Security Review

Is surfshark.com legit or a scam?

Our verdict:Safe· 87/100

Legitimate VPN provider with 18-year domain history, active Netherlands registration, Deloitte-audited no-logs policy, and 4.5+ star ratings across major review sites.

surfshark.comScanned 2d ago
0
Trust score
SAFE
Heuristics 98·MT 82
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
19 years old
Registered Sep 30, 2007
MT Intelligence
Safe
Low likelihood · 92% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

8
/ 100
Low visual risk

Visual red flags detected in the screenshot

The screenshot presents a fully-rendered, professionally designed page consistent with the legitimate Surfshark VPN brand, with no visible scam indicators, urgency tactics, or trust-badge manipulation detected.

Visual risk8/100

What our vision model saw

5 signals

Professional navigation bar with consistent branding, standard menu items (Products, Pricing, Download, Resources, VPN for Teams), and a clearly labeled CTA button matching the Surfshark brand identit

Hero section displays polished product mockups (mobile and desktop app screenshots) with coherent teal color scheme consistent with known Surfshark branding.

30-day money-back guarantee claim is a standard consumer assurance common on legitimate VPN vendor sites, not presented in an exaggerated or fake-badge style.

No countdown timers, urgency banners, pop-up overlays, or push-notification prompts visible in the screenshot.

No pre-filled forms requesting sensitive credentials, wallet seeds, or payment details visible on screen.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust82/100
MT AgentLive web researchVisual inspection
0%
Confidence
Surfshark operates as a genuine, well-established VPN service with verifiable business registration in Amsterdam (Surfshark B.V., founded 2018) and a domain registered approximately 18 years ago. Our antivirus network flagged zero detections across 92 engines, and the page displays professional design consistent with the known brand identity. Independent review aggregators show predominantly positive ratings (4.3–4.7 stars across 30,000+ reviews on major platforms), with third-party security audits from Deloitte confirming the no-logs policy as of June 2025. The evidence package includes both positive and negative user feedback; complaints centre on billing disputes, auto-renewal practices, and occasional account-security concerns—common friction points for subscription services rather than indicators of fraud. No scam-family associations or clone-site patterns were detected. The company actively publishes transparency reports and maintains separate infrastructure following its 2022 merger with Nord Security.
Full dossier
Analysis complete

Page Content

The page presents a fully-rendered, professional VPN product site with clear navigation (Products, Pricing, Download, Resources), product descriptions (VPN, Antivirus, Search, Alert, Alternative ID), and a 30-day money-back guarantee. No countdown timers, urgency banners, or credential-harvesting forms are visible. The hero section displays polished app mockups in the brand's teal colour scheme. Contact information includes 2 phone numbers and 1 address; however, no contact email is listed on the page itself.

Infrastructure

Domain age: 6,830 days (~18.7 years). Registrar: TurnCommerce, Inc. DBA NameBright.com. SSL certificate valid (Google Trust Services issuer, 66 days to expiry). Hosting IP 104.18.120.34 has zero abuse reports and an abuse score of 0/100. No redirects, homoglyphs, or IDN abuse detected. The page loads external resources from legitimate third-party domains (Trustpilot, Incogni, social media platforms).

Domain History

The domain predates the company's 2018 founding, suggesting acquisition or prior use. Surfshark B.V. is registered in the Netherlands (Amsterdam, Kabelweg 57) and operates offices in Vilnius, Warsaw, and Berlin. The company was founded in Lithuania in 2018 and merged with Nord Security in 2022 under Cyberspace holding. Business registration status is active.

Web Reputation

an independent review aggregator: ~4.5/5 stars from 30,000+ reviews. Positive feedback highlights value, speed, unlimited-device support, and ease of use. Negative feedback focuses on billing disputes (auto-renewal charges after cancellation), support responsiveness, and rare account-security incidents. Independent security audits include Deloitte (no-logs policy, June 2025), Cure53, and SecuRing. Major tech publications (PCMag, Tom's Guide, CNET, VPnmentor, Security.org) rate Surfshark as a strong, affordable VPN option. No major scam-family associations detected.

