Getting Records Lawfully Instead of by Deception
Pretexting is not a grey area. Federal statutes make it a crime to obtain customer financial information by false pretenses and restrict who may take a driver record at all. What remains open is wide, public, and dull enough to be reliable.

The rule in short
Federal law prohibits obtaining a financial institution's customer information by false pretenses, and separately restricts state motor vehicle records to a closed list of permitted uses with a private right of action for breach. Reports assembled for employment, tenancy or credit decisions fall under consumer reporting rules. The lawful alternatives are court files, recorded instruments, licensing registers, corporate filings and the subpoena.
Pretending to be someone else in order to obtain their records is a federal crime, not a professional grey area. The lawful method is to work from records that are open, from records the subject authorizes in writing, and from the subpoena power of a court in a pending case.
That sounds narrower than it is. The volume of genuinely open material in the United States is large, and most investigative questions are answered from it. The temptation to shortcut comes up on the small number of questions it does not answer, and that is where careers end.
The federal prohibition on deception
Two federal statutes do most of the work. The first makes it unlawful for any person to obtain, or attempt to obtain, customer information of a financial institution by making a false, fictitious or fraudulent statement to the institution, to a customer, or by using a forged or counterfeit document. It also reaches asking someone else to do it. The companion provision sets the criminal penalty, with a longer term where the conduct forms part of a wider pattern.
The second restricts state motor vehicle records. Personal information from those records may be disclosed and used only for one of the purposes the statute lists, and the statute creates a private right of action against a person who obtains or uses a record for a purpose outside the list. The obligation attaches to the person obtaining the record, which is why a false certification given to a data broker is the user's problem rather than the broker's.
What pretexting actually looks like
The label covers a family of conduct that shares one feature: someone is given a false picture in order to release information. Presenting as the account holder to a bank or a carrier is the classic case. So is presenting as an employee of the institution, as a government officer, or as a delivery service seeking to confirm an address. So is a fabricated employment offer used to extract personal details.
Each of those can also satisfy other offenses at the same time. Pretending to hold public office is impersonation. Using another person's identifying information without authority is identity theft. Doing any of it by phone or email across a state line brings in wire fraud. The overlap is why prosecutions in this area rarely rest on the pretexting statute alone, and why a licensee's exposure runs well beyond the license, as set out under what an investigator license does not authorize.
| Record sought | Lawful route | Route that is unlawful |
|---|---|---|
| Bank or brokerage account information | The customer's written authorization, or a subpoena in a pending case | Any approach that presents the caller as the customer or the institution |
| Driver or vehicle registration data | A use named in the federal statute, certified truthfully | Obtaining it for curiosity, marketing or a purpose outside the list |
| Telephone or account call detail | The subscriber's authorization, a subpoena, or a court order | Calling the carrier as the subscriber, however the number was obtained |
| Employment and tenancy history | A consumer report with the subject's consent and required notices | An informal reference call framed as something it is not |
| Property ownership and liens | The county recorder's index, open to anyone | Nothing; this material is genuinely public |
The open material
Public records carry most investigative work. Civil and criminal court files and their indexes are open in nearly every jurisdiction, subject to sealing orders and juvenile restrictions. Recorded deeds, mortgages, liens and judgments sit with the county recorder or clerk. Corporate registrations, officers, registered agents and annual filings sit with the secretary of state. Professional licensing boards publish registers with disciplinary history attached.
The skill in this part of the trade is knowing which office holds what, and how each index is organized. A name search in a county recorder's grantor index answers a question about property that a general internet search never will. A docket number found in one case leads to pleadings that name employers, addresses and relatives. Nothing here is secret; it is simply scattered across offices that were never designed to be searched together.
Beyond those are voter files where the state permits access, business tax registrations, contractor licenses, marriage and divorce indexes, probate files, bankruptcy dockets and property tax assessments. Federal and state public records statutes provide a request route to agency material, with exemptions that must be reasoned through rather than assumed. None of this requires anyone to be deceived.
Commercial data services ask the user to certify the purpose before releasing restricted fields, and that certification is the point at which liability transfers. A licensee who selects a permitted purpose that does not describe the actual assignment has created written evidence against themselves. Files should record which purpose was certified and why it was accurate, in the same place the assignment is described.
The subpoena route
Where a record is closed and the subject will not authorize its release, the answer is usually a subpoena in a pending case rather than any private technique. The court's power reaches third parties, the recipient has a route to object, and the resulting material arrives with a chain of custody that survives challenge. It is slower and it requires litigation to exist, which is precisely why it is the honest route.
An investigator does not issue subpoenas; a party or an attorney in the case does, and the investigator's role is to identify the custodian, describe the record precisely and serve the document properly. That last step is its own subject, covered under who may lawfully serve papers and proof of service that holds up.
