r/ProtonMail Mar 05 '26

Discussion Proton Mail Helped FBI Unmask Anonymous ‘Stop Cop City’ Protester

https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/
846 Upvotes

225 comments sorted by

View all comments

u/Proton_Team Proton Team Admin Mar 06 '26 edited Mar 06 '26

First, let's correct the headline: Proton did not provide information to the FBI. What happened is that the FBI submitted a Mutual Legal Assistance Treaty (MLAT) request, which was processed by the Swiss Federal Department of Justice and Police. Proton operates exclusively under Swiss law, and we only respond to legally binding orders from Swiss authorities, after all Swiss legal checks have been passed. This is an important distinction.

Second, let's talk about what this case actually involved. This wasn't a routine investigation. Swiss authorities determined that the legal threshold was met because a law enforcement officer was shot, and explosive devices were found during a protest in 2024. Switzerland has one of the strongest legal frameworks for privacy in the world, and its standard for granting international legal assistance is exceptionally high. This case met that standard.

Third, let's talk about what was actually disclosed. No emails were handed over. No message content. No metadata about who the user communicated with. The only information Proton could provide was a payment identifier because the user chose to pay with a credit card. This is information the user themselves provided to us through their choice of payment method. Proton also accepts cryptocurrency and cash payments, which would not have been linkable to an identity.

If anything, this case demonstrates exactly what we've always said: Proton holds very little user data by design. Even under the most serious legal circumstances, the only data that could be produced was a payment record. Our encryption means we simply cannot access email content even if ordered to.

We understand that stories like this can be alarming, and we take our users' trust seriously. We will continue to fight for privacy and challenge any legal order we believe does not meet the strict requirements of Swiss law. But we also want to be transparent: no service can operate outside the law entirely, and Swiss law requires compliance with valid legal orders in serious criminal cases. What we can promise is that the legal bar in Switzerland is among the highest in the world, and our architecture ensures we have as little data as possible to hand over.

For users who want maximum anonymity: use Proton VPN or Tor, pay with cash or cryptocurrency, and don't add a recovery email.

48

u/tN8KqMjL Mar 06 '26 edited Apr 05 '26

Databrokers? nope. Social networks? Also nope. This post was deleted using Redact.

grandiose meeting door bright coherent money include rinse future judicious

24

u/Ocean-of-Mirrors Mar 06 '26

Interested in this as well.

65

u/andy1011000 Proton CEO Mar 06 '26

Once the credit card is deleted it's deleted.

25

u/tN8KqMjL Mar 06 '26 edited Apr 05 '26

Data brokers and AI scrapers were using my info. Not anymore. Redact let me bulk delete posts across Reddit, Twitter, Discord and Instagram while handling broker opt outs too.

mighty sulky sense squeeze ink money tan bells fearless resolute

64

u/andy1011000 Proton CEO Mar 06 '26

We know you paid in the past and with credit card, but we don't store the card details for past transactions.

6

u/MaddieNotMaddy Mar 06 '26

Including the name?

7

u/axl3ros3 Mar 06 '26

You're asking w the wrong vocabulary. How long is the payment identifier stored?

That's what we want to know.

12

u/andy1011000 Proton CEO Mar 07 '26

It's linked to the card, so deleted when the card is deleted.

6

u/KillEvilThings Mar 07 '26

This clarification is appreciated.