post
First, let's correct the headline: Proton did not provide information to the FBI. What happened is that the FBI submitted a Mutual Legal Assistance Treaty (MLAT) request, which was processed by the Swiss Federal Department of Justice and Police. Proton operates exclusively under Swiss law, and we only respond to legally binding orders from Swiss authorities, after all Swiss legal checks have been passed. This is an important distinction.
Second, let's talk about what this case actually involved. This wasn't a routine investigation. Swiss authorities determined that the legal threshold was met because a law enforcement officer was shot, and explosive devices were found during a protest in 2024. Switzerland has one of the strongest legal frameworks for privacy in the world, and its standard for granting international legal assistance is exceptionally high. This case met that standard.
Third, let's talk about what was actually disclosed. No emails were handed over. No message content. No metadata about who the user communicated with. The only information Proton could provide was a payment identifier because the user chose to pay with a credit card. This is information the user themselves provided to us through their choice of payment method. Proton also accepts cryptocurrency and cash payments, which would not have been linkable to an identity.
If anything, this case demonstrates exactly what we've always said: Proton holds very little user data by design. Even under the most serious legal circumstances, the only data that could be produced was a payment record. Our encryption means we simply cannot access email content even if ordered to.
We understand that stories like this can be alarming, and we take our users' trust seriously. We will continue to fight for privacy and challenge any legal order we believe does not meet the strict requirements of Swiss law. But we also want to be transparent: no service can operate outside the law entirely, and Swiss law requires compliance with valid legal orders in serious criminal cases. What we can promise is that the legal bar in Switzerland is among the highest in the world, and our architecture ensures we have as little data as possible to hand over.
For users who want maximum anonymity: use Proton VPN or Tor, pay with cash or cryptocurrency, and don't add a recovery email.
No. Proton followed Swiss court orders to hand over data from a user, and the user had used his own credit card to pay for Proton instead of any of the available anonymous methods.
Probably.
If the FBI had a proper warrent from a judge, and convinced the Swiss court it's all good. Then yah, the Swiss ask for the data, Proton will absolutely hand it over. They follow Swiss law. The real content is all encrypted, but the metadata isn't.
In this case they matched the email address with the guys credit card.
OP, why did you put "news media claims" at the beginning of this post title? are you doubting the veracity of it? the journalist and outlet reporting this are both well known and reputable, and they have quotes from Proton's head of communications confirming it.
Proton didn't break any privacy promises.
Proton never ever promised to hide anyone's Proton payment info from govts. not even for Proton crypto wallet.
privacy ≠ anonymity
privacy ≠ security
they are not the same but they intersect. do web search for a venn diagram.
all 37 comments