Texas Attorney General Ken Paxton filed a lawsuit against Meta Platforms Inc. and WhatsApp on Thursday, May 21, 2026 [1].

The legal action challenges the fundamental privacy promises of one of the world's most used messaging services. If the state proves that Meta can access private messages, it could undermine the trust of millions of users who rely on end-to-end encryption for secure communication.

The lawsuit, filed in a Texas state court, alleges that Meta misled consumers regarding the strength and scope of WhatsApp's encryption [1], [2]. According to the filing, the company's claims that messages are end-to-end encrypted are false [1], [4]. The Attorney General's Office said that Meta can access users' private messages [3].

Paxton said these actions violate Texas consumer-protection law [1], [4]. The state argues that the discrepancy between the advertised security and the actual technical reality constitutes a deceptive trade practice. By marketing the service as private while maintaining the ability to view content, the state alleges Meta deceived the public to maintain its market position [2], [4].

Meta has not yet provided a detailed public response to the specific allegations in the Texas filing. The case centers on whether the technical implementation of WhatsApp's encryption matches the marketing language used to attract and retain users [1], [3].

This lawsuit follows a broader trend of state-led challenges against major technology firms over data privacy and consumer transparency. The outcome may depend on technical discovery to determine if Meta's infrastructure allows for the interception of encrypted data [1], [2].

Texas Attorney General Ken Paxton filed a lawsuit against Meta Platforms Inc. and WhatsApp

This lawsuit represents a significant legal challenge to the 'zero-trust' security model marketed by Big Tech. If the court finds that Meta misrepresented its encryption, it could lead to massive fines under Texas consumer law and force a global re-evaluation of how messaging apps disclose data access to their users.