Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Short answer: Proton Mail was not conclusively shown to have been permanently banned across India. On April 29, 2025, a single judge of the Karnataka High Court directed the Union government to begin proceedings under Section 69A of the Information Technology Act and the 2009 blocking rules. The case followed allegations that Proton Mail accounts were used to send abusive, obscene and allegedly AI-generated deepfake material.
The dispute is now about more than one email service. Privacy advocates argue that the court’s proposed remedy was broader than necessary and may have treated encryption as an obstacle to identifying users, even though encryption, anonymity and metadata are different things. The Internet Freedom Foundation reported that a Division Bench stayed the blocking directions on March 16, 2026. The available record in this article does not establish what happened after the reported next hearing on June 23, 2026, so readers should not treat this article as confirmation of Proton Mail’s current legal or technical availability in India.
How the Proton Mail case began
The case was brought by M. Moser Design Associates India Pvt. Ltd. before the Karnataka High Court. According to the pleadings and reporting, the company received offensive emails on September 27 and October 1, 2024. The allegations included obscene, defamatory and sexually explicit material, as well as morphed or allegedly AI-generated images involving women employees and clients.
Reports also referred to threats, including alleged bomb threats, sent through Proton Mail. The allegations are serious: victims of harassment and intimate-image abuse need a practical way to stop the conduct and help investigators identify those responsible.
#1 Best Overall
The company complained to Proton’s abuse team and to Indian authorities. Proton reportedly disabled the offending accounts, but the requested identity information was not supplied directly to the complainant. The investigation then encountered the complications of seeking evidence from a provider operated by Swiss company Proton AG.
The reported case record identifies the petitioner, the respondent and the procedural background. Contemporary coverage from The Indian Express and Hindustan Times described the allegations and the proposed blocking route.
What the April 2025 order actually did
On April 29, 2025, Justice M. Nagaprasanna directed the Centre to initiate proceedings to block Proton Mail under Section 69A of the Information Technology Act, 2000, read with Rule 10 of the Information Technology (Procedure and Safeguards for Blocking of Access of Information by Public) Rules, 2009.
The judgment also reportedly directed interim blocking of URLs identified in the petition while the statutory process was initiated. That is not the same thing as an immediately effective, permanent nationwide ban.
Several legally distinct steps should not be collapsed into one headline:
- A court direction to begin blocking proceedings;
- temporary blocking of specific URLs;
- a formal government order under Section 69A;
- implementation by internet service providers; and
- a continuing nationwide service block.
In July 2025, Scroll reported that Proton Mail remained accessible in India. Proton AG later appealed. The Internet Freedom Foundation reported that Proton filed Writ Appeal No. 995 of 2025 on June 26, 2025, and that a Division Bench stayed the blocking directions on March 16, 2026, initially until a later hearing. The same report identified June 23, 2026, as the next listed date. The material available for this article does not verify the position after that date.
Why the case is not simply about “banning encryption”
The central technical dispute is whether the court’s reasoning blurred the difference between encryption and attribution.
Free tools Windows power users keep installed
One-click scans. No signup required.
Encryption can protect message content
Encryption can protect email content while it is transmitted or stored. It can reduce the risk of casual interception and unauthorized access to a mailbox. In some Proton-to-Proton communications, the technical design may also limit Proton’s ability to read the message content, depending on the feature and encryption arrangement involved.
But encryption does not automatically make a user anonymous. It does not prevent a recipient from saving a message or handing it to investigators. It does not necessarily eliminate account records, login information, payment details, recovery data or technical metadata.
Metadata can help, but it is not a guaranteed identity
Investigators may seek information such as:
- account-registration and recovery details;
- login times and IP information, where retained and legally disclosable;
- payment or subscription records;
- email headers and authentication data;
- records held by recipients, networks, devices or other service providers.
That evidence can help establish who controlled an account, but it is not automatically conclusive. An IP address may point to a VPN, mobile carrier, public Wi-Fi network, shared connection or compromised device. Metadata availability also depends on what was collected, how long it was retained and what legal process is required to obtain it.
This is why critics quoted by Scroll argued that the case appeared to conflate the inability to read encrypted content with the inability to identify a user. The opposite assumption would also be wrong: it has not been established that Proton had no potentially relevant information or that any particular information would have reliably identified the sender.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhat Proton reportedly did—and what remains unclear
According to the reported account, Proton’s abuse team disabled the offending accounts. Proton also reportedly said that disclosure of user information required formal legal cooperation through Swiss authorities rather than an ordinary direct request from the complainant.
That distinction matters. The available reporting does not establish every request made by Indian investigators, whether data-preservation requests were issued, precisely what information was sought, or whether a formal request through India–Switzerland mutual legal-assistance channels was completed. Nor does the available material provide a complete procedural audit of the police investigation.
A provider’s inability or legal unwillingness to disclose information through an informal channel is not necessarily proof of non-cooperation. It may reflect jurisdiction, Swiss data-protection law, the type of evidence requested, technical limitations or the need for a judicial request.
