Skip to content
CUNICULA

Mullvad VPN

Swedish VPN using numbered accounts, whose policy states no activity logging and accepts cash, BTC and XMR.

mullvad.net

Swedish VPN using numbered accounts, whose policy states no activity logging and accepts cash, BTC and XMR.

Common useVPNVPNOperator dataHosted
Identity checksZero KYCNo document check recorded · identity exposure level 0/4
Evidence and riskVerified evidenceStandardMaterial claims checked against current sources.; no material risk recorded in them.
Last reviewedReviewed 22 Jun 2026KYC checked 22 Jun 2026 · verified jurisdiction · Source → official siteHow to cite this pageEvidence confidence94/100
Evidence and facts

Evidence and facts

JURISDICTIONSE
AUDITED BYCure53
OPERATOR DATAHosted operator recorded
EVIDENCE CONFIDENCE
DIRECTLY TESTED3/15
Why evidence is 94/100Formula 3.1
Source coverageMaterial claims checked against current sources
+70
Review ageOldest recorded check is 62 days old
+24

Full scoring method

LAST CHECKED2026-06-24
LAST UPDATED2026-06-22
MEASURED3 public network measurements

Specs

DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSNo identity KYC for account creation; account-number model. Payment method can still create metadata depending on payment rail.
FEE€5/mo
CATEGORIESVPN
FEATURESNo email required, Account number only, Cash accepted, XMR accepted, BTC accepted, No logs, Audited, No Cloudflare, +2 more
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
Measured evidence

Open network measurements

These are existing public OONI and RIPE Atlas measurements, not probes run by Cunicula. Country summaries combine different networks and do not guarantee the same result on every connection.

OONI

Russia

Confirmed blocking observedUnverified inference
Measured
2026-08-09
Window
2026-07-10 to 2026-08-10
Test
web_connectivity
Target
https://mullvad.net/

2,306 tests: 360 confirmed, 1,567 anomalous, 334 OK, 45 failed

OONI confirmed DNS blocking in the linked representative measurement. Aggregate counts include multiple networks and outcomes.

Source reviewed 2026-08-09
OONI

United States

Mostly reachableUnverified inference
Measured
2026-08-09
Window
2026-07-10 to 2026-08-10
Test
web_connectivity
Target
https://mullvad.net/

2,497 tests: 0 confirmed, 26 anomalous, 2,459 OK, 12 failed

Most OONI web-connectivity measurements were OK in the period; anomalies and failed measurements are retained in the counts.

Source reviewed 2026-08-09
RIPE Atlas

Hungary

Reachable point measurementVerification not applicable
Measured
2024-10-19
Window
2024-10-19 to 2024-10-19
Test
traceroute
Target
mullvad.net

Single public measurement

A public RIPE Atlas traceroute from probe 1001965 reached the target address. This is reachability context, not a censorship classification or a current country-wide result.

Source reviewed 2026-08-09

Analysis

OVERVIEW

Numbered accounts replace signup entirely, cash by post is an accepted payment route, and the logging claims have been through repeated third-party audits. There is structurally little to hand over about an account that is only a number.

LIMITS

Sweden cooperates with EU and Western legal process even though it is outside Five Eyes, and card or PayPal payment re-links a name to the account number the model was designed to avoid.

USEFUL FOR

The baseline choice when a VPN account should not exist as an identity record at all.

Sources · reviewed 2026-07-16

Ownership and funding

Ownership and funding chain
Sources · reviewed 2026-07-15

Corporate identity

Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.

LEGAL ENTITY
Mullvad VPN ABsource ↗
REGISTRATION NO.
559238-4001source ↗
INCORPORATED IN
Swedensource ↗
INCORPORATED ON
2020-01-24source ↗
REGISTERED ADDRESS
PO Box 53049, 40014 Gothenburg, Swedensource ↗
PARENT ENTITY
Amagicom ABsource ↗
ULTIMATE OWNER
Fredrik Strömberg and Daniel Berntssonsource ↗
Registry research · reviewed 2026-08-08

Ownership chain

Who owns the operator, read from the public register. Each step says what kind of evidence it rests on: a registry record can be checked, a company statement cannot.

  1. OPERATORMullvad VPN AB559238-4001 · Sweden
  2. SHAREHOLDERAmagicom AB556783-9807 · SwedenREGISTRY DATA

    The registry record for Mullvad VPN AB names Amagicom AB, organisation number 556783-9807, as its parent company.

    Bolagsverket company data for 559238-4001, via allabolag

The chain stops here because the register stops, not because the top was reached. Swiss and Swedish companies do not publish their shareholders, and a Czech joint-stock company does not list its own. Nothing above the last step should be assumed either way.

SAME OPERATOR

Mullvad VPN AB also runs one other service shown here. Comparing them compares products, not independent companies.

We wrote about this

Frequently Asked Questions

Is identity verification required?

No identity verification is recorded for typical use. No identity KYC for account creation; account-number model. Payment method can still create metadata depending on payment rail.

Which payment methods are accepted?

Please check the provider site for accepted payment methods.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

No. The recorded jurisdiction is SE, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.

How are identity, operator, and evidence fields reported?

Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Evidence confidence is 94/100 and recorded risk is standard.

Related Services

Compare

Sources and history

Terms and privacy policy

No changes to the document we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.