Who Really Owns Your VPN? ExpressVPN Israeli Ownership and What It Means for Your Privacy

Millions of Americans pay monthly for online privacy — but a $936 million acquisition quietly handed control of the world’s most popular VPN to a company born in malware, led by military intelligence veterans, and tied to an executive who faced federal prosecution for illegal surveillance. Here’s what they didn’t tell you.

Every month, millions of Americans log in to ExpressVPN believing their internet activity is private, secure, and beyond the reach of surveillance. They pay for peace of mind. They pay for freedom online.

What most of them don’t know is that since 2021, their subscriptions have been funding an empire built by a company that once distributed malware to consumers — and whose leadership includes veterans of Israel’s most secretive cyber-intelligence unit. This isn’t speculation. It’s a documented corporate acquisition that raises serious, unresolved questions about transparency, consumer rights, and who really controls the digital tools Americans rely on to protect their free speech and personal data.

The $936 Million Deal That Reshaped Online Privacy

In September 2021, Kape Technologies — a London-headquartered company with deep Israeli roots — acquired ExpressVPN for approximately $936 million, one of the largest deals in the history of consumer cybersecurity.

The move barely registered in mainstream media. The implications were enormous.

Kape, which is controlled by Israeli billionaire Teddy Sagi, already owned several major VPN brands before the ExpressVPN purchase. With the acquisition complete, Kape’s portfolio expanded to include CyberGhost, Private Internet Access (PIA), ZenMate, and ExpressVPN — four of the most widely used VPN services in the world.

The result: millions of consumers who believe they are choosing between competing privacy products are, in reality, often choosing between four faces of the same company. That is not competition. That is a monopoly wearing a mask.

“When you think you’re choosing privacy, you may actually be choosing the illusion of it.”

A Company With a Malware Past Now Sells You Privacy

Before Kape Technologies was selling privacy, it was actively undermining it.

The company was originally known as Crossrider — a software platform that became widely associated with adware and malware distribution. Crossrider-powered browser extensions hijacked users’ systems, injected unwanted advertisements, and tracked behavior without consent. The platform became so toxic that the company underwent a complete rebrand, emerging as Kape Technologies and pivoting, with considerable irony, into the privacy and cybersecurity market.

Critics argue the rebranding was cosmetic, not cultural. Core ownership and leadership remained largely intact. Sagi retained control. The same team that oversaw Crossrider’s descent into adware territory began building a global VPN empire.

Adding to those concerns, Kape’s co-founder Koby Menachemi is a veteran of Unit 8200, Israel’s elite cyber-intelligence agency — an organization known internationally for offensive hacking operations and mass surveillance capabilities. For consumers who value personal responsibility, this history matters. You cannot make an informed decision about your digital security without knowing who built the tools you rely on — and what they built before.

The Law and Order Problem: A Former CIO and the DOJ

Perhaps the most damning chapter in ExpressVPN’s recent history involves its former Chief Information Officer, Daniel Gericke.

In September 2021 — the same month Kape completed its acquisition of ExpressVPN — the U.S. Department of Justice announced that Gericke had entered into a deferred prosecution agreement and agreed to pay a fine of $335,000. The charge was his involvement in “Project Raven,” a covert UAE government surveillance operation that targeted American citizens, journalists, dissidents, and human rights activists.

According to the DOJ filing, Gericke and two other former U.S. intelligence operatives helped build advanced hacking tools for the UAE government — tools that were then turned against Americans on American soil.

Court documents also revealed that ExpressVPN had been aware of “key facts” about Gericke’s background before and during his employment as CIO. The company acknowledged the situation and Gericke departed.

This is not guilt by association. This is the man who served as the top technology executive of the world’s most-used commercial VPN. For anyone who takes law and order seriously, the fact that a senior ExpressVPN executive accepted a deferred federal prosecution for illegal surveillance is not a footnote — it is the headline.

