Yes, but only in a limited sense, and the same is true of every VPN. An observer monitoring your connection can see that you are connecting to a known NymVPN gateway. What they cannot see is what you are doing, where your traffic is going, or even whether a given packet contains real data.
What an observer can see
NymVPN's gateway IP addresses are public, just as the server lists of every traditional VPN are public. A passive observer (your ISP, a public Wi-Fi operator, a network-level censor) can see:
- You are connected to an IP address that belongs to a known NymVPN gateway.
- The connection is encrypted.
- The volume of encrypted traffic in and out of your device over time.
That's it. They cannot decrypt the content, see the destination, or read the requests inside.
What an observer cannot see
- The content of your traffic. NymVPN uses tunneled encryption that protects everything inside the tunnel from third parties and Nym alike.
- Your final destination. In Fast mode, the 2-hop architecture means no single node sees both your IP and where you're going. In Anonymous mode, the 5-hop mixnet adds packet mixing, cover traffic, and timing obfuscation, so even the patterns of your traffic are unreadable.
- Whether a packet is real or noise. In Anonymous mode, cover traffic flows alongside real traffic. An observer cannot distinguish your real activity from background decoy packets.
If you don't want anyone to know you're using NymVPN
In some networks (corporate, university, restrictive countries) the fact that you're connecting to a known VPN gateway can itself be a problem. NymVPN includes two tools to address this:
- QUIC transport mode obfuscates the connection to look like ordinary web traffic. See What is QUIC transport mode in NymVPN?
- AmneziaWG is the Fast-mode protocol, which adds decoy packets to the WireGuard handshake to defeat the deep-packet-inspection signatures that block standard WireGuard.
For restrictive regions specifically, see How to use NymVPN in restricted regions or networks?
What about correlation attacks?
A sophisticated observer who can watch both your connection to NymVPN and the destinations of your traffic (a "global passive adversary") might try to correlate timing and volume to deanonymize you. This is the attack that defeats simple VPNs and Tor.
NymVPN's Anonymous mode is specifically designed to resist this:
- Cover traffic creates noise that hides real patterns.
- Packet mixing across users prevents per-user fingerprinting.
- Timing obfuscation breaks the precise timing correlations that correlation attacks depend on.
For everyday use, Fast mode is still significantly stronger than a traditional VPN because of decentralization, but Anonymous mode is the right choice when you need to be confident an observer cannot link your traffic patterns to you.
Related questions
Can my ISP see I'm using NymVPN?
Your ISP can see that you're connecting to a NymVPN gateway IP. They cannot see what you do inside the tunnel. If hiding the fact of NymVPN use matters to you, enable QUIC transport mode (see above).
Can a website detect I'm using NymVPN?
Some websites maintain lists of VPN exit IPs and may flag or block connections from them. This is a property of VPNs generally, not specific to NymVPN. We're working on residential gateway options to address this where it matters; see the public roadmap.