A VPN provider advertises servers in a long list of countries. The number is a selling point, and it is reported as if every entry meant a machine in a rack in that country. Often it does not, and the gap between the two has a name in the industry: a virtual location.
This is not an accusation. It is a technical practice with real reasons behind it, and the point of this article is to let you check any provider yourself rather than take anyone's word, including ours.
What a virtual location actually is
An IP address does not carry a physical position. It carries a registration: the holder of the address block declares which country it serves, and geolocation databases repeat that declaration.
A virtual location exploits exactly that. The provider assigns an address block registered to country A, and runs the hardware in country B, usually a nearby hub with reliable datacentres. Websites see an address from country A, so anything that keys on the IP behaves as if you were there.
Why providers do it, stated fairly
There are honest reasons:
- Countries where they would not put a machine. Hosting real hardware in a jurisdiction with weak legal protections or a habit of seizing servers puts user data at risk. A virtual location offers the address without exposing the machine.
- Countries with poor connectivity. A physical server in a place with thin transit can be slower than a well-connected machine two thousand kilometres away, wearing that country's address.
So the practice is defensible. What is not defensible is presenting a virtual location as a physical one, or burying the distinction where nobody will read it.
The honest criterion is not "does this provider use virtual locations" but "does this provider tell you which ones they are". Several publish the list. That disclosure is the thing worth rewarding.
Where it changes something for you, and where it does not
For reaching content tied to a country, it changes nothing. The check is done on the IP, the IP is registered there, it works.
For privacy, it changes everything. The authority able to compel a server is the one where the server physically sits. If you selected a country for its legal protections and the machine is somewhere else, you have the appearance of that jurisdiction and the reality of another one. That is precisely the thing you were paying for.
See NordVPN's current offer
Whatever provider you consider, the criteria that survive this article are a published list of virtual locations, an audited no-logs policy, and a refund window long enough to run the two checks below yourself.
Check it yourself, in under a minute
1. Latency against physics
Light in fibre travels at roughly 200 000 km per second. A round trip therefore costs about 1 ms per 100 km, before any routing overhead. That gives you a floor no marketing claim can go under.
ping -c 10 <the server hostname or IP>
Take the minimum round-trip time, not the average. Then compare:
| Route | Round trip distance | Physical floor | If you measure |
|---|---|---|---|
| Paris to Mumbai | ~14 000 km | ~70 ms | 30 ms means the machine is not in Mumbai |
| Paris to Sydney | ~33 000 km | ~165 ms | 60 ms means it is somewhere in Europe or the Middle East |
| Paris to Frankfurt | ~1 000 km | ~5 ms | 10 ms is perfectly consistent |
The floor is one-directional evidence. A latency far below the floor proves the machine is closer than advertised. A latency above it proves nothing on its own, since congestion and detours add delay.
2. Traceroute, for the names on the way
mtr --report --report-cycles 10 <hostname>
traceroute <hostname>
Intermediate routers frequently carry airport or city codes in their hostnames: fra for Frankfurt, ams for Amsterdam, lhr for London, sin for Singapore. When the last identifiable hop before an allegedly Indian server says sin, you have your answer without any special tooling.
What not to rely on
IP geolocation websites. They report the registration, which is the very thing a virtual location manipulates. Asking them where the server is means asking the illusion to confirm itself. Latency measures physics, and physics does not fill in a form.
The short version
A virtual location is an address in one country and a machine in another. It works for anything keyed on the IP and it defeats the reason you would choose a jurisdiction. Providers have real motives for the practice, so judge the disclosure rather than the practice: a published list of virtual locations is a good sign, silence is not.
And either way, you can settle it in a minute with ping and a distance. Location is one property of a provider among several: the four checks that tell you whether the tunnel itself is doing its job are in our VPN security test. For the wider picture of what a VPN does and does not cover, see are VPNs legal.
Secure your connection with NordVPN
Threat Protection blocks trackers & malware · kill switch · 30-day money-back
