Partly. WhatsApp messages are end-to-end encrypted, so police cannot read them from WhatsApp's servers. Under legal process WhatsApp may share limited account data, such as subscriber details and connection records. Message content usually comes from a seized phone, examined by a forensic lab, or from the other person's device. Deleted chats are sometimes recoverable, never guaranteed.
Key takeaways
- WhatsApp cannot hand over message content it does not hold; delivered messages are not kept on its servers.
- Police can lawfully obtain limited account information and metadata from WhatsApp and telecom operators.
- Most chat evidence comes from the phones themselves, extracted by a forensic lab after lawful seizure.
- Deleted messages may survive in backups or on the other person's phone, but recovery is never certain.
- Accessing someone else's WhatsApp without consent is a crime, whoever does it and for whatever reason.
Can cyber crime track WhatsApp messages?
Not in the way most people imagine. There is no screen at a cyber cell where an officer types a number and reads that person's chats. WhatsApp uses end-to-end encryption, which means messages are locked on the sender's phone and unlocked only on the recipient's phone. WhatsApp says it cannot read them, and once a message is delivered it is not stored on its servers.
But "encrypted" does not mean "untraceable". Police in India regularly identify WhatsApp users and prove what they sent through three lawful routes:
- Account and connection data from WhatsApp, obtained through legal process.
- Telecom and internet records from mobile operators, which link a number or connection to a subscriber.
- The devices themselves, the accused's phone, the victim's phone or a third party's, examined by a forensic laboratory.
Whether a particular chat can be recovered depends on which of these is available in your case. Whether it then counts in court is a separate question, covered in our guide on WhatsApp chats as evidence.
What information can WhatsApp give the police?
WhatsApp, owned by Meta, responds to requests from law enforcement under its published guidelines. In broad terms, the position is as follows. Exact categories and practice can change, so treat this as a guide rather than a guarantee.
| Type of data | Does WhatsApp hold it? | Can police obtain it lawfully? |
|---|---|---|
| Content of delivered messages, photos, voice notes | No, not after delivery | Not from WhatsApp; only from a device or backup |
| Undelivered messages | Held encrypted for a limited period while delivery is attempted | Content still encrypted; not readable by WhatsApp |
| Basic account details (phone number, account creation, device type) | Yes | Yes, on valid legal request |
| Profile photo, "about" text, group memberships | Generally yes | May be provided on valid legal request |
| Connection information such as IP addresses | Some records | May be provided, helping identify the internet connection used |
| Call audio | No; calls are end-to-end encrypted | No |
WhatsApp also says it can preserve account records for a period when it receives a valid preservation request, so early police action matters. India's IT Rules, 2021 require large messaging services to identify the "first originator" of a message in certain serious cases on a court or government order; WhatsApp challenged that rule in court on the ground that it would break encryption, and its practical scope remains contested.
How do police lawfully get WhatsApp and telecom data?
Everything here starts with a registered complaint or FIR. Under the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS), an officer may require any person, including a company, to produce documents or electronic records needed for an investigation (BNSS s.94, earlier CrPC s.91). Platforms like WhatsApp receive such requests through dedicated law-enforcement channels, and emergency requests involving risk to life are handled faster.
The data returned rarely solves a case alone. Typically:
- WhatsApp confirms which number an account uses and when and from where it connected.
- The police ask the mobile operator who the number or IP address belonged to at those times.
- The suspect is identified, and their phone is seized with a seizure memo and, under BNSS s.105, audio-video recording of the search and seizure.
- The phone goes to a state Forensic Science Laboratory or another approved lab for extraction.
Phone tapping and interception of communications are a separate, tightly controlled power available only to authorised government agencies under the Telecommunications Act, 2023. Our article on phone tapping law explains it. None of these routes is open to private individuals or detectives.
What can a forensic lab recover from a phone?
When police hold the device, examiners use specialised forensic tools to make a verified copy of its data and analyse it. Depending on the phone model, its software version, whether it is locked, and how much time has passed, an examination may recover:
- the WhatsApp database on the phone, including chats still present;
- media files, voice notes and documents, sometimes even after the chat was cleared;
- call logs within WhatsApp, showing that calls took place and when;
- contact lists and group membership;
- traces of deleted records that have not yet been overwritten.
Modern phones encrypt their storage, and deleted data is overwritten quickly on heavily used devices, so results vary widely. A forensic report includes hash values to show the extracted data was not altered, which supports the certificate required under the Bharatiya Sakshya Adhiniyam, 2023 when the evidence goes to court.
Can deleted WhatsApp chats be traced?
Sometimes. "Deleted" covers several different situations, and each behaves differently:
- Delete for me: the message disappears from your phone only. The other person still has it.
- Delete for everyone: WhatsApp tries to remove it from all devices and leaves a "This message was deleted" note. Notification previews, forwards or screenshots may still exist.
- Disappearing messages and view once media: designed not to persist, though nothing prevents a recipient photographing a screen.
- Cleared chats or uninstalled app: the data may survive in a phone backup or a cloud backup (Google Drive or iCloud) made before deletion. If the user turned on end-to-end encrypted backups, the backup cannot be read without their password or key.
The most reliable source of a "deleted" chat is often simply the other participant. In a harassment or fraud case, the victim's own phone usually holds the complete thread. That is why victims should never delete chats or reinstall WhatsApp after an incident, and should avoid recovery apps, which can overwrite data.
Can cyber crime track WhatsApp calls?
WhatsApp voice and video calls are end-to-end encrypted, so their audio cannot be obtained from WhatsApp, and they do not appear in a mobile operator's call detail records as ordinary voice calls. What can sometimes be established, through lawful requests and device examination, is that a call happened: the call log on the phone, and connection records showing internet activity at that time.
For an investigation, that is often enough to corroborate other evidence, for example that a threatening call came from a particular account at a particular time.
Why you should never try to trace someone's WhatsApp yourself
Suspicious spouses, worried parents and fraud victims sometimes look for a shortcut: an app that "reads WhatsApp", a person who offers to "pull chats" from a number, or secretly linking another person's WhatsApp to a computer. All of these are illegal. Unauthorised access to a device or account is an offence under the IT Act, 2000 (s.43 and s.66), and secretly monitoring someone can also amount to stalking under BNS s.78 and a breach of privacy. Most services selling "WhatsApp tracking" are themselves scams that steal your money or data.
The lawful alternative is to preserve what is on your own phone, report to the police, and let them use legal process. If you believe someone has got into your account, see our guide on checking whether your phone is hacked. If the problem is an anonymous profile harassing you, read how fake accounts are traced through police.
If you need police to trace a WhatsApp account
- Keep the chat intact and export it with media to a second location.
- Note the number, profile name, group name and dates of key messages.
- Report the account in WhatsApp, which also lets you send recent messages to WhatsApp for review.
- File a complaint on cybercrime.gov.in or at the cyber cell, and call 1930 if money was lost.
- Ask the police to send a preservation request to WhatsApp early, before records age out.
A verified detective through Hire Your Detective cannot obtain WhatsApp data, but can lawfully verify the real-world claims made in those chats, such as an address, a job or a business.
Bottom line
Police cannot read WhatsApp messages off WhatsApp's servers, but they can lawfully identify accounts, link them to people through telecom records and recover chats from seized phones through forensic labs. Deleted messages sometimes survive, especially on the other person's phone or in backups. Anyone offering to trace or read another person's WhatsApp for you is offering a crime, not a service.
Sources & official links
This guide is general information, not legal advice. Laws and procedures change, and every case is different — speak to a lawyer about your situation. In an emergency, call 112.