What Your Monthly Subscription Actually Funds

Teddy Sagi is not a passive investor. He is an active billionaire with a documented record of financial contributions to the Israeli military.

According to reporting by Israeli outlets including the Jerusalem Post, Sagi donated $3 million for scholarships for discharged IDF soldiers. Separately, during the 2023 Gaza conflict, he donated approximately 1 million shekels to fund the transportation of soldiers to the front.

None of this means every ExpressVPN subscriber endorses those causes — most subscribers simply don’t know. But that is precisely the problem.

When you pay for a service without knowing where your money ultimately flows, you aren’t exercising personal responsibility — you’re outsourcing it.

Transparency is a foundational value in a free market. Consumers have the right to know who profits from their monthly payments. Right now, the majority of ExpressVPN’s global user base does not.

What Critics of This Story Get Wrong

Some will argue that ownership history is irrelevant if the VPN product technically functions as advertised. Others suggest connecting corporate ownership to geopolitical concerns is an overreach.

These are fair arguments — up to a point.

No public evidence has emerged confirming that Kape has sold user data to a government agency or inserted technical backdoors into its products. ExpressVPN maintains it operates a strict no-logs policy, and the company has commissioned independent audits to verify that claim.

But technical audits answer technical questions. They do not answer legal ones. They don’t clarify which government has jurisdiction over your data if a request is made. They don’t address what happens under future legal pressure. And they don’t resolve whether a company staffed by military-intelligence alumni has the institutional culture to prioritize user privacy above all else.

In security and privacy, trust is earned over time — not granted because an audit passed one cycle. Kape’s documented history gives every consumer a legitimate reason to ask harder questions before renewing.

The Real Privacy Risk Is the One You Don’t See Coming

The greatest threats to free speech and personal liberty rarely announce themselves. They arrive through tools we trust.

VPNs are used by journalists protecting confidential sources, by whistleblowers exposing government waste, by business travelers securing sensitive communications, and by ordinary citizens who simply want their browsing habits to remain private. In each case, the integrity of the VPN provider is not merely a technical question — it is a moral one.

Americans who value limited government surveillance and freedom of expression have every reason to scrutinize who controls the gatekeepers of their digital lives. A VPN run by a company with a malware history, military-intelligence founding members, and a former CIO who faced federal prosecution for illegal surveillance targeting American citizens is not a neutral privacy tool.

It is a calculated risk — one most users never agreed to take.

Key Takeaways

• Kape Technologies, owned by Israeli billionaire Teddy Sagi, controls ExpressVPN, CyberGhost, PIA, and ZenMate
• Kape was formerly Crossrider — widely documented as a malware and adware distributor
• Kape’s co-founder is a veteran of Unit 8200, Israel’s premier cyber-intelligence unit
• Former ExpressVPN CIO Daniel Gericke accepted a DOJ deferred prosecution and paid $335,000 for illegal surveillance under the UAE’s Project Raven
• Sagi has made documented financial contributions directly supporting IDF military operations
• Most ExpressVPN users have no knowledge of the company’s ownership structure

The Bottom Line: Privacy Starts With the Truth

The story of ExpressVPN and Kape Technologies is ultimately a story about transparency, accountability, and the limits of trust in the digital age.

No one is compelled to use any particular VPN. But every American deserves the full picture before handing over their browsing data — and their monthly subscription fee — to a company whose history raises documented, serious concerns.

Personal responsibility begins with informed decisions. Right now, most ExpressVPN users are making decisions in the dark.

If you believe in free speech, limited surveillance, and the right to know who profits from your data, this story is not simply about a VPN. It is about who holds the keys to your digital life — and whether you ever actually chose to give them.

Stay Informed. Stay Independent.

Don’t let corporate consolidation and media silence bury the stories that affect your digital rights. Share this article with anyone who uses a VPN — and encourage them to research their provider’s ownership before their next subscription renewal. Subscribe to independent journalism, engage in the civic conversation, and remember: your privacy is only as trustworthy as the company behind it.