Snapchat Law Enforcement Data Request: Police & Government Guide

Snapchat is a visual-messaging app made by Snap Inc. that is built around ephemerality: photos and videos (“Snaps”) and chats are designed to disappear after they are viewed. The platform has more than 450 million daily active users worldwide and skews heavily toward teenagers and young adults, which is precisely why it recurs in serious investigations. Officers encounter Snapchat in sextortion and child-sexual-abuse-material (CSAM) cases targeting minors, in grooming and enticement, in the sale of illegal drugs and counterfeit pills, in account-takeover and credential theft, and in harassment and threat cases. Snap Inc. is a United States company headquartered in Santa Monica, California, and the disclosure of Snapchat account records is governed primarily by the federal Stored Communications Act (18 U.S.C. § 2701 et seq.). Because Snap’s servers are engineered to delete most content by default, the single most important step for an investigator is speed: a preservation request filed early is often the only thing standing between an investigation and permanently lost evidence.

Identifiers for a data request

Before Snap can preserve or disclose records, law enforcement must identify the account by its username. A Snapchat username is a unique identifier of 3–15 characters that begins with a letter and contains only letters, numbers, hyphens, underscores or periods. A user may change their username only once every 365 days, and a change does not affect Snap’s ability to act on a request that specifies either the former or the new username.

A username must not be confused with a display name (sometimes called a vanity name). Snap cannot locate an account by display name: display names are not unique, can be changed repeatedly, and can be customised differently by each viewer. When submitting legal process, you may also supply the registered email address, phone number (with the international calling code for non-U.S. numbers) or hexadecimal User ID, but do not assert that an email or phone number is linked to a username unless you are certain it is. Avoid extraneous identifiers such as a date of birth or given name, which Snap cannot use to locate an account. Always specify the target date range and note that Snap returns records in Coordinated Universal Time (UTC).

What data Snapchat provides

Snap operates a tiered disclosure model keyed to U.S. legal-process standards under the Stored Communications Act:

Legal process	Standard	Data produced
Subpoena (including grand jury)	Relevance	Basic subscriber information: current and previous usernames, email addresses and phone numbers (and whether the user verified them), display names, account creation date and registration IP address, IP-address logs and timestamps for account actions, and information about the user’s account settings and use of Snapchat services
Court order (18 U.S.C. § 2703(d))	Specific & articulable facts	All subpoena-level subscriber information plus communications metadata (logs of message sender, recipient, date and time) and non-communications metadata (for example, Friends List, device identifiers and Memories metadata logs)
Search warrant (probable cause)	Probable cause	All of the above plus stored content where it still exists (saved Memories, and any undeleted or unopened Snaps and Chats) and location data to the extent available. Content saved to the “My Eyes Only” section of Memories is encrypted and cannot be decrypted by Snap

Content deletes by default — this is the decisive point. Snap’s servers are designed to automatically delete a shared Snap once it has been opened by all recipients, and to delete unopened Snaps after a set period (an unopened Snap sent directly is deleted after about 30 days, and an unopened Snap in a group is deleted after about 24 hours). One-to-one Chats are likewise deleted by default after they have been viewed. Stories are deleted by default about 24 hours after they are posted. In a large share of cases, therefore, Snap simply has no message content to produce, even under a warrant.

What survives. The main exception is Memories, Snap’s cloud-storage service, where Snaps, Stories and camera-roll media a user has saved remain backed up until the user deletes them. Note that because Memories functions as cloud storage, Snap will not produce Memories files in response to legal process that requests interpersonal communications — request stored content explicitly. Submissions to the Snap Map and Spotlight may be saved for longer than ordinary Stories. For location, Snap can provide geolocation data for an account as a whole, or with respect to Memories, but it cannot isolate location tied to specific Snap Map posts or communications, and location data requires a search warrant.

Prospective collection. For metadata or content collected on a going-forward basis, Snap requires a valid order under the Pen Register Act (18 U.S.C. § 3121 et seq.) or the Wiretap Act (18 U.S.C. § 2510 et seq.) respectively, in addition to the standards above.

User notification: Snap’s default policy is to notify Snapchatters when it receives U.S. legal process seeking the disclosure of their records. It does not notify users of preservation requests. Snap recognises two exceptions to notice: where prohibited by a court order issued under 18 U.S.C. § 2705(b) or other legal authority (the non-disclosure order must be for a finite duration), and where, in its sole discretion, it identifies an exceptional circumstance such as child exploitation, the sale of lethal drugs, or a threat of imminent death or serious bodily injury.

