Bypassing Geo-Restrictions: What's Actually Legal in 2026?
Bypassing geo-restrictions for personal streaming sits in a strange legal grey zone. In almost every Western democracy, using a VPN to access content you already pay for is not a criminal act, but it almost always violates the streaming service's terms of service. The EU forces portability within the bloc. The US, UK and Australia tolerate the practice in law but let platforms enforce against it commercially. No individual has been prosecuted for watching their own subscription from the wrong country.
The legal status of bypassing geo-restrictions is one of the most misunderstood topics on the internet. People conflate "against the terms of service" with "illegal", and many assume that using a VPN to watch Netflix from a different country is some kind of cybercrime. In most jurisdictions, it is not. The honest answer is layered: there is what the criminal law says, what the civil contract says, and what enforcement actually looks like in practice. They rarely align.
Two different kinds of "illegal"
Before going country by country, the foundation matters. There are two distinct legal regimes that can apply.
- Criminal law: Statutes passed by a parliament that define an offence punishable by fines or imprisonment. Anti-circumvention laws, computer misuse laws, copyright statutes.
- Civil contract law: The agreement you signed when you created your Netflix account. Breaching it is not a criminal act, it is a breach of contract. The remedy is usually account termination, not handcuffs.
When someone says "using a VPN for Netflix is illegal", they usually mean it breaches the terms of service. That is a real consequence (your account can be suspended) but it is not a criminal matter in any country we have surveyed.
The European Union: portability is a legal right
The EU is the most user-friendly jurisdiction on this topic. Regulation (EU) 2017/1128, in force since April 2018, obliges paid streaming services to give EU subscribers access to their home country library while temporarily present in another EU member state. No VPN required: Netflix, Disney+ and the rest must serve the home content directly.
The regulation defines "temporary" loosely (no explicit day limit) but the platforms verify home country through billing address, payment method and recurring IP checks. The regulation does not extend to free services (those can still geo-block freely) and does not cover non-EU destinations. A French subscriber in Tokyo gets the Japanese library; the same subscriber in Lisbon gets the French one.
What about using a VPN to watch, say, the US Netflix library from France? That is not protected by the Portability Regulation, breaches Netflix's terms of service, but does not violate any French or EU criminal law. The French Conseil supérieur de la propriété littéraire et artistique reviewed the question in 2019 and concluded that personal circumvention for one's own paid subscription is not within the scope of the EU anti-circumvention directive.
The United States: legal but contractually forbidden
US law has the Digital Millennium Copyright Act (DMCA), specifically Section 1201, which prohibits circumventing "technological protection measures" that control access to copyrighted works. Lawyers have debated for two decades whether VPN-for-streaming counts as circumvention under §1201. The dominant view: it does not. A VPN does not break encryption, does not modify the service's code, does not access content you have not paid for. It simply presents a different IP address.
The US Copyright Office has issued exemptions to §1201 every three years since 2000, and the prohibition has never been interpreted to cover VPN streaming use. No US prosecutor has ever charged a consumer for it. The Electronic Frontier Foundation maintains resources on the limits of §1201 for those who want the deeper analysis.
Netflix's US terms of service do prohibit "using any service or feature in a manner not permitted", which they read to include VPNs. The enforcement is account suspension, not prosecution.
The United Kingdom
UK law mirrors the US position. The Copyright, Designs and Patents Act 1988 contains anti-circumvention provisions transposed from the EU InfoSoc Directive, but they target the circumvention of effective copy-protection technology (DRM, encryption), not geo-restriction by IP. Citizens Advice and the Intellectual Property Office have both indicated, in informal guidance, that VPN use for personal streaming is not a criminal matter. Terms-of-service enforcement applies.
Post-Brexit, the UK is no longer covered by the EU Portability Regulation. UK Netflix subscribers travelling in the EU get whatever the platform chooses to serve (Netflix has voluntarily continued portability for UK accounts in many cases, but this is platform policy not legal obligation).
Australia: the explicit exception
Australia is the rare jurisdiction that addressed this question head-on. The Copyright Amendment Act 2015 introduced a website-blocking regime aimed at pirate sites, but the parliamentary committee that drafted it explicitly noted that consumers using VPNs to access overseas streaming services were "not the intended target". The 2016 review by the Productivity Commission was even clearer: it recommended that the law be clarified to explicitly permit personal circumvention for legitimate access.
The Communications Minister at the time, Malcolm Turnbull, said publicly that using a VPN to access US Netflix was "not illegal" and that consumers had every right to do so. Platform terms of service still apply, and accounts can be suspended.
