A serious budget proxy provider - and this dossier says plainly what that means: IPRoyal is not a consumer privacy VPN. It sells access to a 64M+ IP pool of devices that belong to real households and phones (sourced via its own Pawns.app bandwidth-sharing app and partner networks), so buyers appear to be ordinary internet users. It is cheap to enter ($7 for 1 GB, traffic never expires), flexible, and runs a live status page with published incidents. But the trade-offs are structural: UAE FZE jurisdiction under UAE PDPL rather than EU law, mandatory KYC including photo-ID biometric verification for meaningful usage, a privacy policy that openly lists routine logging, no audits of any kind, no encryption, no kill switch, and an IP pool whose quality the independent evidence describes as inconsistent - Proxyway found ~99% success on synthetic tests but only ~74.6% on real protected targets, and Review42's cross-source synthesis rates user sentiment 'polarized', with recent Trustpilot reviews skewing negative on support, refunds and flagged IPs. The bandwidth-selling side (Pawns.app) puts IPRoyal in the same economic class as Hola: ordinary users monetize their home connections as exit nodes, with all the consent, abuse and crime-adjacency questions that business model carries. For scrapers and geo-task automation on a budget it is a rational choice; for privacy it is the wrong tool.
crypto accepted6 red flagsfacts verified - operator pages (home, residential-proxies, about-us, kyc-policy, terms-of-service, privacy, llm-info, residential-proxy-sourcing), status.iproyal.com, pawns.app and its business-case page, TechRadar / vpnMentor / Review42 reviews, KrebsOnSecurity, Sysdig threat research, HN Algolia comment search and Reddit archives (arctic-shift, incl. r/proxies and r/Pawnsapp threads) all fetched live 2026-11-02; Trustpilot direct fetch blocked (403), Trustpilot sentiment taken second-hand via Review42
Bandwidth-selling business model (royalty program): IPRoyal's residential pool includes IPs contributed by ordinary users who install Pawns.app (formerly 'IPRoyal Pawns'; Android package com.iproyal.android) and get paid to share their idle connection - the same economics class as Hola. Pawns.app pays ~$0.20+/GB ($9.60/month per always-on IP per Sysdig's capture of the payout scale), and its own subreddit is dominated by blocked accounts, forfeited earnings and a formal GDPR Article 77 complaint against 'IPRoyal Pawns UAB'. Sysdig's Threat Research Team documented attackers using IPRoyal's own pawns-cli binary to monetize Log4j-compromised servers ('proxyjacking') and wrote they found IPRoyal's '100% ethically sourced IPs' claim 'hard to believe' in that context
An HN commenter (2024) reported a hacker installing the Pawns app on a compromised GL.iNet router, turning the victim's connection into a money-earning proxy node - the resale model attracts exactly this abuse
IPROYAL_PROXY appears in Spur.us's top-10 residential proxy networks tracked as of Oct 2025 (2,032,027 IPs) in KrebsOnSecurity's report on the Aisuru botnet pivoting to renting infected IoT devices to proxy services; the article does not accuse IPRoyal of botnet sourcing, but it frames the whole residential-proxy supply as polluted by botnets, SDKs and bandwidth apps
+3 more red flags - expand before signing up
Jurisdiction moved to the UAE (Ajman FZE, license 4387) effective with ToS v10 of 2026-10-15 - a jurisdiction chosen by many providers for regulatory lightness; earlier review coverage still described the company as privacy-friendly Lithuania, a stale fact now contradicted by the operator's own terms
r/proxies thread (Feb 2026, 70 comments): a customer claims ISP proxies are actually datacenter IPs resold at premium pricing, and that the account was closed after a refund request; several removed comments and corroborating replies suggest moderation friction around the topic
No external audits of any kind - no SOC 2 report published, no pentest summary, nothing third-party verifiable about infrastructure or logging
Review
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-11-02 · facts as of 2026-11-02 · how we verify
Honesty note: we have not run our own tests on IPRoyal yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.
Overview
IPRoyal homepage - live capture 2026-09-29
IPRoyal is a commercial proxy provider, not a consumer privacy VPN. It sells rotating residential, ISP, datacenter, and mobile proxies primarily for web scraping, ad verification, and geo-unblocking. Run by IPRoyal Services FZE LLC in the UAE, it operates under UAE data law and requires strict KYC. You get access to a massive 64M+ IP pool, but with no encryption, no kill switch, and mandatory identity verification for full access - this is infrastructure for automation, not privacy.
