The most galling failure of all: the money is gone, the subscription is active, and there is no connection. The short answer is that payment does not buy passage. The equipment that gets in the way of a tunnel looks at the shape of your traffic and has no idea whether you paid anyone. Money buys something else, and below we work out exactly what, using our own journal over two weeks.
In short. Payment does not buy passage: the filter on the way looks at the shape of the traffic, not at your subscription. What money buys is different — how many routes the app has to the server, who fixes things when they break, and what the service earns from if not from you. In our journal, attempts that a person starts themselves go through in 96–99 % of cases, but since early September the direct route fails noticeably more often — on 7–9 % of attempts against 1 % in late August, and a detour step picks up the connection; over the same days news outlets report mass VPN outages. If your usual route stopped getting through in early September, the cause is most likely neither you nor your payment. Two more questions are answered separately below — whether one paid access can serve two people and what “no sign-up” actually means.
We build Mayak. Four routes to the server instead of one, switching between them without the human, and an honest label on screen showing which route you are on. 3 days free, no card required.
🍎 On iPhone Mayak works with the subscription link from your account. INCY was removed from the Russian App Store on 27 October 2026: if you already have it, it keeps working — do not delete it, it cannot be downloaded again from the Russian store right now. With a Russian Apple account, Clash Mi and Shadowrocket are available now (we have not verified them live with our link); Happ and INCY need an Apple account of another country.
Why a paid one breaks where a free one breaks
Picture a turnstile that lets people through by the way they walk. It does not ask for a ticket and does not know its price — it watches how you move. Traffic filtering works much the same way: equipment on the path takes apart the shape of the packets and decides whether to let the flow through. Payment only changes whose server sits at the other end; the shape of the packets is set by the protocol.
Hence the main consequence, and it is an awkward one for everybody selling tunnels, us included: if your service knows exactly one way to connect, then on the day that way stops being let through, money helps with nothing at all. The difference between services begins not at the checkout but in whether the app has a second way and a third — and whether it moves to them by itself.
You can check that claim against our own measurement: the same connection on port 443 without mimicry did not come up, and with mimicry it did. The port, the server address and the subscription price did not change — the shape of the traffic did. So that is what decides.
What happened in early September: our journal
Since 3 September 2026 we have been seeing a shift in our own connection journal: the direct route fails noticeably more often. To keep the comparison honest we took only app builds of one generation (0.7.x): otherwise the growth could be explained by people simply updating the app rather than by the network changing. And we count only attempts that a person started themselves; when the app brings the tunnel back up on its own after a drop (background attempts), that is a different story: those speak about how the app works in the background, not about the road to the server, and we look at them separately.
| Our journal, 0.7.x builds | 21 Aug — 2 Sep | 3 — 8 Sep |
|---|---|---|
| Attempts started by a person | 131 | 235 |
| Of them failed | 1 (0.8 %) | 6 (2.6 %) |
| Successful not over the direct route (nearby entry point or backup route) | 1 (0.8 %) | 14 (6.0 %) |
| …of those, over the backup route | 0 | 12 |
| People in the window | 6 | 24 |
Read it like this. Failures are in single digits both before and after 3 September, but the direct route started getting through noticeably worse: in early September a detour step was needed by 14 connections out of 235 against one out of 131 in late August, and the connection increasingly rests on it. The comparison is rough — in late August the journal had only six people. But across all builds the picture is the same and it holds: the direct route failed on 1.0 % of attempts over 21 August — 2 September and on 7–9 % in every window since (16–22 September: 96 of 1,078).
Separately — mobile internet only, because that is usually where it breaks for people:
| Mobile internet only, 0.7.x builds | 21 Aug — 2 Sep | 3 — 8 Sep |
|---|---|---|
| Successful connections | 36 of 36 (100 %) | 130 of 132 (98.5 %) |
| Of the successful ones — not over the direct route | 0 | 3 (2.3 %) |
On mobile internet the shift is small: two failures out of 132 attempts and three detours against none in late August.
On its own this still proves nothing: over those same days we were rolling out our own changes, and pinning any shift on the operators would be convenient and dishonest. A second, independent view is needed — and there is one. Over exactly those days news feeds report: on 5 September, “mass VPN and MTProto proxy outages have begun in Russia” (GoHa.Ru); on 6 September, “a mass internet outage in Russia hit dozens of regions” (Techora.ru); on 8 September two at once, “VPNs in Russia have been patchy for a second day” (RB.ru) and “VPNs across Russia failing for a second day: apps cannot see the servers” (digital-report.ru).
