Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › encryption

Can Police Tap WhatsApp Calls? The Legal and Technical Picture

By Freedom251 Team · · 4 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Probably not by listening in on the network or by asking WhatsApp for a recording. WhatsApp says its voice and video calls are end-to-end encrypted, so only the people on the call can hear them, and WhatsApp itself cannot, even when a call passes through its servers. That is the company’s description of its design. It does not mean every route to evidence is closed: a phone or other endpoint is a different target from WhatsApp’s servers, and what is lawful depends on the country and the legal process used.

First, what does “tap” mean?

People use the word for four different things, and the answers differ for each:

As an Amazon Associate I earn from qualifying purchases.

  • Live interception: capturing a call in real time as it travels over the network or through the provider.
  • Stored records: asking WhatsApp for account or service information about a user.
  • Device or endpoint access: getting at a phone or computer that is taking part in the call.
  • Location visibility: the other party, or anyone observing the connection, seeing an IP address.

What WhatsApp says about call content

WhatsApp says it finished rolling out end-to-end encryption in 2016, using the Signal Protocol. Its security page puts it this way: “End-to-end encryption ensures only you and the person you’re communicating with can read what is sent or listen to calls, and nobody in between, not even WhatsApp.”

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Meta Engineering’s November 8, 2023 article on call security adds the point about relays: “As always, your calls are end-to-end encrypted, so even if a call is relayed through WhatsApp servers, WhatsApp cannot listen to your calls.”

#1 Best Overall
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Meta Engineering’s July 14, 2021 explanation of WhatsApp’s multi-device design describes how this works. Call secrets are generated on the device that starts the call and encrypted for the recipient devices. WhatsApp’s servers do not have access to them. A server that helps set up or relay a call is therefore not the same as a server that holds call audio.

These are the company’s own statements about its design. They are not independent audits, and they say nothing about whether the phones on either end are secure.

Rank #2
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Why a relay does not equal a wiretap

WhatsApp’s Protect IP Address in Calls setting, described in the same 2023 article, sends calls through WhatsApp servers instead of connecting the two phones directly. The stated purpose is that the other participant cannot see your IP address and so cannot infer your rough location or internet provider. The call stays end-to-end encrypted while relayed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The setting is about what the other participant can see. WhatsApp’s description does not say it blocks lawful access or hides a call from authorities, so it should not be read as a “police-proof” switch.

Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Content versus account information

Encrypted call content is separate from the information WhatsApp handles to run the service. Its privacy policy describes account and other service information, and WhatsApp maintains a Law Enforcement Response Team and publishes recurring Government Requests for User Data reports. So a legal request to WhatsApp can in principle produce something, but the sources do not suggest that something is call audio.

Two cautions apply. First, don’t conclude that WhatsApp holds nothing because calls are encrypted. Second, don’t conclude it keeps every call-related record. The sources reviewed do not state what call logs are retained.

Rank #4
Cryptnox FIDO2 Security Key with MIFARE DESFire NFC Smart Card for 2FA MFA
  • HARDWARE 2FA AND MFA: FIDO Alliance Certified FIDO2 v2.1 with CTAP2 plus legacy U2F and CTAP1 for strong two-factor login and passwordless sign-in on services that support security keys
  • BUILDING ACCESS ON ONE CARD: MIFARE DESFire EV2 4K applet with AES encryption adds office door and physical access control alongside digital authentication
  • CERTIFIED SECURE ELEMENT: An NXP Common Criteria EAL6+ certified secure controller and Java Card platform protects your keys on a tamper-resistant chip
  • DUAL INTERFACE SMART CARD: Contactless NFC ISO 14443 plus ISO 7816 contact reader support in an ISO 7810 ID-1 format that is passive and needs no battery
  • SWISS ENGINEERED DESIGN: Built by Cryptnox as a single card for authentication and access control and backed by a 2 year warranty

The EEA version of the privacy policy (effective July 2, 2026) says calls are end-to-end encrypted. It also says messages are normally stored on users’ devices, held temporarily in encrypted form while being delivered, and deleted from WhatsApp’s servers afterward. Those terms are for the EEA and for messages. They do not describe call-log retention, and other regions may have different terms.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

The device is a separate question

Encryption protects content between endpoints. At either endpoint the call is decrypted so a person can hear it. Whether an agency can reach a particular phone, and by what lawful means, is a separate matter from anything WhatsApp’s servers can provide. The published sources do not establish what any specific agency can do with any specific device, and this article does not claim to know. Seizing a device, searching it or compelling its owner are governed by local law, and the rules differ widely.

Best Value
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-A Type TrustKey T110
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

What the law says

No single legal answer exists, because the rules depend on the country. Real-time interception, requests for stored provider data and searches of a seized device are usually treated differently, with different authorities and standards. The question that decides the outcome is who is being asked: a service provider, or the person who controls an endpoint.

The European Commission’s High-Level Group background document (June 19, 2023) treats lawful access to encrypted over-the-top communications as raising both legal and technical challenges. It sets out the policy problem. It is not evidence that police routinely intercept WhatsApp calls, and it does not set out the rules in each country.

Quick reference

Route What the sources support
Intercepting call audio in transit WhatsApp says calls are end-to-end encrypted, so traffic in transit is not described as yielding intelligible audio.
Asking WhatsApp for call audio WhatsApp says it cannot listen to calls, including when they are relayed.
Asking WhatsApp for account or service information WhatsApp has a law-enforcement process and publishes government request reports. What it holds depends on region and policy.
Accessing a participant’s device Separate from WhatsApp’s servers. Not addressed by WhatsApp’s encryption claims, and local law governs it.
Seeing a caller’s IP address The Protect IP Address in Calls setting limits what the other participant can see. It makes no claim about authorities.

What is not known

No figure was found measuring how often police intercept WhatsApp call audio, or how often they succeed, so none is given here. Anyone facing a real investigation should get advice from a qualified local lawyer who knows the jurisdiction.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

encryptionlaw enforcementPrivacysurveillanceWhatsApp

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.