Country-by-country snapshot
| Country | Criminal law on VPN streaming use | Platform ToS enforcement | Portability protection |
|---|---|---|---|
| France | Legal | Active | Yes (EU Portability) |
| Germany | Legal | Active | Yes (EU Portability) |
| Spain | Legal | Active | Yes (EU Portability) |
| Italy | Legal | Active | Yes (EU Portability) |
| United Kingdom | Legal | Active | Platform discretion |
| United States | Legal (§1201 not interpreted to apply) | Active | None |
| Canada | Legal | Active | None |
| Australia | Explicitly tolerated (2015/2016 review) | Active | None |
| UAE | VPN use itself can be illegal if used to commit another offence | Active | None |
| China | Unauthorised VPN use is illegal under 2017 regulation | N/A (Netflix unavailable) | None |
| Russia | VPN providers must connect to state register; user-level enforcement rare | Active where services operate | None |
Where the line actually shifts: the VPN itself
A handful of countries restrict the act of using a VPN at all, regardless of what you do with it. The list includes China, Iran, Turkmenistan, Belarus and parts of the Gulf. The UAE has a nuanced position: using a VPN is legal if the underlying activity is legal, but a 2016 amendment to the cybercrime law made it an offence to use a VPN "to commit a crime or prevent its discovery". That has been interpreted broadly enough to worry travellers, though prosecutions of casual streaming users have not surfaced.
Our companion piece on whether using a VPN is legal covers the country-by-country VPN legality picture in depth.
The contract: what the terms of service say
Every major streaming platform prohibits geo-circumvention in its terms. The wording varies but the substance is similar.
- Netflix: Forbids "any technology" used to mask IP location.
- Disney+: Reserves the right to suspend accounts that "access the service through a virtual private network or other masking technology".
- Hulu: US only; non-US access is a ToS breach by definition.
- HBO Max / Max: Geographic restrictions stated explicitly per region.
- BBC iPlayer: Requires you to be in the UK; using technology to evade this is prohibited.
- Amazon Prime Video: Library varies per country; circumvention prohibited.
The enforcement mechanism is detection plus account action. The platform does not sue the user, does not pass the data to law enforcement, does not chase damages. It simply detects, blocks the IP, and in repeat or egregious cases terminates the account.
The piracy line
Geo-bypass and piracy are different acts. Using a VPN to watch your own paid Netflix subscription while in Bangkok is geo-bypass: the content is licensed, the platform has been paid. Downloading the same film from a torrent site is piracy: the rights holder gets nothing, the act is squarely illegal almost everywhere. Conflating the two is convenient for industry lobbyists but unhelpful for users.
For the broader picture of how IP visibility relates to legal exposure, see our piece on whether someone can find you from your IP address.
The bottom line
If you are in a Western democracy, using a VPN to access your own paid streaming subscription from a different country is not a criminal act. It breaches the platform's terms of service, which means the platform can suspend your account (rarely does in practice, usually blocks the IP instead). The EU goes further and gives you a legal right to portability within the bloc. The places to be careful are countries where VPN use itself is restricted, or where geo-bypass overlaps with other regulated activities. For everyone else, the worst realistic outcome is that the stream stops working until you switch servers.
Frequently asked questions
Has anyone ever been prosecuted for using a VPN to watch Netflix abroad?
Not in any jurisdiction we have been able to identify. The closest cases involve commercial-scale operations selling VPN-bundled streaming subscriptions in markets where the underlying service is unavailable, which raises separate copyright issues. Individual consumers using a VPN for personal access to their own paid subscription have not, to our knowledge, ever been criminally charged in any Western democracy. The enforcement risk is account suspension, not legal action.
Does the EU Portability Regulation cover non-EU travel?
No. The regulation only applies when an EU subscriber is temporarily present in another EU member state. A French subscriber travelling to the United States, Japan or the UK gets no portability protection from EU law: the platform can serve whatever it chooses (usually a limited international catalogue or the local library). Some platforms voluntarily extend portability beyond the EU, but this is policy, not legal obligation.
Can my ISP report me for using a VPN with streaming services?
Your ISP can see that you are connected to a VPN (the VPN server's IP is visible) but cannot see what you are streaming through it: that traffic is encrypted inside the VPN tunnel. ISPs in most countries have no obligation, and no commercial interest, in reporting VPN use to streaming platforms. The exceptions are countries where VPN use itself is regulated (China, Iran, UAE in certain contexts), where the ISP may be required to log or restrict VPN connections at the network level.