VPN in Canada: Globoplay, Brazilian banking, and public Wi-Fi

Let me tell you about something that happened to me last week, at a café in Yaletown here in Vancouver. I had my laptop open, connected to the café Wi-Fi, and opened the Itaú app to pay a bill that was due that day. The app opened, asked me to confirm my location, and froze. Token expired, session dropped, three login attempts blocked. I had to leave the café, go home, connect to my private network, and only then did the payment go through.

This kind of thing happens every week to Brazilians living in Canada. Globoplay won’t open. The Brazilian bank app freezes. Public Wi-Fi leaves you exposed to things you don’t even notice. Three problems that look unrelated, but the technical fix is the same: a VPN. What changes is the type of use you give it in each case, and where it still fails.

Why won’t Globoplay open in Canada?

The short answer: geographic broadcast rights. Globo licenses the Globoplay catalogue for Brazilian territory. When you connect from a Canadian IP (any IP served by Telus, Shaw, Bell, Rogers), Globo’s server identifies the country your connection comes from and blocks the content. It’s the same logic that makes Brazilian Netflix have a different catalogue from the American one, except Globoplay won’t even let you in.

I paid CAD 19.90 equivalent in reais for Globoplay Premium in January 2026, thinking I’d be able to watch the new Pantanal from Vancouver. I couldn’t. The app said “Content not available in your region”, even though I was a paying subscriber. It was a crash course in what geo-blocking really means.

A VPN fixes this by routing your traffic out through a Brazilian server. For Globoplay, you “appear” to be in São Paulo. Login goes through, the catalogue appears, the episode plays. But there are three caveats:

1. Speed drops between 10% and 30% depending on the server, which mostly affects 4K streaming.
2. Some services (Brazilian Netflix is the most aggressive) detect the VPN and block you anyway. Globoplay is more permissive: it accepts most large-operation VPNs.
3. The Brazilian account (CPF plus a Brazilian card) is still required. The VPN only solves “where you are”, not “who you are”.

What happens when you open the Brazilian bank app from Canada?

Here the story changes. Brazilian banks don’t block by geo-licence, they block by fraud prevention. When the Itaú server sees a login from a Canadian IP for an account historically accessed from São Paulo, it assumes, correctly most of the time, that it could be a break-in attempt.

The result: more aggressive 2FA, extra security questions, dropped session, higher-value transactions blocked until confirmation. In some cases (Caixa Econômica Federal is the most notorious, in my experience), the app simply refuses to open and you have to call the support line, internationally, paying roaming, losing 40 minutes.

A VPN with a Brazilian server gets around this by making your app appear with a Brazilian IP. But pay attention: this is not “bypassing bank security”. It’s restoring the assumption the bank uses to calibrate its fraud prevention. You’re still the legitimate account holder, using your password, your token, your registered device. The only difference is the originating IP.

I’ve used this approach since February 2026 and I’ve had 100% of sessions open without friction at Itaú and Nubank. Bradesco and Caixa, in the experience of two Brazilian friends in Toronto and Montreal, still cause problems even with a VPN. There’s no perfect technical fix for those two. What works is keeping a Brazilian phone with a Brazilian SIM to confirm 2FA outside the app.

And Canadian public Wi-Fi, what’s the real risk?

This is the case fewest people talk about and that matters most. When you connect to the open Wi-Fi at Tim Hortons, Starbucks, the Vancouver public library, the SkyTrain, or Toronto-Pearson airport, all non-HTTPS traffic between your device and the router is, in theory, readable by any other device on the same network.

In practice, 95% of sites already use HTTPS, so what travels between you and the server is encrypted. But there’s still 5% that doesn’t, and there are specific attacks (HTTPS strip, evil twin Wi-Fi with the same name, a manipulated captive portal) that can downgrade the connection to HTTP in limited cases. For the average user, the bigger risk is session hijacking: someone on the same network captures your session cookie from a logged-in service and uses it to impersonate you until the session expires.

