This dossier exists to say plainly: Decodo is not a VPN and should never appear in a consumer VPN shortlist. It is the mid-market web-data arm of the Source ecosystem - the rebranded Smartproxy, founded 2018 in Vilnius and renamed on April 22, 2025 to reflect a pivot from proxy infrastructure to an AI-era 'data access and automation platform'. As infrastructure it is genuinely strong and unusually well-tested by third parties: Proxyway's April 2026 benchmarks put its residential pool second only to Oxylabs in size with 99.92% success, TechRadar's July 2026 review calls it one of the best proxy networks available, and pricing is transparent, self-service and honestly cheap at volume ($2/GB at 1 TB, $4 pay-as-you-go) with a 3-day free trial. But the privacy ledger is the point: the residential pool is bought from wholesalers running peer-to-peer bandwidth apps rather than consent infrastructure Decodo controls, an entire ecosystem sister company (Honeygain) exists to recruit bandwidth sellers, HN voices have called sourcing claims 'opaque' since 2020, academic work on the wider residential-proxy market found consent dialogs often misleading or absent, and as a customer your identity is payment-backed, subject to trigger-based KYC, and disclosable to authorities under the license agreement. Where you do not need a commercial VPN we say so - and almost nobody shopping for personal privacy needs this product.
auditcrypto accepted5 red flagsfacts verified - operator pages (decodo.com homepage, /smartproxy rebrand page, /about, residential-proxies product page, security-compliance, legal/license-agreement, ethical-sourcing page, refund-policy FAQ, trust.decodo.com), the Source.ai homepage and its newsroom announcement, TechRadar's review, Proxyway's review and Proxyway's Source.ai news item, two arXiv paper full texts plus the arXiv API, HN Algolia comment/story/item APIs, and the arctic-shift Reddit archive (r/Smartproxy comments, posts and one thread via link_id) were all fetched live 2026-11-03. Failure modes observed this session: arctic-shift body-search on r/webscraping returned HTTP 422 (server timeout, 'Timeout. Maybe slow down a bit') on seven attempts spread over the session - the known failure mode - so Reddit voices come from the r/Smartproxy archive instead; Reddit's own search JSON returned 403, PullPush 522, PCMag 403 and decodo.com/terms-of-service 404; the built-in web search integration returned no results all session, so news coverage was located via fetched industry pages. No academic paper fetched this session names Smartproxy/Decodo specifically - recorded as a verified non-finding.
Rebrand: Smartproxy officially became Decodo on April 22, 2025 (operator FAQ, fetched live) - reason given is growth 'from a simple proxy solution' into an AI-training-era platform; the company simultaneously warns that Smartproxy.org and Smartproxy.cn are brand impersonators where users 'report... not receiving any services at all after payment has been made'
Conglomerate position: on 2026-10-13 Oxylabs, Decodo, Webshare, ScrapingBee and Honeygain announced the Source ecosystem (source.ai, fetched live) - 800+ staff, 350K+ customers, a claimed $3.6B valuation after a $130M Warburg Pincus investment, run from Vilnius; Proxyway reports it 'effectively forms an ecosystem within Tesonet's broader ecosystem', the Lithuanian group behind Nord Security, Surfshark and Hostinger (HN comment lists Decodo among Tesonet's flagship investments)
Bandwidth-source question: Decodo says residential IPs come from verified providers running opt-in peer-to-peer networks where users are 'reasonably informed, rewarded' - but it neither operates the consent layer nor names the providers, and Proxyway notes 'the provider doesn't go into much detail about the topic'; HN commenters call such claims 'opaque' and note providers 'make their own claims' about ethics; academic work cited in a 2026 arXiv paper found consent dialogs in residential-proxy Android apps 'often misleading or absent entirely'; and the ecosystem now owns both sides of the trade - Honeygain recruits the bandwidth, Decodo and Oxylabs sell it
+2 more red flags - expand before signing up
No privacy audit: the only third-party attestations are an ISO 27001 ISMS certificate and a gated pentest report - neither addresses what is logged about customer traffic, and no independent or academic study naming Decodo/Smartproxy's own practices was found this session
Sneaker-bot and multi-accounting heritage: the company's own subreddit content and blog historically courted sneaker cop users and Instagram account managers, the classic gray-area residential proxy customer base
Review
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-11-03 · facts as of 2026-11-03 · how we verify
Honesty note: we have not run our own tests on Decodo (ex-Smartproxy) yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.