Those are other people’s claims, not our measurement, and we present them as exactly that. But when our own journal and an independent feed show the same thing on the same days — the coincidence stops being one. If your paid VPN stopped getting through its usual route in early September, the cause is most likely neither you nor your payment.
What money does buy
Since it does not buy passage, it is only fair to say what the money is actually for. There are three points you can check.
- Several routes instead of one, and switching between them without you. For us that is up to five attempts in a row: over the newer style of address, over the ordinary one, over the second protocol, X-ray, through a nearby entry point, and over the backup route — the steps are covered separately. The price of the question is visible in the table above: 14 connections over six days succeeded only because there was somewhere to step, and 12 of them over the last step. Without the spare steps those attempts would have ended in “not connecting”.
- Somebody who fixes it. A free service owes you nothing; for a subscription a service owes you at least an answer and an explanation. That is easy to check before paying: send support a question and see whether a live human answers, and how soon.
- No second income earned off you. A free tunnel takes its money from somewhere else — what you pay with for free extensions is covered separately.
What money does not buy, and it is worth knowing in advance: a guarantee that tomorrow everything will work the same way. Not from us and not from anyone else. A service promising such a guarantee is promising something it does not control.
What to check, in order
The list works for any paid service, not only ours — it runs from the most common cause to the rarest.
- The access really is active. The most galling and the fastest check — open your account page and look at the date it is paid up to. The money can leave while the crediting lags behind.
- The app is up to date. Ways of disguising traffic change along with the filters, and an old build often knows exactly the way that stopped being let through. This is the first thing to do, and it is free.
- Separate Wi-Fi from mobile data. If it comes up on Wi-Fi but not on mobile data, the cause is in the cellular network, and that is covered separately. If it comes up nowhere, the cause is in the phone or in the service itself.
- Try another country. Routes to different countries differ: what does not get through to one often gets through to another. That is thirty seconds and requires no knowledge.
- Check whether the app is being put to sleep. If the tunnel comes up and quietly dies later, that is usually the phone rather than the network: in our checks the battery restriction was cause number one.
- Let the app move to the backup path. If the direct route does not get through on your operator, there is nothing to turn on in our app: it moves to the backup path on its own.
If after all of that there is still no connection, it is worth running four checks in a minute to find which step exactly is breaking: without that, a conversation with any support team turns into guesswork.
A separate case: the money left and the access did not arrive
This is not a broken connection but broken bookkeeping, and it is treated differently. A payment goes through in two steps: the bank takes the money, and a separate message confirms that to the merchant. The second step can be late or lost — and then you have been charged while the service says “unpaid”.
What to do: do not pay a second time. A second payment almost always creates a second problem instead of solving the first. Instead — write to support and give the date, the amount and your account number; that is enough to find the payment. We keep a reconciliation for exactly this case: the payment is found by account number, and access is extended from the date it should have been. If a service does not answer such a letter, that too, unfortunately, is an answer to the question of what you were paying for.
One paid access for two: can one person pay for both
The question sounds like this: “there are two of us, do we buy two accounts?”. The answer comes in order, because there are three ways and one of them is bad.
- Two of your own devices are just devices. Our plans differ not in speed but in the number of devices: Start — up to 3, Family — up to 5, Max — up to 10 at the same time. One person’s phone, tablet and TV take three places out of that limit, and there is nothing extra to pay for them.
- Another person is a slot, not your password. Your account has “My group”: you hand a slot of your plan to someone close to you, they get their own account with their own login, and you keep being the only one who pays — it is your device limit that is spent. You can invite by link or by account number, and nothing is linked until they press “Accept” themselves. The step-by-step order is in the help.
- What not to do — hand over your password. It is the only way that looks free and costs the most: you lose both your login and any way to take the access back, and every payment of yours and every letter to support end up in shared hands.
An honest caveat: the whole group’s access rests on your subscription. When it ends, it ends for them too; each of them can see in their own account whose subscription they live on and until what date. A slot can be taken back at any moment, and the account says in advance how many devices that will disconnect.
There is also a fourth way that looks the simplest — giving the second person your key or config file. It works for nobody: the server remembers one address per key, and two devices keep snatching the connection from each other. We measured it separately — why one key on two devices breaks the connection for both.
