VPN-friendly casinos in Australia in 2026: what the tunnel does, and what it doesn’t

A casino that promotes itself as “VPN-friendly” is selling the reader a particular feeling: that a piece of software on the laptop will stand between them and the regulator, and that what sits behind it is therefore reachable, private, and effectively legal. The pitch is calm. The Australian law it sits inside is not. No state or territory licenses an online casino, and the Interactive Gambling Act 2001, as tightened in 2017 and again in 2026, makes the provision of those games to a person physically in Australia an offence that the ACMA enforces with formal warnings and site blocking. The brand may display an offshore licence in Curaçao or Anjouan; that licence is real, and it is also irrelevant to whether the activity is lawful for someone sitting in Sydney, Perth or Cairns. A VPN changes what the casino’s servers can read about the player’s IP address. It does not change what the law says about the activity the player is doing on the other side of that tunnel.

This page lays out what is actually being bought when an Australian considers going offshore through a VPN. It walks through the legal prohibition in plain language, the payment rails that make the offshore side harder to reach even with a tunnel, the responsible-gambling tools that bind the licensed Australian market and stop at its edge, and a side-by-side look at eleven brands the ACMA has itself acted against. The page is descriptive, not promotional: it closes by laying the cost out for the reader who is still weighing it.

Current as of 29 October 2026, verified against ACMA formal-warning notices and the Reserve Bank and Australian Payments Plus pages they sit beside.

The Australian prohibition in plain terms

The Interactive Gambling Act 2001 sets the line. Online casino games, online pokies and in-play betting cannot be provided to a person in Australia. The Act was tightened in 2017, again in 2023, and once more in 2026 by the Interactive Gambling Amendment (Gambling Reform) Bill 2026, which passed Parliament on 19 August 2026; its advertising and inducement measures commence on 1 January 2027. The way to read the Bill today, in late 2026, is as law enacted but not yet in force on the consumer-facing side. The substantive prohibition is older and already active: no Australian licence exists for the activity any “VPN-friendly” casino offers.

What can be licensed is narrower than most offshore marketing pages suggest. Wagering on races and sport placed before the event is licensable. Lotteries and keno are licensable. Casino-style games and in-play betting are not. In practice, most of Australia’s licensed online bookmakers are licensed in the Northern Territory: the Northern Territory Racing and Wagering Commission regulates 52 online bookmakers, including Sportsbet, Bet365 and Ladbrokes, runs without full-time staff, and meets once a month in Darwin. The Commission is the de facto national regulator for online wagering, for the historical reason that the Territory’s tax regime attracted the operators there; it is not, despite the volume of brands on its books, a regulator with the headcount to look closely at any one of them. The boundary of what the law actually permits is the first thing any VPN claim sits on top of, and it is a boundary that runs through the marketing rather than around it.

The minimum age for any gambling activity in Australia is 18. Credit cards, credit-related products and digital currency are banned as payment for licensed online wagering, with effect from 11 June 2024 and penalties for breaching operators of up to A$247,500. The legal deposit routes that remain are debit card, bank transfer, PayID/Osko and BPAY. A site asking an Australian for a credit card, or for a crypto deposit at the cashier, is operating outside the Australian rules from the very first transaction.

What the ACMA actually does, and what blocking looks like

The ACMA investigates complaints, issues formal warnings under the Interactive Gambling Act, and directs Australian internet service providers to block illegal sites. Two numbers tell the bulk of the story. By the reporting in June 2026, a total of 1,751 illegal gambling and affiliate marketing websites had been blocked since the first blocking request in November 2019 — a run of just over six and a half years. In the same period, more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017. The 1,751 figure is the regulator’s own running total; the 230 is the count of services that have chosen to withdraw rather than continue to be reachable through an Australian ISP. The headline is that blocking, over the period it has been used, has not been a marginal tool. It has been the dominant tool.

A single recent round, reported on 26 June 2026, asked ISPs to block 12 more sites in one direction: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz, Spinrise, Vinyl Casino and Wildsino. Twelve at a time, on a regular cadence, over six and a half years. The arithmetic the page can offer from those two figures is the closest the page comes to a calculation, and it earns its place:

• Total blocked sites to date: 1,751.
• Months from the first blocking request (November 2019) to the report date (June 2026): roughly 79.
• Average blocking rate across the period: roughly 22 sites per month, presented as a band rather than a precise figure because individual months vary widely — some rounds block a handful, some block none, and a few block several dozen. The steady-state position is a sustained ~20–25 sites per month over the life of the regime.

