WhatsApp's end-to-end encryption is a lie

Earlier this year, a federal investigation into whether Meta's WhatsApp had access to encrypted messages was abruptly ended, according to two people familiar with the matter. The closure cut short an investigation that had raised technical questions about how the service handles user data behind the scenes.

The case, led by a special agent in the Commerce Department's Bureau of Industry and Security, was investigating allegations that some Meta employees and contractors could access WhatsApp messages despite the app's use of end-to-end encryption.

Discover more articles in search results.

After about 10 months of document collection and interviews, the agent sent an email on Jan. 16 to more than a dozen federal officials outlining his preliminary findings. According to files seen by Bloomberg and confirmed by recipients, the agent said Meta’s systems allow access to message content in ways that contradict WhatsApp’s public description.

The federal agent said in the email that “Meta can indeed view and store all text messages, photos, audio recordings, and videos” in unencrypted form.

The email further described a “tiered permissions system” in place since at least 2019, to give access to WhatsApp content to employees, contractors, and a “significant number of outsiders.”

The agent also said that this behavior could involve “civil and criminal violations spanning multiple federal jurisdictions,” although he did not specify which laws may have been violated.

Shortly after the email was released, the Bureau of Industry and Security shut down the investigation. Two people familiar with the decision described the shutdown as sudden, and one of them said it was ordered by senior management. The Commerce Department's Bureau of Industry and Security declined to provide details.

Meta stated that WhatsApp cannot access encrypted messages.

follow us

Google preferences

Leave a Comment

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).