Does “online” or “active now” prove that the user was present?¶
A messaging or social platform may show an account as online or active now.
Evidential caution: that the named person is currently using the account.
What this means¶
An online indicator usually reflects recent contact between the service and an account, device or session.
That activity may come from a phone, tablet, desktop application or browser.
The application may remain connected in the background. A linked device may be active while the primary user is elsewhere.
Another person may control the device or account. Automated processes may also maintain a session.
Online indicators can be delayed, rounded or affected by privacy settings and service design.
In reports, “The account displayed as active” is safer than “The person was online.”
Where the issue is disputed, compare account, device, provider and surrounding contextual records before drawing a conclusion.
What to check or do next¶
- Preserve the exact wording, time observed, platform, account, device and any linked-session information.
- Do not rely only on a witness recollection that the account appeared active. Capture the screen and record the observation time where lawful and proportionate.
- Compare the indicator with message activity, login records, device possession, location and other account events.
- Preserve the original source and collection method so another investigator can test the same interpretation.
Evidential limits¶
The status can support an account-activity timeline, but it does not identify the human user or prove that they read a particular message.
Operational takeaway
Treat online or active status as evidence of recent account or session activity, not automatic proof that a particular person was present or using the service.