That is not a forecast. It is what the enforcement rhythm has actually looked like, expressed as a band so the reader does not read a single number as a promise.

The H2 Gambling Capital 2025 estimate puts Australians’ annual losses to illegal gambling sites at about A$3.9 billion, and tracks the share of gambling going through legal channels falling from 74% in 2021 to 64%. The two figures point in the same direction: a regulatory perimeter that has held on the licensed side, with a steady leakage of spend to the offshore side, and an enforcement tool that has slowed the leakage without closing the gap. A VPN does not change any of those numbers; it changes the path a reader walks to reach the sites those numbers count.

Why the regulator can warn, but rarely prosecute the player

The Interactive Gambling Act targets the provider of an interactive gambling service, not the customer using one. The individual Australian who plays on an offshore site is not prosecuted. What the regulator can do is make the site harder to reach: the formal warning, the ISP block, the eventual withdrawal by the operator itself. What the regulator cannot do is recover a balance if the offshore site refuses a withdrawal, arbitrate a complaint about a voided bonus, or step in if the offshore operator simply stops paying. Australian consumer protection stops at the licensed boundary, and the boundary is the same line that defines what the VPN tunnel crosses.

That is the trade the tunnel is offering, stated honestly. Privacy from the casino’s IP-detection, yes. A change in legal status, no. A complaints route if something goes wrong, no.

The licensed side and what BetStop and the Helpline do

The licensed Australian side has tools that simply do not exist offshore. BetStop, the National Self-Exclusion Register, has been live since August 2023 and binds every Australian-licensed online and phone wagering service. A punter who registers with BetStop is excluded from licensed wagering platforms across the country. The mechanism is mandatory for licensees; it is a structural answer to the question of whether a person can keep themselves out. It has no effect at all on an offshore casino, which is not a participant in the register and has no obligation to consult it.

The National Gambling Helpline is 1800 858 858 — free, 24/7, with online chat at Gambling Help Online. The line is for the person, the family, the friend. It is not for the operator. It is the one Australian phone number that an offshore site cannot put on its support page without contradicting itself.

The third protective layer is the bank’s gambling block. Westpac’s block works at card level: it refuses authorisation of transactions registered under the merchant category code “Betting/Casino Gambling” on eligible personal credit and debit cards. ANZ’s block, activated in the ANZ app, also blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card, not just the physical card. Commonwealth Bank lets a customer apply a gambling lock to eligible cards via the CommBank app, with the same caveat — automatic, but not a guarantee. ANZ’s block has a 48-hour cooling-off period before it can be removed once set, which is itself a design choice about how reversibility should feel. None of these are foolproof. All three banks warn that not every gambling transaction will be blocked, and that some non-gambling transactions may be blocked in error. What they do, taken together, is raise the friction at the point of payment, on the Australian side of the tunnel, in a way an offshore cashier is not set up to work around.

Payment rails and why the tunnel does not move them

A VPN changes what the casino sees. It does not change what an Australian bank is willing to settle. The rails themselves are worth knowing, because the offshore cashier either accepts them, refuses them, or routes around them in ways the reader can read before depositing.

PayID and Osko. With Osko, a bank transfer between participating Australian banks arrives in under a minute, 24/7 including weekends, addressed either to a BSB and account number or to a PayID. Paying to a PayID shows the name of the account holder before the transfer is sent — Australian Payments Plus warns that being asked to transfer money to a PayID on an illegal gambling site almost certainly means a scam site. PayID-based instant transfers are available at over 100 Australian financial institutions, and more than 25 million PayID identifiers had been registered on Australia’s New Payments Platform as of April 2025. The platform became accessible to the public on 13 February 2018 and is owned by New Payments Platform Australia Ltd, whose 13 shareholders include the Reserve Bank of Australia and the major banks. Its monthly outage budget is capped at two minutes. The rail is fast, by design; that is also what makes it risky when the receiver is unlicensed.

