Ethically sourced residential proxies: where the IPs come from, and what to ask

How residential IPs are sourced

Opt-in sharing apps

The cleanest model: a person installs a dedicated app, understands that it shares their connection, and is paid by the gigabyte. PacketStream’s “Packeter” app works this way, paying $0.10 per GB¹. Payment matters, because it makes the bargain explicit and gives the sharer a reason to know the app is running.

Sharing bundled into other software

Some networks recruit exits through components built into other apps, where sharing is the price of a free product. Whether that is consent depends on how clearly the app says so and how easily you can turn it off. From the buyer’s side, this model is the hardest to judge: the provider may not control how prominently its partners disclose the sharing.

Compromised devices

The worst case is no consent at all: exits running on devices whose owners never agreed. The July 2026 seizure of NetNut’s domains, covered below, came alongside action against the Popa botnet of roughly two million infected smart TVs and streaming boxes; NetNut’s parent disputed the allegations². Whatever the outcome, that is the risk a buyer most wants to rule out.

A cautionary tale: NetNut

On 2 July 2026 the FBI, working with industry partners, seized hundreds of domains belonging to NetNut, one of the better-known residential proxy brands. The seizure accompanied action by Google, Lumen and the FBI against the Popa botnet, a network of at least two million compromised smart TVs and streaming boxes^2,3.

NetNut’s parent company, Alarum (Nasdaq: ALAR), disputed the allegations and paused services on 4 July. A 13 July update said the root cause was still unknown. At the time of writing, netnut.io shows the FBI seizure banner. We report this as news and draw no conclusion beyond what the sources say.

For buyers, the episode carries three lessons regardless of how it ends:

• Continuity risk is real. A provider’s sourcing problem becomes your outage — and potentially your lost prepaid balance — overnight.
• Brand size is not evidence. A well-known name says nothing about where its exits come from.
• Ask before, not after. The questions at the end of this page take ten minutes and leave a paper trail if anything goes wrong.

Customer checks compared

Sourcing is one side of a network’s ethics; who it lets in is the other. Customer KYC protects the people in the pool, whose home connections carry whatever customers send. The trade-off is friction: the strictest providers exclude individuals altogether.

Target restrictions are the other control. Evomi blocks financial, government and mailing websites⁶; Rayobyte blocks financial institutions, login pages, mailing and API endpoints until you request access¹¹; Oxylabs publishes the categories it refuses. If you need a supplier that can show due diligence to your own compliance team, Bright Data is our pick for strict compliance, with Infatica as runner-up.

Sourcing statements are thinner. Evomi describes its IPs as “ethically sourced”¹³; Rayobyte cites more than 50 million “opted-in devices” a month¹⁴. These are claims, not findings. The only independent consent rating in our research is Synthient’s, for PacketStream.

Case study: PacketStream’s Packeter program

PacketStream is a useful example because it documents its sharing program publicly, pays sharers by the gigabyte, and holds a third-party consent rating.

How it works

The app

Desktop only: Windows and macOS, or Linux via Docker. No mobile sharing¹.

Pay

$0.10 per GB shared; cash-out weekly via PayPal from $5, minus a 3% fee and PayPal’s charges¹.

Consent rules

Account holders must be 18 or over, install the app themselves, and own or be authorised to use the device and connection; sharing happens only while the app runs^1,9.

Privacy

Customers see only the exit IP and approximate location¹.

Change, 6 Oct 2026

Sharers’ connections now also carry PacketStream’s own “first-party” traffic — requests its Search and Fetch services make for customers, plus its own monitoring, testing and quality checks — paid at the same rate⁹.

The third-party rating

Synthient, which assesses proxy networks’ consent practices, rates PacketStream LOW risk¹⁵. It is the only consent rating for any provider in our research.

The October 2026 terms

PacketStream set out the first-party traffic change in its updated terms and pays for it at the same $0.10/GB rate, which is how such a change should be made. Because sharing happens only while the app runs, sharers stay in control of when their connection is used^9,1. Our PacketStream review covers the rest of the service.

Questions to ask a provider before you buy

Ask in writing. A good provider answers all of them; an evasive answer is an answer.

1. Which apps or products supply your residential exits? Are any of them third-party apps with a sharing component?
2. How do device owners consent, how is it shown to them, and how do they withdraw?
3. Are owners paid? How much, and how?
4. What do you do to detect and remove compromised or unauthorised devices?
5. Do you run your own traffic through sharers’ connections? Is that disclosed to them?
6. What checks do you run on customers, and which targets do you block?
7. Has any independent party assessed your sourcing? Can we see the result?
8. If a problem with your network forced a shutdown, what would happen to prepaid balances?

None of these answers will appear in a benchmark, and none of them shows up in a price per gigabyte. For the price side, see the cheapest residential proxies; for picks that weigh both, see the best residential proxies by use case.