Streaming & VPN 14 min read

Netflix Says You're Using a VPN and You're Not: Why It Happens (and When You Can't Fix It)

Netflix says you're using a VPN but you aren't? What M7111-5059 and E106 actually flag, the 60-second test that finds it, and why the fix is often your ISP's.

September 9, 2026 Updated September 10, 2026
A hand pointing a remote at a living room TV showing Netflix, the setup where error M7111-5059 or E106 appears

Overview

You have never installed a VPN. You are sitting in your own living room, on the connection you pay for every month, and Netflix has decided you are a proxy user. The screen says "You seem to be using an unblocker or proxy. Please turn off any of these services and try again", usually with code M7111-5059 or M7111-1331-5059 underneath it, and there is nothing to turn off. Newer devices show the same refusal as E106, with the wording "You seem to be using a VPN or proxy".

Which code you see depends on where you are watching, and it does not change the diagnosis or any fix on this page. Netflix's help page for this error now names only E106, and its old "Netflix Error M7111-5059" article redirects to that same page (help.netflix.com, checked 10 September 2026). Netflix has not published that the two codes are the same thing — it has simply pointed one at the other, which is the closest thing to a statement you will get.

Every guide you find tells you to disconnect the VPN you do not have, clear your cache, and restart your router. Then it sells you a VPN.

Here is what is actually happening, in Netflix's own words to internet providers: "we are flagging the IP address for potential VPN or proxy misuse". Not your device, not your account — the address. Netflix does not publish what that judgement is based on, so treat any page that tells you precisely how it decides as guessing. What is documented is the shape of it: the address is the thing being judged, and the address is not yours. It may have belonged to a hosting company last year. Your provider may have registered it badly. It may sit in a range that changed hands and nobody told the registry. None of that is visible to you, and most of it is not fixable by you.

There is no VPN recommendation on this page

Your address is wrongly classified as an anonymiser. A VPN moves you onto an address that genuinely is one — which is the category detected most reliably of all. It is the wrong tool for this specific problem, and we would rather say so than sell you one.

Who this guide is for

People who get the proxy or unblocker error on their normal home internet, with no VPN, no proxy and no Smart DNS running. If you are running a VPN and it stopped working, that is a different problem with a different answer — why SmartDNS never works with Netflix covers it. If you are trying to reach another country's catalogue on purpose, start with the VPN for Netflix setup and library guide instead.

Key Takeaways

  • The error means your IP address is classified as a proxy, not that Netflix caught you doing something. No VPN needs to be involved.
  • The one-minute test: try Netflix on your phone using mobile data, with Wi-Fi off. If it works there and fails at home, your home IP address is the problem — and that changes everything about what to do next.
  • Netflix's own instructions to internet providers ask them to register the IP address correctly with the Regional Internet Registry, which it says increases the chances of being listed correctly — and warns it can take "2 weeks or longer" for Netflix's systems to pick that up. It stops short of promising a fix.
  • If it fails on one device but works on others, it is that device's DNS setting — leftover Smart DNS entries and hardcoded resolvers are the usual culprits, and that one really is a five-minute fix.
  • If you are on the ad-supported plan, check that first. Netflix does not support VPNs on that tier at all, which changes what is even possible.
  • A VPN does not fix a false positive. It replaces a residential address that is wrongly flagged with a datacenter address that is correctly flagged.
  • Netflix Household and the proxy block are two different systems with two different fixes. Getting them mixed up is why so much advice fails.

The uncomfortable part, up front

For the most common version of this problem, the repair happens at your ISP and takes weeks, not minutes. What you can do in the next sixty seconds is work out which version you have — two of the causes are genuinely fixable at home in a few minutes, and knowing which one you are looking at is the whole game.

Start Here: The 60-Second Diagnostic (Works on Mobile Data?)

Answer these in order. The first one that gives you a clear answer tells you which section below to read, and you can skip the rest. The whole thing rests on one trick — using mobile data instead of Wi-Fi puts your phone on a completely different network path, which separates "my address is flagged" from "my account is the problem" in about ten seconds.

The one test worth running first

Wi-Fi off, mobile data on, open Netflix. If it works there and fails at home, your home IP address is the problem — and that single result rules out most of the internet's advice.