How to submit a request

1. Register on LESS. Visit less.snapchat.com and create an account with your government-issued email address. Snap verifies registrants for security before granting access; in the interim you may communicate via [email protected]. LESS lets you track the status of submissions and is the preferred channel.
2. File a preservation request first. Because Snapchat data is not retained for long, submit a preservation request under 18 U.S.C. § 2703(f) as early as possible — before you have your formal legal process in hand. Snap preserves a snapshot of available records for up to 90 days and will extend that for one additional 90-day period on a clearly marked extension request. Preservation is what stops default deletion from destroying your evidence.
3. Submit your legal process. Upload the subpoena, 2703(d) court order or search warrant to LESS as a non-editable static file (such as a PDF) that names “Snap Inc.” as the custodian of records and is signed and dated. Specify the identifier(s), the precise data sought and the target date range. If a single request implicates more than 10 accounts, also provide an editable copy.
4. CSAM and NCMEC cases. Snap reports child sexual exploitation to the NCMEC CyberTipline. If your investigation originated from a CyberTipline report, reference the report number so Snap can scope production accurately, and flag child-exploitation matters so Snap can apply the relevant user-notice exception.

Emergency disclosure requests

Where there is a good-faith emergency involving an imminent threat of death or serious bodily injury, Snap may voluntarily disclose account records without legal process, consistent with 18 U.S.C. §§ 2702(b)(8) and 2702(c)(4). U.S. and non-U.S. officers should complete Snap’s Law Enforcement Emergency Response Form at less.snapchat.com/emergency. A LESS account is not required to submit an emergency request.

The request must come from a sworn law enforcement official using an official law-enforcement email domain, and should:

• identify the account by username or hexadecimal User ID, with the associated phone number or email if known;
• describe the nature and recency of the emergency as specifically as possible, including who is threatened;
• specify the information sought and how it will help resolve the emergency.

Impersonating a law enforcement official may be a crime in the United States and elsewhere. Non-urgent inquiries submitted through the emergency form are redirected back to the standard channels (LESS or [email protected]).

For India: legal basis and process

Snap is a U.S. entity, so Indian authorities cannot serve U.S. legal process directly. Domestic instruments establish the authority to demand data; the cross-border mechanism determines whether Snap will produce it.

• IT Act, 2000 — Section 69: Authorises the Central or State Government to direct interception, monitoring or decryption of information in the interest of sovereignty, security, public order or the prevention of offences. Such directions bind intermediaries operating in India; compliance for U.S.-stored content remains subject to the MLAT route.
• IT Rules, 2021 — Rule 3 (Intermediary Guidelines): Significant social media intermediaries must appoint a nodal contact person available around the clock for law enforcement coordination and retain records for at least 180 days. Snap does not publish a standalone India nodal-officer contact for account data; route first-level coordination and content matters through LESS or [email protected], and escalate to MLAT for subscriber records and content.
• BNSS, 2023 — Section 94: Empowers a court or an officer-in-charge of a police station to issue a summons (including in electronic form) for the production of documents and electronic communications. This is the domestic production mechanism; for a U.S. provider it is referenced within the MLAT request.
• Mutual Legal Assistance Treaty (MLAT): For subscriber records and content the path is: investigating officer drafts the request › the Ministry of Home Affairs (MHA) Central Authority reviews and transmits it › the U.S. Department of Justice Office of International Affairs (OIA) compels Snap through U.S. court process. Non-U.S. law enforcement may also use a CLOUD Act bilateral agreement or letters rogatory where available. As a courtesy to non-U.S. law enforcement, Snap will review properly submitted preservation requests and may, at its discretion, preserve records for up to one year while the MLAT or letters-rogatory process runs.

Indian investigators should file a preservation request through LESS immediately, given Snapchat’s rapid default deletion, and may submit an emergency disclosure request directly where life is at imminent risk.

What you’ll need

• A government-issued email address to register on LESS (private domains are rejected);
• At least one valid identifier: the Snapchat username, registered email, phone number (with country code), or hexadecimal User ID — never a display name alone;
• The target date range, stated clearly with the month spelled out, and an awareness that records are returned in UTC;
• The appropriate legal instrument — subpoena for subscriber information, 2703(d) order for metadata, search warrant for stored content and location;
• A preservation request filed first, under 18 U.S.C. § 2703(f), before content deletes;
• For CSAM cases: the NCMEC CyberTipline reference number;
• For Indian agencies seeking content: an MLAT request through the MHA Central Authority, plus a parallel LESS preservation request filed at once.

For a full directory of law enforcement request portals across major platforms, visit our LERS portal hub or the platform-by-platform LERS guide.