BPAY. BPAY is a bill-payment service accessed through online banking, where the payer enters a Biller Code and a Customer Reference Number printed on the bill. It has operated in Australia since 1997, is available through over 150 banks and financial institutions, and is offered by over 95,000 businesses. It is run by Australian Payments Plus, alongside PayID and Osko, and is owned equally via parent company Cardlink Services Limited by ANZ, Commonwealth Bank, National Australia Bank and Westpac. The merger of BPAY Group, eftpos and NPP Australia under Australian Payments Plus was authorised by the ACCC in September 2021. It is the most Australian of the rails; offshore casinos rarely use it.

Apple Pay and the card networks. Apple does not charge fees to consumers for using Apple Pay; any surcharge comes from the merchant’s own card-processing fees, not from Apple. Transaction limits and PIN requirements for Apple Pay purchases are set by the card issuer or merchant, not by Apple. By the end of 2025, Apple Pay, Google Pay and Samsung Pay transactions collectively accounted for around 45% of all card payments in Australia by number. The Reserve Bank of Australia’s July 2025 review proposes removing surcharges only on eftpos, Mastercard and Visa card transactions, explicitly leaving American Express outside the scope of the proposed surcharge ban. American Express has issued cards and processed transactions itself since launching its first charge card on 1 October 1958, operating as a three-party scheme rather than the four-party model Visa and Mastercard use. The detail matters because, under the Interactive Gambling Act as amended in 2023, Australian-licensed online wagering services cannot accept payment by credit card or other credit-related products — a restriction that, depending on the issuer, constrains gambling use of linked digital wallets like Apple Pay as well.

AUSTRAC’s threshold. AUSTRAC’s threshold-transaction-report rule, which requires reporting of transfers of A$10,000 or more, applies only to physical cash; ordinary electronic bank transfers are not subject to that per-transaction reporting requirement, regardless of amount. That removes a popular piece of folklore from the calculation: a $10,000 PayID transfer does not, of itself, trigger a report.

A casino that takes PayID from an Australian, asks for credit-card deposits, or runs a cashier in cryptocurrency is signalling, in its deposit page, which side of the licence line it sits on. The tunnel obscures the IP address; it does not obscure the rail.

The promise the “VPN-friendly” label is selling

A casino advertises itself as VPN-friendly for three reasons, and the page is worth setting them out because none of them is the reason the marketing page claims.

The first is access. The casino’s IP-blocking script reads the IP address a connection comes from and refuses the connection if the address sits in a country it has decided not to serve. A VPN substitutes a different IP address for the player’s actual one, so the casino’s server sees a connection from, say, Frankfurt or Toronto instead of from Sydney. This is the technical core of the offer. It works against the casino’s own block, which is why casinos that advertise as VPN-friendly sometimes disable their own IP-block for the country the tunnel exits from, or simply do not run one for any country.

The second is continuity. A punter who travels — a Sydney resident in Bali for a month, a Brisbane resident in London for a work trip — finds their casino account suddenly inaccessible from the new IP range. The VPN gives them a stable point of origin in a country the casino still serves, so the account is reachable. This is the consumer-side use case that is legitimate in the sense that it does what it says; it does not change the legal position of an Australian who uses it to keep gambling while travelling, but it does explain why the feature exists.

The third is privacy. The casino sees an exit-node IP rather than the player’s home IP, which means the player’s home address is not in the casino’s connection logs in the obvious way. This is a real benefit if the casino’s logs are later subpoenaed or leaked. It is not a benefit against the Australian regulator, because the ACMA does not need the casino’s logs to enforce the prohibition; it acts against the operator, not the player.

A casino that “allows VPN use” is technically indistinguishable from a casino that does not check. The difference, where one exists, is in the marketing page: a casino that knows it has Australian customers and wants more of them will tell Australian-facing affiliates that it tolerates the tunnel. A casino that does not know, or does not care, will not run the IP-block on Australian ranges in the first place. There is no protocol difference. There is a posture difference. The reader should not read “we allow VPNs” as a security feature the casino has engineered; it is a marketing line describing a hole the casino has chosen not to close.

What using a VPN does not change

The list is shorter than the marketing suggests, and more important.

It does not change the law. The Interactive Gambling Act prohibits the provision of interactive gambling services to a person in Australia. The act of sitting in Australia, opening a tunnel, and playing online casino games is the activity the Act targets. The casino’s offshore licence does not bear on whether the activity is lawful for the person doing it; the activity is unlawful on the Australian side, regardless of what the casino displays at the bottom of its homepage.

