Skip to main content
Back to Blog
· 10 min read

The Splinternet Scenario - How Mass Surveillance and Cyber-Balkanization Are Reshaping the Web

The internet was once a global, borderless network, a place where information flowed freely across continents. Over two decades, that vision has been systematically eroded. Today you are standing at the edge of a "Splinternet": a fractured web of national firewalls, on-device AI surveillance, and hardware-level restrictions that decide what you can see, say, and share. This is not a distant dystopia. It is an accelerating present, built block by block since the early 2000s, and it is already a reality in China, Russia, and North Korea. The question is whether the West is next.

How Mass Surveillance Infrastructure Was Built

The Post-9/11 Expansion (2000-2005)

The September 11 attacks gave governments a blank check. The USA PATRIOT Act granted U.S. agencies broad authority to collect communications data without traditional warrants, laying the groundwork for the bulk collection programs later revealed under the name PRISM. The Five Eyes alliance expanded its signals intelligence operations, and internet service providers began deploying deep packet inspection to filter and monitor traffic in real time. The legal and technical scaffolding for mass surveillance was in place, and it was framed as security.

The Rise of the Data Economy (2005-2010)

Around the same time, the commercial web became a surveillance machine. Facebook's Beacon experiment sent user activity on external sites back to Facebook without consent, a preview of the ad-driven tracking economy. Google's 2007 acquisition of DoubleClick cemented cross-site tracking, and the profiles built for advertisers were equally useful to state agencies. Meanwhile, China's Golden Shield project, the so-called Great Firewall, combined DNS poisoning, IP blocking, and keyword filtering to seal the country's digital borders.

The Snowden Revelations (2010-2015)

In 2013, Edward Snowden leaked documents confirming the scale of Western surveillance. PRISM gave the NSA direct access to data held by Microsoft, Google, Facebook, and Apple. XKeyscore let analysts search emails, browsing history, and social media at scale. The UK's Tempora program tapped undersea cables. And in 2014, China announced its Social Credit System, a scheme that scores citizens on their behavior. Surveillance stopped being covert; it became policy.

Surveillance Moves On-Device (2015-2020)

As HTTPS and end-to-end encryption closed off traffic interception, surveillance moved to the device. Apple's differential privacy experiments in 2016 showed how on-device analysis could profile users without uploading raw data. China's 2017 cybersecurity law forced internet companies to store data locally and hand access to authorities. Russia's Sovereign Internet law in 2019 required ISPs to install government-controlled DPI filters. Even the GDPR, while a genuine privacy win, concentrated data control in Europe and gave states legal hooks for access.

AI Censorship and the Hardware Lockdown (2020-2026)

The current phase is the most invasive. Apple's proposed client-side CSAM scanning in 2021 would have inspected photos on-device before encryption, a precedent critics warned could be expanded to political speech. The EU's Chat Control proposals push the same idea into encrypted messaging. WeChat filters messages in real time before they are sent. Russia blocked most VPNs in 2024. North Korea runs a fully isolated intranet. Content is now blocked before it is even created, and the hardware itself enforces compliance.

What Is the Splinternet

The Splinternet is the fragmentation of the global web into isolated, nationally controlled segments. Each country or bloc sets its own rules; cross-border data flows are filtered or blocked; hardware and software are designed to comply with local law; and AI surveillance keeps users in line even when they try to bypass the restrictions.

FeatureOpen InternetSplinternet
Data flowGlobal, unrestrictedNationally controlled, filtered
CensorshipMinimal, decentralizedCentralized, state-enforced
SurveillanceLimited, targetedMass, AI-driven, on-device
Hardware and softwareGlobal standardsLocalized, state-compliant
EncryptionEnd-to-end, user-controlledBackdoored, state-accessible
AccessEqual for allTiered by citizenship or behavior

How the Splinternet Works

  • National firewalls: Deep packet inspection and DNS manipulation block or throttle foreign sites, as with China's Great Firewall and Russia's Roskomnadzor blocklists.
  • On-device AI scanning: Modified Android builds and government-approved apps like WeChat scan messages, images, and even voice before transmission.
  • Data localization: Laws like China's Data Security Law and Russia's localization rules force companies to store data locally, where governments can reach it.
  • Hardware balkanization: Custom OS forks and restricted app stores keep Western apps out, and Huawei's 5G dominance puts state-aligned surveillance at the network layer.
  • Legal leverage: Export controls, sanctions, and broad content rules like the EU's Digital Services Act push platforms into over-censoring.

The Splinternet in Practice

China: The Pioneer

China built the most complete surveillance internet on Earth. The Great Firewall blocks Google, Facebook, YouTube, and Wikipedia. The Social Credit System penalizes dissent with travel bans and loan denials. WeChat and Weibo scan messages for politically sensitive keywords before delivery, and every device sold must be compliant. It worked because China started early, its tech giants are state-aligned, foreign companies comply to keep access to 1.4 billion users, and most citizens have never known an open internet. The result is that the overwhelming majority of Chinese users cannot reach the global web without restricted VPNs, and most public discussion is effectively self-censored.