Logging & privacy
IPRoyal makes no formal no-logs claim. Its privacy policy explicitly states it collects log data: your first/last login IP, account credentials, timestamps, cookies, and tracking via Google Analytics and HubSpot. This data is retained for six months and stored in the UAE and EU. Logging evidence is "policy-only" - there are no third-party audits, no warrant canary, and no technical proof of minimal logging. The UAE jurisdiction operates under Federal Decree-Law No. 45 of 2021 (PDPL), not GDPR, offering weaker individual rights. Automated systems "report all suspicious requests," meaning activity is monitored by design.
Pricing & the renewal trap
IPRoyal pricing page - live capture 2026-09-29
IPRoyal charges per GB or per proxy, with no subscription renewal model - your traffic balance never expires. Entry starts at $7 for 1 GB (residential proxies), with volume discounts down to $1.75/GB at 10 TB. ISP proxies start at $1.80 for 24 hours. There is no renewal price or multi-year billing cycle, so the renewal ratio is not applicable. Refunds are allowed within 24 hours for defects, 72 hours for unused subscription renewals, but crypto payments are never refunded. Payment methods include Bitcoin, Ethereum, and over 25 other cryptocurrencies via Bitlocus, CoinGate, and SpectroCoin, plus fiat.
Features & performance
IPRoyal supports HTTP, HTTPS, and SOCKS5 protocols but offers no encryption, kill switch, split tunneling, or multihop. It provides obfuscation via its Web Unblocker (AI-driven CAPTCHA solving, dynamic fingerprinting) and IP risk-score selection. You can target by country, state, city, or ISP, with session stickiness from 1 second to 7 days. It supports all major platforms via apps and browser extensions. The network spans 195 countries, though server counts are undisclosed. P2P and streaming are not officially supported, though static residential proxies have worked for streaming in tests.
Ownership & track record
Ownership details are not publicly disclosed, but IPRoyal Services FZE LLC is registered in Ajman, UAE. The company originated in Lithuania in 2020 with founders linked to IPRoyal Pawns UAB. Red flags include its reliance on the Pawns.app bandwidth-sharing model - similar to Hola - where users monetize their home connections, raising consent and abuse concerns. Sysdig documented attackers using IPRoyal’s pawns-cli to proxyjack compromised servers. KrebsOnSecurity noted IPRoyal’s IPs in botnet traffic analyses. Reddit and Hacker News threads report banned accounts, forfeited earnings, and disputes over KYC and refunds. No external audits exist for security or logging practices.
Censorship resistance
IPRoyal is not designed for censorship resistance in countries like China or Iran. While its Web Unblocker offers AI-driven CAPTCHA solving and dynamic fingerprinting to bypass anti-bot systems, it lacks true obfuscation like Shadowsocks or domain fronting. The service does not advertise support for evading national firewalls. If you're targeting heavily censored networks, this tool will likely fail - use purpose-built, encrypted, and obfuscated VPNs instead.
Verdict
IPRoyal is a budget-friendly proxy solution for scrapers, ad verifiers, and automation teams who need flexible pay-as-you-go access and can manage their own privacy stack. It is not a privacy tool - expect biometric KYC, disclosed logging, and no encryption. The bandwidth-resale model (Pawns.app) carries ethical and security risks. There is no evidence IPRoyal pays review sites, but affiliate-funded reviews (like TechRadar and vpnMentor) should be read with skepticism.
