VPN traffic that is difficult to classify reliably

No technical countermeasure exists at this layer. A rule that pretends to close this at the router/endpoint the trick operates on is more dangerous than no rule at all, because it can give the family a false sense of coverage. Apply enforcement at the layer that actually carries the traffic or on the device/account directly.

How common it is: VPN use by minors is measured by Ofcom and eSafety, but prevalence of deliberately obfuscated VPN protocols among minors was not established.

Detection

Machine-learning and heuristic classifiers can produce a VPN probability or category, but cross-network accuracy is not constant. USENIX research found large performance degradation for encrypted-traf…

Fix (technical)

Treat network detection as one signal. Endpoint app/profile restrictions and explicit device management are stronger than a claim that the router can identify every VPN. eSafety likewise frames VPN de…

Fix (relational)

Do not confront a child on the basis of an opaque router classifier alone. Verify on the device and ask about legitimate VPN use first.

Residual risk

False positives and false negatives remain.

Sources

  • usenix-rosetta-2023

  • esafety-vpn-faq-2026