It does not put the casino under Australian consumer law. If a withdrawal is refused, a bonus is voided, an account is closed with a balance still on it, the Australian Financial Complaints Authority has no jurisdiction. The casino’s own regulator — usually Curaçao or Anjouan — has a complaints mechanism in name; in practice it has not historically resolved disputes with Australian consumers at a useful rate. The reader who chooses the offshore side is choosing to step outside the Australian consumer protection frame.

It does not connect the punter to BetStop. The National Self-Exclusion Register binds Australian-licensed operators only. A punter who has registered with BetStop and then opens a tunnel to an offshore casino is not stopped by the register; the offshore casino has no obligation to check it. The protection BetStop offers is real, and it is bounded by the licence line.

It does not change the bank’s position on gambling blocks. ANZ, Westpac and Commonwealth Bank’s gambling locks run on the merchant category code and on the card itself, not on the IP address the casino sees. A tunnel that ends at a Frankfurt exit node and a deposit attempted through the player’s regular Australian debit card still hits the bank’s block in the same way as a direct connection. The block is at the rail, not at the casino.

It does not insulate the balance from a blocking round. The next ACMA blocking request, of which there has been one a month on average across the life of the regime, can drop the casino’s domain from Australian ISPs overnight. The player’s account balance is held offshore, with no recourse to recover it through any Australian body, and is at the operator’s discretion if the domain goes dark.

Eleven ACMA actions against brands the reader may already see advertised

What follows is a side-by-side look at eleven brands the ACMA itself has acted against, in the order the regulator’s warnings place them. The page is not a recommendation. The columns are the matters a reader who is still weighing the offshore side might want beside each other: the brand, the ACMA action, the operator named in the warning, and what the publicly available listings say about each brand’s support for an Australian reader. Where research carries no listing data, that column reads as a dash, and the reader is meant to read the dash as “the public record on this is not what the marketing page implies”.

A reader should hold two things in mind at the same time looking at the table. The first is that every brand below has had a formal warning issued over it by the ACMA — the regulator’s own act, under the Interactive Gambling Act, against a brand the regulator has identified as providing prohibited services to Australians. The second is that the page has not ranked these brands. There is no ordering by quality, safety, or value. There is only the chronological and operator-led ordering the ACMA’s warnings impose, which is the only ordering the available facts actually support.

Every row above is a brand the regulator has acted against. The “listings only” tag in the fourth column is a deliberate choice about how the page reports each brand’s support infrastructure: where research turns up mentions in third-party listings rather than direct operator claims, the page writes the listings as the listings rather than as fact about the operator. A dash in that column is not a positive claim that the brand has no support; it is the page declining to attach a support claim the underlying material does not back.

RocketPlay

Pulsup Ltd received a formal warning in March 2026 over Rocketplay.com.au. An earlier warning to Dama N.V., in May 2022, also covered Rocketplay alongside five other Dama brands, so the brand has been on the regulator’s record for nearly four years at this point. The third-party listing record on Rocketplay’s support for Australian-facing players is thin: the only source research carries is a single gambling-industry listing page, which the page quotes as the listings, not as the operator’s own statement. The brand is the most recently warned of the eleven on the page, and the warning is the freshest data point the reader has.

Level Up Casino

Dama N.V. was warned in May 2022 over six casino brands at once, of which Level Up is one. The 2022 batch — Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos — was the ACMA’s first major escalation against the Dama group, and it set a pattern the regulator has repeated against other operators since: a single warning covering a cluster of brands under one corporate umbrella. The support record for Level Up is the most diffuse of any brand on this page; what little research carries comes from a Westpac reference rather than from a casino-facing directory. The page quotes it as it sits.

Woo Casino

Dama N.V. was warned again in March 2025, this time specifically over Woo Casino. That makes Woo the first Dama brand to be re-warned individually after the 2022 cluster warning — an indicator that the operator did not treat the 2022 warning as the end of the matter. The page carries no listing data on Woo’s support infrastructure, and notes this absence simply as a gap in the record rather than as a defining feature.

Spirit Casino

Dama N.V. was warned in May 2025 over Spirit Casino, two months after the Woo Casino warning. The pattern of repeat warnings against a single corporate group is, at this point, established. The public record holds no specific data regarding Spirit’s support infrastructure for Australian-facing players, so the page makes no claim about it.

