Good evening all. When monitoring our router Traffic recently I noticed a lot of time allocated to ExpressVPN. I don’t use/pay for it. So I blocked it to see what happened. Nonetheless, it was still showing throughput.

I then isolated all devices by MAC address, and identified that the traffic is through my phone. Wondering if it was something out there by my employer, I asked the IT team, who said definitely not them.

I am definitely not subscribing, yet the time allocated to ExpressVPN, just keeps on clocking up, despite me telling the router to block it.

Does anyone have any suggestions as to what on the phone could be accessing/using VPN?