Google has warned billions of smartphone users to beware of a surge in fake virtual private network (VPN) apps that are stealing sensitive personal and financial data under the guise of protecting privacy.

The alert, part of Google’s November 2025 Fraud and Scams Advisory , highlights how cybercriminals are exploiting rising demand for online security tools. Many of the fraudulent VPN apps mimic trusted brands or use explicit advertising to lure users, only to infect their devices with spyware and data-stealing malware once installed.

“These apps often appear genuine and even perform basic VPN functions,” said Laurie Richardson, Google’s vice president of trust and safety. “But behind the scenes, they can compromise passwords, banking details and private messages.”

Google said attacke

See Full Page