VPN tunnel around the local filter
How common it is: Ofcom reported that about one quarter of GB 11 to 17 year-olds had used a VPN in the previous six months in March 2026; 5% reported use to access older-age content/features. eSafety’s July 2026 evalua…
Detection
A persistent VPN status/configuration on the device is strong evidence of a tunnel. A router may see long-lived encrypted flows to VPN infrastructure but generally not the destinations carried inside.…
Fix (technical)
On iOS, restrict unauthorized app installation using (siehe ui_strings_ref). On Android, Family Link can manage which apps are allowed and can require parent control of app permissions. Do not promise…
Fix (relational)
VPNs also have legitimate privacy, school and travel uses. Ask what the VPN is for before treating its presence as proof of bypass intent.
Residual risk
Built-in enterprise tunnels, changing VPN protocols, browser-based relays and unmanaged networks remain separate cases.
Sources
-
ofcom-age-assurance-2026
-
esafety-smma-2026
-
usenix-rosetta-2023
-
apple-parental-controls-en
-
google-familylink-permissions