← All topics Threats & leaks

Can my ISP see VPN traffic?

Updated 2026-09-04

Your ISP can see that you are talking to a VPN server, and how much data you move—not the inner websites—when the tunnel is working.

What the ISP still sees

Even with a VPN:

  • Connection to the VPN server’s IP and port
  • Timing and volume of tunnel traffic
  • That you are (likely) using a VPN protocol fingerprintable as such

They generally cannot read the inner HTTP contents or every destination hostname once DNS also rides inside the tunnel.

What changes vs no VPN

Without a VPN, the ISP often sees destination IPs (and sometimes SNI) for each session, plus DNS if you use their resolver. With a full-tunnel VPN and proper DNS, that detailed map compresses into “encrypted blob to VPN X.”

Limits and edge cases

  • DNS leaks restore hostname visibility to whoever answers DNS
  • Traffic correlation is a research-level concern for high-resource adversaries
  • Corporate or national firewalls may block or throttle known VPN endpoints

Honest framing

A VPN reduces ISP visibility into your session contents and destinations; it does not erase the fact of VPN use. If your threat model includes hiding *that* you use a VPN, you need obfuscation features many consumer products lack—and VeritasVPN does not currently claim DPI-resistant camouflage.