Which version of this problem do you have?

Answered0 of 4
1

Turn Wi-Fi off on your phone and open Netflix on mobile data.

Mobile data uses a completely different network path. This is the single most useful test available, and almost nobody runs it.

2

Try a second device on the same Wi-Fi — a laptop browser is ideal.

A laptop browser uses the operating system's DNS rather than its own, so it isolates device-level settings.

3

Open fast.com and check the reported country.

This separates a geolocation problem from a reputation problem — two different things to tell your ISP.

Open fast.com

4

Do you run an IPv6 tunnel broker?

If you do not know what a tunnel broker is, you do not have one. Skip this step.

That is the diagnostic. Four questions, and it separates a five-minute fix from a two-week one. Here is the same map as a table, in case you already know your symptom:

Which cause do you have?
The tell CauseCan you fix it?How long
Works on mobile data, fails on home Wi-FiISP IP registrationNo — ISP must act2 weeks or longer
Fails on one device, works on othersThat device's DNSYes5 minutes
Fails everywhere including mobile dataCheck your planYes10 seconds to check
You run an IPv6 tunnel brokerTunnel address blockYes — test it10 minutes
4G/5G home broadband or satelliteCarrier gateway addressSometimes — ask providerVaries

The five causes, and what each one asks of you

Your ISP's IP address registration

Not yours to fixMost common2 weeks or longer after your ISP acts

The tell: Works on mobile data, fails on home Wi-Fi

Netflix has flagged the address for potential VPN or proxy misuse. Its advice to providers is to check the range is properly registered with the Regional Internet Registry — which it says increases the chances of being listed correctly, not that it clears the flag.

Ask your ISP to verify the IP address assigned to you is correctly registered with the Regional Internet Registry and that its geolocation reflects the country it is deployed in. Give them the address and country from fast.com plus the error code, and ask them to raise a ticket with Netflix Open Connect if that does not resolve it.

Read the full section

A single device's DNS settings

You can fix thisCommon5 minutes

The tell: Fails on the TV, works on a laptop on the same Wi-Fi

A leftover Smart DNS entry from an old trial, or an app with a hardcoded resolver that ignores what your router hands out.

In that device's own network settings — not the router's — set DNS back to Automatic, restart the app, retest.

Read the full section

The ad-supported plan

You can fix thisCheck first10 seconds to check

The tell: Fails everywhere, including mobile data

Netflix does not support VPNs on the ad-supported tier at all, which changes what the rest of the troubleshooting can achieve.

Confirm which plan you are on before doing anything technical.

Read the full section

An IPv6 tunnel broker

You can fix thisRare, and historical10-minute test

The tell: You knowingly run Hurricane Electric or a similar tunnel

Documented on NANOG in 2016 and solved on the Netgate forums through 2016-2017. Reported lifted from January 2022 onward, with behaviour possibly varying by region. Current status unpublished.

Disable the tunnel for ten minutes and retest. Do not disable IPv6 on the strength of a 2016 article.

Read the full section

Mobile or fixed-wireless home internet

Not yours to fixOccasionalVaries

The tell: 4G/5G home broadband or satellite

Traffic leaves through carrier gateways whose addresses do not look like a fixed residential line. One reported case turned out to be a gateway provisioned on a business rather than residential account.

Ask your provider what account type your line is provisioned as. Carriers differ enormously — one provider's behaviour tells you nothing about another's.

Read the full section

The test that rules out most of the internet's advice takes about ten seconds.  via GIPHY

What This Netflix Proxy Error Actually Means

Netflix runs two separate enforcement systems, and they fail in ways that look identical on screen while needing opposite responses.

Netflix Household

Asks whether a device belongs to your home. It wants stability — the same external address turning up with the same devices on the same account. Its messages talk about devices and households, and its remedies are Netflix's own free verification flows.

The proxy block

The one producing M7111-5059 and E106. It asks whether an address is an anonymiser. It does not care where your device sits — it cares who owns the address range and how that range has been catalogued.

Netflix establishes a Household from IP address, device IDs and account activity (help.netflix.com, checked 9 September 2026). The proxy block is a reputation check on a number, run against classification data, and it happens before your household is ever considered.

