What is a linked messaging device?¶

A messaging account may be active on a phone and also on a computer, tablet or browser.

Evidential caution: that all activity must have come from the primary phone.

What this means¶

A linked messaging device is another device or session authorised to access the same messaging account. It may display conversations, receive messages and, depending on the service, send content independently.

The linked device may remain active after the primary device is elsewhere, switched off or no longer in the user’s possession.

This matters because the account may be used from several locations and by different people.

A linked-device record identifies an authorised access route, not necessarily the human user. The device may be shared, unattended or compromised.

Where attribution matters, establish which linked device was active at the relevant time and who controlled it.

In reports, distinguish the account from the particular device or session used.

Where the position is unclear, compare device records, provider metadata and the account’s security history.

What to check or do next¶

• Preserve the list of linked devices, device names, platform types, session dates, last-active information and any security alerts.
• Do not remove a linked device before recording it. Revoking access may create new records, alert another user or destroy useful session information.
• Look for account login records, browser history, desktop application data, device identifiers and notifications showing when the link was created.
• Preserve the original source and collection method so another investigator can test the same conclusion.