Sign In

Sign in to manage your subscription

Bessy Connect
Account
Author: Pavel Onuchin, VPN and network security specialist

6 min read

How apps detect a VPN: Max, Ozon, Wildberries and banks

Since April 2026, many Russian apps have stopped working with a VPN on: Wildberries asks you to turn it off, Ozon says "Something's wrong with the internet", Gosuslugi won't let you in. The reason is a requirement from Russia's Ministry of Digital Development: in late March it ordered more than 120 services to restrict access for VPN users by April 15, under threat of exclusion from the "white list". Apps detect a VPN in two ways: by IP address on the server and by signs on the phone itself. Split tunneling helps with the first; only turning the VPN off for that app or a separate profile helps with the second.

Questions like "how to hide a VPN from an app", "Max detects VPN" and "how Ozon detects VPN" appeared en masse in Yandex suggestions right after this wave.

Which apps block VPNs

AppWhat the user sees
Wildberries"Is your VPN on? Better turn it off"
Ozon"Something's wrong with the internet", product cards and photos don't load, can't place an order
MaxSends its server a flag that a VPN is on (study on Habr, 05.03.2026; Max denies it). We found no reports that the messenger stops working with a VPN
GosuslugiRestrictions when signing in with a VPN
Sber, Avito, X5, HeadHunter, VkusVill, Yandex and VK servicesRestrictions of varying degree, according to Habr as of April 2026

The situation keeps changing. On April 28, Ozon and Wildberries partially restored access for VPN users after sellers noticed a drop in sales. But access remains unstable and depends on the specific VPN and region.

How an app knows you're using a VPN

1. By IP address on the server. The app sends a request, the server sees your IP and checks it against databases of VPN and proxy addresses (MaxMind, IP2Proxy and similar). If the address belongs to a data center or a known VPN service, the block kicks in. This works the same on any device.

2. By network interface on the phone. On Android, any app can ask the system, without special permissions, whether there's an active VPN interface (tun0, ppp and the VPN flag on the network). This isn't hacking: that's how Android works.

3. By mismatched signals. The IP address is in the Netherlands, but the SIM card, time zone, system language and location are Russian. Such a mismatch is an indirect sign of a VPN.

4. On iPhone. It's harder here: iOS gives apps less information about the network. Apps use the list of network interfaces, latency analysis and DNS. So detection on iPhone is usually less reliable, but the server-side IP check works the same.

Can you hide a VPN from an app

It depends on how the check is done.

If they check the IP, split tunneling helps. You exclude Ozon, Wildberries, your bank or Gosuslugi from the VPN, and their traffic goes directly with a Russian address. Other apps keep working through the tunnel. How to set it up: split tunneling.

If they check the interface on the phone, split tunneling may not be enough. The app sees that the system has an active VPN at all, even if its own traffic bypasses it. Then the options are:

  • turn the VPN off while using that app;
  • on Android, move the app to a work profile (Island, Shelter or the built-in "Second space" on some brands): a VPN in the main profile isn't visible to the app in the second one;
  • use the service in a browser on a computer without a VPN.

Tips like "hide the VPN icon" or changing DNS don't get around the check: the app looks at system data, not the icon.

What this means for the user

According to available data, as of April 2026 apps restrict access but don't ban accounts for using a VPN as such. Max is a separate story. On March 5, 2026, runetfreedom published a teardown of the Android version of Max 26.4.3 on Habr: according to it, the app sends its server a flag that a VPN is on, your IP address and carrier code, and checks whether Gosuslugi, Telegram and WhatsApp are reachable. Max's press service denied this the same day. A test of the desktop version published on Habr on September 9, 2026 found no detection of a VPN set up on the router. If you want to play it safe, don't keep Max and a VPN on at the same time, or add Max to the exclusions.

Why banks reacted to VPNs even before: bank won't let me in with a VPN. If your account has already been blocked: account blocked because of a VPN.

How to set up a VPN so Russian apps keep working

  1. Turn on per-app or per-domain split tunneling in your VPN app.
  2. Add marketplaces, banks, Gosuslugi and Max to the exclusions.
  3. Check: open an excluded app, and it should see a Russian IP.
  4. If the app still complains about the VPN, it checks the interface on the phone. Then use a work profile or turn the VPN off for a while.

What BessyConnect offers

BessyConnect runs on VLESS with Reality camouflage, so to network filters the connection looks like ordinary HTTPS. There are more than a hundred servers, no logs, no required registration and no device limit.

The honest limit: if an app checks for a VPN on the phone itself, no VPN will fool it, ours included. Only exclusions, a separate profile or turning the VPN off for a while help there.

Frequently asked questions

Why don't Ozon and Wildberries work with a VPN? Since April 15, 2026, major Russian services have been restricting access for VPN users at the Ministry of Digital Development's request. Apps check your IP against VPN and proxy databases, and on Android also check for a VPN interface.

How does Max detect a VPN? Like other Android apps, Max can ask the system whether there's an active VPN interface. According to a teardown of Android version 26.4.3 published on Habr on March 5, 2026, the messenger sends its server a flag that a VPN is on, plus your IP address and carrier code; Max's press service denied this the same day. To be cautious, you can add Max to your split tunneling exclusions.

How do I hide a VPN from an app? If the app checks the IP, add it to split tunneling exclusions. If it checks the interface on the phone, only turning the VPN off or moving the app to a work profile on Android helps.

Will changing the VPN server help? Sometimes, if the check uses IP databases and the new server's address isn't in them yet. But that's temporary: databases get updated. Split tunneling is more reliable.

Will my account be blocked for signing in with a VPN? As of April 2026, no mass account bans for using a VPN as such were reported: apps simply restrict access. But rules change, so for banks and Gosuslugi it's safer to sign in without a VPN.

Related articles

DNS Leaks: What They Are and How to Test Your VPN

What a DNS leak is and how to run a dns leak test with your VPN on. Learn to check your VPN for leaks and fix them. BessyConnect — a private, leak-free VPN. More

WhatsApp & Telegram Alternatives for Video Calls 2025

WhatsApp alternatives for video calls in 2025: Zoom, Teams, Signal and FaceTime instead of WhatsApp & Telegram — and how to bypass blocks with BessyConnect. More

What Data BessyConnect Stores, and How to Verify It

BessyConnect logs policy explained: what any VPN service technically sees, which of it we store and do not store, and five ways to check it for yourself. More