Mayak Blog

Paid VPN not working: what money buys and what it does not

The most galling failure of all: the money is gone, the subscription is active, and there is no connection. The short answer is that payment does not buy passage. The equipment that gets in the way of a tunnel looks at the shape of your traffic and has no idea whether you paid anyone. Money buys something else, and below we work out exactly what, using our own journal over two weeks.

In short. Payment does not buy passage: the filter on the way looks at the shape of the traffic, not at your subscription. What money buys is different — how many routes the app has to the server, who fixes things when they break, and what the service earns from if not from you. In our journal, since 3 September the share of failed attempts grew from 5.6 to 15.7 %, and the share of connections that needed the backup route from 2.1 to 10.5 %; over the same days news outlets report mass VPN outages. If yours stopped working in early September, the cause is most likely neither you nor your payment. Two more questions are answered separately below — whether one paid access can serve two people and what “no sign-up, no email” actually means.

We build Mayak. Four routes to the server instead of one, switching between them without the human, and an honest label on screen showing which route you are on. 7 days free once you confirm your email, no card required.

Why a paid one breaks where a free one breaks

Picture a turnstile that lets people through by the way they walk. It does not ask for a ticket and does not know its price — it watches how you move. Traffic filtering works much the same way: equipment on the path takes apart the shape of the packets and decides whether to let the flow through. Payment only changes whose server sits at the other end; the shape of the packets is set by the protocol.

Hence the main consequence, and it is an awkward one for everybody selling tunnels, us included: if your service knows exactly one way to connect, then on the day that way stops being let through, money helps with nothing at all. The difference between services begins not at the checkout but in whether the app has a second way and a third — and whether it moves to them by itself.

You can check that claim against our own measurement: the same connection on port 443 without mimicry did not come up, and with mimicry it did. The port, the server address and the subscription price did not change — the shape of the traffic did. So that is what decides.

What happened in early September: our journal

Since 3 September 2026 we have been seeing a marked shift in our own connection journal. To keep the comparison honest we took only app builds of one generation (0.7.x): otherwise the growth could be explained by people simply updating the app rather than by the network changing.

Our journal, 0.7.x builds21 Aug — 2 Sep3 — 8 Sep
Connection attempts377580
Of them failed21 (5.6 %)91 (15.7 %)
Successful via the backup route8 (2.1 %)61 (10.5 %)
People in the window1027

Read it like this. The share of failed attempts nearly tripled, and the share of connections that needed the backup route to succeed grew fivefold. The direct route started getting through worse, and the connection increasingly rests on a detour.

Separately — mobile internet only, because that is usually where it breaks for people:

Mobile internet only21 Aug — 2 Sep3 — 8 Sep
Share of successful connections92.5 %82.6 %
Of the successful ones — via the backup route1.6 %7.9 %

On its own this still proves nothing: over those same days we were rolling out our own changes, and pinning any shift on the operators would be convenient and dishonest. A second, independent view is needed — and there is one. Over exactly those days news feeds report: on 5 September, “mass VPN and MTProto proxy outages have begun in Russia” (GoHa.Ru); on 6 September, “a mass internet outage in Russia hit dozens of regions” (Techora.ru); on 8 September two at once, “VPNs in Russia have been patchy for a second day” (RB.ru) and “VPNs across Russia failing for a second day: apps cannot see the servers” (digital-report.ru).

Those are other people’s claims, not our measurement, and we present them as exactly that. But when our own journal and an independent feed show the same thing on the same days — the coincidence stops being one. If your paid VPN stopped working in early September, the cause is most likely neither you nor your payment.

What money does buy

Since it does not buy passage, it is only fair to say what the money is actually for. There are three points you can check.