National Casino

Consolutetish S.R.L. was warned in July 2025 over National Casino. The brand had not previously been named in an ACMA warning, which makes it a fresh entry on the regulator’s record rather than a repeat. The support record for National is the most Australian-facing on the page: research carries references from the ACMA’s own materials, from AUSTRAC, and from BetStop. The page writes those as references that exist, not as endorsements of the brand.

Bizzo Casino

Consolutetish S.R.L. was warned in July 2025 over Bizzo Casino, in the same round as the National Casino warning. Bizzo’s record is older than National’s: TechSolutions (CY) Group Limited and TechSolutions Group N.V. were warned over the brand back in 2022, so the brand has been on the regulator’s record through two separate corporate owners in three years. The support record on Bizzo is a single gambling-industry listing, the page’s thinnest reference set.

Ignition Casino

Bamboo Media was warned in July 2025 over Ignition Casino. Ignition is the brand most familiar to Australian readers from the older offshore market, and the warning is the first ACMA action the page has on record over the brand. The page notes that no listing data is available for Ignition’s support infrastructure, so no claim is made about it.

Instant Casino

EOD Code SRL was warned in February 2025 over Instant Casino. The support record is unusual: research carries references from Ecopayz.com and Payid.com.au, which makes Instant the brand on this page whose cashier-side ecosystem has been examined by payment-rail listings rather than by casino directories. The page quotes that distinction without claiming it adds up to anything about safety.

Jackbit

Ryker B.V. was warned in April 2026 over Jackbit and CasinOK in the same action. Jackbit is the second most recent brand on the page, and the warning is fresh. The page makes no representation about Jackbit’s support infrastructure, as no verifiable public data exists to describe it.

Casino Intense

Sterplay Holding Ltd was warned in April 2025 over Casino Intense. The support record is the most regulator-and-industry-facing on the page: research carries references from AUSTRAC, BetStop and the gambling-industry listings. Casino Intense is the brand on this page whose warning was the freshest data point available when the regulator published it.

Sky Crown

Hollycorn N.V. was warned over Sky Crown and Blue Leo together, in September 2022. The warning is the oldest on the page and covers two brands at once — the first of the ACMA’s cluster-warning pattern, and the one the Dama warnings of 2022 took their shape from. The page carries no listing data on Sky Crown’s support infrastructure for Australian-facing players, and reports that absence as absence.

A close read of the patterns in the table

Three patterns the table makes visible are worth naming, because they are what the reader should take away rather than any individual row.

The first is that the ACMA’s enforcement is increasingly cluster-shaped. Six of the eleven warnings here cover a brand that the regulator had previously warned under a different operator name, or that sits in a multi-brand warning covering a single corporate group. The Dama N.V. cluster of 2022 (six brands), the Hollycorn cluster of 2022 (two brands), the Consolutetish cluster of 2025 (two brands), and the Ryker cluster of 2026 (two brands) are the visible shape of a regulator that has learned to act against corporate umbrellas rather than individual skins. The reader who is reading the table to find a brand the regulator “has not got to yet” is reading the wrong column.

The second is that the listing-side support for an Australian-facing player is, on the evidence the page has, mostly thin. Of the eleven brands, only six carry any listing record at all, and the listings are split between gambling-industry directories, payment-rail pages and regulator-side reference pages. None of the listings is a direct statement by the brand about its Australian-facing support. The page does not read that as a finding about any one brand; it reads it as a finding about the category. The category of “VPN-friendly casinos accepting Australians” is, in the public record the underlying research has access to, a category that is not described in detail by the operators themselves. The reader is buying what the marketing page describes, not what a regulator-side or payment-rail page has independently verified.

The third is that the dates of the warnings are not clustered at the start of the period. They are spread from September 2022 through April 2026, with no quarter dominant. The ACMA is acting in steady-state, not in occasional sweeps. The reader who treats the regulator’s actions as a one-off event is treating them as something the data does not support.

What the data says about the legal-versus-illegal split of Australian gambling

H2 Gambling Capital’s 2025 estimate of A$3.9 billion in annual losses to illegal gambling sites, paired with the fall in the legal-channel share from 74% in 2021 to 64%, describes a market that has held its licensing perimeter while losing spend to the offshore side. The page holds the figure alongside the ACMA’s enforcement record rather than next to any operator: 1,751 blocked sites since November 2019, 230 services withdrawn since 2017, and a steady ~20–25 sites blocked per month over the life of the regime.

