A pen register is a surveillance device or process that records the dialing, routing, addressing, and signaling information of your phone calls or electronic communications, without capturing anything you actually say or write. Law enforcement uses pen registers to map out who a suspect communicates with, when, and how, and the legal standard for getting one is much lower than the standard for a wiretap. That gap is why pen registers show up across a wide range of federal and state investigations.
What a Pen Register Records
Under federal law, a pen register captures the dialing, routing, addressing, or signaling information sent from a phone, computer, or other communication device.1Office of the Law Revision Counsel. 18 USC 3127 Definitions for Chapter Think of it as the envelope of a letter rather than its contents. For a phone call, that means the numbers dialed, the time the call was placed, and how long it lasted. For internet communications, it includes routing and addressing data such as IP addresses.
The statute explicitly excludes the content of any communication. A pen register can tell investigators that you called a particular number at 9:14 p.m. and spoke for twelve minutes, but it cannot reveal a single word of the conversation. The same rule applies to email and other electronic messages: routing data is fair game, substance is not.
For cell phones, a pen register can also capture which cell tower and tower sector handled a call, which reveals the phone’s approximate location at the time of the connection.2Federal Public Defender. Cellular Tower Location Information That capability has become one of the more contested features of modern pen register practice, and the Supreme Court has since drawn a line around it.
Trap and Trace Devices
A pen register captures only outgoing information. Its companion tool, a trap and trace device, does the reverse: it records incoming signals that identify who is contacting you.3Legal Information Institute. Definition: Trap and Trace Device Like a pen register, it cannot capture the content of any communication.
In practice, investigators almost always request both in a single court order, often called a pen/trap order. Together they produce a full picture of both sides of a target’s communications: every number dialed out, every number calling in, and the timestamps and routing data for each.
How Law Enforcement Gets a Pen Register Order
Installing or using a pen register without a court order is a federal crime, subject to narrow exceptions.4Office of the Law Revision Counsel. 18 USC 3121 General Prohibition on Pen Register and Trap and Trace Device Use; Exception To obtain that order, a government attorney or state law enforcement officer submits a sworn written application to a court of competent jurisdiction. The application must identify the officer and agency conducting the investigation and must include a certification that the information likely to be obtained is relevant to an ongoing criminal investigation.5Office of the Law Revision Counsel. 18 US Code 3122 – Application for an Order for a Pen Register or a Trap and Trace Device
That “relevant to an ongoing investigation” standard is easy to meet. The applicant does not have to show probable cause that a crime occurred. They do not have to name a specific suspect. They certify relevance, and the court issues the order. The statute says the court “shall” enter the order once the certification is made, which leaves judges very little room to deny the request.6Office of the Law Revision Counsel. 18 USC 3123 Issuance of an Order for a Pen Register or a Trap and Trace Device
The order is issued ex parte, meaning the person whose communications will be monitored receives no notice and no opportunity to object before surveillance begins. Each order lasts up to sixty days. Extensions run in further sixty-day increments, but each one requires a new application and a fresh judicial finding of relevance.6Office of the Law Revision Counsel. 18 USC 3123 Issuance of an Order for a Pen Register or a Trap and Trace Device
Emergency Installation Without a Prior Order
In certain urgent situations, an officer can install a pen register or trap and trace device first and seek the court order afterward. Federal law limits this emergency authority to four scenarios:
- Immediate danger of death or serious bodily injury to any person.
- Conspiratorial activities characteristic of organized crime.
- An immediate threat to a national security interest.
- An ongoing attack on a protected computer that constitutes a serious crime.
Even under emergency authority, the officer must apply for a court order within forty-eight hours of installation. If no order is obtained within that window, or if the court denies the application, the device must be shut down immediately.7Office of the Law Revision Counsel. 18 US Code 3125 – Emergency Pen Register and Trap and Trace Device Installation Failing to apply within forty-eight hours is itself a violation of federal law.
