Estonia introduces automatic screening of emails from Russian domains over cyberattack risk

Estonia has introduced a new procedure that subjects emails originating from Russian internet domains to automated security screening, rather than blocking them outright, as part of efforts to reduce the risk of cyberattacks.

How the screening works

Under the new arrangement, messages sent from Russian domains are not rejected or halted entirely. Instead, they pass through an automated screening process designed to detect potentially harmful content before the messages reach their recipients' inboxes. This approach allows the system to filter out suspicious material while still permitting legitimate correspondence to go through.

Exemptions from the system

Not all parts of Estonia's public administration are covered by the new measure. Local governments, along with some state institutions, currently remain outside the automated screening system, meaning the new security procedure does not yet apply to them.

The move reflects a broader pattern among Baltic states of tightening digital defenses in relation to Russia, amid heightened concern over cyberthreats linked to Russian-based network activity. Email remains one of the most commonly exploited channels for spreading malware and carrying out phishing attempts, making automated inspection of incoming messages a potential additional layer of protection against such threats.