How to Find a Subpoena Recipient From Only a Phone Number
A witness matters to your case and all you have of them is a number in a call log, a text thread, a signature block, or a client’s phone. You cannot put ten digits on a subpoena and you cannot hand ten digits to a process server. What you can do — and what a consumer reverse lookup can never do — is use the case you already have. An open action carries subpoena power, and that power reaches the carrier holding the subscriber file behind the number. This page is about running that sequence in the right order: which instrument goes first, who each one is addressed to, what each may lawfully ask for, and where the number itself will quietly mislead you about the answer.
The Short Version
A subpoena is served on a person, not on a number. Rule 45(b)(1) says service “requires delivering a copy to the named person and, if the subpoena requires that person’s attendance, tendering the fees for 1 day’s attendance and the mileage allowed by law.” So identification is not a convenience step before the real work — it is the precondition to the rule being satisfiable at all. For a litigant, the usual route runs through two subpoenas: first a narrow command to the carrier currently serving the number, for the subscriber’s name and address of record; then the witness subpoena itself. The first one is lawful for you to receive in a way most attorneys assume it is not. Under 18 U.S.C. § 2702, a provider “shall not knowingly divulge a record or other information pertaining to a subscriber to or customer of such service… to any governmental entity” — and subsection (c)(6) permits divulging that same non-content record “to any person other than a governmental entity.” A civil litigant is not who that bar is aimed at. We do the records half for United States subjects, usually within 24 hours; the subpoenas are yours to issue.
Watch: Turning a Phone Number Into a Subpoena Recipient
First, Do You Actually Have a Subpoena to Serve
Everything on this page depends on one thing being true.
This page is written for someone with a filed case. That is not a formality and it is not upselling. Subpoena power is a creature of a pending action: there is an issuing court, a caption, a case number, and a rule that says who may sign. Without those, there is no instrument, and every route described below is closed to you — not difficult, closed.
If what you have is a number and a grievance rather than a number and a docket, you are on the wrong page, and the honest thing is to say so before you read another two thousand words. What is available to you is ordinary public-records research, and identifying a person from a phone number without a case sets out what that route can and cannot reach. It reaches less. It is not nothing.
The second condition is geography. We work United States subjects. A number that rings in another country, or a subscriber whose records sit with a foreign provider, is outside what we can research and largely outside what Federal Rule of Civil Procedure 45 can reach — the rule provides for service anywhere in the United States, and sends a subpoena directed to a national or resident abroad down an entirely different statutory road. Say the word early if that is your situation, because the answer will not improve by starting the work.
Rule 45 Is Federal, and Your Forum May Not Be
Everything quoted on this page is the federal rule. State practice varies materially and the differences land exactly where this errand lives: who may issue and sign, how far the subpoena reaches, whether a witness fee must be tendered at service and in what amount, and whether an out-of-state subpoena must be domesticated before it means anything. Several states have adopted language close to Rule 45; several have not. Read your own forum’s rule before you draft, and treat the federal text below as the shape of the problem rather than the law of your case.
Two Instruments, Two Recipients, Two Sets of Rules
Which paper goes to whom, and what each one can and cannot ask for.
