• NordVPN's next-gen antivirus blocked 96% of phishing sites in the 2026 AV-Comparatives test
• The software perfectly distinguished between active malicious links and 200 legitimate banking URLs
• Detection rates jumped by 6% compared to the previous test in May 2025

When you're searching for the best VPN to secure your online traffic, you increasingly need an app that does more than just encrypt your data. As phishing attacks grow more sophisticated, top providers are evolving into robust, all-in-one cybersecurity suites, and independent testing shows these built-in tools are making a real impact.

In the newly released 2026 Anti-Phishing Comparative Test by independent cybersecurity evaluation authority AV-Comparatives, NordVPN’s next-generation antivirus achieved a massive 96% phishing detection rate.

Even better for users who hate annoying pop-ups blocking safe internet browsing, the software managed this impressive high block rate with absolutely zero false positives.

The results highlight a steady improvement for the provider. Compared to the last AV-Comparatives test of this sort in May 2025, NordVPN’s phishing detection has improved by 6%.

Putting the antivirus to the test

To put the software through its paces, AV-Comparatives ran its testing between May 11 and May 22, 2026. Assessors threw 275 active phishing URLs at the most recent product version of NordVPN’s next-gen antivirus available at the time. These malicious links specifically targeted personal data across popular platforms, including PayPal, online banking portals, email services, and social media networks.

To ensure the antivirus wasn't just blindly blocking everything, the testers also introduced 200 legitimate banking URLs to validate the false positive results. NordVPN safely allowed the real sites through while neutralizing the threats.

"Phishing sites today are sophisticated enough to fool almost anyone, and most people shouldn't have to become cybersecurity experts just to stay safe online," said Domininkas Virbickas, product director at NordVPN. "Results like these are exactly the kind of protection that makes a real difference in people's daily lives."

This isn't the first time the company has impressed the ISO-certified independent testing firm. Back in June 2024, NordVPN became the first VPN service provider to be approved for the AV-Comparatives anti-phishing protection badge. To earn this certification, software must detect and block at least 85% of phishing URLs without causing any false alarms on legitimate banking and related sites.

How to recognize phishing websites

While utilizing a premium service, like the next-gen antivirus available with a NordVPN Complete subscription, is a powerful safeguard, threat actors are constantly evolving their tactics. Maintaining good digital hygiene remains crucial.

Alongside using reliable cybersecurity software, NordVPN recommends users follow a few simple tips to avoid being caught out:

• Verify the URL: Always inspect your browser’s address bar. Watch out for subtle variations in a domain name, suspicious prefixes, or being unexpectedly redirected to a subpage instead of a homepage.
• Read the text carefully: If an unsolicited email or message is urging you to act immediately or trying to induce panic, take a step back. Look closely for typos or other mistakes.
• Enable two-factor authentication (2FA): Adding a second step, such as a one-time code sent to your phone, ensures that even if a hacker steals your password, they won’t be able to access your account.
• Check the website’s protocol: Ensure the site uses a secure HTTPS connection. Look for the padlock icon in the address bar; spoofed URLs often only use unsecured HTTP protocols.