“TRUST STARTS & ENDS WITH THE TRUTH”
“TRUST STARTS & ENDS WITH THE TRUTH”
Matt is both the company founder and a nationally renowned private investigator. Matt is an intelligence specialist who excels in detecting and preventing the illegal interception of communications and in providing high-tech covert surveillance. Matt has years of hands on experience in the investigation industry and has developed a reputation for incorporating state of the art technology and innovative ideas to provide effective solutions for his clients. Matt also serves as Treasurer for the Executive Board of Directors of FALI, The Florida Association of Licensed Investigators.
An encrypted phone is a mobile device that scrambles its stored data or messages so only someone holding the right key can read them. If you own a recent iPhone or Android phone, you already carry one. In my communication security work, the real questions are about the gaps: which messages are protected and what encryption cannot stop.
An encrypted phone turns everything it stores into unreadable code until the right key opens it. Your passcode, fingerprint, or face scan is part of how the phone reaches that key.
A file copied off a locked, encrypted phone looks like random noise to anyone who lacks the key.
The easiest way to picture the layers is a house. Storage encryption is a locked safe inside it, and end-to-end encryption is a sealed envelope you drop in the mail that only the addressee can open.
Both protections share one weak point. Neither helps once someone is already inside the house holding your key, and that situation is where many of the phone cases my team sees begin.
The term “encrypted phone” gets used for three different things, and each one protects something different.
| What people mean | What it protects | Who has it | What it does not stop |
|---|---|---|---|
| Built-in device encryption | Photos, messages, and files stored on a locked phone | Anyone with a recent iPhone that has a passcode, or an Android phone that launched on Android 10 or later | Anyone who has your passcode, or your phone while it is open |
| End-to-end encrypted messaging | Messages and calls while they travel between devices | Users of apps such as Signal, and of built-in messaging apps when encryption is active | Spyware reading messages on the phone itself |
| Hardened encrypted devices | Communications on a closed, private network | A small specialty market, best known through criminal networks | Whoever runs the network, as the FBI's ANOM operation showed |
Modern smartphones encrypt their storage by default, so the average reader already owns an encrypted phone.
On Android, every device that launches with Android 10 or higher must use file-based encryption. File-based encryption lets different files carry different keys, which the phone can open independently.
On an iPhone, the switch is your passcode. Setting one turns on Data Protection automatically, and the passcode also feeds the encryption keys, so a stronger passcode means stronger protection. A lost iPhone with a passcode is a far harder target than one left without a lock screen.
A phone that says “encrypted” is telling you its stored data is scrambled and readable only after someone enters the passcode. Photos, messages, and app data stay unreadable to someone who copies them without your passcode. The label covers storage alone and says nothing about how your texts travel across the network.
On an iPhone, a set passcode means Data Protection is on. On an Android phone that launched with Android 10 or later, file-based encryption is required from the factory. Android menu names differ by manufacturer, so look in the Security settings for an encryption status line, and make sure a screen lock is set.
Storage encryption protects what sits on your phone, while message encryption protects what leaves it, and having one does not guarantee the other.
A standard text message travels over your carrier’s network. CISA, the federal cyber defense agency, warns that text messages and voice calls can be intercepted, and it points users toward vetted messaging apps with end-to-end encryption for texts and calls.
End-to-end encryption means only the sender and the recipient hold the keys to a conversation. Apps such as Signal work this way, and so do some built-in messaging apps once every participant meets the app’s encryption requirements.
Backups are the other gap. Apple uses standard data protection for iCloud by default, and end-to-end encryption for most iCloud data applies only after you turn on Advanced Data Protection.
A common corporate example shows the problem. An executive locks down a work phone, then texts deal terms by SMS to a colleague on a different platform, and those terms cross the carrier network as an ordinary text. For businesses, a corporate communication security audit maps where gaps like that sit across phones, email, and meeting rooms.
Encryption does not protect you from someone who already has access to your open phone or has installed monitoring software on it.
If you think someone is monitoring your phone, put your safety first. The FTC warns that uninstalling a monitoring app can tip off the person who installed it, and it recommends talking with a domestic violence counselor as a first step. The National Domestic Violence Hotline answers at 800-799-7233, or you can text START to 88788, ideally from a phone the other person has never handled.
Stalkerware works inside the phone, where your messages are already decrypted so you can read them. The FTC says stalkerware apps can give an abuser secret access to location, calls, texts, email, and photos, and one app the agency sued hid in the phone’s settings under the name “System Service.”
