42% of US adults use a VPN, but a green icon proves little. Here is the 60-second VPN check, plus how to tell if any IP is a VPN.
You connect to a VPN, the icon turns green, and you assume you are invisible. Sometimes you are. Other times the app is connected while your real IP leaks out through DNS, WebRTC, or an IPv6 address the tunnel never touched. A VPN check takes about a minute and tells you which situation you are in.
This guide covers how to run a VPN check, how to tell whether any IP address belongs to a VPN, and what to do when the result looks wrong. You can test right now with the free [VPN Detector](/vpn-detector) on TraceMyIPOnline. No signup, no download.
The timing matters. Security.org's 2026 consumer report found that 42% of US adults now use a VPN, up from 32% a year earlier, and 43% of those users are on a free service. Free VPNs are where most leaks and logging problems live, so "it says connected" is weak evidence.
> A green icon only proves the app connected. It says nothing about whether your DNS queries, your browser, and your IPv6 traffic went through the tunnel. Test each one separately.
>
> — TMIO Editorial Team, TraceMyIPOnline
What a VPN Check Actually Tests
People search "vpn check" for two different jobs, and the tools behind them work differently.
The first job is checking your own VPN. The test compares your public IP before and after you connect, then looks at what else is visible: location, ISP, and DNS resolver. If the "after" IP still belongs to your home ISP, the VPN is not protecting that traffic, whatever the app says.
The second job is checking someone else's IP. Site owners do it to filter fraud, gamers do it to spot ban evasion, and plenty of people do it after a strange login alert. A VPN detector checks the address against hosting providers, known VPN ranges, and the public Tor exit list. The same tool handles both jobs. Paste your own IP for the first, any other address for the second.
How to Run a VPN Check in 5 Steps
1. **Record your real IP first.** Turn the VPN off and open the [VPN Detector](/vpn-detector). Write down the IP, city, and ISP. Without this baseline the later comparison means nothing.
2. **Connect and wait ten seconds.** Pick a server in a different city or country so the change is obvious. Some apps take a few seconds to finish the handshake, and testing too early gives false results.
3. **Reload the page and compare.** The IP, city, and ISP should all be different. The new ISP should be the VPN company or a hosting provider, not your home broadband company.
4. **Read the detection result.** A working commercial VPN is usually flagged as VPN or hosting traffic. A "not detected" result does not always mean failure, because some providers use residential exit IPs that no detector catches reliably. The IP and ISP change in step 3 is the real proof.
5. **Test the kill switch.** With the VPN on, switch Wi-Fi off and on, then reload the page fast. If your real IP shows up even for a moment, the kill switch is not doing its job.
## How to Tell If an IP Address Is Using a VPN
No single signal proves it. Detectors combine several, and you can read most of them yourself:
- The ISP or ASN belongs to a data center or hosting company, not a home broadband provider.
- The address sits in a range published by a known VPN service.
- The reverse DNS hostname carries a provider or server name.
- The browser timezone disagrees with the IP location, for example a browser set to India while the IP resolves to Frankfurt.
- The address is on the Tor project's public list of exit nodes.
One flag is a hint. Three flags together are strong evidence. Be honest about the limits, though: residential proxy networks route through real home connections, and a brand-new VPN provider may not be on any list yet. If you run your own VPN server at home, the [port checker](/port-checker) shows whether common VPN ports such as OpenVPN's 1194 or WireGuard's 51820 are open to the internet.
## VPN Check for California Users
Under the CCPA and CPRA, an IP address counts as personal information, and California residents can ask businesses to stop selling or sharing it. That right applies to companies that collect your data. It does nothing about your ISP seeing your traffic, or about the coffee shop network you are sitting on in San Francisco. A VPN covers those two gaps, but only if it is really carrying your traffic.
So run the check on the network you actually use. Test at home, then again on public Wi-Fi, because some VPN apps skip the tunnel on networks they trust. If your real IP appears on the café connection, you have found the exact problem the VPN was supposed to solve.
## VPN Check for New York Users
New York commuters live on shared networks: subway station hotspots, office guest Wi-Fi, hotel lobbies. On those connections other people can sometimes see which sites you hit, even when the pages are encrypted. New York's SHIELD Act pushes businesses to protect the data they hold. It does not protect the traffic you send over a network you do not control.
A quick habit helps. Connect to the VPN, run the check, and look at the city. If you are in Manhattan and the result still says a New York ISP, stop and reconnect before logging into banking or work accounts. The whole test costs about a minute.
