What is an MMS and how does it differ from SMS?¶

A handset may contain a message with an image, audio file, video or richer content.

Evidential caution: that MMS is simply a longer SMS and creates the same records.

What this means¶

MMS is a multimedia messaging service designed to carry media and longer or structured content. It may use different network systems and delivery processes from ordinary SMS.

The handset may display the MMS inside the same messaging application, which can hide those differences.

An MMS record may include message text, attachments, sender and recipient information, timestamps and local status.

But attachments may be downloaded separately, cached, stored in application folders or represented only by a thumbnail or reference.

Network records may show transmission events without retaining the media content. The available provider data depends on the service and retention.

As with SMS, the apparent sender and device do not automatically identify the human author.

Where the distinction matters, compare the record with the recipient device, provider data and surrounding activity.

What to check or do next¶

• Preserve the original device, message, attachment files, thumbnails, filenames, times and sender information.
• Compare the content with downloads, photo libraries, cloud backups and recipient-side devices.
• Preserve the source and collection method so another investigator can test the same interpretation.
• Preserve the source and collection method so another investigator can test the same interpretation.

Evidential limits¶

Do not rely only on screenshots. Export or forensic acquisition may preserve attachments and technical details that the screen does not show.