VPNs on Discord: should your server block them?
Discord allows VPNs, which is how banned members come back. When to block VPNs, proxies and Tor on your server, and how to avoid false positives.
By the Double Counter teamUpdated 8 min read
Key takeaways
- Discord does not block VPNs. Using one is allowed, although Discord may ask for extra checks such as a captcha or phone verification.
- For moderators, a VPN is the tool that defeats the IP part of a ban and hides where raid accounts really come from.
- A server cannot see or block IP addresses by itself. VPN blocking only works through a verification step outside the Discord client.
- Block VPNs at verification, not forever: members can turn their VPN back on once they hold the verified role.
- Expect a few false positives (iCloud Private Relay, Cloudflare WARP, some privacy browsers) and give staff a way to approve them.
VPNs have two reputations on Discord. For members, a VPN is a privacy tool, or the only way to reach Discord from a school network or a country where it is restricted. For moderators, it is the reason a banned member was back in the server five minutes later.
Both are true, and a good VPN policy takes both into account. This guide explains how Discord treats VPNs, what they change for server security, and how to block them without punishing the members who use them for good reasons.
Does Discord block VPNs?
No. Discord works over a VPN, and using one does not break its rules. What you may notice is extra friction: because VPN addresses are shared by many people, including spammers, Discord sometimes asks for a captcha, an email confirmation or a phone number when you log in or create an account from one.
A proxy behaves the same way from a server's point of view: the member's real IP address is replaced by another one. Tor goes further and routes the connection through several relays. In all three cases the address Discord and your server see is not the member's own.
Why members use a VPN on Discord
Most VPN users in your server are not hiding from you. Common reasons include:
- Privacy on public Wi-Fi or from their internet provider.
- Access from a school, a workplace or a country where Discord is blocked or throttled.
- Protection from other users, for example streamers and competitive players worried about their IP address leaking elsewhere.
- Defaults they never chose. iCloud Private Relay, Cloudflare WARP and the “free VPN” built into some browsers behave like a VPN without the user thinking of them as one.
That last group matters, because it is where almost every false positive comes from.
Why VPNs are a problem for server security
The same feature that protects privacy also removes a server's weakest defence.
- Ban evasion. A Discord ban covers the account and its IP address. A VPN replaces the address in one click, so the IP ban never applies. See how Discord bans work.
- Alt accounts. Someone running several accounts uses a different exit address for each, so they look unrelated. More in our guide to alt accounts.
- Raids. Automated attacks need hundreds of addresses. They get them from proxy pools, VPN providers and rented datacenter servers, not from home connections. See how raids are organised.
- Geography. A server restricted to one region, or one that runs regional giveaways, cannot trust a location that a VPN can change.
None of this makes VPN users suspect. It means that an anonymised connection tells you nothing about who is joining, which is a problem at exactly one moment: when a new account asks to be let in.
Can a Discord server block VPN users?
Not with Discord's own settings. Server owners and bots never see a member's IP address, so there is nothing to block: no option in Server Settings, no permission, no AutoMod rule.
The only way to know that a member is behind a VPN is to have them open a web page as part of joining. That is what a verification bot does. When the member opens their verification link, the bot sees the connection it comes from and checks it against IP intelligence:
- commercial VPN providers and their exit servers,
- open and residential proxies,
- Tor exit nodes,
- datacenter and hosting ranges, where no ordinary home user connects from,
- virtual machines and automated browsers.
If the connection is anonymised, the verified role is not granted. Double Counter does this on every verification, with IP data refreshed every hour, and logs a “VPN intrusion” in your staff channel.
Should your server block VPNs?
It depends on what you are protecting. A rough guide:
| Your situation | Recommendation |
|---|---|
| Recurring ban evaders, raids, or giveaways with real value | Block VPNs at verification. It is the cheapest fix with the largest effect. |
| Large public community | Block at verification, and publish a short note explaining how to pass. |
| Privacy, security or activism community | Think twice. Many members will legitimately be on Tor or a VPN. Consider alt detection with manual review instead. |
| Members in countries where Discord is restricted | Keep blocking, with a clear exception process handled by staff. |
| Small private server among friends | Probably unnecessary. An invite-only server has little to gain. |
Servers that only want this layer can also do the opposite of the usual setup: Double Counter has an “only block VPNs” setting that turns alt detection off and keeps the VPN check.
How to avoid false positives
A VPN flag means the connection came from an address associated with hosting or anonymisation. A few everyday setups trigger it:
- iCloud Private Relay on iPhone, iPad and Mac.
- Cloudflare WARP (the 1.1.1.1 app) and similar DNS apps that install a VPN profile.
- Privacy browsers with a built-in VPN or proxy, and some ad-blocking extensions.
- Discord's in-app browser on mobile, which can be mistaken for an automated client. Opening the link in Safari or Chrome fixes it.
What works in practice:
- Say it up front. Put one line in your verification channel: “Turn off your VPN or Private Relay to verify. You can turn it back on afterwards.”
- Tell members how to retry. Disable the VPN, request a new verification link, and open it in the phone's normal browser. The troubleshooting guide covers each error message.
- Keep a manual route. Staff can approve a member who genuinely cannot turn their VPN off with
/manverify. Use it for people you have talked to, not as a habit.
Unlike an alt detection, a VPN flag says nothing lasting about the account. It describes one connection at one moment, and it disappears as soon as the member verifies from a normal one.