## VPN Check for London Users
The ICO treats IP addresses as personal data under UK GDPR, so UK sites have to handle them carefully. What changed most recently is age verification. When the Online Safety Act's age checks came into force in July 2025, UK VPN demand jumped 1,327% on the first day according to Antivirus Insider's 2026 roundup. Plenty of those new VPN users never checked whether their setup worked.
If you are in London, run the check for two things: that your IP shows the country you picked, and that your DNS resolver is not still your UK ISP. Also expect some UK streaming and banking sites to block VPN IPs outright. A detector shows you why, because the site sees the same VPN flag you do.
## VPN Check for Toronto Users
Canadian privacy law (PIPEDA) puts limits on how companies handle your data, but gamers and streamers in Toronto face a more direct threat: IP exposure in peer-to-peer games and voice chat. Our guide on [what someone can do with your IP address](/blog/what-can-someone-do-with-your-ip-address-2026) covers the Ontario reporting steps in detail.
For a VPN check in that situation, test while the game or voice app is open, not just in the browser. Some apps use their own network path. If the browser shows the VPN IP but the game still connects from your home address, the tunnel is only covering part of your traffic. The Canadian Centre for Cyber Security accepts reports if you are targeted.
## Before and After: What a Good and a Leaking VPN Check Look Like
These values are made-up examples using reserved documentation IPs, but the pattern is what you will see in real tests.
| Check | VPN off | VPN working | VPN leaking |
|---|---|---|---|
| Public IP | 203.0.113.45 | 198.51.100.77 | 198.51.100.77 |
| City | Austin, TX | Frankfurt, Germany | Frankfurt, Germany |
| ISP | Example Cable Co. | Example Hosting GmbH | Example Hosting GmbH |
| DNS resolver | Example Cable Co. | VPN provider DNS | Example Cable Co. |
| Detector result | Not detected | VPN detected | VPN detected |
The third column is the trap. The IP looks perfect, the detector says VPN, and most people stop there. But the DNS resolver still belongs to the home ISP, which means every site you visit is still logged by that ISP. Only a full check catches it.
## TMIO VPN Detector vs Other VPN Check Options
| Feature | TMIO VPN Detector | IPTrackerOnline | VPN app's built-in check |
|---|---|---|---|
| Cost | Free | Free verdict; score details need Pro ($9 for 30 days) | Included with subscription |
| Signup | None | None for the basic check | Account required |
| Check any IP | Yes | Yes | Usually your own only |
| Detects VPN, proxy, Tor | VPN and proxy traffic | VPN, proxy, Tor | Its own service only |
| Independent of your provider | Yes | Yes | No |
We are obviously biased, so read this fairly. IPTrackerOnline gives a 0 to 100 score with a breakdown of detection factors, which is useful if you want to see exactly why an IP was flagged, though the detail sits behind its paid plan. Our tool is built for a fast yes or no. A built-in check from your VPN app has one real flaw: it is graded by the company selling you the product.
## VPN Check Statistics for 2026
- 42% of US adults use a VPN for personal or work reasons, up from 32% in 2025 (Security.org, updated September 2026).
- Free VPN use rebounded from 28% to 43% of users in a year (Security.org).
- NordVPN is the most-used brand at 24% of users, with Proton VPN second at 15% (Security.org).
- Around 23% of internet users worldwide aged 16 and over use a VPN (We Are Social Digital 2026, via GWI data).
- Nearly $20.9 billion was lost to internet crime in the US in 2025, a 26% increase on 2024 (FBI figures cited by Security.org).
The free VPN number is the one worth noticing. Almost half of users rely on services that often have weaker leak protection and unclear logging, and those are the people who most need a VPN check.
## When Your VPN Check Fails: Common Leaks and Fixes
**DNS leak.** Your DNS requests go to your ISP instead of the VPN. Fix it by turning on your app's DNS leak protection, or set a DNS server manually in the VPN settings.
**WebRTC leak.** Browsers can reveal your real IP through WebRTC requests even with a VPN on. Use a browser extension that blocks WebRTC, or in Firefox set *media.peerconnection.enabled* to false in about:config.
**IPv6 leak.** Some VPNs only tunnel IPv4, so any IPv6 traffic goes out from your real address. Choose a provider that supports IPv6 properly, or disable IPv6 on your device.
**Missing kill switch.** If the connection drops, your traffic falls back to the normal route without warning. Turn the kill switch on and repeat step 5 to confirm it works.
**A free or unreliable provider.** If none of the fixes hold, the provider is the problem. A reputable paid VPN with independent audits is the safer choice for anything sensitive.
