Are you worried about VPN scams? Trust me – you’re not alone. With increasing public interest in internet privacy and online security, a virtual private network (VPN for short) is becoming more and more mainstream.
Unfortunately, there are shady characters (and state actors) who use this as an opportunity to profit from unsuspecting victims. I’d like to share some tips on how to spot these VPN scams – and how to avoid them.
Be warned: you need to exercise caution when choosing your VPN provider.
The VPN market is riddled with scams, fake VPNs, malware.
How can you protect yourself from these VPN scams?
We’re going to cover 10 VPN scams you should be aware of to help you choose a VPN provider that guarantees Internet privacy and online security. These include:
- The “Free VPN” Scam
- The “Fake VPN” Scam
- The VPN Review Scam
- Data Logging VPN Scam
- Unsubstantiated Claims
- Questionable Pricing
- Http VPN Scam
- Lifetime Subscription Scam
- Review Website Scam
- Private Info Scam
I’ll do my best to include real-life stories illustrating each of these VPN scams. Can you trust a VPN? Not always, but it helps to be informed.
Hopefully, in the end, you can avoid being a victim.
Note: Some of the links in this article may be affiliate links, which means that at no extra cost to you, I may be compensated if you choose to use one of the services listed. I only recommend what I personally use, however, and I appreciate your support of this free website!
VPN Scam #1: The Promise of a “Free VPN”
You know how the old saying goes: nothing in life is truly free.
This is especially true for VPNs.
Free VPNs are pretty much the most common scam to watch out for. Simply put, they are the direct antithesis of what a VPN is supposed to do.
A “free VPN” is the direct antithesis of what a VPN is meant to do.
Security is never a guarantee. But when pay for a good VPN, you have peace of mind knowing the company has more to lose than gain by logging, selling or distributing your data.
But this is exactly what free VPNs like Hotspot Shield VPN do – they log your Internet activity and sell it to 3rd parties for the purposes of building your advertising profile.
Free VPNs have been known to:
- Inject malware onto user devices to enhance tracking of your Internet activity;
- Direct you to advertisements;
- Not actually encrypt your data (even if they say they do);
For more information on this topic, check out my article comparing free VPNs against paid VPNs.
VPN Scam #2: Watch out for Fake VPNs
In my opinion, free VPNs also fall under the category of a fake VPN. However, there is more to consider when it comes to identifying a genuine VPN from a fake VPN.
For reference, I define a “fake VPN” as a VPN that engages in activity that goes against the idea of security and privacy.
We can take this case with Hola VPN as an example. Hola VPN secretly used its customers’ devices to create a botnet, essentially allowing others to free-ride off their Internet bandwidth.
Permission to do this was hidden in the fine print and as you can imagine, people weren’t too happy.
Other fake VPNs can be more hostile. Remember that when connecting to a VPN, you’re entrusting another company with your data. This can easily be abused as they relay information back to you such as ads, spam emails or ransomware threats (click here for more information on the dangers of using fake VPNs).
The best VPNs are transparent in their goals, where they operate, and the type of encryption they use.
Do your research to determine if the VPN service you’re looking to purchase is legit. Make sure you read through their terms of service and privacy policy carefully.
VPN Scam #3: VPN Reviews on Apple & Android App Stores
Never trust reviews and ratings on mobile app stores. Take Betternet VPN for example:
The free VPN service had over 12.2 thousand ratings on the Apple App Store and 4.6 stars.
Unfortunately for the 12.2 thousand users that ranked Betternet, they were probably clueless to the fact that Betternet VPN is among the worst VPN providers out there according to the Commonwealth Scientific and Industrial Research Organization (CSIRO) in Australia.
Betternet VPN is guilty of everything you should avoid in a VPN including:
- Logging user data and selling it to 3rd Parties
- Leaking user IP addresses
- Not being transparent on user encryption
- Lying that it does not collect, log, store, or share any user information;
When choosing a VPN, be thorough in your due diligence and review expert websites and opinions rather than trusting the opinions of unaware users on the Apple and Android App markets.
VPN Scam #4: “We Don’t Log Any User Data”
You should always be skeptical of the statement “we don’t collect, log, or store any identifiable personal information of users.” More than likely, your VPN is lying to you.
Don’t rely on false promises of anonymity. Direct your attention to transparency, trust, ease of use, performance and reliability in a VPN.
Unfortunately, even the best VPNs claim to have no logging policies and use them to promote their service.
The problem is that there is no way for consumers to verify these claims and we ultimately have to take providers at their word. VyprVPN puts it best by saying that “anyone who runs a large enough IT infrastructure knows that running that infrastructure with zero logs is impossible.“
Even if a VPN provider does commit itself to no-logging, its likely that the owners of the servers VPN providers lease do.
Therefore, when choosing a VPN provider – even a highly recommended one like ExpressVPN – read the fine print and look for any contradictions in statements of no-logging policies.
If data is logged, how will it be used? Will it be used to benefit service, or will the provider sell you out to 3rd parties?
We should not focus on false promises of anonymity and instead direct our attention toward transparency, trust, ease of use, performance and reliability in a VPN.