Two systems, two different fixes
  Netflix Household The proxy block
What it asksDoes this device belong to your home?Is this address an anonymiser?
What it readsStability — same address, same devices, same accountReputation — who owns the range, how it is catalogued
Typical messageDevice / household wording"Unblocker or proxy" / "VPN or proxy", M7111-5059 or E106
The fixNetflix's own free verification flowsCorrecting the address classification at your ISP
Does a VPN help?No — it makes it worseNo — it swaps a wrongly flagged address for a correctly flagged one

The full anatomy of that split is in why SmartDNS never works with Netflix , and it is worth reading if you want the mechanism rather than the remedy. For this guide, one consequence matters.

The reason the standard advice fails

The proxy block is decided by data about your IP address that neither you nor Netflix's support staff can see or edit. Nothing you change on the device touches it.

Your ISP's IP Address Is the Problem

This is the most common cause and the least discussed one, and Netflix has documented it — just not on a page anyone reads.

Netflix's help article for subscribers tells you to check your location on fast.com, then contact your provider with the country and address it reports (help.netflix.com, checked 9 September 2026). That is as far as most people get, and it reads like a brush-off.

The other half of the instruction lives in the documentation Netflix gives to internet providers. Netflix describes the situation in its own words — "we are flagging the IP address for potential VPN or proxy misuse" — and tells providers that to increase the chances that your IP addresses are correctly listed with us, they should ensure those addresses are properly registered with their Regional Internet Registry, the bodies that allocate IP address space. If the addresses came from an upstream provider, that upstream has to request the change.

Read that phrasing carefully, because it is weaker than every summary of it you will find, this one included until we read the page. Netflix does not say registration is what its detection consults, and it does not promise that fixing the registration lifts the flag. It says correct registration improves the odds of being listed correctly. That is the whole of the documented remedy.

Netflix's instruction to internet providers

Providers are asked to ensure subscriber addresses are properly registered with their Regional Internet Registry, and told that it can take "2 weeks or longer" for Netflix's systems to discover registry allocation changes. That single line explains why restarting your router does nothing and why nobody can give you a same-day fix.

Netflix Open Connect partner documentation, checked 9 September 2026 — read it yourself.

Read that back, because it answers what the support scripts do not

Why can't I fix it?

Because every lever Netflix documents sits with your provider or its upstream, not with you. You are not a party to the registration Netflix asks them to correct, and Netflix does not publish what its detection actually reads.

Why didn't restarting my router work?

It might, if you happened to draw a clean address from the pool. If the whole range is misregistered, every address in it has the same problem.

Why did it start suddenly?

Address ranges get reassigned. One reported case began right after a local outage and a modem restart — the connection came back on a different address, and the new one was flagged.

Why does my ISP blame Netflix and Netflix blame my ISP?

Because the work Netflix points them to is an administrative correction at a registry, which neither front-line support team has a script for.

What to say to your ISP

Do not ask them to "fix Netflix". Ask them to verify that the IP address assigned to you is correctly registered with the Regional Internet Registry, and that its geolocation data reflects the country it is actually deployed in.

Give them the address and country from fast.com and the error code. That phrasing gets you past the reboot script, because it describes a task their network team recognises.

If registration turns out to be correct and the flag persists, there is a documented next step and it is worth naming: Netflix tells providers to open a ticket with Netflix Open Connect, and tells providers without access to that ticketing system to start a live chat with a Netflix Customer Service representative. Asking your ISP to do that specific thing is more useful than asking again.

The same flag has a quieter symptom

Netflix's provider documentation ties two subscriber reports to the same IP flagging: the proxy or unblocker message, and content for your region simply not being available — a thin catalogue of worldwide-licensed titles, with no error shown at all. If your library has quietly shrunk rather than thrown a code, that is the same root cause presenting differently, and this section still applies.

Then be prepared to wait. Even when the correction is made, Netflix's own documentation puts the propagation at two weeks or more. Nothing you do at home shortens that.

And be prepared for it not to work at all. In the public support threads where subscribers have walked this path with major providers, the outcome is usually silence — escalated, then nothing. That is the honest state of this problem, and any guide promising you a reliable fix here is guessing.

