Google to Block International Distribution of Android Apps for Developers From Sanctioned Countries

07.08.2026

Starting September 30, 2026, Google is introducing mandatory identity verification for Android app developers. In the published FAQ, the company separately addressed the status of developers from countries under US sanctions: formally this looks like an exemption from the rules, but in practice it means an effective block on international distribution of their apps.

How the situation developed

Google announced the verification requirement in August 2025, citing the fight against fraudulent apps as justification: according to the company, malicious code appears more than 50 times as frequently in apps from third-party sources than in Google Play, though the company has not published an independent methodology. After the first wave of criticism in November 2025, Google added a free account for students and hobbyists and a more complicated but technically possible mode for installing unverified apps.

In June 2026, Google announced the launch date and the first pilot countries: Brazil, Indonesia, Singapore, Thailand. Global expansion is planned for 2027 without a specified sequence by jurisdiction.

The substance of the requirements

Verification applies to all distribution channels, not just Google Play: third-party stores run by Samsung, Xiaomi, OPPO, vivo, Honor, Transsion, and direct APK downloads. The mechanism is implemented through the Android Developer Verifier system service on all certified devices running Android 7 and above, covering more than 95% of Android devices outside China.

To obtain a full account (Full Distribution), a developer must provide a legal name, address, contact details, an identity document if required, proof of app ownership, and pay a one-time fee of $25. Organizations will also need a D-U-N-S number (which takes up to 28 days to obtain). A free account (Limited Distribution) is available to students and hobbyist developers with a limit of 20 devices.

Google's FAQ states that devices in sanctioned countries are excluded from ADV checks, which allows apps to be distributed in these regions without verification. In practice the effect is the opposite: a Google spokesperson confirmed to Ars Technica that residents of sanctioned countries will not be able to complete verification at all and will lose the ability to distribute apps through international channels.

A developer, for example from Cuba, who today can publish an app for a global audience, will after September 30 only be able to reach users inside the exempted country. Outside its borders, their unverified app will face the same barrier as any other unverified software.

Cuba, Iran, North Korea, and Syria fall under comprehensive US embargoes.

Russia and China are not included in the sanctions exemption: in Russia Google scaled back a significant portion of its operations after 2022, and Google Play has historically not operated in China. Belarus does not fall under comprehensive US sanctions; in March 2026 OFAC issued General License 14, further easing a number of restrictions. Belarusian developers, provided they can complete identification and payment, will be subject to standard verification as the program expands globally.

Critics' concerns

EFF and Brave warn that a centralized database of developers' real names is turning into a tool for censorship. An open letter from the Keep Android Open campaign gathered 71 organizations from 23 countries and more than 100,000 petition signatures; signatories include EFF, FSF, Tor Project, Proton. F-Droid calls the measure an existential threat to the project. A user who wants to install an unverified app outside the exempted countries must go through a complicated procedure: enable developer mode, wait 24 hours, and only then complete the installation.

Regulatory landscape

In April 2026, MEP Christel Schaldemose sent the European Commission inquiry E-001419/2026 on the compatibility of the verification program with the Digital Markets Act. On July 23, 2026, the European Commission fined Google 890 million euros under the DMA in separate proceedings. There is no formal decision on the verification program yet, but it is already on the Commission's radar.

REVERA Recommendations

 

1. Assess the jurisdictional status of the company and its beneficiaries against US sanctions regimes before applying for verification.
2. Prepare verification documents in advance, including proof of address and payment profile; if needed, initiate the process of obtaining a D-U-N-S number.
3. Review distribution agreements in light of the fact that an unverified app will only be available to part of the foreign audience through a complicated installation process with a 24-hour delay, which directly affects conversion.
4. Monitor changes to OFAC sanctions lists and further clarifications from Google: the company's official position on a number of jurisdictions is currently formulated as a brief FAQ point and may be updated.

REVERA's Arbitration & IT Disputes practice is ready to assess your company's risks in connection with the new developer verification requirements and to review the structure of distribution agreements in light of jurisdictional restrictions.