  • Several routes instead of one, and switching between them without you. For us that is four attempts in a row: over the newer style of address, over the ordinary one, through a nearby entry point, and over the backup route — the steps are covered separately. The price of the question is visible in the table above: 61 connections over six days succeeded only because there was somewhere to step. Without that last step those people would have seen “not connecting”.
  • Somebody who fixes it. A free service owes you nothing; for a subscription a service owes you at least an answer and an explanation. That is easy to check before paying: send support a question and see whether a live human answers, and how soon.
  • No second income earned off you. A free tunnel takes its money from somewhere else — what you pay with for free extensions is covered separately.

What money does not buy, and it is worth knowing in advance: a guarantee that tomorrow everything will work the same way. Not from us and not from anyone else. A service promising such a guarantee is promising something it does not control.

What to check, in order

The list works for any paid service, not only ours — it runs from the most common cause to the rarest.

  1. The access really is active. The most galling and the fastest check — open your account page and look at the date it is paid up to. The money can leave while the crediting lags behind.
  2. The app is up to date. Ways of disguising traffic change along with the filters, and an old build often knows exactly the way that stopped being let through. This is the first thing to do, and it is free.
  3. Separate Wi-Fi from mobile data. If it comes up on Wi-Fi but not on mobile data, the cause is in the cellular network, and that is covered separately. If it comes up nowhere, the cause is in the phone or in the service itself.
  4. Try another country. Routes to different countries differ: what does not get through to one often gets through to another. That is thirty seconds and requires no knowledge.
  5. Check whether the app is being put to sleep. If the tunnel comes up and quietly dies later, that is usually the phone rather than the network: in our checks the battery restriction was cause number one.
  6. Force the detour on. If the direct route never gets through on your operator, there is no point waiting for the app to walk the ladder — in our app that is the “Always use the backup channel” switch.

If after all of that there is still no connection, it is worth running four checks in a minute to find which step exactly is breaking: without that, a conversation with any support team turns into guesswork.

A separate case: the money left and the access did not arrive

This is not a broken connection but broken bookkeeping, and it is treated differently. A payment goes through in two steps: the bank takes the money, and a separate message confirms that to the merchant. The second step can be late or lost — and then you have been charged while the service says “unpaid”.

What to do: do not pay a second time. A second payment almost always creates a second problem instead of solving the first. Instead — write to support and give the date, the amount and the last four digits of the card; that is enough to find the payment. We keep a reconciliation for exactly this case: the payment is found by account number, and access is extended from the date it should have been. If a service does not answer such a letter, that too, unfortunately, is an answer to the question of what you were paying for.

One paid access for two: can one person pay for both

The question sounds like this: “there are two of us, do we buy two accounts?”. The answer comes in order, because there are three ways and one of them is bad.

  1. Two of your own devices are just devices. Our plans differ not in speed but in the number of devices: Start — up to 3, Family — up to 5, Max — up to 10 at the same time. One person’s phone, tablet and TV take three places out of that limit, and there is nothing extra to pay for them.
  2. Another person is a slot, not your password. Your account has “My group”: you hand a slot of your plan to someone close to you, they get their own account with their own login, and you keep being the only one who pays — it is your device limit that is spent. You can invite by link or by account number, and nothing is linked until they press “Accept” themselves. The step-by-step order is in the help.
  3. What not to do — hand over your password. It is the only way that looks free and costs the most: you lose both your login and any way to take the access back, and every payment of yours and every letter to support end up in shared hands.

An honest caveat: the whole group’s access rests on your subscription. When it ends, it ends for them too; each of them can see in their own account whose subscription they live on and until what date. A slot can be taken back at any moment, and the account says in advance how many devices that will disconnect.

There is also a fourth way that looks the simplest — giving the second person your key or config file. It works for nobody: the server remembers one address per key, and two devices keep snatching the connection from each other. We measured it separately — why one key on two devices breaks the connection for both.

“No sign-up” and logging in without an email

The second frequent question about paid access: can you do without a form and without an email. First, about what “no sign-up” usually hides in free apps: you do have an account anyway — it was simply created for you, tied to your phone or to an advertising identifier, and you were never told about it. “They did not ask for an email” and “they keep no record” are different things.

