Google has issued a warning for VPN users, here's why

VPN

Earlier this month Google issued a warning after spotting threat actors distributing fake VPN apps across platforms. These apps pretend to be trusted brands and often use suggestive ads or geopolitical bait to lure users looking for privacy. Once installed, they deliver malware, banking trojans and remote access tools that steal messages, browsing history, financial credentials and even cryptocurrency wallet details.

Google recommends keeping Google Play Protect switched on. The feature uses machine learning to detect harmful apps and includes an enhanced fraud protection system that blocks apps requesting permissions often linked with financial scams. If you try sideloading such apps from a browser or file manager, Play Protect can prevent the installation entirely.

The US Cybersecurity and Infrastructure Security Agency has also issued a strong warning. According to CISA, personal VPNs simply shift risk from your internet provider to the VPN company and often increase the attack surface. The agency says many free and commercial VPNs have questionable policies and poor security practices.

The safest approach is simple. Stick to VPNs listed on the Play Store or App Store and avoid anything offered outside the official channels. Do not disable Play Protect to force install a flagged VPN. And be wary of free VPNs, especially those from Chinese developers. A reputable western provider with a clear subscription plan remains the safer choice, even if it costs money.