What should I ask the mobile-network provider for?¶
Ask for the defined subscription, device, communication or location records needed to answer the investigative question over a precise period.
Match categories to the proposition¶
Possible records include subscriber and account history, SIM/eSIM and activation, IMEI/IMSI/ICCID associations, calls, SMS/MMS events, data sessions, porting, replacement and cell sites. State identifiers and time zone.
Preserve and interpret within limits¶
Targeted requests reduce delay and unrelated data. Use approved preservation where short retention creates risk. Subscriber details identify an account holder, communication records may omit content and cell sites are not GPS. Build the technical timeline, then attribute the user separately.
Key takeaway
Frame network requests around an exact identifier, event, period and proposition rather than requesting every available record.