“No sign-up” and the email
The second frequent question about paid access: can you do without a form. First, about what “no sign-up” usually hides in free apps: you do have an account anyway — it was simply created for you, tied to your phone or to an advertising identifier, and you were never told about it. “They did not ask for an email” and “they keep no record” are different things.
How it works here, point by point — including what it does not give you:
- You sign in with an email and a password. A newcomer signs up with an email, a password and a letter with a code; we ask for no phone, passport or card. An account also has a number, nine digits in the form “472-918-563”: it is visible in the app and in your account, and we find a payment by it. Old accounts created without an email sign in with the number and the password, as before.
- What an email gives you. The trial is 3 free days once you sign up. And it is also the way to get the account back if you forget the password or lose the phone.
- Paying in the bot. You can also pay in our Telegram bot: it has its own account number, and such an account has no trial.
- What “no sign-up” does not cancel. The payment still goes through a bank, and there you are not anonymous — promising otherwise would be a lie.
Separately, about “does it work all day”: the connection is held not by a sign-up but by whether the phone lets the app live in the background. The most frequent cause of “it worked half a day and dropped” is battery saving, and that is covered separately, with the settings.
What these numbers do not say
The most important part, and we prefer to say it ourselves.
- We count only attempts that a person started themselves. When the app brings the tunnel back up on its own after a drop (background attempts), that is a different story: those speak about how the app works in the background, not about the road to the server, and we look at them separately. The team's service accounts are excluded too. The first version of this article counted both kinds together, which is why the numbers here differ from the earlier ones.
- We are a small service and these are small numbers. 24 people in the window from 3 to 8 September and only six in late August, so the «before and after» comparison is rough. A sample like that can explain a mechanism; it cannot measure a country.
- There are few detours in absolute terms too: 14 connections over six days. A handful of people on the same operator can easily move a share like that — we may be watching them rather than a wave. That is exactly why the article rests on a second, independent support — the news feed, and why we also checked the direct route across all builds over the following weeks.
- The headlines in the feed are other people’s claims. We have not verified them and cannot; the only numbers speaking here are from our own journal.
- “The backup route was needed” ≠ “the operator blocked it”. The app records which step worked, not why the previous one did not. The cause can lie in a home network or in one particular cell tower.
- The window is short and uneven. Thirteen days against six, and the border between the windows is arbitrary: window by window the direct-route shift holds from 3 to 22 September, but numbers like these cannot name the day it began.
- This is a 23 September snapshot. Connection reports sometimes reach us late, so the last days of the window may still fill in a little. The neighbouring articles carry the same numbers.
Short answers
Why is my paid VPN not working if I pay for it? Because the filter on the way looks at the shape of the traffic, not at your subscription. Payment decides whose server is at the other end and how many routes the app has to it — not whether those routes get through today.
My paid VPN stopped working — was I cut off for non-payment? Worth checking first, it takes thirty seconds in your account. But if it is paid and there is no connection, money is not the cause: in our journal since 3 September the direct route fails noticeably more often — on 7–9 % of attempts against 1 % in late August.
I paid and it does not work — should I pay again? No. Write to support first with the date, the amount and your account number. A second payment creates a second task rather than solving the first.
What do I do if a paid VPN is not working on Android? In order: update the app, separate Wi-Fi from mobile data, try another country, lift the background restriction from the app. The full list is above.
How do I connect two people to one paid VPN and pay for one? Through the slots of your plan: the second person gets their own account with their own login, and you keep paying. There is no need to hand over your password, and it is not worth doing — the three ways are compared above.
Is there a VPN with no sign-up, where you log in without an email? We do not create accounts without an email for new people: sign-up is an email and a password, with no phone and no card. You can also pay in the Telegram bot, which has its own account number and no trial; old accounts without an email sign in with the number. What an email gives you and what “no sign-up” does not cancel — in a section of its own.
So a free one is no worse? On getting through on a given day — sometimes it is no worse, and we do not hide that. The difference is elsewhere: how many routes the app has, who fixes it, and what the service earns from if not from you.
And does yours work? For 16–22 September — 1,037 successful connections out of 1,078 attempts that people started themselves (96.2 %). The direct route failed on 96 of them (8.9 %), and a detour step picked up most of those. That is an honest answer, not “everything is fine here”.