What can VoIP call records prove?¶

A VoIP service may provide records of internet-based voice or video calls.

Evidential caution: that a VoIP number or call record identifies a fixed handset, location or person.

What this means¶

VoIP call records can help show that an account, number or service initiated, received or connected a call at a recorded time.

They may include direction, duration, account identifiers, destination, device or session data and network information.

That can support contact analysis, timing and account attribution.

But VoIP services may operate across phones, computers, browsers and cloud systems. One number may be shared, forwarded or used from several locations.

Where the service is organisational, seek audit and administrative records showing account assignment and access.

In reports, identify whether the evidence relates to the VoIP account, number, session, device or person.

Where the issue is disputed, compare account, device, recipient and provider records before drawing a conclusion.

What to check or do next¶

• Preserve account IDs, numbers, call IDs, timestamps, session details, IP records, payment information and linked devices.
• Compare provider records with application data, device artefacts, browser history and recipient-side logs.
• Preserve the source and collection method so another investigator can test the same interpretation.
• Preserve the source and collection method so another investigator can test the same interpretation.

Evidential limits¶

The displayed calling number may not identify the originating device. Caller information may also be presented or routed through gateways.

Do not assume that a connected call proves who spoke or what was said.