017 VPN law.

August 2020 — The disputed presidential election and subsequent mass protests trigger a severe, largely nationwide disruption to mobile internet and a range of online platforms and VPN services, widely documented by independent internet-monitoring organizations as one of the most significant deliberate connectivity disruptions in the country's history.

2020 onward — Belarusian authorities significantly expand the list of material and organizations designated "extremist," and begin applying extremism-related Criminal Code provisions aggressively against individuals over online content, subscriptions, and messaging-app membership — a track of enforcement distinct from, and considerably more consequential for individual users than, the VPN-specific rules discussed above.

The throughline is similar in shape to Russia's trajectory — infrastructure-and-registry law first, VPN/anonymizer-specific rules layered on next, then a period of sharply intensified enforcement following a specific political flashpoint — but the Belarusian timeline is compressed earlier, and its post-2020 enforcement intensity, specifically around content and "extremism," has gone further against individuals than anything currently documented under Russia's comparatively narrower VPN-specific framework.

Common misconceptions about VPN legality in Belarus

A few claims circulate often enough that they're worth addressing directly.

"Belarus has banned VPNs outright." Not accurate. There is no Belarusian law that makes VPN software itself illegal to possess or use, and VPN use remains widespread. What exists is a narrower rule requiring telecom operators to restrict anonymizing tools from reaching already-blacklisted resources, plus periodic, event-driven connectivity disruptions that affect internet access broadly rather than singling out VPNs specifically.

"Belarus's VPN law is just a copy of Russia's." The two are structurally similar — provider-side obligations tied to an existing blacklist, rather than a personal-use ban — but Belarus's rule came first (2015 versus 2017), rests on a more centralized infrastructure history, and hasn't been paired with anything resembling Russia's sustained deep-packet-inspection campaign against VPN protocols specifically.

"If I'm not doing anything political, none of this applies to me." The VPN-specific rules genuinely don't create much risk for ordinary, non-political use. But Belarus's extremism-related laws have been applied broadly enough — including to people whose connection to political activity was limited to a chat-group membership or a shared article — that "not doing anything political" is a less reliable safety assumption in Belarus than it would be in many other countries, VPN or not.

"A VPN protects everything on my phone, not just my internet traffic." A VPN encrypts and reroutes live network traffic; it has no bearing on data already stored on a device, such as message history or photos, which can be exposed if the device itself is searched or a person is compelled to unlock it. That gap matters more in Belarus's current enforcement environment than it does in many other contexts.

Does this apply differently to foreign visitors and tourists?

Belarusian law doesn't set out a separate, lighter standard for foreign visitors — the 2010 decree, the 2015 anonymizer rule, and the mass-media and extremism provisions all apply within Belarusian jurisdiction regardless of nationality or visa status, similar to how these kinds of laws generally work elsewhere. In practice, the situations that create the most friction for connectivity itself — broad disruptions tied to specific political events, or blocking of a particular resource — affect a short-term visitor in essentially the same way they affect a resident, since they operate at the network level rather than targeting individuals by citizenship.

Where the calculus differs somewhat for a visitor is around the extremism-related risk described above: a tourist with no ties to Belarusian politics, no history of engaging with content on the restricted-material list, and no reason to be flagged for a device search faces a meaningfully lower practical risk profile than a Belarusian resident with an established online history and social network the authorities may already be aware of. That said, device searches at borders are not limited to residents, and the same general advice applies to anyone: install and test any VPN app you plan to use before you arrive, since a fresh install from inside the country during a period of disrupted connectivity may not be possible, and don't assume a visitor status provides legal insulation the actual statutes don't grant.

What should you actually do if you're using a VPN in Belarus?

A few practical, honest points rather than false certainty in either direction:

• Ordinary personal VPN use — for privacy, security, or accessing a home-country account — is not criminalized under Belarusian law, which regulates telecom operators and anonymizer access to blacklisted resources rather than private individual use.
• Expect connectivity risk to spike around politically sensitive dates — elections, major protest anniversaries, and similar events have historically been the moments when Belarus's centralized gateway infrastructure has been used for broad, short-duration connectivity disruptions, rather than restrictions being a constant, steady-state condition.
• Take the extremism-related laws seriously as a separate and more consequential risk than the VPN rules themselves — what you read, share, or subscribe to online carries legal weight in Belarus's current enforcement environment independent of whether a VPN was involved.
• Remember a VPN doesn't protect data already stored on your device — if your situation involves any risk of a device search, message history and app data need separate consideration, not just network traffic.
• If your situation involves journalism, activism, or any use case where the stakes go beyond ordinary personal browsing, treat this guide as background rather than complete guidance, and consult organizations that specialize in digital security for high-risk users in restrictive environments.
• Install and test your VPN before you need it, particularly given how quickly connectivity conditions in Belarus have shifted around specific events in the past.

