Skip to content
MSG-063 Messaging, Social Media & Telecoms

Is an internet messaging service device-based, account-based or both?

A messaging service may appear to live on one phone but still operate through an online account.

Evidential caution: that the service is tied only to the device in front of you.

What this means

Some messaging services are strongly device-based. Their data, credentials or encryption keys may be closely linked to particular hardware.

Others are primarily account-based. The user signs in and can access the service from several devices or sessions.

Many services are both. The account identifies the user within the platform, while individual devices, linked sessions and local storage hold separate evidence.

This matters because the same account may send or receive messages from a phone, tablet, desktop application or browser session.

Where attribution matters, establish which account was involved, which device or session performed the activity and who controlled that device or session.

In reports, separate account association from device activity and personal use.

What to check or do next

  • Preserve the account identifiers, registered number or email, linked devices, session information and device-specific records.
  • Ask whether the service synchronises message history across devices, whether new devices can access older content and whether the primary device is required for continued use.

Evidential limits

A seized phone may therefore be only one access point. It may not contain every message, attachment or active session.

Do not assume that removing the SIM or switching off the phone ends every session. Some linked devices may remain active.

Operational takeaway

Identify whether the service relies on the account, the device or both, and preserve every relevant device and session before attributing the communication.

Keep moving

Where this question leads

These links explain why the next page may matter, rather than presenting an undifferentiated list.