Russia: The Authoritarian Firewall

Russia's version is blunter but aggressive. The Sovereign Internet law forces DPI boxes onto every network. Roskomnadzor maintains a growing blocklist that includes independent media. Since 2024, most VPNs are blocked, and dissidents have been prosecuted for bypassing restrictions. Russia lacks China's AI sophistication, so it leans on brute-force filtering, state media dominance, and legal intimidation. The firewall is more porous than China's, but the effect on independent access is similar: most measured activity stays inside state-controlled services.

North Korea: The Hermit Kingdom

North Korea is the end point of the Splinternet. Kwangmyong is a domestic intranet with state-approved news, email, and propaganda, and nearly no global connectivity. Only a tiny elite gets monitored access to the outside web. Hardware is government-issued and pre-loaded with surveillance software. There are no VPNs and no workarounds, because there is no physical infrastructure to connect to. It is total information control, enforced by the total absence of alternatives.

Could the West Be Next

The West will not get a copy of the Great Firewall. The drift toward a Western Splinternet is quieter, sold as safety, privacy, and sovereignty.

  • Data localization and sovereign clouds: The EU's Gaia-X, France's Cloud Souverain, and the U.S. Cloud Act all fragment where data lives and who can reach it.
  • Client-side scanning: Apple's CSAM proposal and the EU's Chat Control would build a scanning backdoor into every encrypted device.
  • Content rules: The Digital Services Act and the UK's Online Safety Act force platforms to remove vaguely defined "harmful" content.
  • Hardware restrictions: Huawei bans and regulatory approval systems constrain which devices can exist on national networks.
  • Geopolitical decoupling: Semiconductor export controls and the U.S.-China tech war are tearing global supply chains in two.

How a Western Splinternet Would Form

The West would not ban content outright; it would bury it. Governments would demand backdoors "to catch criminals," on-device scanning "to prevent terrorism," and hardware restrictions "to stop piracy." Data nationalism would cut off foreign clouds. Algorithmic systems would downrank legal but inconvenient speech. Legal pressure, fines, and criminal penalties for bypass tools would force tech companies to comply. Each step would be framed as necessary, a slow normalization rather than a sudden crackdown.

Would it work? Partly. Western publics would resist overt censorship, and VPNs and Tor would survive for a time. But history shows that corporate compliance is the decisive variable. When fines are large enough, platforms do what governments ask, exactly as they did in China. The most likely path is a gradual slide: content suppressed rather than banned, dissent marginalized rather than criminalized, surveillance unremarkable rather than exposed.

What a Global Splinternet Would Cost

  • The global digital economy ends: companies build separate products for every market, cross-border collaboration slows, and compliance costs climb.
  • Free speech dies online: self-censorship, echo chambers, and chilling effects hit journalists, activists, and whistleblowers hardest.
  • Surveillance becomes the default: every click, message, and search is logged, analyzed, and could be used against you.
  • Technology stagnates: protected local monopolies like Baidu and Yandex reduce competition, and hardware is locked down.
  • Geopolitics worsen: a digital cold war between the U.S., the EU, and China brings cyber warfare, forced alliance choices, and internet shutdowns as leverage.

How to Slow It Down

The Splinternet is not inevitable, and there are concrete moves at every level.

  • Policy: outlaw bulk collection, require warrants, defend end-to-end encryption against backdoors, keep cross-border data flows legal, and narrow the definition of "illegal content" so platforms do not over-censor.
  • Technology: support open-source, auditable tools like Signal, Matrix, and Mastodon; use privacy-preserving tech like VPNs and Tor; and back decentralized protocols that no single state can switch off.
  • Companies: publish transparency reports, resist government overreach, and give users control of their data.
  • Individuals: learn how surveillance and censorship work, use encryption by default, and support digital rights organizations.

Further Reading and Resources

  • Tor Browser: https://www.torproject.org/
  • Signal: https://signal.org/
  • Proton: https://proton.me/
  • Psiphon: https://psiphon.ca/
  • Briar: https://briarproject.org/
  • EFF: https://www.eff.org/
  • Access Now: https://www.accessnow.org/
  • Article 19: https://www.article19.org/
  • Reporters Without Borders: https://rsf.org/

Bottom Line

The Splinternet is not a far-off dystopia. It is already built in pieces. China perfected it, Russia enforces it, and the West keeps flirting with it behind the rhetoric of security and safety. If nothing changes, your access to information will depend on your passport, your devices will report your behavior to governments, and dissent will not be censored so much as predicted and prevented in advance.

That future is avoidable. Encryption works, open networks survive, and digital rights have to be defended at the ballot box as well as in code. The fight for the open internet is, in a real sense, the fight for democracy itself. The question now is whether we wake up before the walls are finished.