Federal Law Enforcement Disclosure

Potential Violation of Federal Wiretapping Laws

**To:** Federal Bureau of Investigation (FBI) **Attention:** Internet Crime Complaint Center (IC3) / Cyber Division **Date:** December 29, 2025 **Subject:** Evidence of Potential Federal Wiretap Act Violations by Meta Platforms, Inc. (Facebook)

Preliminary Statement

This disclosure presents technical evidence suggesting that Meta Platforms, Inc. ("Facebook") may be engaged in unauthorized interception of oral communications through its Facebook iOS application, in potential violation of 18 U.S.C. § 2511 (Wiretap Act) and related federal statutes.

The evidence demonstrates that Facebook has implemented a technical mechanism to circumvent Apple iOS's microphone usage indicator, potentially enabling covert audio surveillance of users without their knowledge or meaningful consent.

Reporting Party Information

**[REDACTED - Complete with your information]**

undefined

Subject of Complaint

**Company:** Meta Platforms, Inc. **Formerly Known As:** Facebook, Inc. **Headquarters:** 1 Hacker Way, Menlo Park, CA 94025 **Application:** Facebook for iOS (com.facebook.Facebook) **Platform:** Apple iOS (iPhone, iPad)

Relevant Federal Statutes

18 U.S.C. § 2511 - Interception and Disclosure of Wire, Oral, or Electronic Communications

(1) Except as otherwise specifically provided in this chapter any person who— (a) intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication; [...] shall be punished as provided in subsection (4) or shall be subject to suit as provided in subsection (5).

18 U.S.C. § 2520 - Recovery of Civil Damages

Provides for civil remedies for violations of the Wiretap Act, including actual damages, statutory damages, punitive damages, and attorney's fees.

Relevant State Laws

Many states have additional wiretapping and eavesdropping statutes that may apply, including two-party consent states where all parties must consent to recording.

Summary of Allegations

Meta Platforms, Inc., through its Facebook iOS application, has implemented a technical mechanism that:

undefined

Technical Evidence

Discovery Methodology

Security research was conducted on a personally-owned iOS device using industry-standard dynamic analysis tools (Frida framework). The research involved examining Facebook's runtime behavior regarding audio session management.

Key Technical Finding

Facebook's iOS application contains a class `FBSystemAudioSessionManager` with a property `allowCallKitActiveAdjust`. This property controls whether iOS's microphone indicator functions normally.

**Evidence Captured at Application Launch:**

Timestamp: 2025-12-29T04:XX:XX
Application: Facebook for iOS
State at Launch (before any user action):

allowCallKitActiveAdjust: FALSE    ← Indicator bypass ACTIVE
isCallKitActive: FALSE             ← No phone/VoIP call occurring
hasRTCClient: FALSE                ← No real-time communication client
AVAudioSession.category: Ambient   ← Not actively recording
AVAudioSession.mode: Default       ← Normal operation mode

Interpretation of Evidence

**Conclusion:** The bypass mechanism is activated without any legitimate audio/calling purpose, suggesting intent to suppress microphone usage indicators.

Reproducibility

This finding was reproduced consistently across multiple application launches. The bypass activates every time the Facebook application is opened, regardless of user activity or call state.

Evidence of Intent

Deliberate Implementation

undefined

Pattern of Behavior

This finding is consistent with:

undefined

Potential Criminal Violations

Elements of 18 U.S.C. § 2511 Violation

undefined

Aggravating Factors

undefined

Requested Actions

Investigation Request

undefined

Preservation Request

Request that Meta Platforms, Inc. preserve all:

undefined

Supporting Documentation

Attached Evidence

undefined

Evidence Available Upon Request

undefined

Declaration

I declare under penalty of perjury that the information provided in this disclosure is true and accurate to the best of my knowledge. This disclosure is made in good faith based on technical evidence obtained through legitimate security research on personally-owned devices.

**Signature:** _______________________ **Date:** December 29, 2025 **Location:** _______________________

Submission Instructions

This report should be submitted to:

FBI Internet Crime Complaint Center (IC3)

undefined

FBI Field Office

undefined

Department of Justice

undefined

Federal Trade Commission (Parallel Filing)

undefined

Appendix A: Technical Details

Frida Analysis Script

// fb_check_state.js - Evidence Collection Script
console.log('[FB] ========== STATE CHECK ==========');

if (ObjC.available) {
    var FBMgr = ObjC.classes.FBSystemAudioSessionManager;
    if (FBMgr) {
        var instance = FBMgr.sharedInstance();
        console.log('[FB] FBSystemAudioSessionManager instance: ' + instance);

        try {
            var allowAdjust = instance.allowCallKitActiveAdjust();
            console.log('[FB] allowCallKitActiveAdjust: ' + allowAdjust);
            if (!allowAdjust) {
                console.log('[FB] !!! BYPASS IS ACTIVE !!!');
            }
        } catch(e) { console.log('[FB] Error: ' + e); }

        try {
            console.log('[FB] isCallKitActive: ' + instance.isCallKitActive());
            console.log('[FB] hasRTCClient: ' + instance.hasRTCClient());
        } catch(e) {}
    }

    var session = ObjC.classes.AVAudioSession.sharedInstance();
    console.log('[FB] AVAudioSession category: ' + session.category());
    console.log('[FB] AVAudioSession mode: ' + session.mode());
}
console.log('[FB] ========== CHECK COMPLETE ==========');

Raw Evidence Output

[FB] ========== STATE CHECK ==========
[FB] FBSystemAudioSessionManager instance: <FBSystemAudioSessionManager: 0x10660bac0>
[FB] allowCallKitActiveAdjust: false
[FB] !!! BYPASS IS ACTIVE - allowCallKitActiveAdjust is FALSE !!!
[FB] isCallKitActive: false
[FB] hasRTCClient: false
[FB] --- All instance methods with "allow" or "active" ---
[FB]   - isCallKitActive
[FB]   - setCallKitActive:
[FB]   - allowCallKitActiveAdjust
[FB]   - setAllowCallKitActiveAdjust:
[FB]   - allowAudioReset
[FB] AVAudioSession category: AVAudioSessionCategoryAmbient
[FB] AVAudioSession mode: AVAudioSessionModeDefault
[FB] AVAudioSession isOtherAudioPlaying: false
[FB] ========== CHECK COMPLETE ==========

Appendix B: Relevant Case Law

Wiretap Act Precedents

undefined

FTC Enforcement Actions

undefined

**Document Version:** 1.0 **Classification:** Law Enforcement Sensitive **Distribution:** Limited to authorized recipients