Overview
Decodo (ex-Smartproxy) homepage - live capture 2026-09-29
Decodo (formerly Smartproxy) is a corporate web-data proxy platform offering rotating residential, ISP, mobile, and datacenter proxies, plus scraping and AI-oriented Web Data APIs. It’s not a consumer privacy tool but infrastructure for developers and businesses. Operated by UAB "Data troops" in Lithuania, it’s now part of the Source.ai ecosystem tied to Tesonet - the group behind Nord Security and Surfshark. This is a scraping and automation vendor, not a VPN, and should never be used for personal anonymity.
Logging & privacy
Decodo makes no published no-logs claim, and no evidence confirms whether it logs customer traffic. The license agreement explicitly states it will disclose user data and activity details to authorities upon legal request. While it cites ISO 27001 certification and internal audit logging for security, these do not address customer traffic privacy. Automated anti-fraud checks and trigger-based KYC apply, meaning your identity is tied to usage. Jurisdiction in Lithuania offers moderate privacy protections, but the legal framework allows data disclosure under process - treat all activity as attributable.
Pricing & the renewal trap
Decodo (ex-Smartproxy) pricing page - live capture 2026-09-29
Pricing is usage-based with no intro/renewal split: residential proxies start at $2.00/GB on the 1 TB/month plan, down from $4.00/GB pay-as-you-go. Smaller tiers cost more per GB (e.g., $3.75/GB for 3 GB). There is no documented renewal price increase, so the renewal ratio is null. Monthly auto-renewal applies with a 14-day refund window. A 3-day free trial (100 MB) and $5 in free Web Data API credits are available. Payment via fiat or BTC is accepted, but crypto payments block refunds. The real 3-year cost cannot be computed due to variable usage, but high-volume users pay at least $2,000/month at enterprise scale.
Features & performance
Decodo (ex-Smartproxy) apps / download page - live capture 2026-09-29
Decodo supports HTTP, HTTPS, SOCKS5, QUIC (via MASQUE), and UDP for HTTP/3, with browser extensions, API access, and a dashboard. It offers rotating residential, ISP, mobile, and datacenter proxies across 195 countries, with sticky sessions up to 24 hours. Obfuscation includes automated CAPTCHA handling and IP rotation via its Site Unblocker. No multihop, kill switch, or split tunneling exists. P2P is unsupported, streaming is blocked by policy, and devices are limited to software integrations. Server count is undocumented, but Proxyway measured 2.85M unique residential IPs in 2026. Performance is strong for scraping, not personal use.
Ownership & track record
Decodo is owned by UAB "Data troops" in Vilnius and has been part of the Source.ai ecosystem since October 2026, alongside Oxylabs, Webshare, ScrapingBee, and Honeygain - under the broader Tesonet umbrella (Nord Security, Surfshark). Red flags include opaque residential IP sourcing via third-party peer-to-peer apps, with no direct control over user consent. Academic research on similar providers found misleading or absent consent dialogs. The rebrand from Smartproxy in April 2025 aimed to pivot toward AI-era data infrastructure. While trusted in B2B circles (G2 4.6/5, Trustpilot 4.2/5), its ecosystem monetizes both bandwidth supply (Honeygain) and resale (Decodo), raising ethical concerns.