VPN Scam #5: Unsubstantiated Claims
Similar to being skeptical of VPNs that deny logging user data of any kind, you want to be cautious of any provider that boasts about being the fastest VPN on the market or has the best encryption.
Hacked? Here’s a step-by-step guide for what to do when you’ve been hacked
If you have seen any of my video reviews of VPNs, you will notice that in the speed tests, no provider stands on top of all the others. Speeds vary greatly based on factors such as distance to the nearest server or the time of day you are logging on to the service.
Therefore, if a provider claims they have the fastest VPN speed on the market, not only are they being dishonest, but ultimately they are using this as a sneaky marketing tactic. The same goes for encryption.
256-bit encryption is standard now. Any claim that it is “state-of-the-art” or “military-grade” is just pure marketing mumbo-jumbo.
VPN Scam #6: VPNs with Questionable Pricing
Do not fall for scams where you either pay an enormous sum of money or absolutely nothing for service. When reviewing pricing, be sure to also know how much you will pay and when you will be billed.
200 users fell for paying a $400 per month service fee in a crazy scandal involving an app called Mobile protection :Clean & Security VPN (notice the typo in the title). The app claimed to charge users $0.99 a week for the premium service, among many other major lies.
Along with the misprint in pricing, the product description is riddled with grammar mistakes which should immediately cast doubt on the validity of the service.
Unfortunately, that did not stop 50,000 people from downloading the service, though.
Before subscribing to a service, first make sure it is genuine and also shop around to get a feel for how much a competitive VPN will run you. Most VPN services bill you either monthly, bi-annually or annually. It’s rare for a VPN service to bill you weekly.
VPN Scam #7: VPN Websites that Aren’t Secure
Apart from looking into pricing, read through VPN product descriptions and verify that the services advertised are actually services. When looking at Mobile protection :Clean & Security VPN (mentioned above in Scam #6), the service offers protection from “dupplicate contacts” along with “instantly use full of smart anti-virus.”
I have no idea how Apple originally approved this app for its app marketplace, but even after its deletion, many other scam apps like this remain. Other scammers are more careful with their words.
Another way to gauge a quality VPN from a scam is checking whether the VPN provider website is secure.
Take MySafeVPN as an example, a sham provider whose website was not secured with HTTPS (HTTPS encrypts communication whereas HTTP does not).
If a VPNs website isn’t even secured, how can you trust that it’s service will be?
There is a big difference between http and https. Taking a moment to see if the VPN provider website is secured with HTTPS in the website URL can help save you from falling for a scam.
If a VPN does not encrypt their website, you can bet that any promises of anonymity and being “state of the art encryption” are false.
Not only does MySafeVPN not encrypt their website with HTTPS, but they also lied about an affiliation with Plex, a popular media server app, using Plex’s email list that MySafeVPN most likely purchased on the black market.
VPN Scam #8: VPNs that Offer “Lifetime Subscriptions”
Lifetime subscriptions advertised on third party websites are another common VPN scam to look out for. When logging on to websites like StackSocial and Gdgt Deals, there are endless amounts of products advertised with lifetime subscriptions.
Take the graphic below I took from Gdgt Deals for example. The deal offers a lifetime subscription to Windscribe VPN for $49.00 and also advertises the original price of $900. The price is so low that there has to be a catch…
…and there is.
What’s the catch?
Usually, the VPN service will serve you well for the first month or two and then immediately downgrade your speeds and bandwidth once you’ve passed the available refund date. At that point, you have no recourse.
Remember: quality VPNs experience recurring overhead costs and pass those onto their users as a subscription fee.
How would Windscribe VPN be able to survive as a business if it is offering an unlimited subscription at a price that would generally give you a year of service with an average VPN on the market?
Gdgt Deals’ ad for Windscribe VPN’s lifetime pro subscription is a scam, pure and simple. When logging onto Windscribe VPN’s website, there is no lifetime subscription even offered.
Remember, good things in life are not cheap and quality Internet privacy and security that last a lifetime are priced well above $49.
VPN Scam #9: VPN Review Websites that Promote their Own Service
The VPN market has become saturated with many poor and phony providers in recent years. Complicating matters more are sham VPN review websites launched by VPN providers to promote their own service.
VPNs are an industry where trust matters and you do not want to blindly trust some random review without researching the author’s background.
Therefore look for reviews from transparent sources (does their “About Page” actually list a person’s name?). On my website about page, I try to be overly transparent about who I am, why I am concerned with Internet privacy and security, and my commitment to helping others with the same concerns.
When reading reviews, try to decipher the purpose of the article. If it is trying to sell you the VPN service rather than educate you on it, STOP. Look for a separate review of the product.
Good reviews will also tell you what is bad in addition to what is good about the product.
VPN Scam #10: VPNs that require too much private info
Watch out for VPNs that require too much of your private information.
Astrill, for example, is a popular VPN service that requires users to register their address and phone number to use the service. This is a red flag for the purpose of a VPN is to not have your personal identity tied to your account.
If anonymity is a primary concern for you, steer clear of VPNs that ask you to enter too much of your private details.
Another tip is to look for VPNs that accept Bitcoin as a form of payment to further distance your identity from your account.