What can a screenshot of a message prove?¶

A screenshot of a message can be useful evidence, but it proves less than many people assume.

Evidential caution: that a screenshot is the conversation itself.

What this means¶

A screenshot records what appeared on a screen at the moment it was captured. It may preserve visible message content, names, profile images, times, delivery indicators and part of the surrounding conversation. That can help establish what the person taking the screenshot says they saw.

The name shown may come from the device owner’s contacts rather than from the messaging service. Earlier or later messages may be missing. Messages may have been deleted, edited or unsent before the screenshot was taken. The device clock, display settings and time zone may affect what appears.

What to check or do next¶

• Record who took the screenshot, when, on which device and how it was supplied. Preserve the original image file rather than relying only on a copy pasted into a document. The original may contain file information that is lost during printing, cropping or re-saving.
• Where possible, compare it with the source device, a native chat export, extraction data, recipient-side records or provider information. Look for stable identifiers such as telephone numbers, usernames, account IDs, message IDs and group identifiers.

Evidential limits¶

But a screenshot does not automatically establish where the content came from, whether the conversation is complete or whether the display accurately identifies the account involved.

A screenshot can also be altered. That does not mean every screenshot is unreliable. It means the image should be assessed through provenance and corroboration rather than appearance alone.

Use precise reporting language. A screenshot may show that particular content appeared on a particular display. It does not, by itself, prove who authored the message or that no other relevant content existed.