Recording a phone call in the United States sits at the intersection of a federal wiretap statute and a patchwork of state laws that don't agree with each other or with the federal floor. Most people only encounter the question when something goes wrong: a landlord dispute, a harassment complaint, a source who wants to go on record. By then it's too late to ask whether the recording is even admissible, or whether making it was a crime.
The Federal Floor: One-Party Consent
Under the federal Wiretap Act (18 U.S.C. § 2511), it is legal to record a phone call as long as one party to the call, which can be you, consents. You do not have to tell the other person. You do not have to announce it. This is called one-party consent, and it's the default in the majority of US states.
The logic behind it is straightforward: the law is aimed at a third party secretly wiretapping a conversation neither participant agreed to, not at a participant keeping a record of their own conversation. If you're on the call, you already have access to everything being said. Recording it doesn't expose the other person to a stranger; it just changes the format the information exists in.
The State Patchwork: All-Party Consent
A minority of states impose a stricter standard, usually called all-party or two-party consent, requiring every participant to agree before a call can be recorded. California and Florida are commonly cited examples of all-party consent states, and each has its own case law about what counts as adequate notice. Get this wrong in one of them and a thrown-out recording is the smaller problem: several of these states make unauthorized recording a criminal offense, with actual prosecution as the risk, not a civil dispute.
All-party consent laws generally apply based on where the parties physically are, not where the company recording the call is headquartered. A call between someone in a one-party state and someone in an all-party state is usually governed by the stricter of the two, because the all-party state's law protects its own resident regardless of who initiated the call.
What "This Call May Be Recorded" Actually Does
The disclosure at the start of a customer service call exists specifically to manufacture consent under an all-party regime. If you're told the call may be recorded and you continue the conversation, courts have generally treated that as implied consent, since you had the option to hang up and didn't. This is why the sentence is delivered as a statement, not a question: the company doesn't need you to say yes, it needs you to not say no by staying on the line.
That mechanism doesn't extend to two people on a personal call. There's no equivalent script for a private conversation between friends, family, or colleagues. If you want to record a personal call and the other person is in an all-party state, you need actual, explicit agreement, not the mere fact that they kept talking.
The Case That Made All-Party Consent Famous
Linda Tripp's secret recordings of her phone conversations with Monica Lewinsky in 1997 and 1998 are the case most people half-remember when this topic comes up, and the details are instructive. Tripp made the recordings from Maryland, an all-party consent state, without Lewinsky's knowledge. Maryland prosecutors charged Tripp under the state's wiretapping law, a criminal charge, not a civil one. The charges were ultimately dropped on a legal technicality unrelated to whether the underlying conduct was illegal, which is part of why the case is remembered as a political story rather than a settled legal one. The prosecution itself is the part worth remembering: an all-party consent violation is treated as a real crime in the states that have the law, independent of how sympathetic or newsworthy the recording turns out to be.
Where This Gets Complicated: Apps, VoIP, and Journalism
Smartphone call recording features and third-party recording apps don't change the underlying law; they just make it easier to violate without thinking about it. A journalist recording a source for a story, a small business owner recording a vendor call, or someone documenting a harassment pattern for a future complaint are all making a legal judgment call each time, whether they realize it or not.
Journalists in particular have reason to know this cold. A source who agrees to talk on the record still needs to be told, explicitly, if the call is being recorded when either party is in an all-party state, and "I assumed it was fine" is not a defense that holds up. Organizations that do a lot of source interviews often standardize on a verbal disclosure at the start of every call, regardless of jurisdiction, specifically to avoid having to figure out the state-by-state answer in the moment.
Outside the US: A Different Default
Most of the EU takes a different starting position. Under GDPR, a phone recording that identifies a person is personal data, and processing it, including simply making the recording, requires a valid legal basis: consent, legitimate interest, or a handful of narrower categories. There's no equivalent of the American one-party consent shortcut. In practice this means a business recording calls in the EU typically needs a clear, upfront disclosure regardless of which national law applies, because the disclosure itself is usually how the legal basis gets satisfied.
| Regime | Who has to agree |
|---|---|
| US federal / one-party states | Just you, the person recording, need to consent. |
| US all-party states | Every participant must agree, explicitly or through continued participation after disclosure. |
| EU / GDPR | A lawful basis is required for the recording itself, usually satisfied through disclosed consent. |
What To Actually Do
If you regularly record calls for work, business, or documentation, the safest default is to disclose it verbally at the start of every call, regardless of where either party is located. It costs one sentence, and it removes the need to determine, in real time, which state's law applies and whether it was satisfied. For personal calls, ask first. It's a smaller ask than it feels like, and it's the only version of this that doesn't depend on getting the jurisdiction right.