What new identification requirements will apply to .ru, .рф and .su domain names from September 1, 2026?
Introduction
As of September 1, 2026, domain names ending in .ru, .рф and .su will be subject to enhanced identification requirements through ESIA, Russia’s public identification and authentication system. ESIA operates through “Gosuslugi”, the official Russian government services portal. In practice, the domain name holder will need to have a Gosuslugi account, either personal or corporate depending on the holder’s status, containing identity information that has already been verified. This information will allow the registrar to confirm that the individual or company requesting the registration, renewal or certain changes to the domain name is indeed the declared holder. Federal Law No. 569-FZ of December 29, 2025 introduced this principle into Article 14.2 of Russian Federal Law No. 149-FZ.
What changes for Russian domain names on September 1, 2026?
ESIA becomes a gateway for essential domain operations
Guidance published by the Coordination Center for TLD .RU/.РФ states that registration and renewal will require ESIA identification from September 1, 2026. Current operational guidance also covers actions such as registrant or registrar changes, delegation and certain data updates.
Existing domains may continue to work, but not indefinitely
The Coordination Center explains that a domain already registered may remain in use until the end of its current registration term. If the administrator cannot complete the required identification, however, renewal becomes impossible. After expiry and the applicable priority renewal period, the registration may be cancelled and the name may become available again. For a domain name incorporating the name of a brand owner, that creates a direct risk of third-party acquisition and cybersquatting.
Why are foreign registrants particularly exposed?
The main obstacle is practical access to Gosuslugi
The reform does not amount to a general ban on foreign ownership. The difficulty is obtaining an ESIA identity that can be used by the registrar. A foreign company with an accredited Russian branch or representative office may, subject to local requirements, create an organisation account. A foreign company with no accredited presence does not have the same route. Economic ownership of the domain may therefore remain clear while the registrant lacks the regulatory ability to perform the operation needed to keep it.
What should companies do before September 1, 2026?
1. Audit the portfolio and registered holders
It should be verified for each domain:
- the registrar,
- registrant,
- expiration date,
- DNS settings,
- email configuration,
- redirects,
- connection with the group’s trademarks.
The objective is to quickly identify domain names whose holders may face difficulties in complying with the new identification requirements, particularly where they are registered in the name of a foreign company without effective access to ESIA, a former employee, or a service provider.
To learn more about domain name audits, we invite you to consult our previously published article: ” Domain name audit: securing and maximizing your digital portfolio “.
2. Secure an appropriate continuity solution
If the group has a Russian entity eligible for ESIA, a restructuring of the domain name ownership may be considered before the new framework applies. Where no such presence exists, a local trustee arrangement may be considered where available and lawful, but the agreement should address:
- DNS control,
- renewal duties,
- transfer restrictions,
- re-transfer,
- provider failure.
For secondary domains, a controlled migration to an international extension may be more proportionate.
How should the reform fit into an IP strategy?
Domain continuity should be assessed together with trademark strategy. Losing control of a .ru name may affect the website, email, campaigns and user trust. We therefore recommend coordinating legal, trademark and IT teams and strengthening domain name monitoring against cybersquatting.
For a broader approach to protecting your brand in relation to domain names, we invite you to consult our previously published article: “Domain names: registration, monitoring and disputes – how to protect your brand in the digital space”.
Conclusion
Russia’s September 1, 2026 reform requires holders of .ru, .рф and .su domain names to verify without delay whether they can satisfy ESIA identification. For foreign businesses, the priority is to preserve continuity before renewal or another operation is blocked. A targeted audit, secure registrant structure and, where necessary, a transfer or migration plan can reduce the risk of losing the name to a third party.
Dreyfus Law Firm assists its clients in managing complex intellectual property cases, offering personalized advice and comprehensive operational support for the complete protection of intellectual property.
Dreyfus Law Firm works in partnership with a global network of attorneys specializing in Intellectual Property.
Nathalie Dreyfus, with the assistance of the entire Dreyfus team.
Q&A
Does failure to complete identification result in the immediate deletion of the domain name?
No. Failure to complete the required identification will, in particular, prevent renewal of the domain name. Deletion will occur at a later stage, after the domain has expired and the priority renewal period has elapsed.
Can a trademark owner act if a third party registers a released .ru domain?
Loss of the domain does not extinguish earlier trademark rights. Enforcement may remain possible depending on applicable law, the third party’s use and the circumstances of acquisition. Recovering a released domain is nevertheless more uncertain than preventing the loss before expiry.
Should Cyrillic variants of a Latin-character trademark be monitored?
Such monitoring is particularly relevant where Russia remains an important market for the company. Transliteration, phonetic equivalents and visually similar variants may create confusion, particularly under .рф. Effective monitoring should therefore go beyond exact matches and include plausible linguistic variants.
Does a foreign company with no presence in Russia necessarily need to use a trustee to retain its .ru, .рф and .su domain names?
Using a trustee is one possible solution where a company does not have a Russian entity eligible for ESIA, but it is not the only option. Depending on the importance and use of the domain name, migration to an international extension may also be considered. The appropriate solution should therefore be assessed on a case-by-case basis, taking into account the need to retain the domain name and the practical constraints associated with its management.
How should a company choose between transferring a domain name to a Russian entity, using a local trustee, and migrating to another extension?
The choice will mainly depend on the group’s structure and the strategic importance of the domain name. Where an ESIA-eligible Russian entity exists, a restructuring of the registrant arrangement may be considered. Otherwise, a local trustee may provide a continuity solution, subject to appropriate contractual safeguards. For secondary domain names, a gradual migration to an international extension may be more proportionate.
This publication is intended for general public guidance and to highlight issues. It is not intended to apply to specific circumstances or to constitute legal advice.
















