Are VPNs legal? Where they are and aren't

The question splits in two. Whether a VPN app is lawful depends on the country you are in. Whether the thing you do through it is lawful is a separate matter, and encryption changes nothing about it — fraud stays fraud with or without a VPN.

The tool itself is uncontroversial across most of the world. The United States has no federal restrictions on VPN use, and the United Kingdom, Canada, and most of Europe treat VPNs as ordinary, lawful software. If the technology is new to you, start with what a VPN is and how it works. Every provider in our full VPN rankings also states its legal home publicly — a detail that matters for a second, less obvious legality question covered further down.

Where are VPNs restricted or banned?

A short list of governments bans or tightly controls VPN use. Here is where this guide’s sources land, country by country.

VPN legality by country, per this guide's sources (as of 23 Jul 2026)

Country	Status	What that means in practice
United States	Legal	No federal restrictions. PCMag reports anti-VPN bills proposed in Michigan, Utah, and Wisconsin — proposals, not passed law.
United Kingdom	Legal	Lawful to buy and use.
Canada	Legal	Lawful to buy and use.
Most of Europe	Legal	Lawful in most European countries.
United Arab Emirates	Legal, with limits	Not broadly banned, but using a VPN to reach blocked or restricted content can be illegal.
China	Restricted	Only government-approved services are allowed; using an unauthorized VPN to bypass censorship can be illegal.
Russia	Restricted	Sources report only approved providers are allowed in practice.
Iran	Restricted or banned	Sources describe VPN use as restricted; some list it as banned.
Myanmar	Provider ban	A ban on establishing or providing VPN services took effect on 1 Jan 2025, per PCMag.
Iraq	Banned	Sources list VPNs as banned outright.
North Korea	Banned	Sources list VPNs as banned outright.

Two labels in that table carry most of the weight. “Restricted” generally means the state permits only approved services: China allows government-approved VPNs, and using an unauthorized one to bypass censorship there can be illegal. Sources report Russia works the same way in practice. “Banned” is blunter — in North Korea and Iraq, the tool itself is prohibited.

One-word statuses compress messy law, and the sources behind this guide disagree on edge cases. Iran, for example, shows up as restricted in some and banned in others. None publishes current penalty figures per country either, so this guide quotes no fine amounts. Where sources conflict or go quiet, the table says so instead of picking a number.

Can you get in trouble for using a VPN?

Not in the countries where VPNs are legal — the tool itself carries no risk there. The danger sits in the restricting and banning countries, where sources report penalties can include fines or imprisonment.

This area of law also moves quickly. Myanmar’s ban on providing VPN services took effect on 1 Jan 2025. In the United States, PCMag reports anti-VPN legislation proposed in Michigan, Utah, and Wisconsin — none has passed, but “legal in the US” is a status to recheck, not a permanent fact. Before traveling to any country in the restricted rows above, check its current law from a recently dated source; several of the guides we cite stress that laws change fast enough to make a year-old summary stale.

The other route into trouble has nothing to do with geography. A VPN hides traffic; it does not reclassify it. Fraud, hacking, and copyright infringement remain crimes when committed through an encrypted tunnel — a VPN never converts an illegal act into a legal one.

Is it legal to stream with a VPN?

Using a VPN while streaming is not inherently illegal, but two different risks hide inside that sentence. Breaking a streaming service’s terms of use is a contract problem: the service can act against your account, and that stays between you and the company. What you actually stream, and where, can raise genuine legal issues on top — those depend on local law, not on the VPN. The sources draw one consistent line: the tool is lawful; specific uses may not be.

The same legal-versus-policy split shows up beyond streaming. A VPN can be fully legal in your country and still break your employer’s or school’s network rules — a job or account problem rather than a criminal one, and a distinction most legality guides skip. If unblocking catalogs is your main reason for a VPN, see our picks for the best VPNs for streaming.

Does the VPN company’s own country matter?

Yes, but for a different reason. Your country’s law decides whether you may use a VPN. The provider’s country decides which laws govern what it can be forced to log or hand over. People asking about legality usually mean the first question; the second shapes how private the tool actually is.

Where eight major VPN providers are legally based, per their own pages (as of 23 Jul 2026)

Provider	Legal home	The company's claim about local law
NordVPN	Panama	Says Panama has no data-retention laws that would apply to VPN providers.
ExpressVPN	British Virgin Islands	Describes the BVI as a jurisdiction with strong privacy laws.
Surfshark	Netherlands	Based in Amsterdam, with terms governed by British Virgin Islands law.
Proton VPN	Switzerland	Says it has no logging requirements under the current Swiss legal framework.
Mullvad	Sweden	Says Swedish data-retention rules do not cover VPN providers.
CyberGhost	Romania	Notes Romania sits outside the 5/9/14 Eyes intelligence alliances, with no mandatory data retention for VPNs.
Private Internet Access	United States (Colorado)	A US company; the US is a Five Eyes member.
Windscribe	Canada (Ontario)	Registered in Ontario; Canada is a Five Eyes member.

Every line in the right-hand column comes from the vendor itself, so read each as a position, not a court ruling. Court records are harder currency: Proton VPN says its no-logs policy has been tested in more than 400 legal cases with no logs available to hand over, and Windscribe points to a Greek court case as real-world evidence of how little it stores. A Five Eyes home — an intelligence-sharing alliance that includes the US and Canada — is entirely legal to operate from; it simply raises the value of independent verification of a provider’s no-logs claims. How no-log VPN audits work explains what those verifications prove and what they cannot, and if jurisdiction drives your pick, our ranking of the most private VPNs weighs it directly.

Frequently asked questions

Are VPNs legal in the US?

Yes. VPN use is legal in the United States, with no federal restrictions on ordinary use. PCMag has reported anti-VPN bills proposed in Michigan, Utah, and Wisconsin, but those are proposals, not passed law.

Are VPNs legal in the UK?

Yes. VPNs are legal in the United Kingdom, as they are in Canada and most of Europe. Illegal acts remain illegal whether or not a VPN is involved.

Are VPNs legal in China?

China allows only government-approved or heavily regulated VPN services, and using an unauthorized VPN to bypass censorship can be illegal. Check the current rules before relying on one there.

Are VPNs legal in Russia?

Russia restricts VPN use. Sources commonly report that only approved providers are allowed in practice, and the rules can change quickly.

Are VPNs legal in the UAE?

The UAE does not broadly ban VPNs, but using one to access blocked or restricted content can be illegal there. The tool is lawful; specific uses carry the risk.

Is it illegal to use a VPN for illegal activity?

Yes. A VPN does not make illegal activity legal. Fraud, hacking, and copyright infringement remain crimes even when carried out over a VPN connection.