SecureCheck.com.au

VPNs and Online Security in Australia: Plain, Sourced Guides

Published:
Updated:
Reviewed:

Quick answer

  • We found no Australian law in our sources that bans using a VPN, and the ACSC suggests a reputable VPN on networks you don't trust. A VPN doesn't make an unlawful act lawful.
  • Internet providers must keep certain metadata for at least 2 years, but the scheme excludes the content of communications and doesn't require web browsing history to be kept.
  • Australians reported $2.18 billion lost to scams in 2025. A VPN doesn't stop scams. Multi-factor authentication and checking contacts yourself do more.

SecureCheck.com.au explains VPNs and everyday online security for people in Australia, in plain language and with every fact linked to where it came from. We cover the questions Australians actually ask: is a VPN legal here, what does metadata retention mean for you, do you need a VPN on public Wi-Fi, why does Stan or Netflix show an error with a VPN on, and how do you spot a scam. Our sources are Australian government pages, such as the Australian Cyber Security Centre, the OAIC, Scamwatch, Moneysmart and eSafety, plus the companies' own websites. Everything was checked on 30 October 2026.

SecureCheck.com.au is an independent guide operated by Dominet BV. This page is general information, not legal or technical advice for your situation. We don't sell VPNs or security software. No link on this site is an affiliate link right now. We may earn a commission from VPN or security companies in future when a reader buys through a link on this site. If that happens we'll label those links and explain it in our affiliate disclosure, and it won't change the facts we publish. Facts were checked on official and company websites on 30 October 2026. Read our general information notice.

Start here

What a VPN does, in one paragraph

A VPN encrypts the traffic between your device and the VPN company's server, then sends it on from there. Your internet provider and other people on the same network see much less of what you do, and websites see the VPN server's address instead of yours. The Australian Cyber Security Centre says a VPN can hide your activity from others on the same network, but won't protect you from malware, phishing or flaws in your software (ACSC). It also moves trust: the VPN company can see what your internet provider used to see.

Australian rules in brief

TopicWhat our sources sayGuide
VPN legalityWe found no Australian law in our sources that bans using a VPN. The ACSC suggests a reputable VPN on networks you don't trustIs a VPN legal?
Metadata retentionTelecommunications providers must keep certain metadata for at least 2 years. Content and web browsing destinations are excluded (Home Affairs)Metadata retention
Privacy ActCovers Australian Government agencies and organisations with annual turnover above $3 million, plus some others, with 13 Australian Privacy Principles (OAIC)Metadata retention
Under-16 social media rulesFrom 10 December 2025, age-restricted platforms must take reasonable steps to stop under-16s having accounts. No penalties for under-16s or parents (eSafety)Is a VPN legal?
StreamingStan, ABC iview and SBS On Demand say their content is for Australia only. Netflix says a VPN can trigger an error (Netflix)VPNs and streaming

Scams: the bigger everyday risk

For most people, scams cost more than any network snooping. The National Anti-Scam Centre's Targeting Scams Report 2025 found Australians reported $2.18 billion in losses in 2025, up 7.8% on 2024, across 481,523 reports. People aged 65 and over accounted for 26.5% of losses.

Scamwatch's advice is Stop. Check. Protect.: pause before you pay or share details, check the contact through official channels, and act quickly if something goes wrong. Moneysmart adds multi-factor authentication and treating gift card or cryptocurrency payment requests as a warning sign. Our scams guide covers what to do if you've been scammed, and our public Wi-Fi guide covers cafes, airports and hotels.

How we work

  • Official sources first. Australian law and safety advice comes from government pages. Company facts come from each company's own website.
  • Dated facts. Every page shows when it was checked. Our sources page lists every link.
  • No rankings, no prices. We set out facts side by side and don't pick winners. We don't list VPN prices because we didn't verify them in Australian dollars.
  • No workarounds. We don't explain how to get around streaming licences or the under-16 social media rules.
  • Brands are named for facts only. We name NordVPN and Proton VPN because we read their pages. No company has paid to appear.

Read more about us.

All guides

Frequently asked questions

Do I need a VPN in Australia?

Not always. It helps most on networks you don't trust, such as public Wi-Fi. For scams, multi-factor authentication and checking contacts yourself matter more.

Is using a VPN legal in Australia?

We found no Australian law in our sources that bans using a VPN. A VPN doesn't make an unlawful act lawful.

Does a VPN stop my internet provider keeping metadata?

Your provider can still keep account details and some connection records, but with a VPN on it sees mainly that you're connected to a VPN server. See our metadata guide.

Do you recommend a VPN?

No. We set out facts from each company's pages so you can decide.

Related guides

Sources

  1. Security tips for remote working, Australian Cyber Security Centre

    primary source. Accessed

  2. Data Retention Guideline, Department of Home Affairs

    primary source. Accessed

  3. Data retention industry FAQs, Department of Home Affairs

    primary source. Accessed

  4. The Privacy Act, OAIC

    primary source. Accessed

  5. Targeting Scams Report 2025, National Anti-Scam Centre

    primary source. Accessed

  6. Stop. Check. Protect., Scamwatch

    primary source. Accessed

  7. Protect yourself from scams, Moneysmart (ASIC)

    primary source. Accessed

  8. Social media age restrictions, eSafety Commissioner

    primary source. Accessed

  9. Netflix says you seem to be using a VPN or proxy, Netflix Help Center

    provider source. Accessed