NordVPN auto-renewal lawsuits have multiplied into a legal siege. The latest complaint, filed in Virginia in April, marks the fourth major class action against Nord Security and its subsidiaries, each alleging the company deliberately obscures cancellation options and misleads customers about subscription terms.
Key Takeaways
- Virginia lawsuit filed April 2025 alleges Nord Security violates consumer protection laws by hiding mobile app cancellation options and charging users 14 days early.
- NordVPN faces four active class actions across New York, California, North Carolina, and Virginia courts, seeking damages up to $100 million.
- Allegations include dark pattern UI design—hidden grey text, complicated menus, multiple confirmations, and 15-minute email verification delays.
- CFPB issued warning in 2023 about auto-renewal deception, citing misleading terms, lack of informed consent, and difficult cancellation as industry-wide issues.
- No judgments against NordVPN to date, though refunds have been issued to at least two plaintiffs.
The Virginia Case Adds Fresh Allegations to Mounting Legal Pressure
The Virginia lawsuit, brought by plaintiff Sasgen, accuses Nord Security of violating the Virginia Consumer Protection Act through a constellation of deliberate deceptions. The complaint alleges the company lacks cancellation options within its mobile app, fails to provide accurate charge notices, charges subscribers 14 days before renewal, and obscures material changes to subscription terms. These allegations mirror patterns described in earlier suits but target mobile-specific cancellation gaps—a vulnerability that affects millions of app-based users.
What makes this filing significant is its timing. The Virginia case arrives as the fourth major complaint against NordVPN, suggesting a pattern rather than isolated customer grievances. The sheer number of simultaneous lawsuits across different jurisdictions indicates that either NordVPN’s practices are genuinely widespread or that the company’s cancellation experience has become so frustrating that it triggers litigation at scale.
Dark Patterns and the CFPB Warning That Preceded Them
The legal complaints describe what consumer advocates call dark patterns—interface design choices engineered to trap users. According to the lawsuits, NordVPN employs hidden grey text, over-complicated menu structures, multiple confirmation dialogs, and a 15-minute email verification delay to discourage cancellations. These tactics align precisely with the Consumer Financial Protection Bureau’s 2023 warning about auto-renewal deception, which identified three core violations: misleading subscription terms, insufficient informed consent, and difficult cancellation mechanisms.
The CFPB warning itself was not targeted at NordVPN alone—it reflected industry-wide scrutiny of how subscription services, particularly VPNs, exploit the friction between signing up (frictionless) and canceling (deliberately arduous). Most VPN providers use similar auto-renewal systems, yet NordVPN has become the focal point of litigation, suggesting either more egregious implementation or more aggressive enforcement.
Prior Lawsuits Paint a Picture of Systematic Deception
The Virginia case does not stand alone. A New York federal court complaint by plaintiff Kandeh alleges that Nord Security intentionally makes subscriptions difficult to cancel and fails to provide adequate notice of material changes, seeking over $50 million in damages. A nationwide class action filed in March through the Northern District of California and Western District of North Carolina targets similar deceptions across multiple product lines—NordVPN, NordPass, NordLocker, and NordLayer. A Southern District of New York case from March raises parallel allegations, while a July 2024 suit alleged the company retained $131.76 from a plaintiff despite their cancellation request, citing shady 30-day money-back practices.
Across these suits, the defendants are named as Nordvpn S.A., Tefincom SA (doing business as NordVPN), Nordsec B.V., and Nord Security—corporate structures that suggest the company has layered its operations to complicate liability. To date, no judgments have been rendered against NordVPN in any of these cases, though refunds have been issued to at least two plaintiffs, signaling that settlements or preliminary relief may already be in motion.
How to Actually Cancel NordVPN if You’re Stuck
If you are trapped in an auto-renewal subscription, NordVPN’s official support page provides a five-step cancellation process: log in to your Nord Account, open the billing tab, click cancel next to auto-renewal, select cancel auto-renewal again, and your status will change to off. The fact that this process requires multiple confirmations and navigation through a billing interface—rather than a single prominent button—is itself part of the allegation. Simpler cancellation mechanisms are technically possible; the lawsuits argue that NordVPN chose complexity deliberately.
What Happens Next?
Class actions move slowly. The New York suit seeks $50 million-plus, and other complaints pursue damages up to $100 million, but these figures represent aspirational claims rather than confirmed liabilities. NordVPN has not acknowledged wrongdoing, and a company spokesperson told TechRadar that auto-renewal practices are clear and straightforward, with charge reminders sent to customers. Whether courts agree remains to be seen.
The legal firm Wittels McInturff Palikovic, which filed the nationwide class action, has pursued similar suits against other VPN providers, none of which have succeeded to date. This track record suggests that even with plausible allegations, VPN auto-renewal cases face significant hurdles—consumer protection law varies by state, and proving intentional deception requires evidence beyond mere friction in the cancellation flow.
Is NordVPN the only VPN with auto-renewal issues?
No. Most VPNs on the market use similar auto-renewal systems. NordVPN has become the litigation target partly due to scale—it is one of the largest VPN providers globally—and partly because its mobile app cancellation experience may be more cumbersome than competitors. However, the lawsuits suggest the problem is industry-wide, not unique to NordVPN.
What is a dark pattern in subscription services?
A dark pattern is an interface or process deliberately designed to manipulate users into actions they would not otherwise take. In NordVPN’s case, the lawsuits allege dark patterns include hidden cancellation buttons, multiple confirmation steps, delayed email verification, and obscured billing language—all intended to discourage cancellation and retain paying subscribers.
Can I get a refund if I was charged after canceling?
If you believe you were charged improperly after canceling, document the charge and contact NordVPN support with proof of cancellation. At least two plaintiffs have received refunds, suggesting the company will respond to documented cases. However, for broader relief, you may need to wait for class action settlement or join one of the pending lawsuits if you meet eligibility criteria.
The NordVPN auto-renewal lawsuits reveal a tension between growth and ethics in the VPN market. Auto-renewal maximizes recurring revenue, but when cancellation becomes so difficult that it triggers four simultaneous class actions, the business model has crossed from clever design into potential fraud. Whether courts agree will determine whether NordVPN pays damages or whether the company’s playbook remains legal—and whether other VPN providers take notice.
This article was written with AI assistance and editorially reviewed.
Source: TechRadar
