Free VPNs could steal YOUR money – new malware warning issued

Free VPNs could steal YOUR money – new malware warning issued

Google has issued a warning about the dangers of relying on free VPNs

|

UNSPLASH

GB News Reporter

By GB News Reporter


Published: 22/04/2026

- 11:48

All products and promotions are independently selected by our experts. To help us provide free impartial advice, we will earn an affiliate commission if you buy something. Click here to learn more

If a deal on one of these security apps seems too good to be true, you should be worried

Ever since the introduction of the strict Online Safety Act, record numbers of Britons have flocked to VPNs to safeguard their personal data from broadband providers, snooping governments, hackers, and advertisers.

VPNs add a layer of protection to everything you do online, keeping your data safe from prying eyes. It's the reason that most workplaces require all employees to enable a VPN when working remotely – keeping sensitive information under lock-and-key. But these tools aren't just about shielding your data, these clever apps can also be used to manually spoof your location to unlock cheaper subscriptions or watch your favourite shows when abroad.


With so much interest in VPNs, companies promising all of the benefits of a VPN without any of the cost have seen their popularity surge. What's better than the best VPN deal? A free subscription!

While it might sound tempting, relying on a free VPN service could be a big mistake if you’re not careful.

Many legitimate VPN suppliers offer a free plan for subscribers, so there's nothing intrinsically wrong with a free service. However, cybercriminals have used the promise of a free VPN to trick people into downloading these apps and steal their personal information, or worse, take control of a desktop PC, smartphone, or tablet.

Warnings about free VPNs have already been issued by Google. Back in November 2025, the Californian company cautioned about fraudulent VPN apps that were actively stealing data from the gadgets they claim to protect.

Fraudsters are using fake apps that are rapidly spreading across multiple platforms, targeting billions of smartphone and computer users worldwide. Instead of safeguarding your internet connection as promised, they're actually designed to compromise your security and privacy.

Google said in a statement: "These actors tend to impersonate trusted enterprise and consumer VPN brands or use social engineering lures, such as through sexually suggestive advertising or by exploiting geopolitical events, to target vulnerable users who seek secure internet access."

This follows news that cybersecurity experts found Klopatra, a new Android Remote Access Trojan (RAT) that was bundled inside an IPTV application called "Mobdro Pro IP TV + VPN". Klopatra granted criminals full, remote control over the compromised device. They were able to monitor the screen, capture keystrokes, simulate taps and gestures, and perform actions as if they were the legitimate user.

That means it could easily access banking details, passwords, login details and more – without you even realising it.

Discussing the devastating new malware, Head of Security at Proton VPN, Patricia Egger told GB News: "The discovery of Klopatra highlights that mobile malware keeps evolving and just how dangerous fake apps can be. An unethical VPN is one of the most effective data harvesting tools imaginable, with visibility into almost everything a person does online.

"So, it’s not surprising that attackers are exploiting the trust users place in VPNs to do extensive damage. The best defence is vigilance.

"Ensure you download a VPN from a trusted source and always verify the permissions that apps are requesting. When choosing a VPN, look closely at their ownership and security practices, which can include bug bounty programs, being open-source, or publishing independent security audits."

Subscribe to ExpressVPN for just £1.99 – just 6 pence a day

Protect your personal information and encrypt everything you do online for just £1.99 with the latest ExpressVPN deal. That equates to just 6p a day for military-grade encryption across 10x devices.

Unsurprisingly, this blockbuster sale trounces NordVPN, its biggest competitor.

ExpressVPN boasts apps for iPhone, Android, Linux, Windows, Mac, Fire TV, and dozens more, to secure your internet traffic from prying eyes, advertisers, and governments. We praised its speed and reliability in our ExpressVPN review. For a limited time, you'll benefit from an extra 4 months free with a two-year plan

Get 80% off ExpressVPN Basic
$9.99 $1.99

Proton: Get 70% off your subscription

Proton: Get 70% off your subscription

Created by scientists at CERN, Proton is one of the few secure, trustworthy VPN brands to offer a £0 plan. It's limited to 5 VPN server locations and a more modest download speed, but nonetheless, it's a great way to test out the service before you commit to its full-featured subscription. Upgrade to a two-year plan, Proton will slash 70% off your costs

ProtonVPN
$7.99 $2.39

Should you download free VPNs?