| The question | Subpoena one: the carrier | Subpoena two: the witness |
|---|---|---|
| Who it is addressed to | The custodian of records at the company currently serving the number — established from routing and porting data, not from the area code or the original prefix holder. | The named human the subscriber record identified, once records work has confirmed they are the person who was actually using the line. |
| What it may ask for | Non-content subscriber records: name on the account, address of record, service dates, and whether and when the number was ported. Not message content, which sits on the other side of the statutory line. | Testimony, documents in that person’s possession, custody or control, or both — whatever your case actually needs from this witness. |
| What decides where it must be complied with | The carrier’s compliance address. Large carriers centralise this, so the place of compliance frequently has nothing to do with your forum or with the witness’s state. | Measured from the person: residence, employment, or where they regularly transact business in person. Never from the area code. |
| What it will not get you, at any width | The contents of communications, which the statutory permission excludes on its own terms. Also anything the carrier does not hold: who was physically carrying the handset, and whether the billing address is where the person sleeps. | Documents outside that person’s possession, custody or control. A witness cannot be commanded to produce their employer’s file merely because they have seen it. |
| What you are actually relying on | A statutory permission that is discretionary in its own words, made answerable by an instrument the carrier’s compliance team is built to process. Not on goodwill, and not on the carrier owing you anything. | Your forum’s service rules, a fee tendered where attendance is commanded, and an address verified against the record rather than copied from a billing field. |
| What failure looks like | A letter, weeks later, saying the recipient does not serve that number. Silent, slow, and entirely a function of who you addressed it to. | A quashed subpoena, or a server standing at a billing address the subscriber has not lived at for three years. |
The columns are the reason this errand is usually scheduled wrong. Counsel books a process server and treats the identification as a same-week task sitting in front of it, when in fact instrument one has a statutory objection window and a corporate queue in front of it, and instrument two cannot even be drafted until instrument one has answered. Work backwards from the discovery cut-off through both rows of clocks, and the honest earliest date usually surprises people. Where the answer is that there is not enough runway, that is worth knowing on day one, because the alternative routes — records research on what you already hold, or a deposition of someone who knows the witness — are only useful if there is time to run them.
The Number Is a Discovery Target, Not a Lookup
The distinction that decides which route is even available to you.
Outside litigation, a phone number is something you search. You put it into a database, you get back whatever the aggregators have associated with it, and the quality of the answer depends entirely on whether the number ever leaked into a public or commercially available record. For a mobile number belonging to someone careful, that is often nothing at all.
Inside litigation, the same ten digits are something else: a target you can compel a third party to answer for. The carrier serving that number holds a subscriber file with a name and a billing address in it. That file is not public, no aggregator has it, and no amount of searching will produce it — but it is squarely within the reach of a subpoena, because Federal Rule of Civil Procedure 45 lets you command a non-party to “produce designated documents, electronically stored information, or tangible things in that person’s possession, custody, or control.” A subscriber record is exactly that.
This is the whole reason a litigant’s odds on a phone-only identification are different from a consumer’s, and it is why the advice written for consumers reads as pessimistic to a lawyer and the advice written for lawyers reads as impossible to a consumer. They are describing two different sets of tools pointed at the same ten digits.
What it is not is a shortcut around the identification problem. The carrier will tell you who is on the account, truthfully, and the account holder and the handset holder are two different facts about two possibly different people. Which one your subpoena has reached is the question that decides whether you have found a witness or a stranger, and no carrier answers it. What ‘registered to’ actually means on a phone number is worth ten minutes before you rely on a subscriber name as an identification.
Where a Phone-Only Subpoena Search Comes Apart
Six failures that look like the number was untraceable, and were not.
Nobody tendered the witness fee
Where attendance is commanded, the fee for one day and the mileage allowed by law are tendered at service, not invoiced afterwards. A server who arrives without a cheque has delivered a piece of paper, and a witness who does not appear has a ready answer.
The billing address is a mail drop
The carrier answered, the address is real, and it is a private mailbox or a corporate mail centre. Nobody can be served there and the subscriber file will never say so. It reads as a successful identification right up to the attempt.
The locate did not start until the carrier answered
The objection window and the compliance queue are dead time only if you let them be. Address history, property and court records on every candidate the number already points at can run in parallel, so the day the name arrives you are corroborating rather than beginning.
The line is an app account, not a carrier account
A number that terminates on an internet-based service belongs to a company holding an account record, and that account may have been opened with an email address and nothing verifiable behind it. Sometimes there is no subscriber to find. Learn it in week one.
The subscriber is not the user
The account holder pays the bill; somebody else may carry the phone. The carrier’s answer is truthful and still names the wrong human. A subscriber name is a corroborated lead, never an identification on its own.