When It's One Device and Not the Network

If Netflix fails on the TV but works on your laptop over the same Wi-Fi, stop thinking about your ISP. Your TV is resolving DNS somewhere your laptop is not. Two things cause this, and both are quick.

A leftover Smart DNS entry

If you ever tried a Smart DNS service — a free trial, a friend's recommendation, something you set up years ago to watch one thing — the DNS addresses may still be sitting in that device's network settings. Those addresses belong to unblocking services, which is exactly what Netflix classifies.

Set the device's DNS back to Automatic and the problem goes with it. Smart TVs and consoles are where these entries survive longest, because nobody thinks to look there.

A hardcoded resolver

Some streaming apps, particularly on Android TV and Chromecast devices, ignore the DNS server your router hands out and query Google's public resolvers directly.

That is why changing DNS on your router sometimes fixes a laptop and does nothing for the TV standing next to it. If a device is behaving differently from everything else on the network, this is usually why.

The five-minute version

Work through the device's own network settings rather than the router's. Set DNS to automatic, restart the app, and retest. If that clears it, you are done and none of the rest of this guide applies to you.

Check Your Plan First

Netflix's troubleshooting puts this second, ahead of almost everything technical, and it deserves the attention: VPNs are not supported on the ad-supported plan (help.netflix.com, checked 9 September 2026).

That matters even though you are not using a VPN, for one blunt reason. On the standard and premium tiers, "turn the VPN off and it works" is a real path. On the ad-supported tier there is no such path, because VPN use is not permitted on that tier by design. If you are on that plan and something in your network path looks like a tunnel to Netflix, you have fewer options — and every article telling you to install a VPN is telling you to spend money on something that cannot work for you.

Ten seconds, before anything technical

Check which plan you are on before you do anything else. It changes what the rest of the troubleshooting can achieve, and it is the one step on this page that costs you nothing to run.

The IPv6 Tunnel Case: Real, but Historical

Read the dates on this one

The IPv6 tunnel block was documented in 2016-2017 and reported lifted from January 2022 onward. Do not disable IPv6 because an article from 2016 told you to. If you run a tunnel, disable it for ten minutes and test — that is the only current answer available.

Both dates come from the same Netgate forum thread, checked 9 September 2026. Nobody has published the current status.

If you route IPv6 through a tunnel broker such as Hurricane Electric, your IPv6 traffic leaves from an address block registered to the tunnel provider, not to you. Your browser prefers IPv6 when it is available, so Netflix sees the tunnel's address, finds a block registered somewhere other than your home country, and treats it as a proxy. You are not hiding anything; the address genuinely does not belong to your house.

What actually happened, in order

  1. 2016Documented

    Network engineers described the mechanism on the NANOG mailing list: traffic leaving through a tunnel broker's address block, read as foreign or non-residential.

  2. 2016-2017Reproduced and worked around

    pfSense users reproduced and solved it on the Netgate forums. Every fix was a variation on forcing traffic back onto IPv4 — firewall rules, a static null route, or DNS returning no IPv6 answer for Netflix domains.

  3. Late 2021First reports of it clearing

    Comments on the best-known workaround guide report the block no longer applying, with the guide's author cautioning that behaviour may vary between Netflix's regional points of presence.

  4. January 2022Reported lifted

    In the same forum thread that documented the block, the original reporter wrote that Netflix and others were no longer blocking Hurricane Electric IPv6.

So: this was real, it was well understood, and the last public reports say it was lifted around four years ago. Whether it is still lifted where you live in 2026, nobody has published. You would be giving up working IPv6 to solve a problem that may no longer exist.

The test, not the article

Disable the tunnel for ten minutes, try Netflix, turn it back on. That takes less time than reading about it, and it is the only answer to this question that is current.

If you do not run a tunnel broker, none of this applies to you. Ordinary IPv6 from your ISP has never been shown to cause this.

Mobile and Fixed-Wireless Connections

Home internet delivered over a mobile network — 4G and 5G home broadband — turns up repeatedly in these complaints, and the reason is structural: that traffic leaves through carrier gateways whose addresses look nothing like a fixed residential line, and are classified accordingly.

