Proton Mail Handed FBI Data That Unmasked Stop Cop City Protester

TL;DR:

Proton Mail provided payment data to Swiss authorities, who forwarded it to the FBI through a Mutual Legal Assistance Treaty (MLAT)
The account: defendtheatlantaforest@protonmail.com, linked to the Stop Cop City protest movement in Atlanta
The person was identified through their credit card and arrested for alleged trespassing
Proton says they complied with a Swiss court order: they didn't hand data "directly" to the FBI
The lesson: If you pay for a privacy service with a credit card, you've already compromised your anonymity

What Happened

On January 25, 2024, the FBI sent a Mutual Legal Assistance Treaty (MLAT) request to Switzerland. The target: the email account defendtheatlantaforest@protonmail.com ^[1].

The account was linked to Defend the Atlanta Forest, also known as Stop Cop City, a protest movement opposing the construction of a $118 million police training facility in Atlanta's South River Forest.

Proton, operating under Swiss jurisdiction, received a legally binding order from Swiss authorities. They complied. They provided the payment identifier for the account: a credit card ^[2].

That payment identifier led to a bank. The bank led to a name. The FBI made an arrest. The charge: trespassing ^[3].

Proton's Defense

Proton's head of communications, Edward Shone, offered a careful explanation: Proton "did not directly provide information to the FBI" ^[2].

Technically true. The data went to Swiss authorities first. The Swiss forwarded it to the FBI. That's how MLAT works. It's a legal workaround that lets foreign governments get data from Swiss companies without those companies handing it over "directly."

Proton also noted that the request "was reviewed under Swiss legal standards related to serious criminal allegations before the data was released." They only provide "limited data" after Swiss courts approve ^[3].

But here's what that "limited data" included: the credit card identifier. That's all you need to unmask someone. One piece of metadata. One financial link. Game over.

The Credit Card Problem

Proton offers encrypted email. End-to-end encryption. Swiss privacy laws. Zero-access architecture. They can't read your emails because they don't have the keys.

But they know who paid for the account.

If you pay with a credit card, Proton has a "payment identifier," data that can trace back to you through your bank. Even if your emails are perfectly encrypted, your payment method ties you to the account ^[2].

Proton themselves acknowledge this. They accept cryptocurrency and even cash for premium subscriptions. Why? Because credit card transactions "include payment identifiers that can allow investigators to identify the cardholder through the issuing bank" ^[2].

The privacy-focused email provider built the backdoor right into the payment system.

The Stop Cop City Investigation

The Stop Cop City movement has faced intense law enforcement scrutiny since 2021. Activists opposing the police training facility have been charged with domestic terrorism, racketeering, money laundering, and various other crimes ^[4].

In December 2025, a Fulton County judge dismissed RICO charges against 61 protesters, ruling that Georgia Attorney General Chris Carr lacked constitutional authority to file the indictment. Carr appealed in January 2026 ^[5].

In September 2025, prosecutors dropped all 15 money laundering charges against three leaders of the Atlanta Solidarity Fund, a bail fund that supported arrested protesters ^[6].

The person unmasked through Proton Mail was arrested for trespassing. That's it. Not terrorism. Not racketeering. Trespassing. And according to 404 Media, they don't appear to have been formally charged ^[1].

Meanwhile, the $118 million Atlanta Public Safety Training Center is set to open in 2026. The protests failed to stop construction ^[5].

How MLAT Requests Work

The FBI can't force a Swiss company to hand over data. Swiss law doesn't work that way.

But the FBI can ask the U.S. Department of Justice to file a Mutual Legal Assistance Treaty request. The DOJ asks the Swiss government. The Swiss government asks their courts. If the courts approve, Swiss authorities compel the company to comply ^[7].

It's slower than a direct subpoena. It requires more paperwork. The foreign court has to agree. But it works. And for activists who think operating under Swiss jurisdiction protects them, it doesn't.

Switzerland cooperates with U.S. law enforcement. Not on everything. But on enough. If the FBI wants your data badly enough, they can probably get it.

How to Actually Protect Yourself

Pay with Cryptocurrency or Cash

Proton accepts Bitcoin and Monero. They also accept cash sent by mail. If you need anonymity, don't use a credit card. The payment is the weak link.

Use the Free Tier

Proton's free accounts don't require payment information. You lose some features, but you eliminate the payment metadata entirely.

Create Accounts Over Tor

If you sign up through the Tor network, Proton logs a Tor exit IP instead of your real IP address. Combine this with anonymous payment for maximum protection.

Understand the Limits

End-to-end encryption protects message content. It doesn't protect metadata. Who you email, when, how often: Proton might have some of that data. And they can be compelled to share it.

The Bigger Picture

Proton isn't the villain here. They followed Swiss law. They didn't volunteer the data. They fought to limit what they disclosed.

But they're also not the bulletproof privacy shield their marketing suggests. Their transparency reports show they respond to thousands of legal requests each year. Most data they hand over is "limited." But "limited" can still unmask you.

The real lesson: privacy tools have limits. Encryption protects content. It doesn't protect the traces you leave when you pay for services, create accounts, or connect to the internet.

If you're doing activism that might attract FBI attention, don't rely on Swiss jurisdiction alone. Don't pay with traceable methods. Don't assume any single tool makes you invisible.

The FBI has resources. They have treaties. They have patience. They got their target.

Sources

Published: March 9, 2026