The number was recycled
Disconnected numbers return to the pool and are reassigned. The subscriber the carrier names may be whoever holds those digits now, not whoever held them when your events happened — a different person entirely, served in good faith.
What a Carrier May Lawfully Tell You, and What It May Not
The statute most often cited as the obstacle is, for a civil litigant, the opposite.
There is a widely held belief that federal privacy law bars a carrier from identifying a subscriber to a private party, and that belief ends a great many of these searches before they start. Read the section it comes from.
The Stored Communications Act draws its line by who is asking, not by whether the asker is a stranger. 18 U.S.C. § 2702(a)(3) provides that a provider “shall not knowingly divulge a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications covered by paragraph (1) or (2)) to any governmental entity.” The prohibition on non-content subscriber records runs against government. Subsection (c) then lists what a provider may divulge and closes the list at (c)(6): “to any person other than a governmental entity.” Read the chapeau and (c)(6) together and the picture is the reverse of the folklore — a police department needs process under § 2703 for the record that the statute lets a provider hand to a private civil litigant.
Two things about that permission, and both matter more than the permission does. It is permissive: the statute says a provider “may divulge,” which obliges nobody to answer a letter from a law firm. Carriers do not, as a practical matter, respond to informal requests, and their legal-compliance teams are set up to process service of legal process and very little else. The permission is what makes your subpoena answerable rather than legally impossible; the subpoena is what makes it answered.
And it is non-content only. The same subsection carves out “the contents of communications” in its own text, and the contents of communications are governed by rules that are not these. Subscriber identity and address of record sit on one side of that line; the text messages themselves sit on the other. This is the most expensive drafting mistake on a carrier subpoena. A request that asks for subscriber information and message content invites a single global objection that stalls the part you were entitled to, and you spend the month you did not have arguing about the part you were never going to get.
Why the Carrier Treats an Unlisted Mobile Number Cautiously
Telecommunications privacy has a second statute in it, and the definitions are where the practical answer lives. 47 U.S.C. § 222 governs customer proprietary network information, which subsection (h)(1) defines as information about “the quantity, technical configuration, type, destination, location, and amount of use” of the service, plus billing contents — and closes with “except that such term does not include subscriber list information.” Subsection (h)(3) then defines subscriber list information as listed names, numbers and addresses that the carrier “has published, caused to be published, or accepted for publication in any directory format.”
The consequence for a mobile number is straightforward once you see it: the carve-out is written around publication, and mobile numbers are not published in a directory. So the reassuring category that makes a landline’s listing freely shareable does not attach to the number you are holding, and the carrier’s compliance team has no easy basis for treating it as public. That is the mechanism behind the answer you get when you telephone and ask nicely, and it is why the sequence below starts with an instrument rather than a request.
Send the Subpoena to the Carrier That Actually Serves the Number
The step that silently costs a month, and the reason it does.
A carrier subpoena addressed to the wrong company does not fail loudly. It produces a polite letter, some weeks later, saying the recipient is not the provider for that number. Nothing about the drafting was wrong. The addressee was.
Two features of the North American numbering system cause this, and both are invisible on the face of the digits. The first is that a number’s prefix was issued to a carrier decades ago and says nothing about who serves it today. The second is portability: a subscriber can carry a number from one carrier to another, and to a different technology altogether, keeping the digits unchanged. The number you are looking at may have started life on a landline in one state, moved to a mobile carrier, and now terminate on an internet-based service whose records are held by a company whose name has never appeared in your file.
So the sequence begins before the subpoena does. Establish the current serving carrier from routing data rather than from the prefix, and establish whether the number has been ported and when. That single step decides who your subpoena is addressed to, and it also tells you something about the person: a number ported recently is a number whose subscriber file may be thin at the new carrier and fuller at the old one. What carrier and porting history actually reveal covers the mechanics.
