Evidence and risk■Verified evidence/■StandardMaterial claims checked against current sources.; no material risk recorded in them.
Last reviewedReviewed 22 Jun 2026KYC checked 22 Jun 2026 · verified jurisdiction · Source → official siteHow to cite this pageEvidence confidence94/100
Evidence and facts
Evidence and facts
JURISDICTIONSE
AUDITED BYCure53
OPERATOR DATAHosted operator recorded
EVIDENCE CONFIDENCE
░░░░░░░░░░█████████▍94/100DIRECTLY TESTED3/15Why evidence is 94/100Formula 3.1
Source coverageMaterial claims checked against current sources
KYC TRIGGERSNo identity KYC for account creation; account-number model. Payment method can still create metadata depending on payment rail.
FEE€5/mo
CATEGORIESVPN
FEATURESNo email required, Account number only, Cash accepted, XMR accepted, BTC accepted, No logs, Audited, No Cloudflare, +2 more
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
Measured evidence
Open network measurements
These are existing public OONI and RIPE Atlas measurements, not probes run by Cunicula. Country summaries combine different networks and do not guarantee the same result on every connection.
■Reachable point measurement▒Verification not applicable
Measured
2024-10-19
Window
2024-10-19 to 2024-10-19
Test
traceroute
Target
mullvad.net
Single public measurement
A public RIPE Atlas traceroute from probe 1001965 reached the target address. This is reachability context, not a censorship classification or a current country-wide result.
Numbered accounts replace signup entirely, cash by post is an accepted payment route, and the logging claims have been through repeated third-party audits. There is structurally little to hand over about an account that is only a number.
LIMITS
Sweden cooperates with EU and Western legal process even though it is outside Five Eyes, and card or PayPal payment re-links a name to the account number the model was designed to avoid.
USEFUL FOR
The baseline choice when a VPN account should not exist as an identity record at all.
Who owns the operator, read from the public register. Each step says what kind of evidence it rests on: a registry record can be checked, a company statement cannot.
OPERATORMullvad VPN AB559238-4001 · Sweden
SHAREHOLDERAmagicom AB556783-9807 · SwedenREGISTRY DATA
The registry record for Mullvad VPN AB names Amagicom AB, organisation number 556783-9807, as its parent company.
The chain stops here because the register stops, not because the top was reached. Swiss and Swedish companies do not publish their shareholders, and a Czech joint-stock company does not list its own. Nothing above the last step should be assumed either way.
SAME OPERATOR
Mullvad VPN AB also runs one other service shown here. Comparing them compares products, not independent companies.
No identity verification is recorded for typical use. No identity KYC for account creation; account-number model. Payment method can still create metadata depending on payment rail.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is SE, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Evidence confidence is 94/100 and recorded risk is standard.
No changes to the document we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Corporate registry information updated
Corporate / Entity type
Corporate registry information updated
Corporate
Provider presentation updated
Best for, Evidence status, Public claims / Follow the money / Sources, Recorded risk, and 2 more
Anonymous VPN using numbered accounts. Official policy says no activity logging; accepts cash, Bitcoin, Bitcoin Cash, Monero, bank wire, cards, PayPal, Swish, and regional payments. → Swedish VPN using numbered accounts, whose policy states no activity logging and accepts cash, BTC and XMR.
not set → Mullvad VPN AB
────────────────────────
Parent: Amagicom AB
Owners: Fredrik Strömberg
and Daniel Berntsson
Ownership: founders hold 100%
Public claims
not set → Follow the money: Mullvad VPN AB
────────────────────────
Parent: Amagicom AB
Owners: Fredrik Strömberg
and Daniel Berntsson
Ownership: founders hold 100%
Anonymous VPN - account number only, no email, accepts cash/XMR/BTC. No logs policy, independently audited. Open source. (Zero KYC) → Anonymous VPN using numbered accounts. Official policy says no activity logging; accepts cash, Bitcoin, Bitcoin Cash, Monero, bank wire, cards, PayPal, Swish, and regional payments.
Jurisdiction confidence
inferred → verified
KYC last checked
2026-03-01 → 2026-06-22
Kyc note
Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR. → No identity KYC for account creation; account-number model. Payment method can still create metadata depending on payment rail.
Last reviewed
2026-03-01 → 2026-06-22
Source reviewed
older source, not independently verified → official site