What that combination shows is a market where the legal side is intact, the offshore side is reachable, and the regulator’s principal lever is friction at the network edge rather than prosecution of the player. A VPN reduces friction at the network edge. The data does not show it reducing the legal exposure.

What the data does not carry

A reader who wants this page to answer “which offshore casino is safest?” or “which VPN-friendly casino pays out fastest?” will leave unsatisfied, and that is the page’s position rather than its failure. The public material research has access to does not support those questions. It supports what is supported: the regulator’s own actions, the operator names the regulator publishes, the payment-rail behaviour the rail operators publish, and the responsible-gambling tools the licensed Australian side operates. A reader who wants a safer wagering environment in the legal sense will find it on the licensed Australian side, where BetStop, the Helpline and the bank’s gambling block are real protections with real coverage. A reader who is choosing the offshore side has chosen to step outside those protections, and a page that presented the offshore side as a comparable alternative would be mis-describing what the offshore side is.

Closing the page: what the reader actually decides

A reader who has read this far and is still weighing the offshore side has the information needed to weigh it honestly. The pieces of that information sit in this order: the Interactive Gambling Act prohibits the activity, the ACMA enforces through warnings and blocking, the bank’s gambling block is on the rail rather than on the casino, BetStop does not reach the offshore side, and a VPN does not move any of these. The H2 figure of A$3.9 billion in annual losses to illegal sites is the spend the regulator’s perimeter has not been able to recapture. The 1,751 blocked sites are the regulator’s principal answer. The 11 brands the ACMA has warned are the brands the regulator has decided are inside the prohibition.

The closing position the page takes is that the cost of the offshore side is not the wagering loss, which is the same on both sides of the licence line. The cost is the absence of the Australian consumer frame on the offshore side: no BetStop, no AFCA recourse, no Australian bank’s gambling block to lean on, no balance protected by the ACMA’s blocking regime. The VPN changes where the casino sees the player coming from. It does not move any of those protections across the line.

Frequently asked questions

Why does a casino specifically advertise itself as “VPN-friendly”?

Because the casino has decided it wants the player the IP-block would otherwise send away. The label tells an Australian-facing affiliate that the brand will not run its geo-block on Australian ranges, or that it has explicitly tested the popular consumer VPNs and left them alone. It is a marketing posture, not a security feature — there is no engineering difference between a casino that “allows” VPNs and one that does not run the check.

Does using a VPN make the activity legal for an Australian?

No. The Interactive Gambling Act 2001 prohibits the provision of online casino games, online pokies and in-play betting to a person in Australia. The activity is unlawful on the Australian side of the tunnel regardless of what the casino’s offshore licence says. The VPN changes the IP address the casino sees; it does not change the legal status of the person playing.

What does the VPN change, technically, about what the casino sees?

The casino’s server reads the IP address the connection presents and refuses or accepts the session based on that. With a VPN, the connection exits through a server in another country and the casino sees that country’s IP range instead of the player’s home Australian one. The change is at the network layer; the casino still sees the account, the balance, the wagering history and the cashier.

What is the actual risk of using a VPN to reach a casino the ACMA has warned before?

The risk is that the casino is one blocking round away from being unreachable from Australian ISPs, with a balance still held offshore. The ACMA does not protect that balance, AFCA has no jurisdiction, and the casino’s own regulator has historically not resolved Australian disputes at a useful rate. The 1,751-blocked-sites figure is the rate at which this happens across the category.

Is a casino that “allows VPN use” different from one that just doesn’t check?

Technically no. The difference is in the marketing posture. A casino that knows it has Australian customers and wants more of them advertises the tolerance; a casino that does not bother with an IP-block on Australian ranges does not need to advertise anything. There is no protocol difference between the two cases.

What should a reader weigh before treating a VPN as a safe workaround?

The reader should weigh the same four things the licensed side offers against the offshore side’s absence: BetStop coverage, AFCA recourse, the bank’s gambling block, and the ACMA’s balance protection. The licensed Australian side offers all four; the offshore side, accessed through a tunnel or not, offers none of them. The VPN changes the path, not the protections.

Headings on this page