This matters for more than browsing. Voice apps, games, and social platforms are common places where a leaked IP gets picked up. Our guides on how [IP addresses are exposed
This guide covers how to run a VPN check, how to tell whether any IP address belongs to a VPN, and what to do when the result looks wrong. You can test right now with the free [VPN Detector](/vpn-detector) on TraceMyIPOnline. No signup, no download.
The timing matters. Security.org's 2026 consumer report found that 42% of US adults now use a VPN, up from 32% a year earlier, and 43% of those users are on a free service. Free VPNs are where most leaks and logging problems live, so "it says connected" is weak evidence.
> A green icon only proves the app connected. It says nothing about whether your DNS queries, your browser, and your IPv6 traffic went through the tunnel. Test each one separately.
>
> — TMIO Editorial Team, TraceMyIPOnline
What a VPN Check Actually Tests
People search "vpn check" for two different jobs, and the tools behind them work differently.
The first job is checking your own VPN. The test compares your public IP before and after you connect, then looks at what else is visible: location, ISP, and DNS resolver. If the "after" IP still belongs to your home ISP, the VPN is not protecting that traffic, whatever the app says.
The second job is checking someone else's IP. Site owners do it to filter fraud, gamers do it to spot ban evasion, and plenty of people do it after a strange login alert. A VPN detector checks the address against hosting providers, known VPN ranges, and the public Tor exit list. The same tool handles both jobs. Paste your own IP for the first, any other address for the second.
How to Run a VPN Check in 5 Steps
1. **Record your real IP first.** Turn the VPN off and open the [VPN Detector](/vpn-detector). Write down the IP, city, and ISP. Without this baseline the later comparison means nothing.
2. **Connect and wait ten seconds.** Pick a server in a different city or country so the change is obvious. Some apps take a few seconds to finish the handshake, and testing too early gives false results.
3. **Reload the page and compare.** The IP, city, and ISP should all be different. The new ISP should be the VPN company or a hosting provider, not your home broadband company.
4. **Read the detection result.** A working commercial VPN is usually flagged as VPN or hosting traffic. A "not detected" result does not always mean failure, because some providers use residential exit IPs that no detector catches reliably. The IP and ISP change in step 3 is the real proof.
5. **Test the kill switch.** With the VPN on, switch Wi-Fi off and on, then reload the page fast. If your real IP shows up even for a moment, the kill switch is not doing its job.
## How to Tell If an IP Address Is Using a VPN
No single signal proves it. Detectors combine several, and you can read most of them yourself:
- The ISP or ASN belongs to a data center or hosting company, not a home broadband provider.
- The address sits in a range published by a known VPN service.
- The reverse DNS hostname carries a provider or server name.
- The browser timezone disagrees with the IP location, for example a browser set to India while the IP resolves to Frankfurt.
- The address is on the Tor project's public list of exit nodes.
One flag is a hint. Three flags together are strong evidence. Be honest about the limits, though: residential proxy networks route through real home connections, and a brand-new VPN provider may not be on any list yet. If you run your own VPN server at home, the [port checker](/port-checker) shows whether common VPN ports such as OpenVPN's 1194 or WireGuard's 51820 are open to the internet.
## VPN Check for California Users
Under the CCPA and CPRA, an IP address counts as personal information, and California residents can ask businesses to stop selling or sharing it. That right applies to companies that collect your data. It does nothing about your ISP seeing your traffic, or about the coffee shop network you are sitting on in San Francisco. A VPN covers those two gaps, but only if it is really carrying your traffic.
So run the check on the network you actually use. Test at home, then again on public Wi-Fi, because some VPN apps skip the tunnel on networks they trust. If your real IP appears on the café connection, you have found the exact problem the VPN was supposed to solve.
## VPN Check for New York Users
New York commuters live on shared networks: subway station hotspots, office guest Wi-Fi, hotel lobbies. On those connections other people can sometimes see which sites you hit, even when the pages are encrypted. New York's SHIELD Act pushes businesses to protect the data they hold. It does not protect the traffic you send over a network you do not control.
A quick habit helps. Connect to the VPN, run the check, and look at the city. If you are in Manhattan and the result still says a New York ISP, stop and reconnect before logging into banking or work accounts. The whole test costs about a minute.
## VPN Check for London Users
The ICO treats IP addresses as personal data under UK GDPR, so UK sites have to handle them carefully. What changed most recently is age verification. When the Online Safety Act's age checks came into force in July 2025, UK VPN demand jumped 1,327% on the first day according to Antivirus Insider's 2026 roundup. Plenty of those new VPN users never checked whether their setup worked.