The one fix nobody writes about

A subscriber's gateway had been provisioned on a business account rather than a residential one, and having the carrier switch it restored streaming. If you are on fixed-wireless home internet and nothing else in this guide fits, ask your provider what account type your line is provisioned as.

Two cautions

  • Carriers differ enormously, and one provider's behaviour tells you nothing about another's. In one documented case, a home connection failed while a mobile hotspot from a different carrier worked perfectly.
  • Satellite has the same structural issue for a related reason — the address is registered where the ground station is, which may be a different country from your dish. That is well understood among network engineers, but no current public reports pin it to any specific satellite provider, so treat your own testing as better evidence than anything written about it.

Four Things the Internet Gets Wrong About This Error

Each of these is repeated on dozens of pages. Each is either aimed at a different failure or describes a mechanism that cannot produce this one.

"Just change your DNS"

Streaming apps on Android TV and Chromecast query Google's resolvers directly and ignore what your router hands out, so a router-level change can fix a laptop and leave the TV untouched. Even the documented tunnel-era fix only half-worked — one user reported it restoring browsers while the desktop app still refused.

"It's CGNAT"

Offered everywhere, almost entirely by pages selling VPNs, with no first-person account or provider documentation behind it. It is also the wrong shape: CGNAT's real consequence is that inbound connections cannot reach you, which is why it breaks port forwarding. Netflix streaming is outbound.

"Turn off iCloud Private Relay"

Private Relay only covers Safari, DNS queries and insecure HTTP traffic. The Netflix app's traffic does not go through it at all. It can only matter if you are watching netflix.com in Safari.

"Disable your Pi-hole or AdGuard"

Network-wide DNS ad blockers genuinely do break Netflix, but the documented symptom is network error NW-2-5, not the proxy message. Different failure, different fix.

Why these keep circulating

Advice lists that fold NW-2-5 and M7111-5059 (or E106) together are copying each other rather than testing. That matters beyond Netflix, because other streaming services read the same signals and inherit the same bad advice about them.

Four of the most repeated fixes for this error are aimed at a different problem entirely.  via GIPHY

Why a VPN Is the Wrong Tool Here

Almost every page ranking for this error recommends a VPN, and the recommendation is backwards.

A VPN does not fix this

Your address is wrongly classified as an anonymiser. A VPN moves you to an address that genuinely is one, usually in a datacenter — the most reliably detected category there is. And on the ad-supported plan Netflix does not permit VPN use at all, so it cannot work there under any circumstances.

Ad-tier policy per help.netflix.com, checked 9 September 2026.

You would be trading a residential address that is wrongly flagged for a commercial one that is correctly flagged. Among all the people reporting this error on their own home connections in public support threads, not one records a VPN having fixed it. The claim that it does appears almost exclusively on pages that sell VPNs.

Two further reasons, both concrete

  • On the ad-supported plan it cannot work at all, because Netflix does not permit VPN use on that tier. Recommending one to an ad-tier subscriber is recommending a purchase that is guaranteed not to help.
  • If your problem is actually Netflix Household rather than the proxy block, a VPN makes it worse, because Household is looking for a stable home address and a VPN changes the very signal it is trying to recognise.

We have written the same conclusion about self-hosting, for what turns out to be the same underlying reason: a WireGuard VPN on a VPS gets blocked everywhere because the address resolves to a cloud provider. The category of the address is what gets read, every time.

There are situations where a VPN is genuinely the right tool, and we say so when they come up — reaching a catalogue you are entitled to while travelling in Europe , for instance. This is not one of them. When a VPN will not help, the useful thing a guide can do is say so, the same way we did for sports streaming rights and regional subscription pricing .

Does This Happen More in Some Countries?

Nothing here is national: what matters is the specific block containing your address — how it has been catalogued, and whether the registration Netflix asks providers to correct is accurate for it. That can go wrong anywhere, and it goes wrong most easily where address space has recently changed hands — a smaller provider growing quickly, a range bought on the transfer market, an allocation moved between countries.

For readers in the Baltics, the Balkans and Ukraine, where a lot of address space has moved in recent years, that is worth knowing.

And not worth overstating

No public reports establish a higher rate of this error in any particular country, and anyone claiming otherwise is extrapolating. Run the mobile-data test, check fast.com, and let your own result decide.