Censorship resistance
Decodo is not designed for censorship circumvention in countries like China, Iran, or Russia. Its obfuscation tools target anti-bot systems on websites, not state-level firewalls. While it offers IP rotation and browser fingerprinting evasion for scraping, it lacks protocols like Shadowsocks or obfuscated OpenVPN. The company denies service to users in Russia and blocks access to sensitive domains. If you need to bypass national censorship, this tool will not help - look instead to purpose-built, audited VPNs with proven obfuscation.
Verdict
Do not use Decodo for personal privacy, anonymity, or censorship bypass. It’s a commercial scraping platform with strong technical performance but zero privacy guarantees, full account traceability, and no independent audit of logging practices. It belongs in a developer’s toolkit, not a consumer’s. The money trail is clear: this provider pays affiliate sites like TechRadar and Proxyway, which may explain its glowing reviews - none of which address the core issue that you are not the product’s intended user if you’re seeking online privacy.
++ What holds up
Transparent self-service pricing with a real entry path: $4/GB residential pay-as-you-go, $11.25 first month for 3 GB, 3-day free trial and a no-card Web Data API starter plan (operator pages fetched 2026-11-03)
Independent performance verification is unusually deep: Proxyway's April 2026 benchmark measured 2.85M unique residential IPs and 99.92% success rate - 'second only to Oxylabs' - and it awards Decodo Best All-Rounder 2026 and Best Value for the fifth year running
Real security paperwork for the vertical: ISO/IEC 27001:2022-certified ISMS covering proxies and Scraping API, published Statement of Applicability, and a dashboard pentest report listed on the SafeBase Trust Center (fetched live)
Documented abuse controls: automated fraud checks, third-party screening, trigger-based KYC, and active blocking of banking, government, streaming, app-store, ticketing, gaming and mailing targets (operator pages)
-- What to watch
Not a consumer privacy tool: account required, payment-backed identity, trigger-based KYC, no no-logs claim anywhere, and the license agreement commits to disclosing user data to authorities - the opposite trade from a no-logs VPN
Residential bandwidth is bought, not owned: Decodo partners with 'reputable providers, including wholesalers who acquire exit nodes from app users' - consent depends entirely on those intermediaries, and ecosystem sister company Honeygain is itself a bandwidth-selling app
Pricing favors bulk: TechRadar's July 2026 review concludes it is 'significantly more expensive than many rivals, especially for low-volume users', with the $2/GB floor reserved for a $2,000/month enterprise tier
Refund policy is riddled with carve-outs: 14 days, first purchase only, no Enterprise plans, no crypto payments, and a hard usage cap of 20% of the plan or 1 GB (operator refund FAQ, fetched 2026-11-03)
Pricing reality check
Intro price
$2 /GB
Refund window
14 days
Notes
Usage-based per-GB/per-IP/per-request pricing, live 2026-11-03. Residential proxies: monthly tiers $11.25/mo for 3 GB ($3.75/GB), $35 for 10 GB ($3.50/GB), $81.25 for 25 GB ($3.25/GB), $150 for 50 GB ($3.00/GB), $275 for 100 GB ($2.75/GB); enterprise $625/mo for 250 GB ($2.50/GB) and $2,000/mo for 1 TB ($2.00/GB); pay-as-you-go $4/GB with a 1 GB minimum purchase; all prices exclude VAT. ISP/static residential proxies from $0.27/IP (8,000-IP tier; 10 IPs cost $4.70, $0.47/IP per TechRadar). Mobile proxies from $2.25/GB advertised; Proxyway measured a $7.50/mo entry plan ($3.75/GB) and a fixed $4/GB pay-as-you-go, while TechRadar's July 2026 review lists mobile pay-as-you-go at $8/GB - figures conflict between reviewers. Datacenter proxies from $0.02/IP advertised (TechRadar: $0.026/IP at the 4,000-IP tier; Proxyway: shared 100 IPs + 50 GB for $3.50). Site Unblocker from $0.95 per 1K requests; Web Data API from $0.15 per 1K requests; Web Scraping APIs around $2 per 1K successful requests (Proxyway).
Check the renewal price above before any multi-year plan - true-cost calculator.
