VTB from abroad: certificate error on the site and VTB Online login

From abroad, the VTB website doesn’t open in every browser: both the home page and the online banking login show a warning about an insecure connection, because the certificate was issued by the Ministry’s national certification centre. We did not check the bank’s app, and we found no official confirmation that it works. Below, we cover what the bank and the press say, what our test on October 3–4 showed, and what to do if VTB Online login won’t open.

From August 3–4, 2026, the VTB website and its web app stopped opening in Chrome, Safari and other foreign browsers. On August 4, Kommersant named seven banks, including VTB, Sberbank, Alfa-Bank, Uralsib, Rosselkhozbank, PSB and Bank Saint Petersburg. VTB’s press service explained that the outage was caused by the revocation of international SSL certificates.

VTB from abroad: what you see on the site

The cause is the banks’ move to certificates from the Ministry’s national certification centre. Foreign browsers don’t include these certificates by default, so a warning about an insecure connection appears. On August 4, RIA Novosti reported that Chrome, Edge and Safari had started restricting access to the websites of the largest banks. In a comment to RIA Novosti, VTB’s press service recommended installing Russia’s Ministry of Digital Development certificates or downloading Yandex Browser.

Two things need to be kept apart here. The bank’s server sends the certificate to the browser, but the browser decides whether to trust it; the country you open the site from has no effect on the certificate. The general mechanism and the cases of Sberbank, Alfa-Bank and RZD are covered in the article “Your connection is not private” on bank and RZD websites. Here, we only cover what applies to VTB.

What we checked: the VTB website abroad

Our probe checked two pages: the home page www.vtb.ru and the login page online.vtb.ru, while Globalping checked only the home page www.vtb.ru. We did not log in to a personal account or enter anything: we only looked at what the server returns. The measurements are one-off snapshots for the dates given.

• Our probe (a server abroad), October 3 and 4: both addresses return the Russian Trusted Sub CA certificate (the Ministry’s national certification centre). Curl could not verify the chain, so the page did not load.
• Globalping, October 4, GET request to www.vtb.ru: response code 200 and the same certificate in six probes: in Russia (home network, Novosibirsk; data center, Moscow), Germany (home network, Frankfurt), Kazakhstan (home network, Almaty; data center, Almaty) and Georgia (home network, Tbilisi). The data-center probe in Germany (Falkenstein) gave no response: DNS timeout.
• Globalping, October 3, HEAD request to www.vtb.ru: four home-network probes (two in Russia, Germany and Kazakhstan) got response code 503 and the same certificate. There were no data-center probes in this measurement.

The certificate is the same in all measurements, but the response codes differ: 503 for the HEAD request on October 3 and 200 for the GET request on October 4. We don’t know why: both the request method and the day differ. That is not enough to say the site is “open” or “closed,” because the browser is what checks the certificate, and our measurements include no browser.

The VTB app abroad: what we did not check

We did not check the VTB app: we have no measurements from a mobile device abroad. Public reports about the outage describe the website and the web version in browsers; the reports by Kommersant and Kod.ru do not mention the VTB mobile app.

The VTB page about Russian certificates has the question “Will the VTB Online app work?”, but we did not find an answer in the HTML we downloaded: it may be loaded by a script, and we could not check. The page also offers the options “Visit a VTB office” and “Call a specialist” for installing the app. Both assume a visit to a branch or a staff member coming to you, so they are not an option from abroad.

What can help if VTB Online login won’t open

• Yandex Browser. On its page, VTB says that Yandex Browser “already supports all the necessary certificates.” Kod.ru reported that bank websites work in it, and Interfax, citing Russia’s Ministry of Digital Development, reported that it already has a domestic security certificate built in. We did not run Yandex Browser from abroad ourselves, so this is based on statements and press reports, not on our own test.
• Calling the bank. The VTB website lists the number +7 (495) 785-53-05 for calls from outside Russia; your mobile operator may charge a fee. We did not dial the number.

What won’t help

• A Russian IP address on its own. Our measurements show the same certificate in Russia and abroad, so the country does not change it. We did not run a direct test of a VPN with a Russian exit, but the warning comes from the browser, and the address does not affect its decision.
• Clearing the cache and browsers other than Yandex Browser. The certificate comes from the bank’s server, not from the browser. According to the press and the bank’s statement, the warning remains in Chrome and Safari; Yandex Browser is the exception.

This article has no instructions for installing certificates manually. For sites with Russia’s Ministry of Digital Development certificates, we recommend only Yandex Browser.

Key takeaways

• The VTB website serves a certificate from the Ministry’s national certification centre both from Russia and from abroad; browsers without this root certificate show a warning.
• According to the press and VTB’s statement, Yandex Browser already supports the necessary certificates.
• We did not check the VTB app abroad and found no confirmation that it works.
• The measurements are one-off: the 503 on the HEAD request on October 3 and the 200 on the GET request on October 4 don’t match. This is a snapshot, not a guarantee.