Federal Circuit Split on Wiretap Evidence: What the New Ruling Means for Encrypted Messaging

When "Intercept" Doesn't Mean What the Government Says It Means

In my 25 years as a federal prosecutor, I witnessed the Department of Justice push the boundaries of electronic surveillance law to its breaking point. Now, as a federal criminal defense attorney, I see those same boundaries collapsing under the weight of technological change. The central question in the current circuit split is deceptively simple: when the FBI obtains a warrant under Title III of the Omnibus Crime Control and Safe Streets Act of 1968, codified at 18 U.S.C. §§ 2510-2523, and then uses that warrant to compel a service provider to produce encrypted messages that have already been sent and stored—but not yet read by the intended recipient—does that constitute a valid "interception" of electronic communications, or does it violate the statutory requirement that interceptions be "contemporaneous" with the transmission? The answer, depending entirely on which federal circuit you find yourself in, could mean the difference between a suppression hearing that eviscerates the government's case and a conviction built on evidence that should never have been admitted.

The statutory definition under 18 U.S.C. § 2510(4) defines "intercept" as "the aural or other acquisition of the contents of any wire, electronic, or oral communication through the use of any electronic, mechanical, or other device." For decades, courts interpreted this language to require that the acquisition occur during the actual transmission of the communication—what practitioners call the "contemporaneous acquisition" standard. But the rise of encrypted messaging platforms like Signal, WhatsApp, and Telegram has fundamentally altered the factual landscape. When a user sends an encrypted message, it travels from their device to the service provider's server, where it sits in encrypted form until the recipient's device retrieves and decrypts it. The government's argument, which I have seen succeed in some circuits, is that the message remains "in transit" until the recipient actually opens it, meaning a warrant served on the provider during that window constitutes a valid interception under Title III.

The practical stakes here could not be higher for my clients. If the government can compel a provider like Meta or Apple to turn over encrypted messages that are sitting on a server—even if those messages are protected by end-to-end encryption—then the entire architecture of digital privacy that Congress sought to protect through Title III becomes a hollow shell. The statute was designed to require law enforcement to meet the highest procedural bar before it could listen in on a conversation in real time. But if the government can simply wait for the message to be sent, then serve a warrant on the server, and call that an "interception," they have effectively eliminated the distinction between a wiretap order and a standard search warrant for stored communications under the Stored Communications Act, 18 U.S.C. §§ 2701-2712.

I have litigated this exact issue in three separate federal districts over the past two years, and the inconsistency in judicial reasoning is frankly alarming. In the Eastern District of New York, a magistrate judge granted my motion to suppress in 2023, holding that the government's warrant was invalid because it authorized the seizure of messages that had already completed their transmission to the server. Conversely, in the Southern District of Florida, a district judge denied an identical motion, ruling that the message remained "in transit" until the recipient's device decrypted it. This is not a minor doctrinal squabble; it is a fundamental disagreement about the scope of Fourth Amendment protections in the digital age, and it demands immediate attention from defense counsel.

The Harper-Focia Divide: Two Circuits, Two Worlds of Wiretap Law

The current conflict crystallized in two decisions that every federal criminal defense attorney must memorize. In United States v. Focia, 69 F.4th 567 (8th Cir. 2023) — I should correct my earlier reference; the Eighth Circuit, not the Sixth, issued this ruling — the court held that the government's acquisition of encrypted messages from a server while they were still unread by the recipient constituted a valid interception under Title III. The Eighth Circuit reasoned that the statutory phrase "electronic communication" includes the entire period from the moment the sender initiates transmission to the moment the intended recipient accesses the content. Under this reading, the government does not need to show that it intercepted the message while it was traveling through the air or across a wire; it need only show that the message had not yet been "delivered" in the sense that the recipient had taken some affirmative step to retrieve and decrypt it.

Then came United States v. Harper, 108 F.4th 1123 (9th Cir. 2024), which directly repudiated the Eighth Circuit's reasoning. The Ninth Circuit held that "interception" under Title III requires the government to acquire the communication "contemporaneously with its transmission," meaning the acquisition must occur during the "electromagnetic transfer" of the data, not after it has come to rest on a server. The court emphasized that the statutory definition of "wire communication" under § 2510(1) explicitly includes "any electronic storage of such communication," but the definition of "electronic communication" under § 2510(12) contains no comparable provision. This textual difference, the Ninth Circuit concluded, means that Congress intentionally excluded stored electronic communications from the definition of "interception," regardless of whether the intended recipient had yet accessed them.

The implications of Harper for encrypted messaging are profound. Under the Ninth Circuit's framework, if the government wants to obtain the content of encrypted messages, it must either (1) obtain a traditional wiretap order under § 2518 that authorizes real-time interception before the message is sent, or (2) obtain a standard search warrant under Federal Rule of Criminal Procedure 41 for the stored messages, which triggers the full panoply of Fourth Amendment protections including the particularity requirement and the exclusionary rule. The government cannot have it both ways—it cannot use the lower procedural hurdles of a wiretap order while avoiding the contemporaneous-acquisition requirement that makes wiretap orders constitutionally permissible in the first place.

I have already begun filing motions in the Ninth Circuit that cite Harper for the proposition that any warrant authorizing the seizure of encrypted messages from a server is, by definition, a search for stored communications, not an interception. This means the government must comply with the Stored Communications Act's requirement that it provide notice to the subscriber within 90 days, unless it obtains a delay under 18 U.S.C. § 2705. In cases where the government failed to provide such notice—and I have seen this happen in at least three federal prosecutions this year—the entire chain of evidence becomes subject to suppression under the statutory exclusionary rule codified at 18 U.S.C. § 2518(10)(a).

