What should I do if I find several linked devices together?¶

Several devices found together may form one connected evidence environment.

What this means¶

A phone, tablet, smartwatch, laptop, vehicle system, headphones or second handset may share accounts, notifications, messages, location data and authentication.

The mistake is to treat each item as isolated.

Those actions may change logs, trigger synchronisation or alter the evidence relationship.

Linked devices can corroborate each other.

A smartwatch may show notifications from a phone. A tablet may contain the same app account. A vehicle system may show pairing history. A laptop may hold cloud access or account records linked to the handset.

They can also complicate attribution.

Several devices in one location may belong to different people. One person may use all of them. A shared account may appear across the whole set.

Build a device map.

Where one device is unlocked or actively connected, seek specialist advice quickly because changing one item may affect the others.

The operational takeaway is: preserve the devices as a connected set, document their physical and digital relationships, avoid testing links manually and use the combined evidence to distinguish shared infrastructure from individual use.

What to check or do next¶

• