Let’s talk about ProtonMail, the Swiss “privacy savior” everyone’s been simping for since forever. End-to-end encryption, no logs, Swiss privacy laws, “people first” branding… sounds bulletproof, right? Wrong.

The latest slap in the face: Proton handed over payment data (name + card details) for an anonymous account tied to the Stop Cop City / Defend the Atlanta Forest activists. The FBI got it via Swiss authorities through a Mutual Legal Assistance Treaty (MLAT), and boom — the “anonymous” protester’s real identity was unmasked. No emails read (encryption held), but who needs content when the payment trail is a glowing neon sign pointing to your door?

This happened January 25, 2024 (court records reviewed by 404 Media), but it’s the third public fuck-up in the books: 2021: French climate activist’s IP address logged and handed over to Swiss cops (via Europol), leading to arrests. Proton quietly scrubbed “we do not log your IP address by default” from their site after. Another 2021-ish case: Catalan activist’s recovery email exposed.

Now this: Credit card payment data funneled to Swiss justice, then straight to the FBI. Proton’s comms guy Edward Shone’s response? “We didn’t give anything directly to the FBI… only limited info to Swiss authorities under a legally binding order.” Cool story, bro — the data ended up with the FBI anyway.

Technicality theater. Proton’s defense is always the same: “We operate under Swiss law, we only comply with valid Swiss court orders after legal checks, we can’t read your emails because E2E encryption.” True… but useless for anyone with a real threat model. They store payment info (obviously — how else do they bill you?), recovery emails, device details, and temporary IP logs for “abuse.” Pay with Visa/PayPal?

Congrats, you’ve just tied your real name to your “anonymous” account. Anonymous options (crypto, cash by mail) exist, but let’s be real: 99% of users don’t bother because “Proton is private, right?” Wrong. Paying for “confidentiality” with a traceable card is like putting a padlock on a glass door — Korben nailed it: “Autant mettre un cadenas sur une porte vitrée.” The roast: Proton never reached its full potential because it’s built on privacy theater, not true anonymity.

They market to journalists, activists, dissidents — the exact people who get screwed when Swiss courts (very compliant with MLAT requests for “serious crimes” like arson, threats, protests) force a handover. End-to-end protects content? Great for casual users hiding from Google scans.

But metadata and account identifiers? That’s the kill shot. Proton’s “privacy” is conditional: Swiss law first, users second.

If you’re doing anything that pings “serious crime” (activism, leaks, whatever governments dislike), your “anonymous” Proton account is a ticking time bomb. Stop being lazy. Ditch Proton if anonymity matters more than convenience.

Self-host your email (Poste.io, Mail-in-a-Box on a VPS in a privacy-friendly spot), use Tor + burners, pay crypto-only or cash, no recovery email, no card trails. It takes work — no more one-click sign-up — but that’s the point. Laziness ends in jail, exposure, or both.

Proton’s not evil; it’s just not what they sell. The proof is in the handovers: three public cases, more we don’t know about. Lesson: No centralized service is 100% private when governments knock.

Proton’s “privacy” is real for normies dodging ads. For high-risk? Pure bullshit.

Do it yourself or end up as another statistic.