United States v. Lambis
The influential federal decision holding that DEA agents conducted a Fourth Amendment search when they used a cell-site simulator without a warrant to identify the apartment containing a target cellphone.
Executive Summary
DEA agents investigating an international narcotics organization obtained pen-register and cell-site information for a target phone. After carrier data narrowed the phone's location to a New York City neighborhood, agents used a cell-site simulator to force nearby phones to communicate with the government device. By moving through the area and measuring the target phone's signal, agents identified the apartment in which the phone was located. They knocked, obtained consent to enter, and later obtained a search warrant that produced narcotics and other evidence. The court held that the simulator use was a Fourth Amendment search because it revealed that the phone was inside a particular home—information agents could not have learned through visual surveillance—and because the technology was not in general public use. The preexisting orders did not authorize the simulator. The court suppressed evidence derived from its warrantless use.
Key Holdings at a Glance
From Carrier Records to a Specific Apartment
The investigation began with information from a confidential source about a large international drug-trafficking organization. DEA agents obtained judicial authority for a pen register and prospective cell-site information associated with a target cellphone.
The carrier data eventually placed the phone near the intersection of 177th Street and Broadway in Manhattan, but it did not identify a specific building or apartment. Agents then deployed a cell-site simulator. The device acted like a cellular tower and induced phones in the area to transmit identifying signals. Agents knew the identifying information associated with the target phone and used signal strength to move closer to it.
The simulator led agents to an apartment. After knocking, agents obtained consent from the defendant's father to enter. The defendant was present with the target phone. Agents later obtained a search warrant, and the resulting search produced drugs, drug paraphernalia, and other evidence.
How the Cell-Site Simulator Changed the Investigation
A cell-site simulator emulates a legitimate cellular base station. Nearby phones may connect to it and transmit identifying information. When investigators already know a target device's identifier, they can use relative signal measurements to locate the device with increasing precision.
The technique differs from obtaining ordinary carrier records. With historical or prospective CSLI, the provider discloses information generated through the commercial cellular network. A simulator creates a direct interaction between a government-controlled device and phones in the deployment area.
| Feature | Carrier Location Records | Cell-Site Simulator |
|---|---|---|
| Source | Records held or generated by provider | Signals collected through government-operated equipment |
| Interaction | Provider responds to legal demand | Nearby devices are induced to communicate with simulator |
| Typical purpose | Historical movements or general/prospective location | Locate or identify a device in a defined area |
| Non-target impact | Depends on scope of provider demand | Potential interaction with multiple nearby devices |
| Lambis significance | Narrowed search to neighborhood | Identified the particular apartment |
Why the Existing Legal Process Was Not Enough
The government had obtained judicial authorization for a pen register and cell-site information. But neither order advised the issuing judge that officers planned to operate a cell-site simulator or described how the device would interact with phones in the surrounding area.
The court concluded that the government could not stretch process aimed at carrier information into authorization for a materially different investigative technique. The simulator exceeded the scope of the existing orders.
The Home Was the Constitutional Line
The court relied on United States v. Karo, which held that monitoring a beeper to learn information about an object's presence inside a private residence was a search. It also relied on Kyllo v. United States, which treated the use of technology not in general public use to obtain otherwise unknowable details about a home as a search.
Without the simulator, agents knew only that the target phone was somewhere near a city intersection. The device disclosed that it was inside a particular apartment. That was not information available to an ordinary passerby or obtainable through visual surveillance from a lawful public position.
Why the Third-Party Doctrine Did Not Resolve the Case
The government argued that cellphones regularly transmit signals and that users therefore lack a reasonable expectation of privacy in those transmissions. The court rejected that framing. The relevant signals were captured through a government device masquerading as a tower, not simply obtained as ordinary business records from the carrier.
The court also observed that cellphone users do not meaningfully volunteer their location to government investigators merely by keeping a phone powered on. The simulator's capacity to identify a phone within a home placed the case within the protected-space reasoning of Karo and Kyllo.
Two years later, Carpenter v. United States limited automatic application of the third-party doctrine to sensitive historical CSLI. Carpenter did not decide cell-site-simulator use, but its treatment of involuntary, pervasive location generation is consistent with taking the privacy issue seriously.
Suppression and the Fruit of the Simulator Search
The agents used simulator-derived information to select the apartment, knock on the door, find the defendant with the phone, and build the chain leading to the later warrant. Because the initial simulator deployment was an unauthorized search, the court suppressed evidence obtained as a result.
The opinion illustrates why later consent or a later warrant does not automatically erase an earlier unlawful technique. Courts may examine whether the later evidence was independently obtained, sufficiently attenuated, or inevitably discoverable. The government must establish any exception to the exclusionary rule on the actual record.
What Lambis Does—and Does Not—Establish
Lambis is a federal district-court decision, not a Supreme Court or federal appellate holding. Its precedential force is therefore limited outside the Southern District of New York. It remains influential because it directly addresses a simulator used to identify a phone inside a home.
The court did not hold that every simulator deployment is unconstitutional, that the technique may never be used during an emergency, or that every use produces suppressible evidence. The decision instead holds that this warrantless, non-exigent use exceeded existing judicial process and invaded the privacy of a residence.
| Proposition | Status Under Lambis |
|---|---|
| Simulator use to identify phone inside apartment is a search | Held |
| Pen-register/CSLI order authorized simulator | Rejected |
| Probable-cause warrant can authorize properly limited use | Consistent with opinion and current federal policy |
| Every simulator use in public is necessarily a search | Not decided |
| Exigent use is always unlawful | Not decided |
| Rule binds every federal and state court | No; district-court authority |
Current Operational Law and Policy
The U.S. Department of Justice announced a warrant-based policy in September 2015. Federal agents generally must obtain a search warrant supported by probable cause before deploying a cell-site simulator, subject to limited exigent or exceptional circumstances described in the policy. Applications must disclose that the technology will be used.