Where the number resolves to an internet-based or app-based service rather than a traditional carrier, the recipient of your subpoena is a company holding account records, and the person you are trying to name may have opened that account with nothing more verifiable than an email address. That is a real outcome and it is not always recoverable. It is better to learn it in week one than in week nine.
The Area Code Is the Trap, and Rule 45 Is Where It Springs
A geographic assumption the number invites and the rule punishes.
Reach is where a phone-derived identification most often comes apart, and it comes apart late — after the recipient is named, after the subpoena is drafted, sometimes after it is served.
Rule 45(c)(1)(A) limits a command to attend a trial, hearing or deposition to “within 100 miles of where the person resides, is employed, or regularly transacts business in person,” with a broader in-state alternative that applies to a party or a party’s officer, or to a trial witness who would not incur substantial expense. Subsection (c)(2)(A) applies the same hundred-mile measure to production of documents. Every one of those distances is measured from where the person is. None of them is measured from where their phone number sounds like it is.
A mobile number keeps its area code across a move, indefinitely and at no cost, and people move. The 100-mile radius you calculate from an area code is a radius drawn around a city the witness may have left in 2015. It will look correct on paper, it will survive an internal review, and it will fail on a motion.
There is a second-order problem worth naming, because it is the one that catches careful practitioners. The rule offers three anchors — residence, employment, and where the person regularly transacts business in person — and a subscriber record gives you a billing address, which is often the residence and sometimes is not. A witness who lives an hour outside your radius may work inside it. The subscriber file will not tell you that. Confirming an anchor the rule actually names is a records question, not a phone question, and it is the difference between a subpoena that stands and one that gets quashed.
It is also the reason to identify the recipient properly before drafting rather than after. The place of compliance is not a detail you fill in once you know the name; it determines whether this subpoena, from this court, can command this person at all.
Sequencing the Two Instruments Without Losing the Month
Order of operations, notice obligations, and the clock that is not the process server's.
Practitioners tend to model this errand as one step with an annoying delay in front of it. It is two instruments, addressed to two different recipients, with two different places of compliance and two separate clocks, and modelling it that way is what keeps it inside a discovery deadline.
The first instrument is a documents subpoena to the carrier. It carries an obligation many people miss: under Federal Rule of Civil Procedure 45, where a subpoena commands production before trial, “before it is served on the person to whom it is directed, a notice and a copy of the subpoena must be served on each party.” Notice to the other side comes first, and skipping it is the kind of defect that is entirely curable if you catch it and entirely avoidable if you know about it. Expect opposing counsel to see the subpoena and to have views about it.
The clock on that first instrument is not your server’s. Rule 45(d)(2)(B) gives the commanded person until “the earlier of the time specified for compliance or 14 days after the subpoena is served” to serve a written objection. A carrier’s compliance department then needs its own processing time on top of that. Fourteen days is the floor of the delay, not the ceiling, and it runs before you have a name.
Draft the request narrowly, and not only out of courtesy. Rule 45(d)(1) obliges the party and attorney issuing a subpoena to “take reasonable steps to avoid imposing undue burden or expense on a person subject to the subpoena,” and provides that the court where compliance is required “must enforce this duty and impose an appropriate sanction — which may include lost earnings and reasonable attorney’s fees — on a party or attorney who fails to comply.” A request confined to subscriber name, address of record and the dates the number was active is quick for a carrier to satisfy and hard to resist. A request that sweeps in call detail and message content is neither.
The second instrument is the witness subpoena itself, and it is served on a human at a verified address. That last mile — taking a subscriber name and a possibly stale billing address and searching the records for an address a server can actually attend — is ordinary skip tracing work, and it is the part carriers do not do. Once you have a person and an address, the mechanics of getting them served, including fees and proof of service, are covered in serving a subpoena on a located witness. Where the subscriber turns out to be a company rather than a person, naming the right individual inside it is its own problem, and identifying the records custodian to name is the page for it.
