US probes allegations of Meta access to encrypted WhatsApp chats

US law enforcement is investigating claims that Meta personnel may have accessed WhatsApp messages, despite the company’s assertions of end-to-end encryption, according to Bloomberg sources.

The investigation involves allegations from former Meta contractors and whistleblower complaints suggesting some staff had unfettered access to encrypted messages, which Meta denies, stating such access is impossible due to encryption technology.

The US Department of Commerce’s Bureau of Industry and Security is examining these claims, with the inquiry ongoing as of January 2026.

Meta has previously said that its encryption prevents the company from viewing user messages, a position reinforced by the company’s spokesperson.

Former contractors have provided accounts indicating broader access to WhatsApp content, including claims of content moderation personnel retrieving messages.

The investigation and related lawsuits highlight ongoing concerns about privacy and access to encrypted communications, though no formal accusations have been made.

Meta’s shares declined about 1% after the report emerged.

🔗 Source: Bloomberg

🧠 Food for thought

Implications, context, and why it matters.

Key questions about WhatsApp’s architecture remain unanswered

A core clash has been raised between contractor claims of “unfettered access” to WhatsApp message content and Meta’s statement that WhatsApp’s default end-to-end encryption blocks this.
The paths that may have allowed contractors to view message text have not been explained.
It remains unclear whether access was confined to user-initiated reports, which can send up to the last five messages in a chat to WhatsApp, or whether other routes were involved that may not be end-to-end encrypted.
An independent audit should be conducted of WhatsApp’s encryption key management (how and where the digital keys are stored and used) and server-side architecture, so any process that could enable message decryption by the company or its contractors can be verified.

Erosion of trust in WhatsApp could create an opening for enterprise-grade messaging platforms

Technology vendors and investors may see the privacy probe drive doubt that speeds up buying decisions in heavily regulated fields such as government and finance.
Government agencies and financial institutions often need communication tools that can be audited, sometimes self-hosted, to meet strict data handling and security mandates.
Public-sector teams rely on formal certification programs, such as the TX-RAMP list of certified cloud products for Texas state agencies, to screen secure technology 1.
Providers of enterprise-focused, end-to-end encrypted messaging services could target customers whose comfort with consumer apps has dropped.