++ What holds up
Cheapest credible entry point in the proxy tier: $7 buys 1 GB, pay-as-you-go, no contract, and unused traffic never expires (live pricing page 2026-11-02)
Large and growing pool: 64M+ residential IPs across 195+ countries, plus dedicated ISP and mobile lines (operator + TechRadar, Aug 2026)
Operationally transparent about uptime: live Atlassian Statuspage with dated incident reports (several ISP-proxy incidents in Oct 2026, all resolved and logged)
Fast, responsive 24/7 support - praised even by hostile reviewers (vpnMentor: 7 instant contacts; Review42 cites ~20-minute resolutions from critics)
Explicit and fairly detailed compliance posture for the category: public KYC policy, sourcing page with consent-evidence requirements, restricted-target list, abuse@ channel, DPA and trust center
-- What to watch
Not a privacy product: no encryption, no kill switch, routine logging disclosed (login IPs, analytics, 6-month log retention), and UAE PDPL rather than GDPR as the governing regime
Strict KYC is the opposite of anonymous: phone number at signup, biometric ID verification via Idenfy for the residential API, full pool and sensitive targets
Independent testing shows the pool struggles on real targets: ~74.6% success on protected sites vs ~99% synthetic (Proxyway via Review42); testers and users report pre-flagged, blacklisted or pre-banned IPs
Refund window is tight: 24 hours for defective service, 500 MB usage cap on ISP refunds, and cryptocurrency payments are never refundable under any circumstances (ToS 6.9.4)
User sentiment is genuinely polarized: Review42's synthesis (Jul 2026) labels it 'polarized' with recent Trustpilot reviews clustering on support escalation, misinformation and billing disputes
The $1.75/GB headline price is bulk-only (10 TB+); a solo user actually pays $7.00-$7.35/GB (live pricing + Review42 both flag this)
Pricing reality check
Intro price
$7 /GB
Refund window
1 days
Notes
Usage-based per-GB (live operator pricing 2026-11-02): residential subscription $7.00/GB at 1 GB, $5.95/GB at 2 GB, $5.25/GB at 10 GB, custom tiers down to $1.75/GB - but $1.75/GB is only available from 10 TB (a $17,500 order). Pay-as-you-go is $7.35/GB at 1 GB down to $1.84/GB at 10 TB. The widely quoted '$1.75/GB' headline is a bulk-only rate. ISP (static residential) proxies from $1.80/proxy for 24 h down to $2.40/proxy on 90 days; datacenter from $1.39/proxy; dedicated mobile from $10.11/day; Web Unblocker from $1.00 per 1,000 requests. Traffic never expires (non-expiring balance) - the operator's main value claim. A separate 'Service Fee' can be added at checkout per ToS clause 6.17.
btc, eth, multiple coins via crypto processors Bitlocus, CoinGate and SpectroCoin (site shows a '25 crypto' mark; vpnMentor reported 90+ crypto forms incl. Bitcoin and Ethereum), fiat
Money-back window
1 days
Apps
windows, mac, linux, android, ios, router …
Check the renewal price above before any multi-year plan - true-cost calculator.
Is IPRoyal legit?
Legal domicile: United Arab Emirates - ToS v10 (effective 2026-10-15) and Privacy Policy v7 name 'IPRoyal Services FZE LLC ... incorporated in the United Arab Emirates, license No 4387, ... Ajman'; privacy policy is written under UAE PDPL (Federal Decree-Law No. 45 of 2021), not GDPR. Company started in 2020 in Lithuania (Lithuanian founders; the bandwidth app is run by 'IPRoyal Pawns UAB' per a 2026 GDPR complaint thread); HQ and contracting entity have moved to the UAE. Logging claim: No formal no-logs claim. KYC page: 'we do not monitor customer activity directly' but 'our automated systems report all suspicious requests'. Privacy Policy discloses routine collection of log data: IP address of first/last login, account credentials and timestamps, cookies, Google Analytics and HubSpot tracking; llm-info page states log data (IP, location, device) is retained for six months. Data-residency: client and operational data stored in the UAE and the EU. - evidence class: promise only (no proof). No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified - operator pages (home, residential-proxies, about-us, kyc-policy, terms-of-service, privacy, llm-info, residential-proxy-sourcing), status.iproyal.com, pawns.app and its business-case page, TechRadar / vpnMentor / Review42 reviews, KrebsOnSecurity, Sysdig threat research, HN Algolia comment search and Reddit archives (arctic-shift, incl. r/proxies and r/Pawnsapp threads) all fetched live 2026-11-02; Trustpilot direct fetch blocked (403), Trustpilot sentiment taken second-hand via Review42 (not fully verified) as of 2026-11-02 - read the sources below.
The money trail - what review sites earn by recommending this
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
On the website
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
IPRoyal homepage - live capture 2026-09-29IPRoyal pricing page - live capture 2026-09-29
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-11-02: IPRoyal scores 3.5/10 in our weighted review. We logged 6 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
What do I actually get for $7?