Risk Factors
3
  • Some users report auto-renewal billing disputes and difficulty obtaining refunds after cancellation.
  • Occasional complaints about account-security incidents and slow support response times.
  • No contact email visible on the homepage, though phone and address are provided.
Positive Signals
5
  • Domain registered 18+ years ago with established business registration in Netherlands (Surfshark B.V., active status).
  • Zero detections across 92 antivirus engines; clean browser blocklists and sandbox results.
  • Deloitte-audited no-logs policy (June 2025) and published transparency reports.
  • 4.3–4.7 star ratings across 30,000+ reviews on independent aggregators; positive coverage from major tech publications.
  • Professional page design, no urgency tactics, countdown timers, or credential-harvesting forms.
AI Recommendation
Surfshark is a legitimate VPN provider safe to use. If you subscribe, review the auto-renewal terms carefully and monitor your billing statements. For support issues, contact the company via the phone number or address listed on the site.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for surfshark.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
18 yrs
Registered Sep 2007
Business registration
Active · Netherlands
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
4 scam reports · 5 positive
Key findings
7 headline facts from open-web research
  • Domain registered ~18 years ago (age 6830 days); company founded 2018, Surfshark B.V. registered in Netherlands with offices in Amsterdam, Vilnius, Warsaw, Berlin.
  • Trustpilot score ~4.5/5 from 30,000+ reviews; positive mentions of value, speed, unlimited devices, streaming; negatives focus on billing/renewal disputes, support, and rare account issues.
  • Multiple independent audits including Deloitte (no-logs policy confirmed June 2025), Cure53, SecuRing; transparency reports published.
  • Frequently reviewed positively by PCMag, Tom's Guide, CNET, VPnmentor, Security.org as strong, affordable VPN with innovative features.
  • Some Reddit and review site complaints about account security, slow speeds in certain cases, auto-renewal practices, and refund policy dissatisfaction.
  • No major scam family associations; company actively promotes anti-scam tools like email scam checker; ScamAdviser trust score 100.
  • Merged with Nord Security in 2022 under Netherlands-based holding; operates independently with separate infrastructure.
Scam reports (4)
Direct quotes from public scam databases, forums, and news.
  • Trustpilotopen

    "Surfshark are scammers themselves. Surfshark have charged me $193 for an annual membership well above the advertised low monthly cost. They charged me 1 month after I had cancelled my subscription."

  • Redditopen

    "Avoid Surfshark VPN – Repeated Account Hacks, No Support. Their support is incompetent, their system is vulnerable, and even after you get hacked multiple times, they'll..."

  • Reviews.ioopen

    "Be very careful with this company. Their customer service is absolutely terrible. They operate their auto-renewal system in a questionable way."

  • Facebookopen

    "WARNING!! SurfShark VPN is a scam, folks! ... They aren't hiding anything! They are just scamming you out of your hard-earned money!"

Positive reviews (5)
Quotes indicating the site is legitimate.
  • Trustpilotopen

    "Surfshark has been a good value for the price. Setup was quick, and I was able to use it across multiple devices without any trouble."

  • VPnmentoropen

    "Surfshark is privacy-focused and has some unique security features. Overall, I would recommend Surfshark because it offers great value for what you get."

  • AllAboutCookiesopen

    "Yes, Surfshark VPN is trustworthy. It has a strict no-logs policy that was most recently audited by Deloitte in June 2025."

  • Security.orgopen

    "Surfshark is a genuinely strong VPN and ranks among the best services available today. ... SecurityScore: 9.5/10"

  • Redditopen

    "I have been with surfshark since June 2022, I regret nothing, the best service and very reliable."

Business registration
Status: active · Netherlands

Surfshark B.V., headquartered in Amsterdam (Kabelweg 57, 1014BA). Founded 2018 in Lithuania; merged with Nord Security under Cyberspace holding. Multiple independent audits (Deloitte no-logs 2025, others).

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found 4 scam-related complaints and 5 positive reviews across independent review aggregators and social platforms. Negative feedback focuses on billing disputes (users charged after cancellation), auto-renewal practices, and support responsiveness—common friction points for subscription services. Positive feedback highlights the service's value, speed, multi-device support, and security features. Surfshark B.V. is registered as an active business in the Netherlands (Amsterdam), founded 2018, with published security audits from Deloitte (no-logs policy confirmed June 2025) and other third-party firms. No evidence of fraud, data theft, or scam-family associations was found.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers81967985
Postal addressPresent
Linked social profiles6
Signal Summary
Contact details look reasonable
  • No contact email found anywhere on the page.
  • Phone number listed (81967985).
  • Postal address visible on the page.
  • Links to 6 social profiles.

Domain & Encryption

Domain History
Age19 years old
RegistrarTurnCommerce, Inc. DBA NameBright.com
RegisteredSep 30, 2007
ExpiresSep 30, 2031
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 18, 2026 (66d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
Platform / CMSWordPress

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://surfshark.com/
  • 2200https://surfshark.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on surfshark.com and not a lookalike like s-urfshark.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on surfshark.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • surfshark.com passed our automated security checks with a trust score of 87/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. surfshark.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 66 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • surfshark.com is 18.7 years old, registered on 9/30/2007 through TurnCommerce, Inc. DBA NameBright.com. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report surfshark.com as clean.
  • No. surfshark.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • surfshark.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 12, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around surfshark.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·surfshark.com
SAFE

Surfshark is the official website of an established VPN provider founded in 2018, registered in the Netherlands, and backed by independent security audits. While some users report billing and support complaints typical of subscription services, the company operates transparently with published audits and maintains a strong reputation across major review platforms.

Surfshark is a legitimate VPN provider safe to use. If you subscribe, review the auto-renewal terms carefully and monitor your billing statements. For support issues, contact the company via the phone number or address listed on the site.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.