# Hundreds of Fake VPNs Are Flooding the Chrome Web Store
Over 50,000 Chrome users have downloaded fake VPN extensions from the Chrome Web Store, according to recent research by Socket. These counterfeit extensions collect user data rather than protect it, creating serious privacy risks for families who believe they're using legitimate security tools.
The fake VPNs operate by mimicking trusted VPN brands and legitimate-looking names. They install silently and begin harvesting browsing data, passwords, and other sensitive information. Parents often install VPNs to protect their children online or secure family devices on public networks. Instead, these fake extensions expose exactly the personal information families meant to safeguard.
The Chrome Web Store has removed many of these malicious extensions, but new ones appear regularly. Socket's research identified hundreds of variants using similar tactics. The extensions use obfuscated code, making them difficult for both users and automated systems to detect as fraudulent.
Protecting your family requires verification before installing any VPN. Check the publisher's official website directly rather than trusting the store listing alone. Look for user reviews with specific details and recent dates. Major VPN providers like NordVPN, ExpressVPN, and Surfshark maintain official Chrome extensions on their own websites. Some families use established VPN services through their router settings instead of browser extensions, which provides broader device protection without relying on Chrome's extension ecosystem.
If your family has already installed an unknown VPN extension, remove it immediately. Change passwords on any accounts accessed while the extension was active, particularly email and banking credentials. Monitor your accounts for unauthorized activity over the coming weeks.
Chrome's extension approval process continues to miss malicious software. Parents relying on the store for security tools should research independently before installation. Legitimate VPN providers publish their extension information on their corporate websites and provide clear documentation about their security practices.