Is RCS Safe on iPhone and Android? Encryption and the FBI Warning
Reviewed September 28, 2026. You do not need to turn off RCS simply because of a headline about telecom attacks. For sensitive conversations, check that the specific conversation is end-to-end encrypted. Switching an encrypted RCS conversation to ordinary SMS removes that protection.
What did the telecom security warning mean?
The warning concerned attacks on telecommunications infrastructure. It should not be presented as proof that every RCS conversation was hacked. CISA’s mobile communications guidance addresses people at high risk of targeted surveillance, including senior government, military, and political figures. Businesses should also review how staff exchange sensitive information.
Is RCS encrypted on iPhone?
Apple’s current messaging guidance says end-to-end encrypted RCS messaging is available in beta starting with iOS 26.5, with supported carriers and a gradual rollout. All participants need carriers that support encryption. The conversation shows Encrypted and a lock icon when this protection is active. A green message bubble alone does not tell you whether a conversation is encrypted.
RCS requires a supported carrier and messaging plan. If you do not see the encryption indicator, do not assume that an RCS label provides end-to-end protection. Availability can differ between contacts and group conversations.
Is RCS encrypted in Google Messages?
Google documents automatic encryption for eligible RCS conversations between Google Messages users with RCS enabled and a data or Wi-Fi connection. Look for the lock on the send button and next to a message’s timestamp. Google’s help page describes that supported configuration; it is not a reason to ignore Apple’s newer carrier-dependent rollout.
If RCS becomes unavailable and a message falls back to SMS/MMS, end-to-end encryption is not available for that message. Check the delivery mode before sending passwords, financial information, or other sensitive data.
What RCS means, and how it differs from SMS
Rich Communication Services adds features such as higher-resolution media, typing indicators, and read receipts to carrier messaging. Those features are separate from encryption. SMS and MMS do not provide end-to-end encryption. iMessage and eligible RCS conversations can provide it, but compatibility and the conversation’s displayed status matter.
Five checks before sending a sensitive message
- Install supported phone and messaging app updates.
- Open the conversation and check its encryption indicator; do this again when participants or devices change.
- Watch for SMS/MMS fallback. If encryption is unavailable, use an organization-approved encrypted channel instead.
- Verify unexpected requests for money, credentials, or recovery codes through a separate trusted channel. Encryption does not prove that the sender is legitimate.
- Secure the phone, review app permissions, and protect backups. Message transport encryption does not protect a compromised or unlocked endpoint.
Should I turn RCS off?
Disabling RCS is not a universal security fix: it can move a conversation to unencrypted SMS. Choose the channel based on verified encryption, your contacts’ capabilities, and your organization’s data-handling rules. People facing targeted surveillance should follow current CISA guidance and their security team’s instructions.
What businesses should do
Document which channels staff may use for customer records, approvals, and recovery codes. Combine messaging rules with device management, access controls, and incident reporting. Technijian’s cybersecurity services can help review those controls. Request an IT assessment to discuss business messaging and device risks.
Original recording
The recording reflects the original publication. Use the reviewed written guidance above for current instructions.
