How to log in to SberBank Online and T-Bank (Tinkoff) from abroad in 2026

You open SberBank Online from abroad, and the app spins its loading wheel endlessly before finally telling you to “check your internet connection.” Meanwhile, your internet is fine: email loads, videos play. In a browser, instead of your online banking account, you get a blank white screen, a CAPTCHA that’s impossible to pass, or — now — a “Your connection is not private” warning.

The problem usually isn’t your connection or your device. Officially, Russian banking apps work abroad, but since April 2026 Russian services have been restricting VPN users at the demand of the Ministry of Digital Development, and ordinary foreign internet connections often get caught by these filters too. On top of that, Sberbank’s and T-Bank’s websites have switched to certificates from Russia’s National Certification Authority, which Chrome and Safari don’t trust by default. Below, we explain what exactly is happening, what helps and what doesn’t.

Why aren’t SberBank Online and T-Bank (Tinkoff) working abroad?

Every bank has an anti-fraud system that assesses whether a login looks like something the real account holder would do. One of the most heavily weighted signals in that assessment is the country the request comes from. To the system, a login from another country looks like a textbook account takeover: an attacker has gotten hold of the password and is logging in from somewhere far away.

The bank’s logic is understandable: better to keep out a real customer and sort things out later than to let in a fraudster and lose money. The trouble is that for millions of people who have moved abroad, “later” never comes — they simply lose access to their own accounts.

Mobile apps come with a problem of their own. A browser at least shows you an honest error, but an app will usually tell you there’s no internet — because its request to the bank’s server didn’t go through, and the app has no way to explain why. People blame their connection, switch from Wi-Fi to mobile data, restart the router and the phone, while the real cause all along is the country they’re connecting from.

Four ways the bank keeps you out

Knowing exactly what you’re looking at helps you avoid wasting time.

• “No internet connection” in the app. The most common case. The app contacts the server, the server drops the connection, and the app shows the only error it knows.
• An endless CAPTCHA in the browser. You solve one set of pictures after another, but you never actually get logged in. The system doesn’t want to let you in, so it simply won’t let you pass the check.
• A blank white screen or “service temporarily unavailable.” The website opens, but your account won’t load: access is cut off at the level of the requests the page makes after you log in.
• “Your connection is not private” in Chrome or Safari. That’s how the browser reacts to a certificate from Russia’s National Certification Authority, which Sberbank’s and T-Bank’s websites now use. Your address has nothing to do with it: use Yandex Browser (partner link) .

The first three usually come down to the address you connect from; the fourth comes down to the website’s certificate.

What helps you access a Russian bank account from abroad, and what doesn’t?

• Deleting and reinstalling the app. On an iPhone, that’s a risk: T-Bank’s official app hasn’t been in the App Store since 2023, and Sberbank’s app shows up there only from time to time and under other names, so you may not be able to get a deleted app back. Updating the app, on the other hand, is worth it: T-Bank explicitly recommends the latest version, which has the Russian certificates built in.
• Incognito mode. It changes neither your address nor the certificates. A different browser, however, does help if the bank’s website says “Your connection is not private”: Yandex Browser has the Russian certificates built in, and in Chrome or Safari you need a different workaround.
• A free VPN extension. It only works inside the browser, while the bank’s app goes online without it. Services like these usually have no Russian servers, and the addresses of VPN services — free and paid alike — end up in the databases banks and other services use to detect VPNs.
• Calling customer support — this one does help. In July 2026, T-Bank’s support itself suggested workarounds to customers abroad, and the Ministry of Digital Development advises contacting the service if it asks you to turn off a VPN you aren’t using. Numbers for calls from abroad: Sberbank +7 (495) 500-55-50, T-Bank +7 (495) 645-59-19.

When does a Russian IP address for banking help?

If the bank refuses specifically a foreign address, a Russian one helps: in July 2026, T-Bank itself advised iPhone users to switch to a Russian IP. But that only gets you past the country check: SMS codes depend on your SIM card, and the app may notice the VPN and ask you to turn it off.

Technically, this is an ordinary VPN, except that the exit point is inside Russia — what’s known as a “reverse VPN.” We explain the idea in more detail in a separate article: why people who have moved abroad need a Russian IP address.

With Liberum VPN, this is a shared Russian address — not a personal or dedicated one: other customers of the service go online through it too.

If the idea is already clear and you just need access — which services it opens up, how much it costs and what to tap — see VPN with a Russian IP address.

You’re not faking your identity: you’re logging in to your own account with your own username, password and confirmation. But the bank sees more than the country — it also sees the provider and the VPN itself, and since 2026 these have been part of the official signs it uses to check transfers.

How different banks behave

Banks don’t publish their exact rules and change them without notice. Here’s what is known as of October 2026:

This can change at any time — a bank is free to tighten or relax its checks without notice. A Russian address doesn’t take you out of that uncertainty: the bank sees not only the country but also signs of a VPN.

What starts working again along with your bank

Once your bank account opens, the tasks you handle inside it come back too:

• Transfers and payments. Sending money to your parents, paying utility bills, repaying a loan, topping up someone else’s card — all of this is done in your online account, which you can now open again.
• Statements and certificates. A certificate of income for a visa or residence permit, an account statement for a specific period, a balance certificate — you can only get these through your online account.
• Gosuslugi and taxes. Many banking tasks hinge on confirmation through Gosuslugi, Russia’s government services portal, which can also be hard to reach from abroad. We cover this separately: how to get back into Gosuslugi and how to pay Russian taxes and use Gosklyuch (Goskey), the government e-signature app.
• Shopping in Russia. Ordering things for your parents on an online marketplace and paying with a Russian card — see our guide to Wildberries and Ozon. Note that since April 2026 Ozon and Wildberries have been restricting access when a VPN is on.