1 GB of residential proxy traffic, usable across 195+ countries with HTTP(S)/SOCKS5 support, non-expiring balance, and basic geo-targeting - no encryption, no kill switch, no anonymity.
What is the renewal price and total cost over three years?
There is no renewal price - traffic never expires. The `derived_pricing` shows no three-year cash total, as billing is usage-based with no recurring subscriptions.
What proof is there that IPRoyal doesn’t log?
None. The logging evidence is "policy-only" - the privacy policy confirms collection of IP, timestamps, and tracking data, with no audits or court-tested no-logs history.
Can I use IPRoyal in China, Iran, or Russia?
No. It lacks obfuscation for national firewall evasion. This is a scraping and geo-unblocking tool, not a censorship circumvention service.
Can I pay and sign up anonymously?
No. Registration requires your name, email, phone number, and photo ID via Idenfy UAB. Anonymous signup is not possible.
What happens if IPRoyal shuts down?
Your unused traffic balance may be lost. The service has no exit strategy or data portability. Past incidents show account closures with forfeited payouts, especially in the Pawns.app ecosystem.
What’s the honest free or cheap alternative?
No free tier exists. For low-cost testing, try 1 GB at $7. Alternatives like Oxylabs or Smartproxy offer more transparency but at higher prices. For privacy, use audited, independent VPNs with proven no-logs policies.
The meta-review: what the internet says about IPRoyal
We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates IPRoyal. Every claim links to its source so you can verify it yourself.
What other reviewers say (3)
Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.
Fetched 2026-11-02 (HTTP 200): cross-source sentiment synthesis labels IPRoyal 'polarized' - praised for cheap flexible entry and support, criticized for a dirty/over-used pool (Spamhaus-listed IP, iphey alerts, pre-banned IPs, ~74.6% success on real protected targets per Proxyway) and for recent Trustpilot negativity on support/billing; flags that 4 of its 6 cited sources carry affiliate or competitor ties; documents the 500 MB ISP-refund cap and the $1.75/GB bulk-only reality. Trustpilot's recent-vs-lifetime divergence is reported second-hand from this page (Trustpilot direct fetch returned 403 to this server).
Fetched 2026-11-02 (HTTP 200): 4.6/10, ranked 149/194; tested speed drops of 76-98%, no Steam access, 10x torrent slowdown; privacy score 4.0 - phone number required, photo ID for under-5-proxy purchases, 'admits to monitoring your online activities'; features table lists 'Based in country: United Arab Emirates' (one stale paragraph still says Lithuania); confirms IPRoyal Pawns app sourcing; streaming worked on static residential IPs. CAVEAT: vpnMentor is owned by Kape Technologies (also owns ExpressVPN/CyberGhost/PIA) and is affiliate-funded - review_sites.json classifies it owned-by-vpn-company; its VPN-vs-proxy framing is a sales funnel.
Fetched 2026-11-02 (HTTP 200): positive verdict ('punches well above its weight class'); confirms full pricing ladder ($7.00/GB at 1GB to $1.75/GB at 10TB, non-expiring traffic), 64M residential IPs, sourcing 'people agree to contribute their IP addresses... for a benefit, e.g., a VPN subscription'; test found a Portugal ISP order delivered a UK IP (support fixed it); no free trial for individuals. CAVEAT: TechRadar is Future plc affiliate-commerce (review_sites.json: affiliate-funded, confirmed) and the review carries IPRoyal affiliate links (iproyal.sjv.io).
What users say (4)
Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.
Fetched 2026-11-02 (HTTP 200, 44 hits): iproyal named by site operators plagued by residential-proxy bot traffic, in the Aisuru-botnet-to-proxies discussion, in proxy-detectability research, and in the hacked-router Pawns.app story; no positive HN threads found.
Fetched 2026-11-02 (HTTP 200): OP claims ISP proxies are relabeled datacenter IPs, account closed after refund request, $5,000 spent; replies report payment bugs and churn to Decodo. Reddit's body-search endpoint also timed out (422/429) repeatedly this session, so threads were located via search and pulled by link_id.