Is Decodo legit?
Legal domicile: Lithuania - UAB "Data troops", legal entity code 305893779, registered at Svitrigailos str. 34, Vilnius (operator license agreement, fetched 2026-11-03); since 2026-10-13 part of the Source ecosystem headquartered in Vilnius alongside Oxylabs, Webshare, ScrapingBee and Honeygain, which industry outlet Proxyway describes as sitting inside the broader Tesonet ecosystem (the Nord Security / Surfshark / Hostinger group). Logging claim: none published - no no-logs or activity-logging policy statement was found on any fetched operator page - evidence class: no logging claim at all. No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified - operator pages (decodo.com homepage, /smartproxy rebrand page, /about, residential-proxies product page, security-compliance, legal/license-agreement, ethical-sourcing page, refund-policy FAQ, trust.decodo.com), the Source.ai homepage and its newsroom announcement, TechRadar's review, Proxyway's review and Proxyway's Source.ai news item, two arXiv paper full texts plus the arXiv API, HN Algolia comment/story/item APIs, and the arctic-shift Reddit archive (r/Smartproxy comments, posts and one thread via link_id) were all fetched live 2026-11-03. Failure modes observed this session: arctic-shift body-search on r/webscraping returned HTTP 422 (server timeout, 'Timeout. Maybe slow down a bit') on seven attempts spread over the session - the known failure mode - so Reddit voices come from the r/Smartproxy archive instead; Reddit's own search JSON returned 403, PullPush 522, PCMag 403 and decodo.com/terms-of-service 404; the built-in web search integration returned no results all session, so news coverage was located via fetched industry pages. No academic paper fetched this session names Smartproxy/Decodo specifically - recorded as a verified non-finding. (not fully verified) as of 2026-11-03 - read the sources below.
The money trail - what review sites earn by recommending this
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
On the website
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
Decodo (ex-Smartproxy) homepage - live capture 2026-09-29Decodo (ex-Smartproxy) pricing page - live capture 2026-09-29Decodo (ex-Smartproxy) apps / download page - live capture 2026-09-29
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-11-03: Decodo (ex-Smartproxy) scores 2.9/10 in our weighted review. We logged 5 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
What do I actually get with Decodo?
Access to residential, ISP, mobile, and datacenter proxies, scraping APIs, and AI-ready web data tools via API or browser extension - designed for developers and data teams, not personal privacy.
What is the renewal price and total cost over three years?
There is no renewal price increase documented - subscriptions renew monthly at the same rate. The three-year cash total is null due to usage-based billing; costs scale directly with traffic.
What proof is there that Decodo doesn’t log my activity?
None. No logging policy is published, and no audit or court test verifies a no-logs claim. The license agreement permits disclosure of your data to authorities on legal request.
Can I use Decodo to access the internet in a censored country like China or Iran?
No. It lacks obfuscation for state-level censorship and is not designed for personal circumvention. It will not work reliably in such environments.
Can I pay anonymously and avoid ID verification?
You can pay with Bitcoin, but account registration is required. KYC checks are triggered by risk flags or access requests to sensitive targets, so anonymity is not guaranteed.
What happens if Decodo shuts down or bans my account?
You lose access to all services and any unused wallet credits. The license agreement gives Decodo broad discretion to terminate accounts, with liability capped at $100.
What’s an honest free or cheap alternative for personal use?
For personal privacy, consider a flat-priced, audited, independent VPN with a proven no-logs record. For free options, local Wi-Fi with Tor Browser offers more anonymity than any corporate proxy.
The meta-review: what the internet says about Decodo (ex-Smartproxy)
We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Decodo (ex-Smartproxy). Every claim links to its source so you can verify it yourself.
What other reviewers say (3)
Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.