Why privacy advocates objected to the remedy
1. Blocking a whole service can punish lawful users
The alleged abuse involved particular accounts and senders. Blocking an entire email service would affect people who use Proton Mail for ordinary personal, professional, journalistic and security-sensitive communications. Access Now, the Internet Freedom Foundation and other experts described that as a potentially disproportionate response, as reported by Scroll.
The objection does not deny the harm suffered by victims. It asks whether the remedy should be directed at the alleged abusers and relevant evidence rather than at every lawful user of the service.
2. Privacy tools could acquire a chilling effect
Journalists, whistle-blowers, activists, lawyers and vulnerable communities may use privacy-enhancing services to reduce retaliation and surveillance risks. If a provider’s privacy architecture becomes a reason to threaten service-wide blocking, users may conclude that secure communications themselves are legally suspect.
That is a policy risk, not a proven result of this case. There is no established finding that Proton has withdrawn from India, weakened its security or changed its retention practices because of the litigation.
3. Foreign providers face conflicting legal systems
A provider incorporated in Switzerland may face an Indian demand for information while remaining subject to Swiss or European privacy obligations. It may also lack the technical ability to decrypt some content. Those issues cannot be solved simply by declaring that an encrypted provider should identify every user on request.
Recommended Free Tools
4. The theory could affect other privacy services
Critics fear that the same reasoning could later be applied to encrypted messaging, cloud storage, VPNs, secure collaboration platforms or anonymous publishing tools. That is a possible precedent concern, not an established rule that every encrypted service will be blocked.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.The proportionality question
Privacy advocates have framed the dispute through the Supreme Court’s constitutional privacy framework. Restrictions on fundamental rights generally require a lawful basis, a legitimate aim, necessity and proportionality, together with appropriate safeguards.
Applied to this case, the arguments look like this:
- Legitimate aim: investigating harassment, threats and sexual abuse and protecting victims.
- Legal basis: the judgment invoked Section 69A and the 2009 blocking rules.
- Necessity: whether blocking the entire service was needed when the allegations concerned specific accounts and URLs.
- Proportionality: whether the burden on millions of lawful users outweighed the investigative benefit.
- Safeguards: whether the statutory hearing, review and reason-giving requirements were followed.
These are arguments about the legality and breadth of the remedy. They should not be presented as a final declaration that the single-judge judgment was unconstitutional. The appellate proceedings are important precisely because they may clarify how Section 69A applies to a foreign privacy-focused service and what procedural safeguards are required.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Could investigators use narrower measures?
Potential alternatives include:
- preserving account, access and abuse-report records before they are deleted;
- targeting specific accounts or URLs rather than the whole service;
- seeking evidence through India–Switzerland mutual legal-assistance procedures, letters rogatory or other judicial channels;
- examining full email headers, authentication results and recipient-side records;
- forensically analysing recipients’ devices and networks;
- seeking relevant evidence from carriers, VPN providers, payment intermediaries, registrars or hosting providers where legally appropriate; and
- creating faster emergency protocols for credible threats, sexual abuse and imminent harm.
India and Switzerland are reported to have a mutual legal-assistance framework, but a treaty does not guarantee disclosure. Its usefulness depends on the specific request, the evidence sought, preservation steps, authentication requirements and the law of both countries. The available reporting does not establish whether the mechanism was used in this case, how quickly it operated or where it failed.
What Indian users should take from the case
A court direction to initiate blocking proceedings does not mean every Proton Mail account will immediately stop working. Conversely, continued access at one point in time does not guarantee future availability.
- Check current service and court-status information rather than relying on old headlines.
- Export important mail, contacts and files using lawful, provider-supported tools.
- Maintain a secondary contact address for essential personal or business communications.
- Update recovery information and ensure important organizations know an alternative address.
- Do not assume encryption equals anonymity or immunity from lawful investigation.
- Do not assume a VPN is a reliable or legally safe solution to a service block; it changes routing and adds another provider with its own trust and disclosure policies.
Businesses should also maintain continuity plans for domain mail, backups, account administration and employee access. Switching providers may reduce disruption, but it does not eliminate legal demands, metadata exposure or the possibility that a service can be abused.
The larger issue
The legitimate enforcement problem is clear: anonymous or pseudonymous accounts can make harassment difficult to attribute, and victims may face delays when evidence is held by a foreign provider. But the remedy still matters.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The Proton Mail litigation asks whether a service-wide block is necessary when the alleged conduct originated with particular users, and whether the real problem was encryption—or the absence of a fast, legally effective process for obtaining identifying evidence across borders.
That distinction is crucial. Fighting deepfake abuse and threats should not require treating privacy technology as inherently unlawful or making lawful users bear the cost of a few users’ misconduct. At the same time, privacy claims cannot be used to place services beyond legitimate investigation. The appellate record and the government’s eventual action will determine how that balance develops in India.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
