Alfa-Bank from abroad: why the website won’t open and what to do

If you open Alfa-Bank from abroad and see a “Your connection is not private” warning instead of the login page, the problem is not your country but a certificate from Russia’s Ministry of Digital Development (Mintsifry), which Chrome and Safari don’t trust by default. On October 10, the site served the same certificate in Russia, Germany and Georgia, while its response to the request itself depended on how we asked, not where from. Below: our measurements, the bank’s position, Yandex Browser, the app, and what a Russian IP address does and doesn’t give you.

Why Alfa-Bank’s website won’t open from abroad

Shortly before August 3, 2026, Alfa-Bank’s website switched to a certificate from the National Certification Authority (NUC) of Russia’s Ministry of Digital Development. On August 3, iPhones.ru wrote that this had happened “last week” and reported that the websites of Sber, VTB and Alfa-Bank had stopped opening in Chrome and Safari. On August 4, RIA Novosti wrote that when you try to reach Alfa-Bank’s website, a warning window appears that won’t let you onto the page.

The bank had prepared for this in advance. On June 17, Anti-Malware.ru, citing RBC, wrote that Alfa-Bank had worked out a scenario for dropping foreign certificate authorities and had already obtained and tested NUC certificates. After the switch, on August 4, the bank told Expert that there was no failure in its services and advised installing the certificates using the instructions on its website. The same day, Kommersant wrote that VTB and Alfa-Bank had published step-by-step instructions for customers on installing the ministry’s certificates.

The key point for anyone abroad: the bank’s server presents the certificate, and your browser decides whether to trust it. That is why changing your country or IP address does not remove the warning. The general mechanism is explained in our article “Your connection is not private” on Russian bank and RZD websites.

What we checked: Alfa-Bank’s website and online banking login

We requested the alfabank.ru home page and the web.alfabank.ru login page; we did not log in or enter anything. Times are UTC, 2026.

Conclusion: the site serves the ministry’s certificate identically in Russia, Germany and Georgia. The responses did differ, but by the way the request was made, not by country: Globalping probes got 403 everywhere, including a home network in Tbilisi, while our server abroad got the ServicePipe check page. Our data show no sign that Alfa-Bank closes its website specifically to foreign addresses. What a person abroad runs into is the certificate, and that is a job for the browser.

Alfa-Bank’s app abroad: what is known

We did not test the app: we have no measurements from a phone abroad. On August 7, Russia’s Ministry of Digital Development stressed that official bank apps still provide secure access to all financial services (Interfax). Vbr.ru wrote the same on August 4: if a bank’s app is already installed, you can use it as usual.

Getting the app is a harder question. On April 15, 2022, after US sanctions, it was removed from both the App Store and Google Play (Habr). On iPhone, the app has since kept returning to the store under other names, which are later removed too: in 2023 as “Dengi est” (“Money Is Here”), in June 2026 as “Apgreyd — umnyy pomoshchnik” (“Upgrade — Smart Assistant”) (Vbr.ru, iPhones.ru). On Android, according to Vbr.ru, it could be downloaded from the bank’s website or from RuStore. Install it only from a link on Alfa-Bank’s website: Vbr.ru warns that fraudulent apps turn up disguised as such unofficial “guerrilla” apps.

There are also signs of trouble. On April 15, 2026, Hi-Tech Mail included Alfa-Bank in a list of websites and apps that, according to users, are available only from Russian IP addresses, without details. In the sources we opened, there is no official statement from Alfa-Bank about how its app works abroad or with a VPN. What is known about the Sberbank and T-Bank apps abroad is collected in our article how to access Sberbank Online and T-Bank from abroad.

What to do if Alfa-Bank won’t open abroad

• The bank’s advice. Install the ministry’s certificates using the instructions on the bank’s website (Expert, August 4). The ministry gives the same advice to people who open bank websites in foreign browsers (Interfax, August 7). This article contains no installation instructions.
• Yandex Browser. For websites with the ministry’s certificates, we recommend Yandex Browser (partner link): according to the ministry, the Russian certificate is already built into it (Interfax, August 7). We have not opened Alfa-Bank’s website in it from abroad ourselves.
• The app, if you already have it. The ministry calls official bank apps a working way to get access. If the app won’t let you in, open the same service in a browser.
• Don’t bypass the warning. Going to the site past the warning does not check whether the site is genuine; it only hides the warning itself. We don’t recommend entering passwords or codes on such a page.

Alfa-Bank through a Russian IP: what the October 4 and 10 checks showed

On October 4, we opened alfabank.ru through the Russian location of Liberum VPN. The result was the same as from abroad: the certificate check failed, and without it the site returned a ServicePipe browser-check page, which a program without JavaScript cannot pass. A repeat check on October 10 gave the same result; details are at the end of this section. So a Russian address does not remove the certificate warning: for that, you need a browser that trusts the ministry’s certificate.

A Russian address is worth testing if the website or app refuses you specifically because of a foreign IP: Hi-Tech Mail reported this about Alfa-Bank, citing users. You can try it for free during the trial; it may work in your case. Open the Liberum VPS bot, start the trial (7 days, no card), choose the Russian location, add the subscription link to an app (for example, Happ), connect, and open the bank’s app or its website in Yandex Browser. The Russian address is shared: other customers of the service use it too.

One more warning. The bank’s anti-fraud protection looks at more than your country: it may also notice a VPN connection and treat a login or transfer made through it as unusual. The bank may then ask for extra confirmation, put the transaction on hold, or temporarily restrict access to online banking. So keep the Russian SIM card that receives the bank’s text messages at hand, and copy the bank’s number for calls from abroad from its website in advance. More about the location is on the Russian IP address page.

We requested the alfabank.ru home page through the same Russian location again on October 10 at 20:16 UTC, using a program without JavaScript that sends an ordinary browser header. Nothing had changed compared with October 4 or with requests from abroad: the program did not accept the certificate from the ministry’s National Certification Authority, and with certificate validation turned off, the site responded with code 200 and once again showed the ServicePipe browser-check page. This is the result of a single request to the home page, not a promise: we don’t know what a real browser with JavaScript would see, and we did not test online banking login or the app.

What we don’t promise

• That a Russian IP will remove the certificate error. Through our Russian location, the ministry’s certificate failed validation on both October 4 and October 10, just as it did from our server abroad, and on October 10 the same certificate reached home networks in Russia too.
• That Alfa-Bank’s app will work through a VPN. We did not test the app. In April 2026, Izvestia (as retold by iPhones.ru on April 14) wrote about failures in the Sberbank and T-Bank apps for some users in Russia with a VPN turned on; that report says nothing about Alfa-Bank.
• That the ServicePipe check page will let you through. We only saw it in requests without a browser; we have not checked whether a real browser passes it.
• That the picture won’t change. Banks change certificates and protection without notice, so our measurements are a snapshot as of October 4 and 10, 2026.

Key takeaways

• Since late July 2026, Alfa-Bank’s website has run on the ministry’s certificate, so Chrome and Safari show a warning both in Russia and abroad.
• On October 10, the website served the same certificate in Russia, Germany and Georgia; the differences in its responses depended on how the request was made, not on the country.
• The bank advises installing the certificates using the instructions on its website; we recommend Yandex Browser.
• We did not test the app; the ministry calls official bank apps a working way to get access.
• On iPhone, the bank’s app has been appearing in the App Store under other names since 2022, so take the link to it from the bank’s website.
• The Russian location did not remove the certificate error in the October 4 check or in the repeat check on October 10; if it’s the app that won’t let you in, a Russian address is worth testing during the free trial.