Are residential proxies legal?

The short answer

A proxy is a computer that forwards your request. Nothing about that is unlawful, and businesses have routed traffic through third parties for as long as the web has existed. Every serious market-research, ad-verification and price-monitoring operation on the internet uses them.

We are not lawyers and nothing here is legal advice. What we can do is separate the three questions that get collapsed into one, because they have different answers.

Question one: is the network itself lawful?

This is where the enforcement actions land, and it turns on how the addresses were obtained. If a network is assembled from consumer devices whose owners were not meaningfully told, prosecutors have treated it as unauthorised access rather than a business arrangement.

The clearest example is recent. On 2 July 2026 the FBI seized NetNut, a platform reporting ties to a botnet of roughly two million consumer devices (largely smart TVs) enrolled with little or no meaningful consent. The seizure notice is still live on the domain and names the platform, its administrators and its subscribers.

Question two: were you told the truth about it?

A provider's sourcing claim is a claim. NetNut described itself as sourcing through ISP agreements, which is the cleanest model on paper, and it was seized anyway.

Worse for a buyer: that network was widely resold and white-labelled. A storefront with its own brand, pricing page and support desk may have been selling the same exit nodes. Sourcing is not a property of the vendor whose site you are looking at.

Question three: what are you doing with it?

This is the part actually under your control, and it is where most real legal exposure sits for a normal business. Using a proxy does not change whether an activity is lawful. Scraping public pages, checking your own ads, and monitoring competitor prices are ordinary commercial activities. Credential stuffing and fraud are not, and routing them through a residential address makes them worse, not better.

Provider terms are also a live constraint that has nothing to do with the law: many explicitly forbid targets they do not want associated with their pool.

Sources

1. Seized by the Federal Bureau of Investigation netnut.io (seizure notice), read 2026-08-08

   This domain has been seized by the Federal Bureau of Investigation in accordance with federal law as part of a law enforcement action, taken in coordination with the Department of Justice and the Internal Revenue Service Criminal Investigation, against the NetNut residential proxy platform, its administrators, and its subscribers.

Questions