Canada has over 11,000 free public Wi-Fi points mapped in the three largest provinces (BC, Ontario, Quebec). A newly arrived Brazilian connects without thinking. I did it constantly in my first month, and looking back, I cringe. A VPN solves all the scenarios above at once: it creates an encrypted tunnel between your device and the VPN server, before reaching the café router. The network owner sees encrypted traffic; nobody on the network can read anything.

Which VPN I use and why

I’ve used ExpressVPN for three months. The choice came after testing two free options (Proton VPN Free and Windscribe Free) that failed in the specific Globoplay case: the Brazilian servers were either saturated or already known to Globo and detected. ExpressVPN has Brazilian servers in São Paulo and Rio that run consistently in monthly tests.

What works well:

• Globoplay and Telecine open on the first try in 100% of the tests I ran between January and May 2026.
• The Itaú and Nubank apps open without friction when the Brazilian server is connected.
• Public Wi-Fi stays encrypted end to end. I use it at the Tim Hortons here in Yaletown three times a week without worry.
• It works simultaneously on up to 8 devices (laptop plus phone plus iPad plus TV box) with the same subscription.

What does not work:

• Brazilian Netflix still detects and blocks even with ExpressVPN. This is an eternal cat-and-mouse problem, not specific to this service.
• Bradesco and Caixa keep throwing aggressive 2FA even with a Brazilian IP, in the experience of the friends I tested with.
• Speed drops about 15 to 20% on the Brazilian server (measured in May 2026 with 100 MB download tests at three different times of day).

The subscription has a 30-day free trial for anyone who arrives via a referral link. I leave mine in the banner below. Disclosure: it’s an affiliate link. If you sign up, I earn a commission at no extra cost to you. I get nothing else from ExpressVPN beyond that, and this letter works because I tell you where the recommendation fails too, not just where it works.

What to choose if ExpressVPN isn’t for you

I won’t pretend it’s the only option. If you want free and occasional (just to open Globoplay on Saturday nights), Proton VPN Free works, with the caveat of saturated Brazilian servers at peak hours. If you want cheap and reasonable (around CAD 4 to 5 per month), Surfshark has a good reputation among Brazilians in Canada; I’ve never tested it personally.

What I don’t recommend is a sketchy free VPN installed straight from the phone store with no research. The vast majority of those services monetize by selling users’ browsing data, which is exactly the problem you installed the VPN to avoid. If the service is free and the company has no verifiable reputation, you are the product.

And what fails even with a VPN

To close honestly: a VPN is not magic. It solves three specific problems (geo-blocking, fraud prevention based on IP origin, encryption of public Wi-Fi). It does not solve:

• Bank 2FA that requires a Brazilian phone to receive an SMS. A VPN only changes the IP, not the phone number.
• CPF and registration data. You still need a legitimate account on the service (Globoplay, the bank).
• Advanced fingerprint detection (canvas, WebGL, installed fonts) that very aggressive services like Netflix use to identify a VPN even with a “clean” IP.
• Absolute speed. There’s always a 10 to 30% loss; there’s no trick to beat the physics of routing.

For a Brazilian in Canada in 2026, the math is simple: around CAD 6 to 13 per month, depending on the annual or monthly plan, to solve Globoplay plus banking plus public Wi-Fi is money well spent. I pay it and I sleep better.

Sources

• Statistics Canada, Internet use and online activities by Canadians, 2024 (official release on public Wi-Fi use in Canada): https://www150.statcan.gc.ca/n1/pub/89-28-0001/2018001/article/00006-eng.htm
• Canadian Radio-television and Telecommunications Commission (CRTC), Communications Monitoring Report 2024 (mapping of public Wi-Fi points): https://crtc.gc.ca/eng/publications/reports/policymonitoring/2024/cmr.htm
• Globo, Globoplay Terms of Use, clause 4.2 (geographic broadcast restriction): https://globoplay.globo.com/termos-de-uso/

Disclosure: This article contains an affiliate link to ExpressVPN. If you sign up through the link in the banner on this page, I receive a small commission from ExpressVPN, at no extra cost to you. This does not influence the content of the article: I’ve used ExpressVPN for three months and the cases where it fails (Netflix, Bradesco, Caixa) are documented above. Other options are listed in the section “What to choose if ExpressVPN isn’t for you”.