Fetched 2026-11-03: verdict - 'With an excellent choice of residential and data center proxies and one of the best-performing networks on the market, Decodo's pricier tag just might be the only real deterrent'; 'A year and a half after its rebranding, Decodo (formerly Smartproxy) ranks near the very top'; documents pricing (residential $2/GB at 1000 GB/$2,000, 50 GB $150, 3 GB $11.25, PAYG $4/GB; static residential from $0.27/IP; mobile PAYG $8/GB; datacenter $0.026/IP at 4,000 IPs, $3,800 for 10 TB); notes dedicated datacenter servers restricted to the US; affiliate disclosure present and all CTAs are visit.decodo.com affiliate redirects; TechRadar is a Future plc review site (affiliate-funded, per the site's own disclosure).
Fetched 2026-11-03: rating 9.3/10 and Best All-Rounder award 2026; factsheet - country Lithuania, founded 2018, employees 100-150, payment methods credit card, PayPal, Bitcoin, Apple Pay, Google Pay, mid-market segment; 'The company is related to the Tesonet group'; history - started in reaction to Luminati and GeoSurf, 'first resold IP addresses from others', now 'probably in the top five by size', pool 'unlikely to be monthly IPs - a quarter is a more realistic timeframe'; April 2026 benchmarks - 2.85M unique residential IPs over 3.6M requests (98.97% residential), 99.92% success, mobile pool 1.19M unique IPs at 99.5% mobile; KYC 'unnecessary, but it can get triggered' or to access restricted targets; denies users in Russia; affiliate links with DECODO5 coupon throughout.
Attempted 2026-11-03: HTTP 403 to this server; PCMag is quoted by the operator's homepage ('Decodo's residential proxy service is crucial for your business's data collection') and listed in the Trust Center's 'reviewed and trusted by' strip - the quote is operator-selected, so it is not treated as an independent voice here.
What users say (6)
Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.
Fetched 2026-11-03 (45 hits): 2026 hiring pitch dismissing 'traditional proxy providers (Bright Data, Oxylabs, Smartproxy, Proxybase)' as raw-IP vendors; the 200GB-bandwidth-burn thread citing Smartproxy residential pricing; the free-VPN-apps-as-proxies thread - 'Proxy providers like SmartProxy, Bright Data... this is how they get them... claims about the source of their proxies being ethical' are 'opaque'; 2020-2021 comments doubting whether household-IP owners know what their IPs are used for and asking how providers get access at all; generic 'smart proxy' engineering matches filtered out.
Fetched 2026-11-03: thread context for the Decodo search-API voices - 607 points, 35 comments on DeepSeek's $0.75/1000 search API, the discussion where Decodo's Web Data API search endpoint entered HN discourse in October 2026.
Fetched 2026-11-03: the company's own subreddit archive - mostly operator rep 'ArmondSmartproxy' explaining PAYG (1 GB cost $12.50 in 2020-2022 era) and X browser, plus user questions on Instagram multi-account detection, sneaker use, and a 2025-12 comment complaining datacenter IPs got flagged on Meta/TikTok before recommending an obscure competitor (reads like competitor seeding); subreddit is promotional in character.
Fetched 2026-11-03: post history documents the sneaker-bot/Black Friday marketing era ('The best AIO sneaker bot review', '10 to 40 million residential IPs in under 6 months' 2020, 'Upped our proxy pool 4X this year') and genuine user threads - 'smartproxy.com is not safe' (2019 BTC refund refusal), 'All Proxies Are Failing' (2021, resolved), TLS-pass-through privacy question (2020), Nike SNKRS multi-IP use case (2020); thread comments for t3_l0z3c0 fetched via link_id endpoint (HTTP 200) confirming a support response. Note: arctic-shift body searches on r/webscraping returned HTTP 422 timeouts on seven attempts this session - the archive only yielded r/Smartproxy content.
Attempted 2026-11-03, seven times spread across the session: every call returned HTTP 422 '{"data":null,"error":"Timeout. Maybe slow down a bit"}' - the documented arctic-shift body-search failure mode for large subreddits. Reddit's own search JSON returned 403 and PullPush 522 the same day. No r/webscraping voices could be pulled this session; recorded so the gap is explicit rather than hidden.
