Google reveals how fraudsters are using VPN apps to steal data

Google has issued a new alert on rising VPN-related scams. Here’s what you need to know.

Google has released a new advisory warning users about a rise in fraudulent VPN apps and extensions that are being used to collect sensitive information. The company says cybercriminals are increasingly disguising harmful software as VPN tools, and users seeking free privacy solutions face the highest risk.

Google warns users about rising VPN-related scams and outlines key threats and safety steps to avoid them. (Pexels)

By MD Ijaj Khan

Ijaj Khan is a technology journalist and Senior Content Producer at Hindustan Times, with over three years of experience covering the consumer technology industry. His work spans smartphones, laptops, wearables, gaming, appliances and AI - from hands-on reviews, comparison and buying guides to breaking news and in-depth features that help readers cut through the noise and make informed decisions. Before joining HT Tech, he worked with Jagran New Media, where he sharpened his instincts for fast-paced digital reporting. He holds a Post Graduate Diploma in English Journalism and Mass Communication from the Indian Institute of Mass Communication (IIMC), Delhi. Whether he's testing the latest flagship smartphone, tracking a major AI announcement, or putting a gaming laptop through its paces, Ijaj approaches every story with the same goal - making technology feel relevant and easy to understand for everyday users, not just enthusiasts. When he's not in front of a screen for work, he's usually travelling to a new city, hunting for great food, or keeping tabs on what's next in tech before everyone else catches on.

Read moreRead less

Google has noted a consistent rise in interest in VPN services. However, many users download potentially unsafe tools without verifying their credibility. According to recent findings, several free VPNs log user data, include trackers, or manipulate reviews to get visibility. Google’s advisory shows that organised scam groups are now exploiting these trends through widespread malware campaigns.

What Google is warning about

The advisory states that bad actors are spreading fake VPN apps across app stores and other platforms. These apps often imitate well-known VPN brands, use misleading promotions, or tie their marketing to high-interest events to convince users to download them.

Once installed, these apps can deploy malware such as information-stealers, remote access tools, and banking trojans. Attackers may then access browsing data, private messages, financial details, and cryptocurrency wallet information.

Google says Android and Google Play use machine-learning models to detect harmful apps. Users can activate Google Play Protect for real-time scanning. The company has also introduced a system that blocks high-risk apps when users try to sideload them through browsers or messaging services.

How to Identify a Malicious VPN

Google lists several red flags that often appear in malicious VPNs. These include:

• Requests for permissions unrelated to VPN functions
• Using pushy or misleading ads to drive downloads
• Tracking user activity or selling data
• Unclear privacy policies
• No verified audits or company information
• Installing malware while claiming to offer secure browsing

Other Scams highlighted in Google’s Advisory

The advisory also warns about five other scam types:

• Online job scams: Fraudsters pose as employers or agencies to steal personal or financial information, often by directing applicants to download files.
• Negative review extortion: Scammers post fake reviews to pressure businesses into paying for the attacks to stop.
• AI tool impersonation: Criminals create fake AI apps, extensions, or sites that deliver malware or costly subscriptions.
• Fraud recovery scams: Victims of earlier scams are approached by individuals claiming to help recover lost money in exchange for upfront fees.

Seasonal holiday scams: Fake shops, deceptive ads, and phishing attempts surge during shopping seasons, including Black Friday and Cyber Monday.