Choosing a VPN for use in Belarus

Given Belarus's history of blunt, event-driven connectivity disruptions rather than Russia-style continuous protocol filtering, the practical priorities for someone choosing a VPN with Belarus in mind are somewhat different from a general-purpose pick, though there's meaningful overlap. Obfuscation capability — a connection mode designed to make VPN traffic harder to identify as VPN traffic — is still worth having, since the 2015 anonymizer rule gives telecom operators a mandate to restrict recognizable VPN traffic reaching blacklisted resources, even without Russia's scale of dedicated DPI infrastructure behind it. Our explainer on obfuscated servers covers how that technology works if you want to understand what you're relying on before choosing a provider.

A working kill switch — a feature that blocks all internet traffic if the VPN connection drops unexpectedly, rather than silently falling back to an unprotected connection — matters more in a network environment where broad disruptions are a documented risk, since a connection drop during exactly the kind of event-driven disruption described above is a realistic scenario rather than a hypothetical one. A provider's general logging policy and jurisdiction, covered in more depth in our guide to evaluating VPNs for privacy, remain just as relevant here as anywhere else, and shouldn't be treated as secondary to the connectivity questions.

We haven't independently verified real-time connection performance for any specific provider on Belarusian networks — that kind of status can change quickly, particularly around politically sensitive dates, and depends on which operator and region someone is connecting from, for a general guide to responsibly claim as a fixed fact. What we can point to are the individual provider pages on this site, which lay out each provider's stated features, including whether it offers obfuscated-server or similar stealth-connection options, so you can weigh that against your own needs: our NordVPN review, Proton VPN review, PureVPN review, and FastestVPN review. Our explainer on how VPN encryption works covers the core protocol and feature questions worth asking of any provider before relying on it in a network environment like this one.

One more practical note specific to Belarus: because the country's most severe connectivity disruptions have historically clustered around specific political dates rather than being constant, having a VPN already installed, tested, and configured well before any period of heightened tension is more valuable here than the general "install it early" advice usually is — by the time a disruption is underway, installing anything new, VPN or otherwise, may no longer be realistic.

It's also worth having a basic understanding of how a VPN differs from adjacent tools like a plain proxy or Tor, since Belarus's 2015 anonymizer rule is written broadly enough to contemplate all of them, and they carry meaningfully different tradeoffs in a restrictive network environment — a VPN generally offers a better balance of speed and whole-device protection, while Tor offers a different anonymity model at a real cost to usability. Our comparison of VPNs, proxies, and Tor walks through those differences in more depth. Some providers also offer a multi-hop or "double VPN" connection mode, routing traffic through two separate VPN servers instead of one; it comes with a real speed cost and isn't necessary for most people, but understanding what it actually changes — covered in our explainer on double VPN — is useful background if you're trying to reason carefully about what added protection is worth the tradeoff for your own situation, rather than picking a feature because it sounds more secure.

The bottom line

A VPN is legal for an individual to use in Belarus. What Belarusian law actually regulates is the provider and infrastructure side — a 2010 decree establishing state oversight of the "national segment" of the internet, and a 2015 rule requiring telecom operators to restrict "anonymizers," including VPNs, from reaching resources already on a government blacklist. Neither provision makes it a crime for someone to quietly install a VPN app and use it. Where Belarus genuinely diverges from Russia's better-known framework is in two respects: its most severe connectivity disruptions have tended to be blunt, centralized, and tied to specific political events like the 2020 election rather than a sustained technical campaign against VPN protocols, and — far more consequentially for personal risk — an aggressively enforced set of "extremism" and mass-media laws has been used since 2020 to prosecute individuals over online content and associations that have nothing to do with VPN use at all. The honest answer to is a VPN legal in Belarus is yes; the more useful answer is that the real risk in Belarus today sits mostly outside the VPN question entirely, in what the law now treats as "extremist" content and association — and no VPN, however good, changes that calculation.