How Service Providers Fit In
The actual data collection runs through the phone company, internet provider, or other communication service. A pen register order compels these providers to furnish all information, facilities, and technical assistance necessary to install the device with minimal disruption to the target’s service.8Office of the Law Revision Counsel. 18 US Code 3124 – Assistance in Installation and Use of a Pen Register or a Trap and Trace Device The obligation reaches beyond carriers: landlords, building custodians, and other individuals can also be ordered to assist.
Pen Register vs. Wiretap
The gap between a pen register and a wiretap is enormous, both in what each captures and in how hard each is to get. A pen register collects metadata. A wiretap intercepts the actual words of a conversation or the text of an electronic message.
Because wiretaps are far more invasive, the legal requirements are far steeper. A wiretap application must establish probable cause that a specific person is committing, has committed, or is about to commit a crime listed in the statute. The applicant must also show probable cause that the wiretap will produce communications about that crime. On top of that, the government has to demonstrate that normal investigative methods have been tried and failed, would be unlikely to succeed, or would be too dangerous to attempt.9Office of the Law Revision Counsel. 18 US Code 2518 – Procedure for Interception of Wire, Oral, or Electronic Communications
Compare that to the pen register standard: a simple certification of relevance to an ongoing investigation, with no probable cause requirement and no need to show that other methods failed.6Office of the Law Revision Counsel. 18 USC 3123 Issuance of an Order for a Pen Register or a Trap and Trace Device The difference reflects a longstanding legal judgment that knowing who someone called is less intrusive than hearing what they said.
Penalties for Unauthorized Use
Anyone who knowingly installs or uses a pen register or trap and trace device without a valid court order faces up to one year in prison, a fine, or both.4Office of the Law Revision Counsel. 18 USC 3121 General Prohibition on Pen Register and Trap and Trace Device Use; Exception Federal law carves out exceptions for communication service providers using these tools for legitimate business purposes, such as maintaining their networks, protecting against fraud, or billing. A provider can also use pen register technology with the customer’s consent.
The Constitutional Foundation and Its Limits
The constitutional footing for pen registers comes from a 1979 Supreme Court case, Smith v. Maryland. The Court held that installing and using a pen register was not a “search” under the Fourth Amendment, so no warrant was required. The reasoning: when you dial a phone number, you voluntarily hand that information to the phone company’s equipment. You know the company records it for billing and other business reasons. By exposing that data to a third party, you assume the risk that the company might share it with police.10Justia. Smith v. Maryland
This reasoning, known as the third-party doctrine, held up for decades. The Supreme Court drew a meaningful line in 2018 in Carpenter v. United States. That case involved historical cell-site location records, which are collected through the same cell tower infrastructure that a pen register can access. The Court held that obtaining seven days or more of historical cell-site location information is a Fourth Amendment search that requires a warrant supported by probable cause.11Supreme Court of the United States. Carpenter v. United States
The Court declined to extend the third-party doctrine to that type of data, reasoning that cell phone location records are different in kind from the phone numbers at issue in Smith. A phone logs its location automatically just by being turned on, without any deliberate act by the user, and the resulting data creates a comprehensive chronicle of a person’s movements. Carpenter did not overrule Smith or invalidate pen registers for phone numbers and call metadata, but it put a constitutional boundary around the more revealing location data that modern cell networks generate.
How the USA PATRIOT Act Extended Pen Registers to the Internet
Before 2001, pen register law had been written with telephones in mind, and it was unclear whether the same rules applied to internet communications like email. Section 216 of the USA PATRIOT Act settled the question by updating the statute to cover internet routing and addressing information. The amendment also allowed courts to issue pen register orders valid across the entire country, eliminating the need for investigators to file a new application each time a case crossed jurisdictional lines.12United States Department of Justice. Dispelling the Myths
The expansion came with an explicit obligation to avoid collecting content. For internet traffic that line can be tricky. The “to” and “from” fields of an email are routing data. But a URL visited in a web browser can straddle the line, since the domain name is routing information while the specific page path may reveal something about what the user was reading. The statute requires anyone using a pen register to use technology reasonably available to avoid capturing content.