VPN traffic that is difficult to classify reliably
No technical countermeasure exists at this layer. A rule that pretends to close this at the router/endpoint the trick operates on is more dangerous than no rule at all, because it can give the family a false sense of coverage. Apply enforcement at the layer that actually carries the traffic or on the device/account directly.
How common it is: VPN use by minors is measured by Ofcom and eSafety, but prevalence of deliberately obfuscated VPN protocols among minors was not established.
Detection
Machine-learning and heuristic classifiers can produce a VPN probability or category, but cross-network accuracy is not constant. USENIX research found large performance degradation for encrypted-traf…
Fix (technical)
Treat network detection as one signal. Endpoint app/profile restrictions and explicit device management are stronger than a claim that the router can identify every VPN. eSafety likewise frames VPN de…
Fix (relational)
Do not confront a child on the basis of an opaque router classifier alone. Verify on the device and ask about legitimate VPN use first.
Residual risk
False positives and false negatives remain.
Sources
-
usenix-rosetta-2023
-
esafety-vpn-faq-2026