How it works here, point by point — including what it does not give you:

  • The anchor of an account is its number, nine digits in the form “472-918-563”. It is visible in the app and in your account, and it is what you log in with. An email is a way to recover the account, not a user name.
  • An account is created right in the app, with no form. The same can be done in our Telegram bot: it issues the number itself, and there is nothing to sign up for on the site.
  • What an email gives you. Right now it is a confirmed email that opens the trial — 7 free days; until it is confirmed there is no access. And it is also the only way to get the account back if the number was lost together with the phone.
  • What “no email” does not cancel. The payment still goes through a bank, and there you are not anonymous — promising otherwise would be a lie.

Separately, about “does it work all day”: the connection is held not by a sign-up but by whether the phone lets the app live in the background. The most frequent cause of “it worked half a day and dropped” is battery saving, and that is covered separately, with the settings.

What these numbers do not say

The most important part, and we prefer to say it ourselves.

  • We are a small service and these are small numbers. 27 people in the window from 3 to 8 September. A sample like that can explain a mechanism; it cannot measure a country.
  • All 61 connections over the backup route came from four people out of 27. That matters more than the share itself: we may be watching not a wave but four people whose particular operator got worse. That is exactly why the article rests on a second, independent support — the news feed.
  • The headlines in the feed are other people’s claims. We have not verified them and cannot; the only numbers speaking here are from our own journal.
  • “The backup route was needed” ≠ “the operator blocked it”. The app records which step worked, not why the previous one did not. The cause can lie in a home network or in one particular cell tower.
  • The window is short and uneven. Thirteen days against six, and the failures of the first window are almost entirely in its last two days, 1 and 2 September: 13 out of 21. So the wave began before 3 September and the border between the windows is arbitrary — which works against our own conclusion, not for it.
  • This is a 10 September snapshot. Connection reports sometimes reach us late, so the same window counted on the evening of 8 September came out nine attempts short. We recounted it once the window had closed, and the neighbouring articles carry the same numbers.

Short answers

Why is my paid VPN not working if I pay for it? Because the filter on the way looks at the shape of the traffic, not at your subscription. Payment decides whose server is at the other end and how many routes the app has to it — not whether those routes get through today.

My paid VPN stopped working — was I cut off for non-payment? Worth checking first, it takes thirty seconds in your account. But if it is paid and there is no connection, money is not the cause: in our journal since 3 September the share of failed attempts nearly tripled while nothing changed on the people’s side.

I paid and it does not work — should I pay again? No. Write to support first with the date, the amount and the last four digits of the card. A second payment creates a second task rather than solving the first.

What do I do if a paid VPN is not working on Android? In order: update the app, separate Wi-Fi from mobile data, try another country, lift the background restriction from the app. The full list is above.

How do I connect two people to one paid VPN and pay for one? Through the slots of your plan: the second person gets their own account with their own login, and you keep paying. There is no need to hand over your password, and it is not worth doing — the three ways are compared above.

Is there a VPN with no sign-up, where you log in without an email? Here the name of an account is a nine-digit number, not an email address; the account is created in the app or in the Telegram bot, which issues the number itself. What an email still gives you and what “without an email” does not cancel — in a section of its own.

So a free one is no worse? On getting through on a given day — sometimes it is no worse, and we do not hide that. The difference is elsewhere: how many routes the app has, who fixes it, and what the service earns from if not from you.

And does yours work? In the same 3–8 September window — 489 successful connections out of 580 attempts, meaning every sixth attempt failed. That is an honest answer, not “everything is fine here”.

Try Mayak

Four routes to the server instead of one, switching between them without the human, an honest label showing which route you are on, and measurements we publish as they came out. 7 days free once you confirm your email, no card required.

The account is created right in the app. A confirmed email opens the access — 7 free days.