AI fact summary - everything we know, compressed
Generated by Qwen3 on 2026-11-03 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.
Bottom line: Decodo (ex-Smartproxy) is a corporate web-data proxy platform, not a consumer privacy tool. It sells residential, mobile, ISP, and datacenter proxies plus scraping APIs to businesses and developers. If you need infrastructure for AI training, data extraction, or automation at scale, it’s a well-established mid-market option with volume pricing. If you’re looking for personal anonymity, a VPN, or censorship circumvention, this is the wrong product.
The logging truth: No public no-logs policy exists. The license agreement explicitly states Decodo will disclose user data and activity to authorities upon legal request. All customers are payment-backed accounts subject to trigger-based KYC, and activity is tied to identity under Lithuanian jurisdiction (UAB "Data troops"). This is not an anonymity service.
Pricing reality: Pricing is usage-based: $2.00/GB at 1 TB/month, up to $4.00/GB pay-as-you-go, with a $4 minimum purchase. No intro discount or renewal trap is documented - rates are consistent month-to-month. A 14-day refund window applies with strict conditions, including <20% usage and no crypto payment.
What reviewers say vs what users say: Affiliate reviewers (TechRadar, Proxyway) rate it highly - 9.3/10, “Best All-Rounder” - praising performance and pricing. But developer communities (HN, r/Smartproxy) express skepticism about residential IP sourcing, calling claims “opaque,” and note its roots in sneaker bots and multi-accounting. The ecosystem now includes Honeygain, which recruits the bandwidth, creating a closed loop critics find ethically questionable.
Who runs it: UAB "Data troops" in Vilnius, Lithuania, led by CEO Vaidotas Juknys. Since October 2026, it’s part of the Source.ai ecosystem - alongside Oxylabs, Webshare, and Honeygain - widely reported to sit within the broader Tesonet group (Nord Security, Surfshark). Ownership ties are complex but centralized in Vilnius with Warburg Pincus backing.
Sources & how this review was built
Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.
Evidence classes on this page:[A] A: 10[B] B: 9[C] C: 6[D] D: 0(D stays empty until our own test phase)
A serious budget proxy provider - and this dossier says plainly what that means: IPRoyal is not a consumer privacy VPN. It sells access to a 64M+ IP pool of…
crypto accepted
intro $7 /GB
United Arab Emirates - ToS v10 (effective 2026-10-15) and Privacy Policy v7 name 'IPRoyal Services FZE LLC ... incorporated in the United Arab Emirates, license No 4387, ... Ajman'; privacy policy is written under UAE PDPL (Federal Decree-Law No. 45 of 2021), not GDPR. Company started in 2020 in Lithuania (Lithuanian founders; the bandwidth app is run by 'IPRoyal Pawns UAB' per a 2026 GDPR complaint thread); HQ and contracting entity have moved to the UAEproxy service 11 d ago
This dossier exists to say plainly: Oxylabs is not a VPN and should never appear in a consumer VPN shortlist. It is one of the two dominant corporate web-data…
audit
intro $30 /mo
Lithuania - Oxylabs UAB, HQ Svitrigailos st. 32, Vilnius (operator about page); bootstrapped until a $130M first outside investment from Warburg Pincus (July 2026) at a $3.6B valuation; part of the Tesonet ecosystem, and since October 13, 2026 one of five brands (Oxylabs, Decodo, Webshare, ScrapingBee, Honeygain) under the Vilnius-based Source.ai umbrellaproxy service 10 d ago
This dossier exists to say plainly: Bright Data is not a VPN and should never appear in a consumer VPN shortlist. It is the market-leading corporate web-data…
audit
intro $4 /GB
Israel - Bright Data Ltd. (formerly Luminati Networks), HQ Tel Aviv area, Israel; majority acquired by London private investment fund EMK Capital in 2017proxy service 11 d ago
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.