Proton Mail provided Swiss authorities with payment data for [email protected] — the account linked to Stop Cop City protests in Atlanta. The FBI obtained this information through a Mutual Legal Assistance Treaty request on January 25, 2024, identifying the activist behind the anonymous account through their credit card identifier.
One moment you’re trusting Swiss banking secrecy; the next, your Visa statement is exhibit A in a federal case.
The Privacy Promise That Wasn’t
Swiss law compliance trumps marketing claims when governments demand data.
Proton AG clarified they shared no data directly with the FBI — technically accurate but missing the point. Swiss authorities verified the case involved a shooting and explosives before complying with the legal order, then passed payment information along through established treaties.
Your email content stays encrypted, but paying with plastic creates a paper trail that encryption can’t touch. This isn’t a security breach; it’s feature functionality working exactly as legal frameworks demand.
A Pattern Emerges in Privacy Disclosures
Previous cases reveal this Stop Cop City incident follows an established playbook.
This marks Proton’s third known disclosure to authorities. They previously handed over a recovery email for a Catalan Democratic Tsunami activist and were forced to log a French climate activist’s IP address via Europol — despite claiming they don’t log IPs by default.
Each case followed the same script: foreign law enforcement pressure, Swiss legal compliance, user anonymity compromised. Like watching the same Netflix thriller where the plot twist stops being surprising.
Your Payment Method Determines Your Privacy Level
Credit cards create permanent identity links that no encryption protocol can erase.
Here’s the brutal truth about “anonymous” email services: your payment method matters more than your password strength. Proton accepts cryptocurrency and cash precisely because credit cards eliminate anonymity from day one.
Every monthly subscription charge links your encrypted account to your real identity through financial records that governments access routinely. The Stop Cop City activist could have sent messages in unbreakable code, but their credit card told the whole story.
Reality Check for Privacy Services
Legal compliance always wins when governments apply sufficient pressure.
No privacy service operates outside legal jurisdiction, regardless of marketing promises. Swiss privacy laws offer stronger protections than US providers, but “stronger” doesn’t mean “absolute” when mutual legal assistance treaties kick in.
Your threat model should assume that determined authorities can pierce most privacy veils given enough time and legal justification. Choose services based on realistic expectations, not breathless privacy marketing that ignores courtrooms entirely.
