Muscat – The Telecommunications Regulatory Authority (TRA) has urged the public to exercise caution when using Virtual Private Network (VPN) applications, warning that many such apps pose significant risks to users’ privacy, personal data and cybersecurity.

As part of its ongoing awareness campaign on the optimal use of social media platforms and digital services, the TRA highlighted that not all VPN applications provide the level of security they claim. While VPNs are commonly promoted as tools to enhance online privacy, some applications can instead expose users to serious cyber threats if downloaded from untrustworthy sources.

In an awareness message released on its official platforms, the authority cautioned that certain VPN apps may track or share users’ personal data, collect unnecessary permissions from mobile devices and log browsing activities. Such practices could compromise sensitive information and undermine users’ online privacy.

The TRA also warned that some VPN applications may contain malware capable of infecting smartphones, tablets or computers. These malicious programmes can steal passwords, banking details or other confidential information, potentially leading to identity theft or financial fraud.

Another concern highlighted by the authority is that malicious VPN services may redirect users to suspicious or fraudulent websites, increasing the risk of phishing attacks and exposing them to harmful online content.

The authority called on users to remain vigilant by downloading applications only from trusted developers and official app stores, carefully reviewing the permissions requested by any application before installation, and avoiding free VPN services that lack a clear privacy policy or credible reputation.

Cybersecurity experts have long warned that while reputable VPN services can help encrypt Internet traffic and protect users on public Wi-Fi networks, unreliable or poorly regulated VPN applications may collect extensive user information or misuse browsing data for commercial purposes.

The TRA’s awareness campaign aims to strengthen digital literacy and encourage safe online practices as Internet usage continues to grow across the sultanate. The authority emphasised that protecting personal information begins with making informed choices about the digital tools and applications used on a daily basis.