What identifiers might I find on a mobile device?¶
A mobile device exposes identifiers for hardware, network subscriptions, wireless interfaces, accounts and app installations. Each links a different evidence layer.
Match identifier to function¶
IMEI and manufacturer serial numbers identify handset hardware. IMSI relates to a mobile subscriber identity, while ICCID identifies a SIM card or eSIM profile. Telephone numbers identify service routing and may move. Wi-Fi and Bluetooth addresses can connect network or pairing records, although privacy features may randomise them.
Accounts and apps add usernames, email addresses, provider account IDs, cloud-device IDs, push tokens, advertising IDs and installation identifiers. Some persist; others change after reset, reinstall, update or privacy action.
Preserve source and timing¶
Record each value exactly and where it appeared - casing, settings, provider response or specialist extraction. A label may not describe the active profile, and a settings screen is not the same source as a network record.
Use shared identifiers to correlate records: an IMEI with network connections, an ICCID with activation history or an app account ID with provider events. None alone proves ownership, possession or operation. The following cards explain the distinct evidential role of IMEI, IMSI and ICCID.
Key takeaway
Treat identifiers as sourced, time-sensitive correlation keys between hardware, subscriptions and accounts - not as names for the person using them.