Yes, police can see your Instagram messages if they get a search warrant supported by probable cause. A federal law called the Stored Communications Act sets the rules, and since May 2026 there is no longer an end-to-end encryption option on Instagram, so Meta itself can access the content of every direct message on the platform and produce it in response to valid legal process.
What Police Need Depends on What They Want
The Stored Communications Act, at 18 U.S.C. §§ 2701–2712, sorts your account data into categories and requires a different level of legal authority for each one.1Office of the Law Revision Counsel. 18 U.S. Code 2701 – Unlawful Access to Stored Communications The more sensitive the data, the harder police have to work.
Subpoena for Basic Subscriber Information
A subpoena is the lowest bar. No judge has to find probable cause. With a valid criminal subpoena, Instagram must hand over basic account records: the name on the account, the associated email address and phone number, and the IP addresses used during recent logins and logouts.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records That identifies the account holder and where they were connecting from. It does not reveal what anyone said.
Court Order for Non-Content Records
The middle tier is a court order under § 2703(d). To get one, police must show a judge “specific and articulable facts” that the records are relevant to a criminal investigation. That opens up non-content records: message headers, expanded IP logs, and detailed login and logout timestamps.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records Police can see who messaged whom and when. They still cannot see the messages themselves.
Search Warrant for Message Content
To actually read your DMs, police need a search warrant. A judge has to find probable cause: a reasonable belief that the account contains evidence of a crime.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records A warrant covers the text of direct messages, shared photos and videos, comments, and location data tied to that activity. This is the only reliable way police get inside your conversations.
The 2026 Encryption Change
For a while, Instagram offered an optional end-to-end encryption feature for DMs. When it was turned on, Meta itself could not read the message content, which meant a warrant served on Meta produced nothing usable for those conversations.
That option ended on May 8, 2026, when Meta stopped supporting end-to-end encrypted direct messages on Instagram. Meta once again has the technical ability to read, scan, and produce the content of every DM on the platform. For police, standard warrant procedures now reach every Instagram conversation. For users who had opted into encrypted chats, that protection is gone.
Most users never opted in, so their messages were always accessible to Meta and therefore reachable with a warrant. What changed is that no Instagram user can now stop Meta from accessing their message content, regardless of privacy settings.
Deleting Messages Does Not Put Them Out of Reach
Removing a message from your inbox does not immediately remove it from Meta’s servers. Instagram’s own help documentation says the deletion process can take up to 90 days, and copies may sit in backup storage even after that.3Instagram. What Happens to Content You Delete on Instagram A warrant served during that window can still recover the data.
There is a more fundamental problem. Every conversation exists in at least two places. When you delete a message, it disappears from your inbox. The recipient still has it. Police can serve a warrant on that person’s account and pull the entire conversation from their side. Deleting your own account changes nothing about the messages the other person received.
Group chats make this worse. Every participant holds a copy of the whole thread. A warrant on any one participant’s account can produce the full history.
Preservation Requests and Non-Disclosure Orders
Police often start investigating before they have a warrant ready. Under 18 U.S.C. § 2703(f), they can send Instagram a preservation request that directs the company to save all records tied to an account. Instagram must hold that data for 90 days, and the request can be renewed for another 90.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records The request does not give police access to anything. It just freezes the data so nothing gets deleted while they work on legal process. If a preservation request lands before you delete your messages, deleting them afterward accomplishes nothing.
Meta’s general practice is to notify users when law enforcement requests their data. That notification can be blocked. Under 18 U.S.C. § 2705(b), a court can order Instagram not to tell you about a warrant, subpoena, or court order for as long as the court finds appropriate.4Office of the Law Revision Counsel. 18 U.S. Code 2705 – Delayed Notice Courts grant these orders when notice could endanger someone, lead to flight, cause destruction of evidence, intimidate witnesses, or seriously jeopardize the investigation. In practice, prosecutors request them routinely and judges usually grant them. Department of Justice policy directs prosecutors not to seek non-disclosure orders longer than one year absent exceptional circumstances, but the statute sets no maximum.
When the non-disclosure period ends, the government must tell you the request happened, which agency made it, and the legal authority for the delay.4Office of the Law Revision Counsel. 18 U.S. Code 2705 – Delayed Notice By then, police have had the data for months.
The Emergency Exception
The SCA includes a narrow exception for genuine emergencies. When someone faces an immediate threat of death or serious physical injury, Meta can voluntarily hand over message content and account records without a warrant, court order, or subpoena.5Office of the Law Revision Counsel. 18 U.S. Code 2702 – Voluntary Disclosure of Customer Communications or Records “Voluntarily” is the key word. An emergency request does not compel Meta to produce anything; the company decides whether the claim is credible. These situations are uncommon compared to standard legal process.
What This Adds Up To
Nothing you send through Instagram DMs is beyond reach if police have a valid warrant. Since May 2026, there is no encryption on the platform that would stop Meta from producing message content. Deleted messages may sit on Meta’s servers for months, and even after they are gone, the person on the other end of the conversation still has their copy. A preservation request can freeze your data before you know an investigation exists, and a non-disclosure order can keep you from finding out until long after the fact. The real protection is not a privacy setting. It is the Fourth Amendment requirement that police convince a judge they have probable cause before they read your messages.