A Witness Is Not a Defendant, and One Search We Decline
What the tone of this errand should be, and the line we hold.
The person behind the number is, in the ordinary case, a non-party. They have done nothing wrong. They have no counsel, no stake in the outcome, and no obligation to your client beyond what a court can command of any citizen. They did not choose to be in your case; a call log put them there. Everything above — the narrow request, the correct place of compliance, the tendered fee — reads as good practice and is also simply what is owed to someone who is being conscripted into someone else’s dispute.
It matters practically too. A witness who is treated as an adversary behaves like one, and a reluctant witness is enormously more expensive than a cooperative one. Where a witness is deliberately avoiding contact rather than merely hard to find, that is a different problem with different tools, and serving someone who is evading service covers it.
Now the line. Converting a phone number into a home address is precisely the capability that someone uses to find a person who left them, and “I need to serve a subpoena” is a serviceable cover story for exactly that. We decline searches where the apparent purpose is locating a person protected by an order of protection, or someone who relocated because of domestic violence or stalking. That is not a disclaimer at the bottom of a page; it is a filter we apply to intake, and a case caption does not switch it off.
If you are the person being looked for: most states operate an address confidentiality program — Safe at Home and its equivalents — that substitutes a designated address on public filings and shields the real one, and the court that issued your protective order can reach records, restrict disclosure and impose consequences that no private party can. Those routes are real and they work, and the clerk of that court is the right first call.
One more boundary, quieter and just as firm. We identify and locate; we do not contact the person on your behalf, and we do not call the number to find out who answers. The record is slower and it holds up.
How the Records Half Runs
What we do before your first subpoena is drafted, and after it answers.
Send the Number and the Posture
The ten digits, the case posture and forum, your discovery deadline, and every scrap of context around the number — whose log it came from, the dates it was active, any name it was ever saved under.
We Resolve the Carrier and the Number's History
Current serving carrier from routing data, whether and when the number ported, line type, and whether it looks recycled. This is what tells you who to address instrument one to.
We Corroborate the Subscriber Against the Record
When the carrier answers, we test the name against address history, property, court and business records — separating account holder from user, and ruling out same-name candidates before anything is reported as identification.
You Get a Serviceable Address and the Reach Anchors
A current residential address a server can attend, employment where the record supports it, the sources each rests on, and the dates — so you can measure the place of compliance from something the rule actually names.
Who Runs This Search
Five situations that arrive at the same ten digits.
Litigation Paralegals
Holding a discovery calendar and a witness who exists only as a number in a client’s call log.
Plaintiff and Defense Counsel
A percipient witness whose account of one conversation decides a disputed fact, and no name attached to them anywhere in the file.
Insurance and Subrogation Counsel
A number captured at the scene or in a first notice of loss, never matched to a person before the file went to litigation.
Process Servers
Handed a subpoena with a number where the address should be, and asked to make it work.
Self-Represented Litigants
A filed case and a real witness, without a firm behind you to run the identification.
Our Commitment
We take the number, resolve the carrier and the history behind it, and after your carrier subpoena answers we corroborate the subscriber against the record and search the records for a serviceable address with its sources — or an honest account of why the record cannot reach the person. We have done lawful public-records research under a permissible purpose since 2004, for United States subjects, and results typically come back within 24 hours. We do not contact the person, and we decline any search whose apparent purpose is locating someone who moved for their own safety.
Frequently Asked Questions
Can I get the text messages from the carrier at the same time?
Not by this route, and asking for them is what stalls the part you were entitled to. The permission in 18 U.S.C. § 2702(c) that lets a provider hand a subscriber record to a private litigant excludes, in its own words, “the contents of communications,” which are governed by rules that are not these. In ordinary civil practice message content is sought from the people who sent and received it, through party discovery and their own devices, rather than from the carrier. Keep the carrier subpoena to non-content subscriber records and pursue content on its own track.
