There are only three legal ways to get cell phone records: pull your own from the carrier after they verify your identity, get the account holder’s written consent to release someone else’s, or use a court-issued subpoena or warrant. Anything else — calling the carrier and pretending to be the account holder, using an old password on a shared account, buying records from a data broker who obtained them by deception — can be prosecuted as a federal crime carrying up to ten years in prison.1Office of the Law Revision Counsel. 18 U.S. Code 1039 – Fraud and Related Activity in Connection With Obtaining Confidential Phone Records Information of a Covered Entity Which path applies to you depends on whose records you need and why.
Getting Your Own Records From the Carrier
As the account holder, you have a direct right to your own records. The carrier has to give them to you, but only after verifying you are who you say you are.2Federal Communications Commission. Protecting Your Privacy: Phone and Cable Records Federal regulations set out the verification methods:
- By phone: the carrier can release call details only after you provide a pre-established password. Basic biographical information like your birthday or the last four digits of your Social Security number is not enough.
- In person: bring valid photo ID that matches the account.
- Online: the carrier must authenticate you through a password before showing you call detail records.3eCFR. 47 CFR Part 64 Subpart U – Privacy of Customer Information
What you get is metadata: call logs with numbers, dates, times, and durations; text logs showing who you messaged and when; and data usage. You do not get the content of your text messages. Most major carriers delete text content from their servers almost immediately after delivery, and no federal law requires them to keep it.4Fordham Journal of Corporate and Financial Law. Cell Phone Forensics: Powerful Tools Wielded By Federal Investigators
Getting Your Minor Child’s Records on a Family Plan
If you’re the account holder on a family plan, your child’s line is treated the same as your own. You can pull call and text metadata for a minor’s number through the carrier’s portal or customer service without any separate legal process. Courts have not recognized a minor’s privacy interest against a parent who manages the account.
The problem shows up when the other parent holds the account. At that point the line belongs to someone else as far as the carrier is concerned, and you’re back to the rules for third-party records: consent or a court order.
Getting Someone Else’s Records With Their Consent
If the person whose records you need is cooperative, written consent is the simplest route. They sign an authorization, the carrier receives it, and the records are released. Verbal permission is not enough. Carriers want documentation, and you want proof if the person later changes their story.
A workable authorization identifies the person consenting, the exact records requested (call logs for a specific date range, for instance), and the person authorized to receive them. Notarization adds protection and is inexpensive. The Stored Communications Act specifically allows providers to disclose both content and non-content records with the “lawful consent” of the customer or subscriber, so a properly documented authorization gives the carrier the legal cover it needs.5Office of the Law Revision Counsel. 18 U.S.C. 2702 – Voluntary Disclosure of Customer Communications or Records
Getting Records Through a Civil Subpoena
When you can’t get consent — divorce, custody, and personal injury cases are the usual scenarios — a subpoena is the tool. A subpoena is a court-backed order that compels the carrier to produce specific records. In federal court, an attorney can issue one directly as an officer of the court. State court rules vary, but the mechanism is the same: you need an active lawsuit.
The subpoena has to be formally served on the carrier’s legal compliance department, not sent to a general customer service address. Carriers have dedicated compliance teams that review each subpoena for legal sufficiency before producing anything, and they charge processing fees that vary by carrier and the complexity of the request. Those fees are the requesting party’s responsibility.
What a civil subpoena will get you is non-content records: call logs, text metadata (who texted whom and when), and subscriber information like the account holder’s name and address.6Office of the Law Revision Counsel. 18 U.S.C. 2703 – Required Disclosure of Customer Communications or Records It will not get you the actual text of messages or emails. That requires a warrant, which is only available through criminal proceedings. In a divorce, this is the frustration people run into constantly. You can prove your spouse called a particular number 47 times in a month. You generally cannot get the carrier to hand over what was said.
One procedural point catches people off guard: in many jurisdictions, the account holder must be notified when their records are subpoenaed. Your attorney handles the notice, but expect the other side to learn about the request before the records are produced.
Law Enforcement Access — and Why It Matters to You
Private parties cannot use the tools below, but knowing they exist explains what information about a phone account is theoretically retrievable and by whom.