The task is usually bigger than “getting into Sberbank,” but a Russian address doesn’t open everything either: since April 2026, some services have been turning away users with a VPN on, whatever country the address is in.

Step by step: how to connect through a Russian address

Below is exactly what to tap. It takes about 5 minutes, and you don’t need a bank card: the first 7 days are free. The bot’s menus are in Russian, so button names are shown exactly as they appear on screen, with a translation. If, once you’re connected, the banking app asks you to turn off the VPN, use online banking on the website in a browser: the app sees the VPN on the phone, while the website sees only the address.

Step 1. Get access in the Telegram bot

1. Open the Liberum VPS bot and tap Start.
2. Confirm that you agree to the documents — the bot won’t let you go any further until you do.
3. In the menu, tap 🔐 Тарифы / Подключить VPS (“Plans / Connect VPS”).
4. Choose 🎁 Активировать TRIAL (7 дней) (“Activate TRIAL (7 days)”) — it’s free, and you don’t have to link a card.
5. When the bot asks you to choose a location, tap 🇷🇺 Россия (“Russia”). This is the one that gives you the Russian address your bank expects.
6. In 10–15 seconds, the bot will send you a subscription link. You can always find it again under 📱 Мои конфиги (“My configs”).

Step 2. Add the subscription in the app

We recommend Happ — it’s free and works the same on every platform: iPhone and Mac, Android, Windows. There’s Happ Lite for the Russian App Store.

1. Copy the subscription link from 📱 Мои конфиги — just tap it in the chat.
2. Open Happ and tap + in the top right corner.
3. Choose the option to add from the clipboard.
4. The profile will appear in the list — select the location with the Russian flag.
5. Tap the big connect button, then open your banking app.

When you’re done with your banking, take the link for the Netherlands or Germany under 📱 Мои конфиги (“My configs”) for non-Russian services and add it to Happ the same way — after that you can switch between them right in the app.

A separate headache: SMS codes sent to a Russian number

A Russian IP address solves the login problem, but it doesn’t deliver SMS messages. If your Russian SIM card isn’t roaming and has been left at home, there’s simply nowhere to send the code. Here’s what people usually do in this situation:

• keep their Russian number active while roaming, at least for incoming messages;
• move the number to an eSIM or use SMS forwarding, if their carrier supports it;
• check in advance where the bank sends codes: if it can send them as a push notification in the app or lets you log in with a foreign number (as T-Bank does), you won’t need the Russian SIM card to log in.

The last option is the most convenient, but you need to set it up before you leave, or once you’ve already regained access.

Common mistakes

• Connecting to a European server. The most common one. Russian banks need a Russian server specifically — check the flag in the app.
• An old session in the app. The app remembers the previous failed login. Close it completely and open it again with the connection already turned on.
• Browser cookies. If you log in through the website, log out, clear the bank’s cookies and log in again.
• Device limit exceeded. The free trial allows one simultaneous connection. Connect a second device, and the first one will be disconnected. You can see your current devices under 📲 Мои устройства (“My devices”).
• The app asks you to turn off the VPN. That means the app has detected the VPN on your phone, and switching to another server usually doesn’t help. Open online banking on the website in a browser or call the bank.

What to know in advance

A few things that a Russian IP address won’t solve and that are worth thinking about before they become a problem.

• Card expiration. Your card expires no matter where you live. Getting a replacement usually means picking up the physical card at a branch — or switching to a virtual card, if your bank issues them.
• Identity verification. Banks periodically ask you to update your documents. Some of these checks can only be done in person, and nobody warns you about them in advance.
• Bank notifications. If SMS messages don’t reach you, you may not find out about a charge or a blocked account in time. Push notifications in the app are more reliable — turn them on while you still have access.
• Currency restrictions. The rules for transfers abroad change, and that has nothing to do with access: even with a working account, some transactions may be unavailable.

Access to your account is a necessary condition, but not the only one. Still, without it you can’t do anything at all, so it makes sense to start there.

Is it safe to use a VPN for Sberbank?

It’s a fair question: your traffic to the bank goes through someone else’s server. Here’s the answer, point by point.

Your connection to the bank is protected on its own — with the same encryption as on any regular network. The intermediate server only sees that you’re contacting the bank, not the content: not your password, not the amounts, not your transactions. That’s exactly how every connection you make to the internet works anyway: it goes through your provider’s equipment.

The Russian address of Liberum VPN is shared: not a personal IP, not a dedicated one — other customers of the service go online through it too. The bank sees a login from Russia, but it may detect the VPN and ask you to turn it off or confirm a transaction — that’s simply its security doing its job. What exactly the service collects and stores is described in the personal data processing policy (in Russian).

You’re logging in to your own account with your own credentials. But since January 1, 2026, an unusual provider and tools that hide session data have been among the signs of a transfer made without the client’s consent (Bank of Russia Order No. OD-2506), so the bank may put a transfer made through a VPN on hold and ask you to confirm it.

Key takeaways

• The bank usually isn’t blocking you personally: since April 2026, services have been restricting VPNs, foreign traffic gets caught by the same filters, and Sberbank’s and T-Bank’s websites have switched to Russian state certificates.
• Start with the official options: the latest version of the app, a Russian SIM card in roaming, Connect in RuStore on Android, and Yandex Browser or the Russian certificates for the website.
• A shared Russian IP address helps when the bank refuses specifically a foreign address, but it doesn’t guarantee access: the bank may detect the VPN.
• Plan separately for receiving SMS codes — your Russian number needs to be reachable.
• You can try it free for 7 days to see whether it solves your problem, with no card and no auto-renewal.