If you are in London, run the check for two things: that your IP shows the country you picked, and that your DNS resolver is not still your UK ISP. Also expect some UK streaming and banking sites to block VPN IPs outright. A detector shows you why, because the site sees the same VPN flag you do.
## VPN Check for Toronto Users
Canadian privacy law (PIPEDA) puts limits on how companies handle your data, but gamers and streamers in Toronto face a more direct threat: IP exposure in peer-to-peer games and voice chat. Our guide on [what someone can do with your IP address](/blog/what-can-someone-do-with-your-ip-address-2026) covers the Ontario reporting steps in detail.
For a VPN check in that situation, test while the game or voice app is open, not just in the browser. Some apps use their own network path. If the browser shows the VPN IP but the game still connects from your home address, the tunnel is only covering part of your traffic. The Canadian Centre for Cyber Security accepts reports if you are targeted.
## Before and After: What a Good and a Leaking VPN Check Look Like
These values are made-up examples using reserved documentation IPs, but the pattern is what you will see in real tests.
| Check | VPN off | VPN working | VPN leaking |
|---|---|---|---|
| Public IP | 203.0.113.45 | 198.51.100.77 | 198.51.100.77 |
| City | Austin, TX | Frankfurt, Germany | Frankfurt, Germany |
| ISP | Example Cable Co. | Example Hosting GmbH | Example Hosting GmbH |
| DNS resolver | Example Cable Co. | VPN provider DNS | Example Cable Co. |
| Detector result | Not detected | VPN detected | VPN detected |
The third column is the trap. The IP looks perfect, the detector says VPN, and most people stop there. But the DNS resolver still belongs to the home ISP, which means every site you visit is still logged by that ISP. Only a full check catches it.
## TMIO VPN Detector vs Other VPN Check Options
| Feature | TMIO VPN Detector | IPTrackerOnline | VPN app's built-in check |
|---|---|---|---|
| Cost | Free | Free verdict; score details need Pro ($9 for 30 days) | Included with subscription |
| Signup | None | None for the basic check | Account required |
| Check any IP | Yes | Yes | Usually your own only |
| Detects VPN, proxy, Tor | VPN and proxy traffic | VPN, proxy, Tor | Its own service only |
| Independent of your provider | Yes | Yes | No |
We are obviously biased, so read this fairly. IPTrackerOnline gives a 0 to 100 score with a breakdown of detection factors, which is useful if you want to see exactly why an IP was flagged, though the detail sits behind its paid plan. Our tool is built for a fast yes or no. A built-in check from your VPN app has one real flaw: it is graded by the company selling you the product.
## VPN Check Statistics for 2026
- 42% of US adults use a VPN for personal or work reasons, up from 32% in 2025 (Security.org, updated September 2026).
- Free VPN use rebounded from 28% to 43% of users in a year (Security.org).
- NordVPN is the most-used brand at 24% of users, with Proton VPN second at 15% (Security.org).
- Around 23% of internet users worldwide aged 16 and over use a VPN (We Are Social Digital 2026, via GWI data).
- Nearly $20.9 billion was lost to internet crime in the US in 2025, a 26% increase on 2024 (FBI figures cited by Security.org).
The free VPN number is the one worth noticing. Almost half of users rely on services that often have weaker leak protection and unclear logging, and those are the people who most need a VPN check.
## When Your VPN Check Fails: Common Leaks and Fixes
**DNS leak.** Your DNS requests go to your ISP instead of the VPN. Fix it by turning on your app's DNS leak protection, or set a DNS server manually in the VPN settings.
**WebRTC leak.** Browsers can reveal your real IP through WebRTC requests even with a VPN on. Use a browser extension that blocks WebRTC, or in Firefox set *media.peerconnection.enabled* to false in about:config.
**IPv6 leak.** Some VPNs only tunnel IPv4, so any IPv6 traffic goes out from your real address. Choose a provider that supports IPv6 properly, or disable IPv6 on your device.
**Missing kill switch.** If the connection drops, your traffic falls back to the normal route without warning. Turn the kill switch on and repeat step 5 to confirm it works.
**A free or unreliable provider.** If none of the fixes hold, the provider is the problem. A reputable paid VPN with independent audits is the safer choice for anything sensitive.
This matters for more than browsing. Voice apps, games, and social platforms are common places where a leaked IP gets picked up. Our guides on how [IP addresses are exposed