The policy also limits collection of communications content, addresses deletion of non-target data, and calls for tracking deployments. It is an internal federal policy; it does not itself determine the Fourth Amendment rule for every state or local agency.
State constitutions, statutes, court rules, and agency policies may impose requirements beyond federal doctrine. Agencies should verify the controlling law where deployment occurs and should coordinate with prosecutors before an operational need arises.
Practical Guidance for Agencies
Cell-Site Simulator Warrant Checklist
- Identify the offense, target, phone number, and known device identifiers.
- State facts establishing probable cause and connecting the device to the target.
- Name the simulator technique and describe how it emulates a cellular base station.
- Specify whether the objective is to locate a known device, identify an unknown device, or conduct a limited canvass.
- Describe the geographic area, deployment duration, and stopping event.
- Explain the information the simulator will collect and what it will not collect.
- Address potential interaction with non-target devices and minimization procedures.
- Disclose any potential disruption, downgrade, or effect on cellular service.
- Specify retention, deletion, access, audit, and return-to-court procedures.
- Request separate authority for entry, device search, provider records, or communications content when needed.
Predeployment and Emergency Checklist
- Confirm that the warrant or recognized exception covers the actual capability to be used.
- Verify the target identifier and the evidence that the target currently possesses the phone.
- Brief the operator on scope, duration, minimization, and termination conditions.
- Identify hospitals, emergency services, and other sensitive operations in the deployment area.
- Coordinate with prosecutors and communications specialists as policy requires.
- If exigency is claimed, record the immediate threat, why delay was unsafe, and why less intrusive means were inadequate.
- Record start and stop times, locations, settings, results, and each operational decision.
- Stop when the authorized objective is achieved or the legal basis expires.
- Segregate and delete non-target data under the warrant and applicable policy.
- Complete after-action review, inventory, discovery, and audit requirements.
Litigation and Discovery Checklist
- Identify the exact equipment, software, firmware, and capability used.
- Determine whether the device located a known identifier or searched for an unknown one.
- Compare the deployment with the precise language of every order and warrant.
- Reconstruct what investigators knew before the deployment and what the simulator added.
- Determine whether the return identified a residence, room, or other protected space.
- Trace the causal chain from simulator data to contact, entry, consent, warrant, arrest, and seizure.
- Analyze standing, attenuation, independent source, inevitable discovery, and good faith separately.
- Examine non-target collection, retention, deletion, and potential service effects.
- Preserve operator training, logs, maps, configuration, raw data, and vendor or federal agreements.
- Apply current federal, state constitutional, statutory, and local authority—not Lambis alone.
Frequently Asked Questions
What did United States v. Lambis hold?
The court held that DEA agents conducted a Fourth Amendment search when they used a cell-site simulator without a warrant to determine that a target phone was inside a particular apartment.
What is a cell-site simulator?
It is equipment that emulates a cellular base station and induces nearby devices to communicate with it, allowing law enforcement to identify or locate a device. “Stingray” is a commonly used brand-derived term.
Why did the home matter?
The simulator revealed interior information—the apartment containing the phone—that officers could not obtain through ordinary visual surveillance.
Was there any court order?
Yes. Agents had pen-register and cell-site authority, but those orders did not disclose or authorize use of the simulator.
Did the court suppress the evidence?
Yes. The evidence derived from the unauthorized simulator search was suppressed.
Is Lambis binding nationwide?
No. It is a federal district-court decision. Its reasoning is influential, but agencies must apply controlling federal circuit, state constitutional, statutory, and local law.
Do federal agents now need a warrant?
Department of Justice policy generally requires a probable-cause search warrant for simulator deployment, with limited exceptions. The policy is not a complete statement of the constitutional law applicable to every agency.
Can exigent circumstances permit deployment without a warrant?
A recognized exigency may excuse a warrant when the constitutional standard is met. The threat, time pressure, scope, and stopping point should be documented contemporaneously.
Primary Authorities and Operational Guidance
Federal district-court opinion suppressing evidence derived from warrantless cell-site-simulator use that identified a target phone inside an apartment.
Read United States v. Lambis
Supreme Court decision concerning electronic monitoring that reveals information inside a private residence.
Read United States v. Karo
Supreme Court decision addressing technology not in general public use that obtains otherwise unknowable details of a home.
Read Kyllo v. United States
Federal policy generally requiring a probable-cause warrant, disclosure of the technology, data deletion, and deployment controls, subject to limited exceptions.
Read the DOJ policy
Supreme Court decision holding that acquisition of extended historical CSLI was a Fourth Amendment search.
Read Carpenter
Final Assessment
United States v. Lambis remains an essential operational case because it exposes the gap between generic electronic-surveillance terminology and the actual constitutional impact of a specific technology. Carrier records led agents only to a neighborhood. The simulator supplied the protected-space fact: the target phone was inside a particular apartment.
The case also shows why candor and causation matter. The issuing court had not been told about the simulator, and the apartment identification drove the later encounter and evidence collection. Judicial authorization must match the technique actually deployed.