Records about a person for a decision
A separate layer applies whenever information about a person is assembled for a decision about employment, tenancy, insurance or credit. Federal consumer reporting law restricts who may obtain such a report, requires a permissible purpose, and imposes notice and dispute obligations on the user and on whoever compiled it. An investigator who supplies a report for one of those decisions may be acting as a consumer reporting agency whether or not that description appeals to them.
Medical records sit under a separate federal regime again, and health information held by a covered provider or plan cannot be released to a private party without the patient's authorization or a court process that satisfies the rule. School records, tax filings and child welfare files each carry their own statutes. None of these yields to a persuasive phone call, and every attempt leaves a record at the institution.
The practical rule is to ask what the client will do with the result before deciding how to obtain it. The same underlying facts can be gathered lawfully for litigation support and unlawfully for a hiring decision, because the second use carries obligations the first does not. Getting the sequence right is also how a licensee stays inside the scope of the license described under who needs an investigator license.
Points to carry away
- Obtaining customer information from a financial institution by false pretenses is a federal criminal offense.
- State motor vehicle records may be obtained only for a use named in the federal statute, which creates a private claim for misuse.
- Impersonating another person to a utility, carrier or agency can also constitute identity theft and wire fraud.
- Court files, recorded deeds, corporate filings and licensing registers are open to anyone and are the core of lawful research.
- A subpoena in a pending case is the ordinary route to records a private party cannot obtain directly.
- Anything assembled for an employment, tenancy or credit decision falls under consumer reporting rules with their own consent and disclosure duties.
Questions readers ask
Is it lawful to obtain someone's phone records with their account number?
No. Calling a carrier and presenting as the account holder is obtaining information by false pretenses, and having the account number does not change that. Carrier customer records are protected by federal communications rules and by state statutes, and the conduct can also meet identity theft and wire fraud definitions. The lawful routes are the subscriber's own written authorization, a subpoena in a pending case, or a court order. Nothing about a licensed status alters the analysis.
Can a licensee use a commercial data broker?
Yes, within limits. Commercial aggregators are widely used, and the reputable ones require a written statement of the permitted use before releasing restricted fields. That statement matters: the federal motor vehicle statute puts the obligation on the person who obtains the record, so a false certification exposes the user rather than the broker. Anything used for an employment, tenancy or credit decision then falls under consumer reporting rules, which impose consent, notice and dispute obligations of their own.
What can someone do who thinks their records were taken by deception?
Ask the holder of the record for its disclosure log, since many institutions keep one and will say what was released and to whom. The federal motor vehicle statute creates a private right of action against a person who obtains or uses a record for an impermissible purpose, with statutory damages available. Complaints can also go to the state licensing board where an investigator is involved, to the state attorney general, and to the institution's own regulator.
Sources
- 15 U.S.C. § 6821 — privacy protection for customer information of financial institutionsProhibits obtaining customer information from a financial institution by false, fictitious or fraudulent statements.
- 15 U.S.C. § 6823 — criminal penaltyAttaches criminal liability, with an enhanced term where the conduct is part of a larger pattern.
- Federal Trade Commission — Gramm-Leach-Bliley ActThe enforcing agency's own explanation of the privacy and pretexting provisions.
- 18 U.S.C. § 2721 — prohibition on release and use of personal information from state motor vehicle recordsLists the permitted uses for which a driver or registration record may be obtained.
- 18 U.S.C. § 2724 — civil actionCreates a private claim against anyone obtaining or using such a record for an impermissible purpose.
- 15 U.S.C. § 1681b — permissible purposes of consumer reportsGoverns any report assembled for employment, tenancy, insurance or credit decisions.
- 18 U.S.C. § 1030 — fraud and related activity in connection with computersApplies where records are taken from an account or system without authorization.
National Attorney Hub is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Investigators & Guards
Trespass, Fences and Where an Investigator May Lawfully Stand
Observation is lawful only from a place the observer may lawfully occupy. Public streets, sidewalks and open commercial parking areas carry the fewest restrictions. Ground close to a dwelling, enclosed by a fence and used for domestic life is treated as part of the home and is protected accordingly. A posted sign or an oral instruction to leave converts a lawful presence into criminal trespass, and several states impose civil liability for entering or using a device to capture private activity.
The Power to Detain and Its Limits
Security officers hold no police powers. The authority actually used is the merchant's privilege, a statutory rule permitting a merchant or their agent to detain a person for a reasonable time and in a reasonable manner on probable cause to believe merchandise was taken. It authorizes investigation and recovery only, permits nondeadly force, and collapses where the cause was weak or the hold too long.
Proof of Service That Holds Up
A return of service must record when the papers came to hand, the date, time and place of service, the manner used, the identity of the person served and their capacity, together with every document delivered, signed by the server. Missing facts or a missing signature can invalidate the service, though most states allow the return to be amended on application to the issuing court. A defective or false return supports a motion to quash and, later, a challenge to the judgment itself.