The carrier came back saying it has no record for that number. What does that mean?
Usually that you asked the wrong company, not that the number is a ghost. The common causes, in rough order: the number was ported and the recipient no longer serves it; the line is resold, so the retail brand your subpoena named is not the underlying provider of record; the number terminates on an internet-based service that is not a traditional carrier at all; or the digits are currently unassigned and sitting in the reassignment pool. Each of those has a different next recipient, so re-establish the current serving provider from routing data before you redraft rather than sending the same subpoena to the next name on your list.
The subscriber turned out to be a company. Do I subpoena the company or a person?
It depends which you actually need, and they are different instruments. If you want the company’s records — who was issued that line and when — you are naming a custodian of records — and identifying the right custodian inside an organisation is its own exercise, distinct from anything the phone number told you. If you want testimony from the human who was carrying the phone, the company is a step on the way rather than the destination, and the record you want from it is the line assignment that identifies the employee. Asking one recipient for both in one document is how you get an objection to the whole thing.
A paid lookup already gave me a name. Can I skip the carrier subpoena?
You can draft from it, but understand what you are standing on. A commercial lookup returns an association that some data broker has recorded between a number and a name; it has no provenance you can put in front of a judge, it is frequently stale on mobile numbers, and it is silent on whether the association was ever true. If the subpoena is challenged you may be asked what the identification rests on. Use a lookup result the way it is actually useful — as a candidate to corroborate against address history, property and court records, and against what the carrier confirms — not as the basis for naming a stranger in a court document.
The carrier named someone, but I do not think that person was using the phone. Now what?
That is an ordinary outcome, not a failed subpoena. Test the name rather than discarding it: address history, employment, household composition, and above all the dates the number was active on the account against the dates your events happened. Sometimes the account holder is the right witness after all. Sometimes they are the shortest route to the person who is, because an account holder can simply be asked who was carrying that line — and unlike the carrier, they are allowed to answer a question.
My witness turns out to live in another state. Can my court's subpoena reach them?
This is the question a phone-derived identification tends to raise late, because nothing in the digits warned you. Under the federal rule a subpoena may be served anywhere in the United States, but the place where compliance may be commanded is measured from the person, and a subpoena issues from the court where the action is pending while it is the court for the district where compliance is required that enforces it. State practice differs materially here — several states require an out-of-state subpoena to be domesticated in the witness’s own jurisdiction before it means anything — so read your own forum’s rule and the witness’s. Where the witness is out of state, serving process across state lines sets out the mechanics.
Do I have to tell the witness how I found them?
No rule of procedure obliges you to volunteer it, and a witness who asks deserves a straight answer anyway. Being located through a phone number feels intrusive to the person on the receiving end, and a non-party who has done nothing wrong is entitled to know why a stranger’s lawsuit has arrived at their door. Saying plainly that their number appeared in a call record, that the carrier confirmed the account, and that they are wanted only for what they saw or heard, costs nothing and turns a suspicious witness into a cooperative one. If the identification is ever challenged you will have to explain the basis in any event, so it is worth being able to describe it in one sentence.
What do you need from me to start, and what will you not take?
Send the ten digits, the forum and case posture, your discovery deadline, and everything around the number — whose log it came from, the dates it appears, any name it was ever saved under. We work United States subjects only. Two things we will not take: a number with no filed case behind it, because there is no subpoena to serve and the errand does not exist yet, and any request whose apparent purpose is locating someone protected by an order of protection or who relocated because of domestic violence or stalking. A case caption does not change that second answer. Results on what we do take typically come back within 24 hours.
Have a Number and a Filed Case?
Send us the ten digits, your forum and your discovery deadline. We resolve the carrier and the number’s history so your first subpoena goes to the right company, then corroborate the subscriber and search the records for a serviceable address — typically within 24 hours. Contact us to get started.
Start Your Request →
