How a VPN Changes the IP You See

ByIpsaya Editorial

TL;DR: A VPN moves your public exit from the ISP to the VPN provider, so a lookup should show a different address and often a different city while the tunnel is up. If the address does not change, the tunnel is off, split, or failing. Confirm on a fresh page load, not from a screenshot taken before you connected. Use Ipsaya as the before-and-after check, then decide whether that exit is the one you meant to buy.

The café laptop that still looked like home

A translator working from a café turned on a VPN because the café network was open, then opened her bank. The bank challenged the login as unusual. She assumed the VPN had placed her in another country and that the bank was being fussy. A lookup told a plainer story: the address still belonged to her phone’s hotspot, which she had tethered an hour earlier and forgotten. The VPN app showed a green dot because it was connected on the café Wi-Fi profile, not on the hotspot profile. The bank was looking at the carrier. The green dot was looking at a network she was not using.

Exit checks are about the path this browser is on. App dashboards are about the path the app thinks it owns. Those drift apart more often than the marketing suggests.

What should change when the tunnel is real

Before connecting, note the address and the provider name a lookup reports. Connect the VPN. Reload the lookup. You want a new address and a provider that is the VPN company or a data center it rents, not your home ISP. The guessed city may jump to the city you picked in the app. If you picked a city and the lookup still names your hometown ISP, you are not exiting through the tunnel, no matter what the app icon claims.

  • Address unchanged: wrong profile, VPN paused, or the browser is bypassing it.
  • Address changed, city unchanged: possible if the VPN city is near you, or if the location database is coarse. Check the provider name.
  • IPv6 still shows the ISP: the VPN may have grabbed IPv4 only. That leak matters if you needed the whole path covered.
  • Two browsers disagree: one of them may be set to use the system proxy and the other may not.

Split tunnels and “local network” exceptions

Many VPN apps offer a split tunnel so a printer or a streaming app can bypass the tunnel. A browser you added to the bypass list will keep showing the ISP address. That can be what you wanted for the printer and not what you wanted for the bank. Read the exception list before you blame the lookup. A kill switch that blocks traffic when the tunnel drops is a separate feature. If the lookup fails to load at all after a drop, the switch may be doing its job. If the lookup loads and shows the ISP, the switch is off and your traffic found the old door.

Corporate VPN clients are a different product. They often send only work subnets through the tunnel and leave general web traffic on the ISP. A lookup will still show your home provider, and that does not mean the work VPN is broken. Ask whether the client is full-tunnel. The answer changes what the lookup is allowed to prove.

Reconnects that quietly fall back

Laptops sleep. VPN apps fail the wake-up and sit in a reconnecting state while traffic already flows in the clear. Make the lookup a habit after every wake if you depend on the exit: one reload, one glance at the provider line. A ten-second check beats discovering the fallback inside a mail header later.

The city is not the promise

Even a healthy VPN can be geolocated to a neighboring region if the address block is registered that way. Use the lookup to confirm the organization more than the pin on a map. If a streaming service still treats you as home, the service may be using more than the IP: account history, language, payment country. The lookup can prove the exit changed. It cannot force a video site to agree.

Turning the VPN off should return the ISP address after a reload. If it does not, quit the browser, or the app left a proxy setting behind. That leftover proxy is a real outage disguised as a sticky location.

Check the path you are actually sitting on

The translator’s green dot was honest about a network she had left. Before you rely on a tunnel for a bank or a client file, reload a lookup on that same device and read the provider. If it is still your ISP or your phone carrier, stop and fix the profile. The lookup is a blunt instrument, which is why it is useful. It does not share the app’s opinion of itself.