I'm working on a story where a couple of detectives subpoena someone's cell phone records. Of course, the most important number, that of a potential perp, is unlisted. If they asked the cell phone company to find the source of any numbers in a phone that aren't listed, would they be able to find all of them?
Just to make sure I understand your question... The detectives subpoena a cell phone number and get the records. By
unlisted are you saying the number they know to belong to a perp isn't included in the records or my definition of "unlisted" is a number that is private (and no subscriber information is included)? I'm confused. You can subpoena an "unlisted" number just as you would a listed number. What information the phone companies provide depends upon the wording of your subpoena [ie., if you don't ask for
all associated subscriber information you're not going to get everything available; this includes
specifically requesting subscriber info for all incoming/outgoing calls belonging to that same carrier). Also, if you don't ask for other numbers included with the requested number's residence or other information associated with same subscriber and/or address you won't get that either.
It's all in the wording and it's all very confusing!].
As for your last question...
If they asked the cell phone company to find the source of any numbers in a phone that aren't listed, would they be able to find all of them?.
If by "not listed" you mean
no subscriber--you would identify the carrier for the landline/cell number in question and submit a subpoena to that carrier for the subscriber information. I'm not sure I understand your question but hope that helps.
Oh, and you can "trace" a cell phone via satellite--IP tracking and triangulation (not sure if that's the technical term or not LOL). You won't get an exact location but it will give you a quadrant but this is way above and beyond a simple admin subpoena.
Also, if they have a "potential perp" and I'm assuming they have some info on this perp, why don't they submit a subpoena for this individual's name/personal identifiers, by their known addresses or related info? You can submit a subpoena for all numbers associated with a specific address(es), individual or associated with a specific account. That's why you must word your subpoena carefully. If you ask for just one number and the person has four phone numbers you won't get that info unless you ask for it!
Cell phone conversations can be intercepted through radio receivers, if you get the correct band. Theoretically, if the signal lasted long enough, you could use triangulation data to point the approximate location. That's kind of a Hardy Boys thing to do, and I'm not reasonably certain that it would work in real life. There's also the fact that signals can be intercepted and traced through direction, strength, etc. Is a cell phone carrier likely to do that? Not in my opinion. Could a federal agency do it? You better believe it. That's why microburst transmission technology got to be so popular in later Cold War years. The signal didn't last long enough to be as easily snatched.
Whether they could or couldn't isn't the issue; whether or not it's legal and admissible in court is the important question. Even with the Patriot Act provisions the fed doesn't have license to intercept
random communications, etc.
[Note: I'm responding from a former federal LE perspective and as one who completed a number of subpoenas. Please note that regs will vary from carrier to carrier and situation to situation. For instance you'd need a Search Warrant to obtain e-mail record info / social networking site account info, etc. There are a handful of police officers/fed agents on this site who may have updated info for you as well!!!]