Skip to content
Skip to main content
Mobile Devices & Apps Operational Explainer

I have found a mobile device - what should I record immediately?

Record the device's exact location, physical condition, power, screen, connections and surroundings before interaction changes them.

Capture the item and live state

Note who found and handled it, date, time and position. Describe make or apparent model, colour, case, damage, markings, cables and accessories. Record whether it is on or off, screen lit, locked or unlocked, displayed content, notifications, battery, signal, network name and visible clock.

Photograph the device, screen and connected equipment where lawful and appropriate without navigating for more detail. Nearby SIM packaging, chargers, watches, tablets, boxes, written passcodes and recovery information may explain relationships and should be recorded in context.

Preserve before deciding what to change

Do not open applications, messages, test passcodes or press controls simply because information is visible. Interaction can create logs, read receipts, synchronisation and screen changes. A live, unlocked, damaged, low-battery or remotely alterable handset may need urgent specialist advice.

The initial record explains later changes and preservation choices. Whether to switch the device off depends on competing access and change risks, not a universal rule.

Key takeaway

Fix the handset's physical and live digital state in a contemporaneous record before taking any action that may alter access, connectivity or evidence.

Reference: MDA-011Mobile Devices & Apps