Can I block VPN users from my Framer site?

Yes. Framer has no built-in option, but the Bouncer plugin detects VPN, proxy and datacenter IPs server-side and can block or flag that traffic alongside country rules.

How does VPN detection work?

It checks the visitor's IP against continuously updated intelligence: known VPN exit nodes, datacenter ranges, open proxies and Tor relays. Residential IPs pass; anonymised traffic is flagged.

Is VPN detection 100% accurate?

No detection is perfect, brand-new exit nodes and residential proxies can slip through and rare false positives happen. It reliably stops the mainstream VPN apps behind almost all bypass attempts.

Framer guide

How to block VPN & proxy traffic on a Framer site

Any country block can be stepped around with a $3/month VPN, because geolocation only sees the IP address. If your restriction actually matters, for licensing, gated launches, fraud or compliance, you need VPN detection on top. Here's how to add it on Framer.

By the Vanssay team. We build Bouncer, which does this, and we've been upfront below about the limits of any VPN detection.

Updated July 2026 · 4 min read

Works on any Framer site

Why country blocking alone isn't enough

Geoblocking maps the visitor's IP to a country. A VPN gives the visitor a different IP in a country of their choosing, so a user in a blocked region on a US VPN server looks like a US visitor to your rule. If you're blocking countries for anything with stakes, the VPN route is the first thing people try.

How VPN detection works

You can't ask a browser "are you on a VPN?", detection happens server-side by classifying the IP itself:

Datacenter ranges: VPN servers live in datacenters. Real visitors come from residential and mobile ISPs. An IP announced by a hosting provider is almost never a person on their home connection.
Known exit nodes: commercial VPN providers' server IPs are catalogued and continuously refreshed.
Proxy & Tor lists: open proxies and Tor relays are public and easy to match.

The honest caveat: no detection is 100%. Fresh exit nodes and residential-proxy services can slip through, and rare false positives exist (some corporate networks). In practice, IP-intelligence blocking stops the mainstream VPN apps, NordVPN, Surfshark, Proton, Mullvad, which is where nearly all bypass traffic comes from.

Setting it up on Framer

Framer has no native option, and Cloudflare's free plan doesn't classify VPNs either. Bouncer does it as a toggle:

Install Bouncer from the Framer marketplace.
Turn on VPN & proxy detection (paid plans), optionally alongside your country rules.
Choose the response: show your branded block screen to anonymised traffic, on the whole site or specific pages.
Publish. Every visit is checked server-side, and if the service is ever unreachable the site fails open rather than locking everyone out.

Tip: combining the two rules is what makes geoblocking real, block the countries you must, and block VPN/proxy/datacenter traffic so the block can't be trivially routed around.

Bouncer, detects VPNs, proxies and datacenter traffic server-side, with a block screen that matches your brand. From $6/mo.

View Bouncer on Framer

Common questions

Will it block normal visitors by mistake?

False positives are rare and mostly limited to traffic that already looks non-residential (corporate VPNs, some hosting networks). Regular home and mobile connections pass untouched.

Can I block VPNs without blocking any country?

Yes, VPN/proxy detection is an independent rule. You can allow every country and still turn away anonymised traffic.

Does it slow my site down?

The check is a single fast server-side lookup at load time; visitors don't notice it, and your Framer pages are untouched otherwise.