SF SaaS Flags
VPN & Privacy Tools · Risk Score 100 · Severe

Is ExpressVPN a Scam or Legit? Here's What the Record Shows.

Premium-priced VPN with leadership controversy still in the record

Short answer: Not technically — but it's complicated.

Our read

ExpressVPN isn't a "scam" in the criminal sense — it's a real company with real software — but the complaint record raises serious questions about its sales practices, billing, and the gap between what's advertised and what's delivered.

The strongest "this feels like a scam" signals tend to come from one of two places: marketing claims that don't match reality, or billing practices that make leaving harder than joining. Below are the 7 flags in those two categories we've documented for ExpressVPN.

Marketing & billing complaints

Misleading Marketing MEDIUM Source: Reddit · Jun 17, 2024 Added 23d ago

Affiliate Review Ecosystem Distorts the Honest Picture for New Buyers

ExpressVPN runs one of the most aggressive VPN affiliate programs in the industry, paying publishers substantial commissions per conversion. This creates a documented problem: the majority of 'independent' review sites that rank ExpressVPN as their top pick have financial relationships with the company. Hacker News and r/VPN have both surfaced threads cataloging this pattern, noting that critical coverage of ExpressVPN's Kape ownership or CTO controversy is nearly absent from the sites that dominate Google search results for VPN recommendations.

"Almost every site that calls ExpressVPN the best VPN is also collecting an affiliate commission for sending you there. That's not a review — that's an ad with extra steps."

Billing Problems HIGH Source: News · Aug 10, 2026 Added 23d ago

Unexpected Auto-Renewal Charges Catch Subscribers Off Guard

ExpressVPN's own support documentation addresses 'unexpected or unrecognized charges' — a page that wouldn't need to exist if billing surprises weren't a recurring problem. Users on Reddit and Consumer Affairs have repeatedly flagged being charged full annual rates ($99.95–$107.04) after promotional periods ended, with little advance warning. Many report the renewal email arriving only 24–48 hours before the charge hits, leaving almost no window to cancel.

"I signed up for the cheap intro deal and forgot about it. A year later they hit my card for over a hundred dollars with basically no warning — by the time I saw the email the charge had already gone through."

Billing Problems MEDIUM Source: News · Feb 11, 2026 Added 23d ago

Currency Billing Changes Created Confusion for International Subscribers

In early 2026, ExpressVPN shifted from USD-only billing to fixed local-currency pricing in a number of markets — a change TechRadar covered in February. While framed as a customer benefit, the rollout created confusion: users in affected countries found their renewal amounts had changed from what they'd originally agreed to pay, with some reporting they weren't proactively notified about the switch. For subscribers on long-term plans, the local-rate conversion didn't always work in their favor.

Misleading Marketing HIGH Source: Hacker News · Oct 1, 2021 Added 23d ago

"No-Log" Privacy Claims Undercut by Kape Technologies Ownership History

ExpressVPN has marketed itself heavily on privacy and zero-logs principles, but its 2021 acquisition by Kape Technologies — a company with roots in adware distribution under its former name, Crossrider — has never stopped being a liability. Security researchers and privacy advocates on Hacker News and Reddit's r/privacytoolsIO have continued to flag this ownership history as incompatible with the brand's privacy-first image. Kape also owns CyberGhost and Private Internet Access, creating a VPN portfolio that concentrates user data risk under a single corporate umbrella.

"Choosing ExpressVPN for privacy while ignoring who actually owns it is like buying organic produce from a pesticide company because the label looks clean."

Misleading Marketing CRITICAL Source: News · Sep 14, 2021 Added 23d ago

CTO's Prior Work for UAE Surveillance Program Is a Documented Fact

ExpressVPN's former CTO, Daniel Gericke, was one of three people who settled with the U.S. Department of Justice in September 2021 over charges related to his work on Project Raven — a covert surveillance operation run for the UAE government that targeted journalists, dissidents, and U.S. citizens. ExpressVPN kept him on staff even after the settlement became public, only parting ways with him in late 2022. The company's response — calling it a matter of transparency and noting it had known about the investigation before the acquisition — did little to reassure the privacy community.

"They knew their CTO had helped a foreign government spy on dissidents and kept him anyway. That's not a background check problem — that's a values problem."

Billing Problems MEDIUM Source: Trustpilot Updated 4mo ago

Prepay renewal pricing pattern similar to category

Like NordVPN, prepay terms renew at higher monthly rates with limited notice.

Misleading Marketing HIGH Source: News Updated 4mo ago

CIO's prior UAE cyber-intelligence work disclosed in 2021

In 2021 it was disclosed that ExpressVPN's CIO had previously been part of a UAE cyber-intelligence operation that targeted journalists. The company defended the hire; many in the privacy community lost trust.

Our AI scanner searches Reddit, Trustpilot, BBB, and news sources for fresh complaints from the past year, paraphrases what it finds, and adds anything new to this page. Takes up to 90 seconds.

Everything else worth knowing

For the full record — lawsuits, churn signals, support failures, and BBB filings — see the complete complaints page.