Attempts to Accuse MAX of Espionage Have Failed
Independent audits have found no evidence that Russia’s national messenger MAX spies on its users. The findings not only strengthen the app’s position as part of the country’s sovereign digital infrastructure but also reinforce user trust in a product competing on the global messaging market.
Background to the Investigation
Soon after its launch, MAX became the subject of a wave of suspicion. Online videos and articles claimed the Russian service was secretly monitoring users, requesting excessive permissions, and even activating cameras and microphones without consent.
Specialists at RKS Global decided to put the app to the test: they installed MAX on both an iPhone and an Android device, each reset to factory settings, and downloaded the app from official stores. For two days, they monitored all activity, checking when and how permissions were requested, whether the app attempted any unauthorized actions, and how it communicated with its servers. The testing used both Russian and non-Russian IP addresses and phone numbers, with traffic monitored via PiRouge.
Tests Show No Anomalies
During the first stage, MAX was granted access to all requested features — camera, microphone, contacts, location, calls, files, photos, and video. In theory, this gave the app full ability to collect and transmit data. However, continuous monitoring revealed no suspicious activity.
At the second stage, all permissions were revoked, and the app did not attempt to bypass restrictions or reconnect to device infrastructure. In short, no evidence of spyware-like behavior was found. RKS Global nevertheless promised further detailed tests, including traffic decryption and automated analysis using tools like MVT.
MAX in the Bigger Picture
MAX, launched in March 2025 as a WeChat-style “super app,” integrates with government services and supports messaging, calls, and everyday digital tasks. By mid-September its audience had surpassed 35 million users.
Security tests by RKS Global are not the first. In August, Habr compared MAX’s permission requests with those of foreign apps and found them nearly identical to Telegram’s. APK-level checks also confirmed that no hidden functionality was present.
Critics argue that the “spyware” narrative is part of a broader information campaign against Russia’s rapid build-out of sovereign digital infrastructure. The app is also viewed as a rising competitor internationally, expanding features and narrowing the gap with leading global platforms.