Stalkerware is built to stay hidden, so the FTC suggests watching for changes in how your phone behaves and in what the other person knows.
Red flags:
In the phones my team examines, the owner often assumed encryption covered everything, while the person monitoring them had physical access to the device, with the passcode, at some point.
Southern Recon Agency examines only phones our clients own. If the red flags fit, a mobile forensics examination can check your device for monitoring software and document what it finds, and our stalking and harassment investigations team can work with your advocate and attorney when stalking is part of the picture.
Hardened encrypted phones are specialty devices sold on the promise of private, closed-network messaging, and the best-known examples were marketed to criminal groups.
ANOM is the largest case. The FBI secretly operated the network, and the Justice Department reports that ANOM put more than 12,000 devices into circulation across 100 countries. The FBI also brought cases against earlier providers, including Phantom Secure and Sky Global.
For everyone else, ANOM shows that a phone sold as unbreakable is only as private as whoever runs its network.
Encryption itself is standard, and recent iPhones and Android phones ship with it turned on. The ANOM prosecutions focused on distribution, and defendants pleaded guilty to a racketeering conspiracy for supplying devices to criminal syndicates. This answer is general information for US readers, and laws differ from country to country.
Law enforcement seeks access to phones through legal process, such as a warrant, and the ANOM case shows another route. The FBI had no need to break encryption on those devices because it ran the network itself. For anyone with a lawful concern about their own phone, the practical question is who else has had access to it.
Built-in encryption covers everyday risks for many users, while some people face threats aimed at them personally and need a closer look at their whole communication setup.
CISA wrote its mobile guidance for “highly targeted” individuals, such as people in senior government, military, and political roles. My team applies the same thinking to executives handling sensitive deals, attorneys protecting privileged conversations, and anyone in a contentious divorce or a stalking situation.
For those readers, the phone is one entry point among several. Conversations can also leak through hidden microphones in offices, homes, and vehicles, which is why technical surveillance countermeasures sweeps look beyond the handset, using methods like those in our guide to how hidden listening devices are found.
A recent iPhone or Android phone with a screen lock is already an encrypted phone. That protection covers stored data only. Texts need an end-to-end encrypted app to stay private in transit. Hardened “encrypted phones” are a niche with a criminal track record, and the FBI ran the biggest network of them. Encryption cannot stop stalkerware on a phone someone has already accessed, which is where a forensic check helps.
Southern Recon Agency checks the phones our clients own for stalkerware, tracking, and unauthorized access, then documents what we find.
Request a confidential consultation
Southern Recon Agency is a Florida-licensed private investigation agency (A1400197) and handles cases nationwide.
Yes, in two situations. Stalkerware on your phone can read messages after the phone decrypts them for you, and ordinary SMS texts can be intercepted in transit. An end-to-end encrypted messaging app closes the second gap, and a forensic examination of your own device can rule out the first.
Only if you turn on Advanced Data Protection. Apple uses standard data protection for iCloud by default. With Advanced Data Protection on, most iCloud data, including iCloud Backup, Photos, and Notes, is end-to-end encrypted and can be decrypted only on your trusted devices.
With Advanced Data Protection turned on, Apple does not hold the keys to your end-to-end encrypted data. Recovery then depends on your device passcode, a recovery contact, or a recovery key, which is why Apple asks you to set up a recovery contact or key first.
A licensed investigator has no legal right to break into someone else’s phone, and unauthorized access is a crime. Southern Recon Agency examines only devices our clients own. Our article on whether a private investigator can tap your phones explains the legal limits in more detail.
Yes, in two forms. Recent iPhones and Android phones encrypt their storage by default, and a small market still sells hardened devices built around private messaging networks. Law enforcement has shut down several of those networks, including ANOM, Phantom Secure, and Sky Global.
The information in this article is general and is not legal advice. For help with a specific situation, talk to a licensed attorney in your state.
Matt Aubin is the founder and managing partner of Southern Recon Agency, which he started in 2010. He leads the firm’s counter-surveillance practice, built its digital forensics program, and is a court-qualified expert witness in cyber intelligence and cyber forensics. Matt is a Certified TSCM Technician, a Certified Digital Forensics Examiner, and a Florida Board Certified Investigator, and he is a member of the U.S. Secret Service Miami Electronic Crimes Task Force and FBI InfraGard Tampa.