Final Thoughts

The reason this error is so frustrating is that it looks like an accusation and behaves like a piece of infrastructure. Nobody has decided you are cheating. A number attached to your house has been catalogued wrongly, and Netflix is reading the catalogue.

So the useful order of operations is to find out where the problem lives before trying to fix it:

  • Mobile data versus home Wi-Fi tells you network or account.
  • A second device tells you device or network.
  • fast.com tells you geography or reputation.

Two of the outcomes — a leftover Smart DNS entry, a device with its own resolver — you can fix yourself in five minutes. One of them you cannot fix at all, only report, and then wait out a propagation delay that Netflix measures in weeks.

That is a worse answer than "install this VPN and it works". It is also the true one, and knowing which situation you are in beats spending a month on fixes aimed at the other.

References

  1. [1]
    Netflix says, "You seem to be using a VPN or proxy." — Netflix Help Center, 2026. https://help.netflix.com/en/node/277
  2. [2]
    Troubleshooting inaccurate VPN flagging — Netflix Open Connect partner documentation, 2026. https://openconnect.zendesk.com/hc/en-us/articles/4407364433549-Troubleshooting-inaccurate-VPN-flagging
  3. [3]
    What is a Netflix Household? — Netflix Help Center, 2026. https://help.netflix.com/en/node/124925
  4. [4]
    Hurricane Electric IPv6 breaks Netflix — proxy error — Netgate / pfSense forum, 2016-2022. https://forum.netgate.com/topic/101361/pfsense-plus-hurricane-electric-breaks-netflix-ipv6-proxy-error
  5. [5]
    Netflix VPN detection and Hurricane Electric tunnels — NANOG mailing list archive, 2016. https://diswww.mit.edu/charon/nanog/189774

Volatile claims on this page — the ad-supported-plan policy, the Regional Internet Registry instruction and its two-week propagation line, the IPv6 tunnel status and the Netflix Household signals — were checked 9 September 2026, and the error-code naming 10 September 2026, each carrying its date inline next to a link you can open. The IPv6 tunnel case is dated on the page rather than presented as current: documented in 2016-2017, reported lifted in January 2022, and unpublished since.

Netflix Proxy Error FAQ

Will restarting my router fix it?
Sometimes, and it is worth one try. It works only if it draws you a different address from your provider's pool and that address happens to be clean. If the whole range is misclassified, every address in it behaves the same way, and no number of restarts changes that.
Netflix told me to contact my ISP and my ISP says it's Netflix's problem. Who's right?
Netflix, mostly, though it explains itself badly. Every step Netflix documents sits with the provider: registering the address range correctly with the Regional Internet Registry, which Netflix says increases the chances of it being listed correctly, and then raising a ticket with Netflix Open Connect if that does not clear it. Ask for those specifically rather than asking them to "fix Netflix", and ask for it to reach their network team rather than front-line support.
How long does it take once my ISP fixes it?
Netflix's own partner documentation says two weeks or longer for its systems to pick up registry changes. Nothing at your end speeds that up.
Can I just ask Netflix to whitelist my IP address?
No such route exists for subscribers. Support can confirm your address is flagged, which is useful evidence to hand your ISP, but they cannot lift it for you.
Why does it work on my phone but not my TV?
If the phone is on mobile data, it is using a completely different network path, so this tells you your home address is the problem. If the phone is on the same Wi-Fi and still works, it is the TV's own DNS settings — check for a leftover Smart DNS entry and set DNS back to automatic.
Does a static IP address help?
Possibly, and some providers offer one as a paid add-on. It helps only if the new address is in a cleanly registered range; if the problem is your provider's registration, a static address inside the same block inherits the same problem. Ask before you pay.
I get the error and my location on fast.com is correct. What now?
Then it is reputation rather than geography — the address is flagged for what it has been associated with, not where it is. Same escalation to your ISP, and say explicitly that the geolocation is correct so they do not spend a week checking it.
Is my account in trouble?
No. This is a playback block on a connection, not an enforcement action against you. It clears when the underlying classification changes, and it leaves nothing on your account.

Netflix's enforcement and plan policies move quickly. Confirm anything time-sensitive in these answers before you rely on it.

You Might Also Like