# Mullvad VPN

> Source: https://fuckyc.org/services/mullvad/
> Website: https://mullvad.net/
> Categories: VPN providers
> KYC: none — Signup is a randomly-generated account number; no email, no phone, no name. Cash by mail accepted.
> Status: active
> Jurisdiction: Sweden (operator-disclosed)
> Fiat on-ramp: no
> Payment methods: cash-by-mail, crypto, card, bank-transfer
> Founded: 2009
> Open source: yes
> Custodial: no
> Last verified: 2026-01-01

## Verdict

Mullvad is the reference no-account VPN. The account number model, cash-by-mail support, and the 2023 police-search outcome together produce the strongest no-identity-required posture in the category. The 2023 removal of port-forwarding is the main functional caveat. For most threat models that include "VPN provider should not know who I am," Mullvad is the default.

## Strengths

- Account model is a randomly-generated number; no personal information requested at signup.
- Cash-by-mail is supported and well-documented.
- In 2023, a Swedish police search reportedly produced no customer data — operator confirmed "no logs" architecture publicly.
- WireGuard support and audited client.

## Caveats

- Operator switched from port-forwarding to no-port-forwarding in 2023; users who relied on it for P2P need to re-evaluate.
- Card and bank payments still leak the payer identity to the payment processor, even if Mullvad never asks.
- Facts need re-verification by operator (last seeded 2026-01).

---

## What Mullvad is

A Swedish VPN whose signup process produces a random account number instead of asking for any personal data.

## Threat-model fit

The default no-identity VPN. Pair with cash-by-mail payment to minimize linkability.

## Sources

- [Mullvad — why-this](https://mullvad.net/en/help/why-mullvad-vpn) — accessed 2026-01-01
- [Mullvad blog](https://mullvad.net/en/blog) — accessed 2026-01-01