"MULLVAD" Charge: What It Means and What to Do

What does MULLVAD mean on your bank statement?

If you see MULLVAD on your bank or card statement, the charge usually comes from Mullvad VPN AB, the Sweden-based privacy service behind Mullvad VPN. Mullvad sells VPN access at a flat rate of €5 per month, and its official pricing page says the rate stays the same whether you pay for one month, one year, or longer. That makes the charge look simpler than many subscription merchants, but it can still feel unfamiliar because banks often shorten or alter the descriptor shown on the statement.

In practice, the transaction may reflect a direct credit-card purchase on Mullvad.net, a PayPal payment, a Google in-app purchase, a legacy auto-renew setup, or another payment method attached to your Mullvad account. Mullvad also tells customers on its refund page that credit-card refunds require the payment token from the bank statement, often shown in a format like VPN*xxxxxxxxxx. So even when the merchant is legitimate, the exact wording on the statement may not match the name you remember from checkout.

Most common legitimate reasons this charge appears

• Direct Mullvad VPN purchase: You added time to a Mullvad account through the official website.
• Flat-rate subscription renewal: A saved payment method or older renewal setup posted another month of service.
• PayPal or Google billing path: The purchase was routed through a payment method Mullvad accepts, but the statement still points back to Mullvad.
• Family or shared-account use: Someone with access to the account number bought time for the account.
• Bank descriptor formatting: The line item may show as MULLVAD, MULLVAD.NET, MULLVAD VPN, or a tokenized variant instead of a fuller description.
• Timing mismatch: The posting date may differ from the day you generated the account or made the payment.

Why the charge can look unfamiliar

Mullvad is a privacy-focused service, and its checkout flow is unusual compared with mainstream subscription apps. The company uses anonymous account numbers instead of traditional usernames, offers cash and cryptocurrency payments, and keeps the headline price very simple. That privacy-first model is good for users, but it also means the statement line can feel detached from the exact moment you purchased the service, especially if you topped up an account for someone else or used a less common payment method.

User discussions also show recurring confusion about how the charge appears on bank statements. Some customers specifically ask whether the descriptor will say Mullvad, Mullvad.net, or something more generic tied to the payment token. Others report that a bank app or card interface makes the line item look different from what they expected. That means a real charge can still seem suspicious until you match it to the payment amount, the account number used, and the method you chose during checkout.

Fast verification checklist

1. Search your email for a Mullvad receipt, payment confirmation, support reply, or account top-up notice.
2. Check whether you created or used a Mullvad account number recently, even if you did not create a standard login.
3. Compare the amount to Mullvad's published €5 monthly rate, adjusting for exchange rate, tax handling, and the number of months purchased.
4. Review PayPal, Google Play, or banking activity for the same date in case the charge came through a different billing path.
5. Look for the payment token on the statement, especially if you may need a refund request.
6. Ask any authorized user whether they paid for privacy software, a VPN, or a shared Mullvad account.

If those checks line up, the charge is probably legitimate. If you cannot tie it to any account number, receipt, or household purchase, treat it more seriously.

Pricing breakdown and what amounts are normal

Mullvad's pricing page says the service costs €5 per month with no cheaper long-term lock-in rate. That means many legitimate charges are small and repeatable. A single month may appear around the local-currency equivalent of €5, while multi-month purchases can show as a clean multiple of that amount. Mullvad also notes that some payment methods, such as certain cryptocurrencies, are discounted, while app-store or processor-specific conversions may introduce slight differences once your bank converts the charge into your local currency.

The service also supports up to five devices on one account, so one real charge can cover more usage than you might remember at first glance. If the amount is close to a month or several months of service, that is a strong clue the transaction is valid. If the amount is wildly different and there is no matching account activity, that is when you should dig deeper instead of assuming it is normal.

How to tell a normal VPN charge from a risk signal

A normal Mullvad charge usually has at least one supporting clue: a recent account top-up, a remembered privacy-tool purchase, a matching PayPal or Google transaction, or a descriptor token that fits Mullvad's own refund instructions. The amount also tends to follow a consistent subscription pattern rather than looking random. Those are signs that the transaction is probably just unfamiliar, not fraudulent.

A stronger risk signal is a charge with no receipt, no known account number, no authorized-user explanation, and no evidence that you ever used Mullvad. It is also worth paying attention if the statement line appears alongside other unfamiliar digital-service purchases or if you recently had card problems elsewhere. In those cases, you should protect the card and contact the issuer promptly.

Refunds, cancellations, and merchant contact steps

Mullvad publishes a dedicated refunds page and makes the rules fairly clear. The company offers a 14-day money back guarantee for some payment methods if you are not satisfied. Credit-card refunds require your Mullvad account number plus the payment token shown on the bank statement. PayPal refunds can require your Invoice ID, Google in-app refunds may need the Google Order ID, and bank-wire refunds have extra requirements. Cash and cryptocurrency payments are generally not refundable, and Apple App Store refunds must be requested through Apple rather than Mullvad.

If you think the charge is real but unwanted, start with the merchant route first. Gather the account number, statement descriptor, amount, and posting date, then contact support through the official help center or by email. If you used an app-store channel, follow the platform-specific process instead of waiting for the bank to sort it out. For comparison, other subscription descriptors like SPOTIFY PREMIUM or OPENAI CHATGPT can also look vague until you identify the billing source, so the same verify-first approach applies here.

What to do if the charge is unrecognized

1. Take a screenshot of the full transaction, including descriptor, amount, and posting date.
2. Search your email, PayPal, Google Play, and any password manager notes for Mullvad activity.
3. Ask all authorized users whether they set up a VPN or paid for privacy software.
4. If you find evidence of a real purchase, contact Mullvad support with the relevant payment details.
5. If you cannot confirm the purchase, contact your bank or card issuer and report it as unauthorized.

If the bank confirms the transaction does not belong to you, they may guide you toward an unauthorized card-not-present dispute. If the service was real but not delivered or not credited correctly, a different dispute path may fit better. You can also browse the full descriptor catalog to compare how other digital-service charges are labeled and verified.

Bottom line

In most cases, MULLVAD on your statement points to a real charge from Mullvad VPN AB for VPN service. The company uses a simple €5-per-month model, but statement wording can still vary enough to cause confusion. Verify the amount, check for an account number or payment token, and review whether the purchase came through card, PayPal, Google, or another supported method.

If the evidence lines up, the charge is likely legitimate and you can pursue a merchant-side refund if needed. If there is no receipt, no account activity, and no one on the card recognizes the transaction, move quickly with your bank. Fast verification is the safest path either way.