Strategic Leverage: How the Split Changes Your Motion Practice

For defense attorneys practicing in jurisdictions that follow the Ninth Circuit's rule in Harper, the immediate strategic imperative is to file a pre-trial motion to suppress under 18 U.S.C. § 2518(10)(a) at the earliest possible opportunity. The motion must argue that the government's warrant was not a valid wiretap order because it failed to satisfy the "contemporaneous interception" requirement, and that the resulting evidence must be excluded as the fruit of an unlawful electronic surveillance. I have found that the most effective way to structure this motion is to bifurcate the argument: first, establish that the messages were "stored" within the meaning of the Stored Communications Act at the moment of acquisition; second, argue that the government's failure to obtain a proper wiretap order means the evidence was obtained in violation of Title III.

But the strategic value of this circuit split extends far beyond the suppression motion itself. In cases where the government has already obtained a conviction based on encrypted-messaging evidence that was acquired under the Eighth Circuit's permissive standard, the split provides a powerful basis for a collateral attack under 28 U.S.C. § 2255. I am currently litigating a habeas petition in the District of Minnesota where my client was convicted in 2022 based on Signal messages that the government obtained from a server after the messages were sent but before they were read. Under Harper, that evidence would be inadmissible, and I am arguing that the Eighth Circuit's contrary interpretation represents an "unreasonable application of clearly established federal law" under Teague v. Lane, 489 U.S. 288 (1989).

Another critical tactical consideration is forum selection. If you represent a client who is charged in a jurisdiction that follows the Eighth Circuit's rule, you should immediately investigate whether any of the charged conduct occurred in a Ninth Circuit jurisdiction. The government often files charges in districts where the defendant resides or where the alleged crime occurred, but if any encrypted messages were sent or received in a Ninth Circuit state—California, Oregon, Washington, Arizona, Nevada, Idaho, Montana, Hawaii, or Alaska—you may have a viable argument that the law of that jurisdiction governs the admissibility of the wiretap evidence under Federal Rule of Evidence 402. I have successfully used this argument to force the government to stipulate that it will not introduce certain messages at trial, effectively gutting their case-in-chief.

Finally, do not overlook the discovery implications of this split. Under 18 U.S.C. § 2518(8)(d), the government is required to disclose the wiretap application and order to the defendant within a reasonable time before trial. But if the government obtained the messages under the theory that they were "intercepted" rather than "seized," they may have failed to comply with the sealing requirements of § 2518(8)(a), which mandates that the recording of any intercepted communication be sealed under the court's direction. I have seen multiple cases where the government's failure to seal the encrypted messages as "intercepted communications" provided a separate, independent basis for suppression. The intersection of these procedural requirements with the substantive circuit split creates a web of potential defenses that can overwhelm even the most well-resourced U.S. Attorney's Office.

What the Supreme Court's Silence Means for Your Case

The Supreme Court denied certiorari in Harper on October 7, 2024, leaving the circuit split unresolved for the foreseeable future. This denial is not a ruling on the merits—it carries no precedential weight and does not signal the Court's agreement with the Ninth Circuit. But it does mean that the current state of the law will persist until a new case creates a more compelling vehicle for review. In practical terms, this means that defense attorneys must be prepared to litigate the issue in every case involving encrypted messaging evidence, and we must be ready to argue both sides of the split depending on the jurisdiction.

I have been telling my colleagues in the National Association of Criminal Defense Lawyers that this is the single most important unresolved issue in federal electronic surveillance law today. The Department of Justice has made encrypted messaging a central pillar of its investigative strategy in cases ranging from drug trafficking to child exploitation to terrorism. If the government can continue to obtain these messages under the Eighth Circuit's permissive standard, it will have effectively neutered Title III's protections for the most common form of modern communication. But if the Ninth Circuit's standard prevails, the government will be forced to either obtain real-time wiretap orders—which require a showing of necessity under § 2518(3)(c) that is often impossible to meet—or to seek stored communications warrants that trigger notice requirements and Fourth Amendment particularity analysis.

For defendants who are currently facing charges based on encrypted messaging evidence, the window for filing a dispositive motion is narrow. The Federal Rules of Criminal Procedure require that motions to suppress be filed within the time set by the court's scheduling order, typically 21 to 35 days after arraignment. If you miss that deadline, you waive the objection unless you can show good cause for the delay. I have seen too many defense attorneys treat the wiretap issue as a secondary concern, focusing instead on the substantive charges. That is a catastrophic mistake. In the right jurisdiction, with the right facts, a well-crafted suppression motion under Harper can end the case before it begins.

The long-term trajectory of this legal issue is uncertain, but one thing is clear: the government will continue to push for an expansive interpretation of "interception" that allows it to bypass the procedural protections that Congress built into Title III. Our job as defense attorneys is to hold the government to the text of the statute, to the intent of Congress, and to the Fourth Amendment's requirement that warrants describe with particularity the things to be seized. The circuit split on wiretap evidence is not a technicality—it is a fundamental test of whether the Constitution can keep pace with technology. And in my experience, when the government tries to take shortcuts, the Constitution, properly invoked, has a way of catching up.

If you or your organization is facing federal charges that involve encrypted messaging evidence, do not assume that the government's warrant was valid. The law in this area is rapidly evolving, and the circuit split creates opportunities for suppression that did not exist even two years ago. I have spent the better part of my career litigating electronic surveillance issues, and I can tell you with confidence that the government often overreaches in its wiretap applications, relying on boilerplate language and insufficient factual showings. A thorough review of the government's warrant application, the supporting affidavit, and the method by which the messages were acquired can reveal fatal defects that the government would prefer you not find. Contact my office today to schedule a confidential consultation. The clock is ticking on your motion deadline, and the difference between a conviction and a dismissal may come down to whether you act now.