What is a screenshot and what can it prove?¶

A screenshot is an image created by capturing what was displayed on a device screen.

What this means¶

It can preserve a message, webpage, account screen, map, photograph or application view.

A screenshot may prove that particular content was displayed on a device at some point.

The displayed content may also have been edited, mocked up or shown from a different account.

Metadata and file-system records may help show when the screenshot file was created and which device held it.

The screen content may contain useful account names, times, status indicators and interface details.

But those elements still require verification.

Also consider whether the screenshot was received from somebody else rather than created locally.

Its storage path, filename and metadata may help.

Treat it as a representation of what appeared on screen.

The operational takeaway is: a screenshot can show displayed content and provide valuable leads, but the underlying event, account and timing must be verified through original records and corroboration.

What to check or do next¶

• Look for the original app or provider records, transaction data, message IDs, account activity and linked-device evidence.
• Do not treat a screenshot as self-authenticating evidence.

Evidential limits¶

It does not automatically prove that the underlying event actually happened.

A screenshot of a bank transfer does not prove the payment completed.

A screenshot of a message does not prove it was sent, delivered or received.