A phone search at the U.S. border is an inspection of electronic devices by CBP (Customs and Border Protection) officers on entry into or exit from the country. It is conducted without a judicial warrant: for decades, courts have recognized a "border search exception" to the Fourth Amendment, under which the standards for searches inside the country apply at the border in weakened form. The procedure is set by an internal CBP directive and applies to everyone — U.S. citizens, green card holders, and foreign nationals with visas.
Status as of July 22, 2026. Since January 1, 2026, a new CBP directive, 3340-049B, has been in effect, replacing the 2018 version. It expanded the list of covered devices (including SIM cards, smartwatches, GPS units, and vehicle infotainment systems) and the grounds for searches (including export control and theft of trade data), and it allowed advanced searches on national security grounds without individualized suspicion. According to CBP, devices were searched for 55,318 travelers out of 419 million border crossings in fiscal year 2025. The constitutional dispute continues: on July 13, 2026, the Fourth Circuit in U.S. v. Belmonte Cardozo held that a manual search of a device at the border is permissible without individualized suspicion; whether searches require a warrant remains an open question — a similar case (U.S. v. Roggio) is before the Third Circuit.
How a search works: basic and advanced
The directive distinguishes two levels. A basic search — reviewing information stored on the device itself; under the directive it may be conducted with or without suspicion, at the officer's discretion. An advanced search — connecting the device to external equipment to copy and analyze data; it requires supervisory approval plus either reasonable suspicion of a violation of laws CBP administers or — under the new directive — national security considerations, for which individualized suspicion is not required. Before a search, the traveler is notified of its purpose and legal basis (usually via a tear sheet); the reasons a particular person was selected are not disclosed. With supervisory approval, the directive allows not disclosing even the fact of the search where disclosure is deemed a threat to security or operations. Officers may request a passcode; under the directive, access codes are deleted once the search is complete.
What officers can look at — and what they can't
A search is limited to data present on the device at the time of inspection. Under the directive, officers do not review information stored only remotely — in the cloud or on servers — and the device's network connections must be disabled for that reason. A device can be detained for further examination: seizure is documented on Form 6051D and recorded in CBP systems. Copies of information made during a search are, under the directive, destroyed within 21 days unless there are grounds to retain them — and those grounds are broader than criminal ones: information relating to immigration, customs, and other law enforcement matters may be retained. Retained data, by CBP's own description, goes into the Automated Targeting System (ATS) with a retention period of up to 15 years — or, if the record is linked to an active law enforcement matter, for the life of that matter. For claims of privileged materials (attorney communications, journalistic work product), the directive provides a separate protocol involving agency counsel — the claim triggers the procedure, but it does not by itself stop the search.
Refusing to unlock the device: consequences depend on status
A U.S. citizen cannot be denied entry solely for refusing to unlock a phone, but the device can be seized and the inspection can drag on. For a foreign national with a visa, refusal is folded into the broader admission question: the officer decides whether to admit the person, and refusing access to the device can lead to enhanced inspection and refusal of entry. Permanent residents stand differently: a returning green card holder is, as a general rule, not treated as newly "seeking admission" (outside the INA 101(a)(13)(C) situations), and terminating the status requires its own basis and procedure — refusing to unlock a device does not by itself end the status, although device seizure and secondary inspection are just as possible. The judicial picture varies by circuit: the First and Eleventh Circuits require no suspicion even for advanced searches; the Ninth requires reasonable suspicion and limits forensics to searching for digital contraband; the Fourth requires individualized suspicion tied to border purposes for forensic searches, but in July 2026 held manual searches permissible without suspicion. No federal appellate circuit had imposed a warrant requirement as of mid-2026; the Supreme Court has not set a uniform standard, and the practical standard depends on where exactly a person crosses the border.
How entry control works overall is covered in the pillar on the border and entry into the United States; how exit and return documents work for green card holders, in the piece on traveling with a green card; ICE actions inside the country are described in the section on detention and deportation enforcement.
Can CBP look through a phone with no suspicion at all?
Yes — a basic search under directive 3340-049B is conducted "with or without suspicion," and the constitutional limits of such searches continue to be litigated. An advanced search with data copying requires reasonable suspicion or national security considerations plus supervisory approval. In practice, searches affect a small share of travelers — about 0.01% of crossings in fiscal year 2025.
Can CBP search data in the cloud?
Under the directive — no: a search is limited to information physically present on the device, and network connections are disabled during the inspection. Data accessible only over the internet — cloud storage, server-side correspondence — is not subject to a border search. Local copies of cloud files saved on the device, however, remain reachable.
What happens if a person refuses to give the passcode?
It depends on status. A U.S. citizen cannot be refused entry over the refusal, but the device can be detained on Form 6051D and the inspection can take longer. For a foreign national with a visa there is no automatic sanction, but the entry decision rests with the officer: the inability to examine the device complicates the inspection and, together with other circumstances, can lead to refusal of entry. At preclearance locations abroad, a refusal can mean being denied boarding.
Will a seized device be returned?
The directive provides for return: detention of a device is documented, extending the timeline requires management approval, and copied data with no grounds for retention is deleted within 21 days. In practice, return timelines vary; the fact of the seizure and its details are recorded on Form 6051D, which stays with the traveler.