Google has issued a warning about a rise in fraudulent VPN applications that are being used to collect personal and financial information from users.
The company says organised scam groups are now distributing fake VPN software across app stores, websites, and sideloading channels.
In its advisory, Google noted a steady growth in public interest in VPN tools, especially free options. The company says this trend has made users more vulnerable to unsafe apps that imitate well-known VPN brands. According to the findings, some of these fake services log user activity, include hidden trackers, or manipulate ratings through fabricated reviews.
Google said many of the harmful apps operate by copying legitimate branding and using misleading advertising. Some campaigns rely on sexually suggestive material or references to geopolitical events to attract attention.
Laurie Richardson, Google’s Vice President of Trust and Safety, said the fraudulent VPNs are being used to install harmful software on devices.
She warned:
“Once installed, these applications serve as a vehicle to deliver dangerous malware payloads including info-stealers, remote access trojans and banking trojans that exfiltrate sensitive data such as browsing history, private messages, financial credentials and cryptocurrency wallet information.”
Google explained that Android and the Google Play Store use machine-learning tools to detect these threats. Users can activate Google Play Protect for real-time scanning. The company has also introduced restrictions that block high-risk apps during sideloading attempts from browsers or messaging platforms.
The advisory lists several warning signs of malicious VPN tools. These include requests for permissions unrelated to VPN functions, unclear privacy policies, aggressive advertising, and a lack of verified audits or company details. Some fake VPNs install malware while claiming to offer secure browsing.
Google also highlighted other scam types currently circulating. These include online job scams, negative review extortion targeting businesses, fake AI tools, fraud recovery schemes, and seasonal shopping scams linked to Black Friday and Cyber Monday.
According to the Global Anti-Scam Alliance, 57% of adults experienced a scam in the past year, and 23% reported losing money.
Google says the recent discoveries show that cybercriminals are taking advantage of growing demand for privacy tools, and users should carefully verify any VPN service before installation.