Free VPNs, while providing great value, can often be a risk as they can be known to compromise the very privacy and security they promise.

Many free providers log your online activity, including your browsing history, IP address, location and sell this sensitive data to advertisers and data brokers, defeating the purpose of a VPN.

Many free VPNs are also limited and restrict usage when you reach a certain limit. They can also have very few server choices and little customer service.

Free services typically have a limited number of overcrowded servers, leading to slow speeds, buffering, and unreliable connections. They are also often ineffective at bypassing geo-restrictions for streaming services.

But there are trustworthy options to go for. ProtonVPN, for example, offers a free VPN option, but it is limited to the number of servers you can connect to.

Patrick Christys speaks with the Chief Research Officer at ExpressVPN

Why you should consider investing in a premium VPN service, like ExpressVPN

Whilst free VPNs can be good value, premium VPN providers like ExpressVPN offer seamless connections, rock-solid privacy, government-level encryption – all for less than a coffee each month. ExpressVPN is a multi-award-winning VPN with gongs from the likes of Techradar, CNET, and Tom's Guide, with praise for its servers dedicated to fast, reliable streaming from anywhere in the world.

Monthly prices start from £1.99 a month, and unlock ExpressVPN across up to 14 devices. Once installed, connect to a UK server from ExpressVPN's network of over 3,000 servers across 105 countries.

The service uses proprietary Lightway protocol for enhanced speed and reliability, ensuring smooth streaming of festival performances. The service works across all your devices – Windows, Mac, Android, iOS, Smart TVs, and streaming devices like Fire TV Stick. You can even use ExpressVPN's MediaStreamer feature to watch on devices that don't normally support VPNs, such as PlayStation or Xbox.

ExpressVPN includes a 30-day money-back guarantee, allowing you to watch the entire festival risk-free and recover your investment if you're not satisfied with the service. VPNs are not illegal and are often mandated by companies to improve online security for employees. However, it's your responsibility to ensure that you're using these popular apps for legal use. Always check the terms and conditions of the streaming service.

illustrate of how expressVPN connections workVPNs work by encrypting all of your online traffic before it's sent over the internet. This prevents your ISP, advertisers, hackers, and fraudsters from tracking your online activity, stealing your personal data, or placing restrictions on you | EXPRESSVPN PRESS OFFICE

Benefits of ExpressVPN

ExpressVPN is particularly well-suited for streaming, gaming and protecting your privacy as it boasts VPN server locations in 105 countries, providing access to global coverage.

It offers ultra-fast speeds on a 10-Gbps network, essential for high-quality streaming without buffering. With military-grade encryption, a strict no-logs policy, and features like split tunnelling and a kill switch, your online activity stays private.

Based in the British Virgin Islands — outside Five Eyes jurisdiction — it avoids mandatory data retention laws, which means that even if the company were collecting data (it's not), law enforcement from the UK and US would be unable to compel ExpressVPN to hand over any information about its subscribers.

ExpressVPN supports a wide range of devices, including smartphones, tablets, laptops, smart TVs, and routers. There's no limit on the number of ExpressVPN apps that you can download on your devices, and with a single subscription, you can connect to the VPN on 10x gadgets at once.

It also has a dedicated team that optimises the service for major streaming platforms. Round-the-clock customer support is available if you encounter any issues during race weekend.

ExpressVPN isn't the cheapest VPN. However, its 30-day money-back guarantee makes it a risk-free choice for privacy-conscious users and frequent streamers. It should also give new customers the confidence to subscribe to one of its longer contracts, which unlock the biggest discounts.