How to Fill Out and Submit the Meta Outreach Form: Legal Requests

Meta’s law enforcement request portal lives at facebook.com/records, and it’s where authorized officers and emergency responders submit formal requests for user data from Facebook, Instagram, Messenger, and WhatsApp.¹ Whether you get a usable response comes down to two things: matching the right legal instrument to the type of data you need, and formatting the request so Meta’s compliance team doesn’t bounce it back.

Who Can Log In

Access is limited to law enforcement agents and emergency responders gathering evidence for an official investigation or responding to an emergency involving serious physical injury or death.¹ You need a government-issued email address to create an account. Personal addresses and private law firm emails won’t work.²

On first access, you have to confirm you are a government official acting in an official capacity and that your request complies with 18 U.S.C. §§ 2703 and 2711. Meta warns that submitting unauthorized requests can result in prosecution. Civil attorneys, criminal defense attorneys, and private parties cannot use this portal. The Stored Communications Act generally prohibits providers like Meta from disclosing the contents of stored communications to non-governmental entities.³

Matching Legal Process to the Data You Need

The Stored Communications Act creates three tiers of legal authority, and the document you attach determines what Meta can hand over. Submitting a subpoena when you actually need message content is the most common reason requests stall or come back partially denied.

Subpoena. A valid subpoena issued in connection with an official criminal investigation compels disclosure of basic subscriber records, which may include the account holder’s name, length of service, credit card information on file, email addresses, and a recent login IP address if available.⁴
Court order under § 2703(d). This compels disclosure of non-content records beyond basic subscriber information, such as message headers and IP address logs. You must show specific and articulable facts that the records are relevant and material to an ongoing criminal investigation.⁴
Search warrant. A warrant based on probable cause, issued under the Federal Rules of Criminal Procedure or equivalent state procedures, is required for stored content: private messages, photos, videos, posts, and location data.⁴

Scope matters when you’re seeking content through a warrant. Courts have flagged warrants that request all data from an account’s entire existence without any time limitation as potentially overbroad under the Fourth Amendment. Including a specific date range tied to the period of suspected criminal activity strengthens the warrant against later challenge and reduces the chance Meta’s legal team pushes back during review.

What to Have Ready Before You Submit

Assemble these items before you open the portal:

Account identifiers. The User ID number (the numeric string in the profile URL), vanity URL, or username for the target account. Include the associated email address if you have it, and specify the platform: Facebook, Instagram, Messenger, or WhatsApp.
Your credentials. Name, badge or ID number, agency, government email, and a direct-dial phone number.
Legal instrument. The subpoena, court order, or search warrant in PDF format, signed, with account identifiers that match the request fields.
Particularity. The specific data categories you want and a date range. Meta will not process overly broad or vague requests.

Submitting Through facebook.com/records

Once logged in, you enter your agency credentials, specify the platform and target account, select the data categories, and upload the legal document. The portal has verification screens where you confirm the uploaded file is legible and the account identifiers match what appears in the legal instrument. Mismatches are a common reason for intake rejection, so check that the UID or username in your warrant is exactly what you typed into the form.²

After submission, the system records a digital timestamp and generates a unique case number, which is sent to your government email. That case number is your reference for every follow-up and should be documented in your case file for court purposes.

Preservation Requests

If you’re still building a case and haven’t yet obtained a court order or warrant, submit a preservation request to prevent Meta from deleting the target account’s data. Under 18 U.S.C. § 2703(f), a provider must preserve records and other evidence for 90 days after receiving a request from a governmental entity, and you can renew for an additional 90 days with a second request.⁴

Preservation does not give you access to the data. It only holds the data in place while you secure the proper legal process. Meta does not retain data for law enforcement purposes unless it receives a valid preservation request before the user deletes the content. Submit preservation requests through the same portal. The 90-day clock starts immediately, so build a realistic timeline for obtaining your subpoena, order, or warrant before it expires.

Emergency Disclosure Requests

When someone faces an immediate threat of death or serious physical injury and the normal legal-process timeline would be too slow, you can submit an emergency disclosure request. Under 18 U.S.C. § 2702, Meta may voluntarily disclose both communication content and customer records to a government entity if the company believes in good faith that an emergency involving danger of death or serious physical injury requires disclosure without delay.³

Emergency requests go through the same portal.² You don’t need a warrant or court order, but you do need to describe the emergency clearly and explain why delay would put someone at risk. The disclosure is limited to information relating to the emergency, not a blanket data pull. Provide case detail so the compliance team can assess and prioritize appropriately.

Response Times and Status Checks

Standard requests generally take two to six weeks to process, depending on the type of data requested and the queue. Emergency requests are handled without delay. Meta reviews each request individually and prioritizes based on case circumstances, so including context about why your case is urgent, even for non-emergency requests, can help move things along.

You can log back into the portal at any time to check status using your case number.² If a request is rejected for insufficient legal process or missing identifiers, the portal reflects that status. When possible, fix the deficiency and resubmit rather than opening a new request from scratch.

WhatsApp: What the Portal Can and Can’t Give You

WhatsApp uses end-to-end encryption for message content, which means Meta itself cannot read the messages stored on its servers. For WhatsApp accounts, you can generally obtain subscriber information and metadata (account registration details, last-seen timestamps, IP logs) through the appropriate legal process. Actual message content is not available from Meta’s end. If message content is critical, you’ll need to obtain it from the device itself through a search warrant and forensic extraction rather than through the portal.

Blocking User Notification

Meta may notify users that their data has been requested. If notification would compromise your investigation, address this before submitting. Under 18 U.S.C. § 2705, you can obtain a court order delaying notification for up to 90 days if there’s reason to believe that alerting the user could endanger someone’s safety, cause the subject to flee prosecution, lead to destruction of evidence, result in witness intimidation, or otherwise seriously jeopardize the investigation.⁵

For administrative or grand jury subpoenas, a written certification from a supervisory official (the agent in charge or chief prosecuting attorney, or their equivalents) can delay notification for the same 90-day period without a court order. Extensions beyond the initial 90 days are available through additional court orders or certifications. Once the delay period expires without extension, the government must notify the user by mail or personal service, explaining what records were requested, when, and under what legal authority.⁵

Authentication for Trial

When Meta produces records, it typically includes a Declaration of Authenticity, a certificate signed by an authorized company representative confirming that the records were pulled from Meta’s business databases and accurately reflect what existed on the servers at the time of the search. These certificates are designed to qualify the records as self-authenticating evidence under the Federal Rules of Evidence, so you don’t need to subpoena a Meta employee to testify at trial about the records’ origin.

Two rules make this work. Rule 902(11) covers certified domestic records of a regularly conducted activity, the business-records equivalent of a custodian affidavit in written form rather than live testimony. Rule 902(13) covers records generated by an electronic process or system, authenticated by a qualified person’s certification that the system produces accurate results.⁶ Before trial, give the opposing party reasonable written notice that you intend to use the records and make them available for inspection. Keep the certificate with the records in your case file from the moment you receive them; losing or separating it creates an avoidable authentication problem later.

1
Facebook. Law Enforcement Online Requests
2
Meta. Information for Law Enforcement
3
Office of the Law Revision Counsel. 18 USC 2702 – Voluntary Disclosure of Customer Communications or Records
4
Office of the Law Revision Counsel. 18 USC 2703 – Requirements for Governmental Access
5
Office of the Law Revision Counsel. 18 USC 2705 – Delayed Notice
6
Legal Information Institute. Federal Rules of Evidence Rule 902 – Evidence That Is Self-Authenticating