Proton Mail Handed Payment Data to FBI in Stop Cop City Investigation
Key Takeaways
- ▸Proton Mail provided Swiss authorities with payment data that identified a Stop Cop City protester, which was then shared with the FBI through an MLAT
- ▸The disclosure reveals that while Proton encrypts email content, payment metadata (especially credit card information) can be accessed and shared with law enforcement under Swiss legal orders
- ▸Charges against more than 60 Stop Cop City protesters have been dropped, and the individual identified through Proton's payment data has not been charged with a crime
Summary
Privacy-focused email provider Proton Mail provided Swiss authorities with payment information that was subsequently shared with the FBI to identify an anonymous user behind a Stop Cop City protest movement email account, according to court records obtained by 404 Media. The case involves the [email protected] account affiliated with the Defend the Atlanta Forest group, which was protesting construction of a police training facility in Atlanta. Through a Mutual Legal Assistance Treaty (MLAT) request, Swiss authorities provided payment data showing credit card information linked to the account holder, which was then transferred to the FBI's Domestic Terrorism squad in January 2024.
The disclosure highlights the limitations of Proton Mail's privacy protections when legal orders from Swiss authorities are involved. While Proton offers end-to-end encryption for email content, the company maintains payment metadata including credit card holder information for accounts that don't use anonymous payment methods like cryptocurrency or cash. Proton's head of communications emphasized that the company operates exclusively under Swiss law and only responds to legally binding orders from Swiss authorities, not directly to foreign agencies like the FBI.
The investigation focused on activities including arson, vandalism, and doxing related to protests against the Atlanta police training center, though charges against more than 60 people have since been dropped. The FBI affidavit noted that the email account was publicly listed on the group's Facebook page and blog, which documented various protest actions. The individual identified through the payment data has not been charged with a crime according to court database searches.
This case underscores the practical limits of privacy-focused email services when faced with lawful government requests, particularly through international legal cooperation mechanisms like MLATs. While Proton's encryption protects message content, metadata such as payment information remains accessible and can be compelled by authorities, demonstrating that true anonymity requires using privacy-preserving payment methods in addition to encrypted communications.
- The case demonstrates that privacy-focused services still have limitations when faced with lawful government requests through international legal cooperation
