Virtual private networks are designed to preserve online privacy by encrypting internet traffic and hiding IP addresses that can be used to determine user location. Most users are aware of this when they try to access a website or service when they are overseas. The IP address generally triggers the loading of a URL in the local area and may restrict access to a U.S. service or site. A VPN can be used to circumvent such restrictions and limitations. For example, a U.S. user traveling in Europe might be blocked from accessing paid streaming services that the user could access if he or she were physically located in the U.S. A VPN masks the local European IP address and can enable the person to view U.S.-based content. A VPN server, then, replaces an IP address with its own as it passes the encrypted data to the public internet. For example, if you live in New York, your IP address will show that you are connecting from New York. However, if you connect to a VPN server based in Amsterdam, the IP address appears to indicate that the user is based in the Netherlands. On the surface, VPNs seem to hide the digital footprint of a user. However, they are not a guarantee of complete anonymity. For example, ISPs are aware of when someone is using a VPN, but they can’t view specific online activity protected by a VPN, such as browsing history, DNS queries, downloaded files and personal data. However, VPNs are useful in preventing Big Brother — in the form of various government agencies — from snooping on users and where they visit online. The use of an encrypted VPN tunnel offers a large measure of protection against unwanted eyes. But VPNs are not a panacea. If a system is hacked, a cybercriminal can learn what is going on, regardless of the VPN. And under certain circumstances, the police and government agencies can be granted access to VPN data. Semperis Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Small (50-249 Employees), Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Small, Medium, Large, Enterprise Features Advanced Attacks Detection, Advanced Automation, Anywhere Recovery, and more How can police track a VPN? Most of the time, police are not allowed to track online behavior or gain access to VPN data. But serious crimes alter the equation. In the event of a major crime, the police can make a request to receive online data from a user’s ISP. If a VPN is being used, the VPN provider can be asked to provide user details. For example, law enforcement has been able to access VPN data to track down child pornography suspects and internet stalkers IPVanish reportedly handed off logs to authorities. Image: Luis Millares VPN logs enabled investigators to find the perpetrators actual IP addresses. A direct IP address is not going to be available to the police, as VPNs encrypt data and route it via their servers. But other data provided to the police by a VPN provider may make it possible for them to figure out where a user is located. What information can the police obtain from your VPN? The police can legally apply to obtain certain types of information from a VPN provider. This includes: Logs of all the websites a user visited. Services used while connected to the VPN. Actual IP addresses. Connection logs (which provides details such as the time someone used a VPN to connect to a server). Billing information that shows your mailing address and banking details. That said, some VPN providers promote a no-logs policy, i.e., they say their service does not store any logs in order to provide a further layer of anonymity. When the provider is forced to comply with a request for access from the police, there won’t be any data to pass on. But in most cases, there is some kind of data to be found. Billing information is typically available, which is why those wishing for secrecy prefer to pay in cryptocurrency. Further, some of those that say they have a no-logs policy, keep some kind of logs on the down-low. The privacy statement should tell the tale. And if a provider can’t provide a security audit or some form of independent verification of their privacy credentials, they may be quietly logging some data. NordVPN’s security audit on its no-logs policy. Image: NordVPN In addition, VPN providers vary in their level of cooperation. Some are happy to provide information to the police when provided with the right paperwork. Others are largely uncooperative. But even for them, enough pressure can be brought to bear that they are forced to comply. Can police track IP addresses? If the police can gain access to VPN connection logs, they may be able to find a user’s actual IP address along with other information related to data usage and the times the user most commonly connects to the VPN. If the police obtain such broad access, they can generally put the pieces together to identify a specific user device and determine the user’s identity. Can live traffic be tracked? The good news is that there is almost no way to track live, encrypted VPN traffic. Law enforcement can only obtain data, if available, about websites visited and so on. Otherwise, hackers and snooping government agencies are generally blocked by the fact that the data is encrypted. There are exceptions. If a user device is hacked, or a VPN provider is infiltrated, malware can quietly feed VPN-protected data to hackers and cybercriminals. Security basics such as not clicking on malicious links and suspicious emails apply, as do all the usual cautions about not falling prey to social engineering tricks and scams. Surfshark’s desktop interface. Image: Luis Millares Similarly, keeping operating systems, applications and VPN software up to date via patching is recommended. Vulnerabilities should be addressed to prevent breaches. And in very rare instances, hackers may obtain