For basic subscriber information and call or text metadata, law enforcement can obtain a court order under the Stored Communications Act by showing “specific and articulable facts” that the records are relevant to an ongoing criminal investigation — a standard below probable cause.6Office of the Law Revision Counsel. 18 U.S.C. 2703 – Required Disclosure of Customer Communications or Records For the actual content of messages or emails, investigators need a search warrant supported by probable cause.7Cornell Law School. Federal Rules of Criminal Procedure Rule 41 – Search and Seizure
Historical cell-site location information — the record of which towers a phone connected to and when — has its own rule after the Supreme Court’s 2018 decision in Carpenter v. United States. Accessing that data is a Fourth Amendment search, and the government generally needs a warrant on probable cause. A lower-standard court order is not enough.8Supreme Court of the United States. Carpenter v. United States
Carriers can also disclose records to law enforcement without any warrant, order, or subpoena when they believe in good faith that an emergency involving danger of death or serious physical injury requires immediate disclosure.5Office of the Law Revision Counsel. 18 U.S.C. 2702 – Voluntary Disclosure of Customer Communications or Records This covers situations like bomb threats, active shootings, and child abductions. It is not a route available to private parties, and carriers scrutinize the good-faith requirement before acting.
How Long Carriers Keep the Records You Want
Legal authority is only half the equation. The carrier can only produce what it still has, and retention periods are shorter than most people expect.
- Call detail records: the FCC requires carriers to retain toll call records for at least 18 months. Most major carriers keep call logs for one to two years, sometimes longer.
- Text message metadata: typically one to two years, similar to call logs.
- Text message content: most major carriers, including AT&T, Verizon, and T-Mobile, delete message content from their servers shortly after delivery, in some cases within days. No federal law requires them to hold it.
- Cell-site location information: historically about one to two years, though carriers update these policies over time.
- IP session and data logs: highly variable, from 60 days to over a year.
If you think you’ll need someone’s records for a legal matter, time is against you. Records that exist today may be gone next month.
Preserving Records Before They Disappear
Preserving records early is the step people skip most often, and the one that most often decides whether the evidence is available when the subpoena finally arrives.
If you anticipate litigation, your attorney can send a preservation letter (sometimes called a litigation hold notice) to the carrier’s legal compliance department. A useful preservation letter identifies the account and date range at issue, specifies the categories of data to preserve, states the reason for the hold, and instructs the carrier to override its routine deletion schedule. The letter does not compel production. It just stops the clock while you pursue the subpoena or other process needed to actually obtain the records.
Law enforcement has a statutory version of this. Under the Stored Communications Act, a government agency can require a carrier to preserve records related to a specific account for 90 days while it obtains formal legal process, and can renew the request for another 90 days.9Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records Preservation applies only to records that already exist; it does not require the carrier to start capturing new data going forward.
Cloud Backups When the Carrier Doesn’t Have the Content
Encrypted messaging apps like iMessage, Signal, and WhatsApp mean the carrier never has the message content in a readable form. It passes through encrypted, and a subpoena to the carrier produces nothing.
Cloud backups are the workaround that matters. If a user backs up a phone to iCloud, the backup can include message history, photos, voicemail, and app data. Apple’s law enforcement guidelines confirm that iCloud content “may be provided in response to a search warrant issued upon a showing of probable cause, or customer consent.”10Apple Inc. Legal Process Guidelines Consent is available to civil parties too; a warrant is not.
One caveat can defeat the whole approach. Apple’s Advanced Data Protection feature, when the user turns it on, applies end-to-end encryption to most iCloud data, including backups, photos, notes, and iCloud Drive. Apple itself cannot decrypt the data, so a warrant returns nothing readable. Email, contacts, and calendar data remain accessible, but the bulk of stored content is not.10Apple Inc. Legal Process Guidelines Whether the person whose records you need has enabled this feature is something you often will not know until the process is served.
Penalties for Skipping the Legal Process
The exposure runs in two directions, criminal and civil, and both are meaningful.
On the criminal side, obtaining phone records through false pretenses — calling the carrier and impersonating the account holder is the textbook example — is a federal crime carrying up to 10 years in prison. If the conduct involves more than $100,000 in value or targets more than 50 customers within a 12-month period, an additional five years can be added. If the records are obtained to facilitate stalking, domestic violence, or threats against law enforcement, another five-year enhancement applies.1Office of the Law Revision Counsel. 18 U.S. Code 1039 – Fraud and Related Activity in Connection With Obtaining Confidential Phone Records Information of a Covered Entity
On the civil side, anyone whose stored communications are accessed in violation of the Stored Communications Act can sue. Statutory damages start at $1,000 even without proof of specific financial loss. On top of that a court can award actual damages, any profits the violator made from the access, punitive damages for willful violations, and reasonable attorney’s fees.11Office of the Law Revision Counsel. 18 U.S. Code 2707 – Civil Action The pattern that produces most of these cases is a domestic dispute where one spouse uses an old password or a shared account to pull the other’s records. It is exactly the shortcut the statutes are written to punish.