Fetched 2026-11-02 (HTTP 200): blocked accounts with forfeited earnings, 'scam' replies under official update posts, low earning effectiveness, a $1 fee on the new USDT/USDC payout, and a formal GDPR Article 77 complaint against IPRoyal Pawns UAB over an automated permanent ban.
Fetched 2026-11-02 (HTTP 200): freelancer roundup - IPRoyal 'cheap residential proxies and a really good entry point for starting users, but lacks stickiness & control in the long run'; commenters note thread is overrun with AI/affiliate shilling for proxy brands (relevant to interpreting all proxy 'reviews').
AI fact summary - everything we know, compressed
Generated by Qwen3 on 2026-11-02 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.
Bottom line: IPRoyal is a budget proxy provider for scraping, ad verification, and geo-unblocking - not a privacy tool. It offers cheap entry ($7 for 1 GB, traffic never expires) and flexible pay-as-you-go, but delivers inconsistent IP quality, mandatory biometric KYC, and no encryption. This is infrastructure for automation, not anonymity.
The logging truth: IPRoyal makes no no-logs claim. Its privacy policy explicitly lists collection of login IPs, timestamps, device data, and tracking via Google Analytics and HubSpot, retained for six months. Logging occurs under UAE PDPL law (Ajman FZE jurisdiction), not GDPR, with data stored in the UAE and EU.
Pricing reality: Pricing starts at $7/GB for 1 GB (subscription) or $7.35/GB (pay-as-you-go), dropping to $1.75/GB only at 10 TB ($17,500+). There is no promo rate - only volume discounts. Refunds are limited to 24 hours for defects; crypto payments are non-refundable, and one-day plans are excluded.
What reviewers say vs what users say: Affiliate-funded reviewers like TechRadar (positive) and vpnMentor (negative) conflict: TechRadar praises scale and pricing but ignores KYC and jurisdiction shifts; vpnMentor flags privacy flaws but has a vested interest as a Kape-owned site. Independent sentiment is polarized - budget users appreciate entry pricing and support, while heavy users report dirty IPs, refund denials, and billing disputes, with Trustpilot reviews recently turning negative.
Who runs it: Founded in 2020 by Lithuanians (CEO Mindaugas Caplinskas), the company moved its legal base to UAE (IPRoyal Services FZE LLC, license 4387) in 2026. Ownership is opaque, but the operation runs 100+ staff and serves 10,000+ business clients. The Pawns.app bandwidth-resale model - paying users to share home IPs - raises ethical and abuse concerns, including botnet exploitation and account bans with forfeited payouts.
Sources & how this review was built
Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.
Evidence classes on this page:[A] A: 12[B] B: 6[C] C: 4[D] D: 0(D stays empty until our own test phase)
This dossier exists to say plainly: Oxylabs is not a VPN and should never appear in a consumer VPN shortlist. It is one of the two dominant corporate web-data…
audit
intro $30 /mo
Lithuania - Oxylabs UAB, HQ Svitrigailos st. 32, Vilnius (operator about page); bootstrapped until a $130M first outside investment from Warburg Pincus (July 2026) at a $3.6B valuation; part of the Tesonet ecosystem, and since October 13, 2026 one of five brands (Oxylabs, Decodo, Webshare, ScrapingBee, Honeygain) under the Vilnius-based Source.ai umbrellaproxy service 10 d ago
This dossier exists to say plainly: Bright Data is not a VPN and should never appear in a consumer VPN shortlist. It is the market-leading corporate web-data…
audit
intro $4 /GB
Israel - Bright Data Ltd. (formerly Luminati Networks), HQ Tel Aviv area, Israel; majority acquired by London private investment fund EMK Capital in 2017proxy service 11 d ago
A competent budget proxy vendor for scraping and automation - and this dossier is honest that it is not a privacy product. Webshare is a California-founded…
intro $2.99 /mo
United States (about page: 'trusted technology company based in California, USA, founded in 2018'; ToS section 12.1: service deemed based in California). Ownership sits abroad: acquired by Oxylabs in late 2022, and since October 13, 2026 one of five brands (Oxylabs, Decodo, Webshare, ScrapingBee, Honeygain) under the Vilnius-based Source.ai umbrella, which Proxyway reports sits effectively within the broader Tesonet ecosystemproxy service 11 d ago
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.