UK VPN Downloads Keep Surging as Ofcom Enforcement Lags Behind

VPN demand in the UK keeps climbing months after age-verification rules under the Online Safety Act first kicked in. ProtonVPN says its signups jumped 1,400% and stayed elevated, and separate reporting puts UK VPN downloads up as much as 1,800% in early 2026. Ofcom holds fines of up to 18 million pounds against non-compliant platforms, but critics say the regulator is moving too slowly to use them.

The numbers behind the surge

Since July 2025, the Online Safety Act has required UK platforms hosting adult content to verify the age of their users before granting access. The predictable response followed almost immediately: people who did not want to hand over ID documents or submit to facial scans reached for a VPN instead.

ProtonVPN reported what it called a “sustained” 1,400% surge in signups tied directly to the enforcement rollout. That surge was not a brief spike. It pushed the ProtonVPN app to the number one spot in UK app store downloads, a position it held rather than one it passed through on the way back down.

The trend has not faded with time. Separate reporting from early 2026 indicates VPN downloads across the UK jumped by as much as 1,800% compared to pre-enforcement levels. Nearly a year after the first age-verification requirements took effect, VPN usage in Britain is still climbing rather than settling into a new baseline.

The pattern is straightforward even if the politics around it are not. A law asks people to prove who they are before they can browse certain content. A large number of them decide that routing their traffic through a VPN server is the simpler, more private alternative. That is not really a workaround in any technical sense, since a VPN just changes where your traffic appears to originate. But it is a direct, measurable response to a specific piece of legislation, and the scale of it says something about how UK internet users feel about handing over ID to browse the web.

Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.

What Ofcom can actually do, and what it has done

Ofcom is not short on enforcement tools. The regulator can fine platforms up to 18 million pounds or 10% of their global annual revenue, whichever is larger, for failing to comply with the Online Safety Act’s requirements. In extreme cases, senior executives at non-compliant companies can face personal criminal liability. Ofcom can also apply to UK courts for orders that would block access to a site entirely within the country.

On paper, that is a serious set of powers. In practice, campaigners and members of Parliament keep pointing out how little of it Ofcom has actually used. Nobody is saying Ofcom lacks authority. The complaint is that enforcement against platforms dragging their feet on compliance has moved slowly, especially compared to how fast the law came into force and how fast users adapted around it.

That gap between statutory power and observed enforcement is now the more interesting story than the original rollout of the law itself. Age verification requirements arrived, users responded within weeks, and eleven months later the regulator with the authority to fine offending platforms tens of millions of pounds has yet to move at a pace that matches either the urgency of lawmakers or the scale of the workaround happening in plain sight.

The Lords amendment sits in the background

This enforcement gap is unfolding alongside a separate but related development. In January 2026, the House of Lords voted 207 to 159 to add an amendment to the Online Safety Act that would ban VPN provision to anyone under 18 in the UK. We covered that vote in detail when it happened.

That amendment still has not cleared the House of Commons. A government consultation on the broader issue launched on March 2, 2026 and ran until May 2026, and any legislation that comes out of it remains months away from taking effect, if it happens at all. So as of this writing, VPNs remain fully legal for UK users of every age, including the millions who have downloaded one specifically because of the age-verification rules already in force.

It is worth keeping the two stories separate. The Lords vote is about a proposed future restriction that has not become law. The download surge and the enforcement question are about what is already happening today under the law as it currently stands. Conflating them tends to overstate how close the UK actually is to restricting VPN access for minors, when the more immediate and better-documented story is that adults and teenagers alike are adopting VPNs faster than Ofcom is punishing the platforms that triggered the demand in the first place.

What this signals for UK VPN users

For anyone currently using a VPN in the UK, or considering one, the practical takeaway is fairly simple. Nothing about your ability to use a VPN has changed. The law that has driven this surge targets platforms, requiring them to verify the age of visitors before showing certain content. It does not currently restrict VPN providers or VPN users directly, adult or otherwise.

What has changed is the scale of normal, everyday VPN adoption in Britain. A tool that used to be associated mainly with streaming or corporate remote access is now, for a large share of new UK users, a response to a specific government policy around identity verification. That shift in why people are downloading VPNs, more than the raw percentages, is the part worth watching. It suggests that when governments introduce identity checks for online access, a predictable and sizable share of the public will route around them with privacy tools rather than comply, regardless of how the political debate over age verification itself eventually settles.

Whether Ofcom accelerates its enforcement pace against platforms, and whether the Lords amendment ever reaches a Commons vote, will shape the next chapter. For now, the story is less about new restrictions and more about a regulator with real power moving slower than both lawmakers and millions of ordinary internet users would like.

If you are choosing a VPN in response to any of this, providers with an independently audited no-logs policy and a jurisdiction outside UK enforcement reach, such as ProtonVPN, are a sensible starting point given the surge in signups reported for that exact use case. A broader option like NordVPN is worth considering too if streaming and general privacy both matter to you.

Sources: GovInfoSecurity and ppc.land.

Keep reading: UK Votes to Ban VPNs for Minors as Social Media Crackdown Expands and Is a VPN Legal? Country-by-Country Guide for 2026.