Concerns surrounding the Russian messaging application Max have intensified as IT specialists continue to uncover vulnerabilities and surveillance mechanisms embedded within the service. A recent analysis by a user on the IT platform Habr has revealed alarming features, including the ability to disable encryption on conversations with a single command.
Unveiling the Surveillance Mechanisms
The user, known as zarazaexe, shared findings on May 18, 2026, that not only confirmed existing suspicions but also highlighted new, troubling functionalities. Among these is a forced-update feature that allows developers to replace app content with a message indicating that users cannot write or call until they update. This update mechanism, which bypasses Google Play, raises significant concerns about the app’s resilience against potential restrictions by Russian authorities.
Moreover, the analysis revealed that Max collects extensive data, including a list of installed applications, checks for VPNs, and monitors users’ address books. This surveillance is compounded by the app’s capability to disable TLS session validation, potentially exposing user data to entities controlling network equipment.
In a striking revelation, the version of Max examined by zarazaexe included a neural network for real-time speech recognition, capable of identifying speakers and generating text transcripts of conversations. Although these features were removed in a subsequent update, the potential for their reintroduction remains a concern.
Rapid User Growth Amid Controversy
Despite the mounting scrutiny, VK, the parent company of Max, claims rapid user growth. As of early May, the app reportedly surpassed 120 million users, including international audiences in regions such as Asia, Africa, and Latin America. This surge has positioned Max as a leading messenger in Russia, with a reported average daily reach of 68 million users, eclipsing Telegram’s 50 million.
However, the accuracy of these user figures is difficult to ascertain. The decline of Telegram’s accessibility, due to ongoing restrictions, has inadvertently propelled Max’s adoption. Many users are transitioning to Max, often under duress from authorities or employers, as the app becomes increasingly integrated into daily life, from government services to healthcare.
In a strategic move, major mobile carriers in Russia have partnered with VK to facilitate the delivery of authentication and service messages through Max, further entrenching the app in users’ routines.
Challenges in Content and Engagement
Despite its growing user base, Max has struggled to establish itself as a primary source for news and entertainment. As of late April, the platform hosted around 300,000 public channels, a stark contrast to Telegram’s 1.6 million. The slow migration of audiences from Telegram to Max has hindered the development of the advertising market on the platform, leading to an increase in scams.
As the landscape of messaging apps in Russia continues to evolve, the implications of Max’s surveillance capabilities and user growth will be closely monitored by both users and industry experts alike.
