In the digital world, what you see is rarely what is. The IP address on your screen, the location tag under your username, the neat little country flag beside your connection — that is the map. But it is not the territory.
The phrase belongs to Alfred Korzybski, who meant something broader: a representation is not the thing it represents, and confusing the two is how people get lost while holding excellent directions. The internet has made this unusually literal. We have built an entire industry on a map that was never surveyed.
What an IP address actually is
It is a routing address. That is the entirety of its job: a number that tells the network where to deliver a packet, in the same way a postcode tells a courier which sorting office to use. It was designed to be reachable, not to be identifying, and it describes a point in the network's topology rather than a point on the ground.
It has no field for a country. No field for a city, a person, a household, or a device. Everything you have ever seen presented as location data derived from an IP address was inferred by a third party, and inference is a polite word for a well-informed guess.
How the guess is made
Geolocation databases are assembled from whatever is available: registry records saying which organisation was allocated a block, routing announcements showing roughly where a block is reachable from, latency measurements from known points, and — the messiest ingredient — self-reported data from ISPs and users.
The result is a commercial product. Several companies sell one, they disagree with each other, and they are all more confident than the evidence supports. Accuracy at country level is genuinely good. At city level it degrades quickly, and for mobile networks it can be off by hundreds of kilometres, because a phone's traffic frequently surfaces at a gateway nowhere near the phone.
Then there is the failure mode that follows from a database needing to return something. When a block's location is unknown, a default has to be chosen — historically, coordinates at the centre of a country. Those defaults are not empty fields on a map. They are places, with residents, who spent years receiving visits from people convinced that a great deal of internet crime originated from their house. The map was wrong, and the territory answered the door.
What the wrong map costs you
- Region locks fire incorrectly. Content you are entitled to, refused, because a database put your ISP's gateway in a neighbouring country.
- Fraud systems overreact. Banks and payment processors score by address reputation. A data-centre range scores badly regardless of who is behind it, which is why a working VPN so often triggers a security hold — and why excluding the banking app is such a common workaround.
- You are served the wrong reality. Language, currency, pricing, and which laws a site believes apply to you. All of it decided by a guess you cannot see or correct.
- The guess is treated as evidence. An address in a log is regularly presented as proof that a specific person did a specific thing. It is proof of the exit point of a connection, which is not the same claim and frequently not even close.
So a VPN redraws the map
It does, cleanly. Connect to a server in another country and the databases will place you there, because the address genuinely is allocated there. You are not fooling the system; you are using it correctly. Your packets really do emerge in Frankfurt.
This is the honest version of what a VPN sells: not concealment, but a change of exit. The map now shows Frankfurt because Frankfurt is where you left the tunnel.
The territory, meanwhile, has not moved
And this is where the metaphor earns its keep, because the territory is made of things the map never contained.
You are logged into an account that knows your name. Your browser reports its timezone, its language preferences, its fonts, its screen dimensions and its graphics renderer — a combination distinctive enough to recognise you across any number of addresses. Cookies set before you connected are still there. Your typing rhythm, your site list and the hours you keep are all unchanged. The payment method that bought the subscription is in your name.
Changing the exit address alters one field in a record with a great many fields. Systems that care about identity stopped relying on that field years ago, precisely because it was always a guess. The full inventory is in the anonymity piece, and it is longer than most people expect.
Using the distinction
Once you separate the two, the tool becomes easy to aim.
Reach for a VPN when the problem is genuinely one of route: an untrusted local network, an ISP you would rather not brief, a geographic gate you would rather step around, a service pricing by country. These are map problems and a VPN is a map tool. It works.
Do not reach for it when the problem is one of identity. If a service already knows who you are, or can work it out from the browser, no exit address helps. That needs different tools — separate profiles, fewer accounts, a browser that resists fingerprinting, or in the serious cases something built for the purpose rather than adapted to it.
The map is useful. Maps usually are. Just remember that it was drawn by someone who has never been to your house, sold to companies who treat it as surveyed, and that you are still exactly where you were sitting when you opened the laptop.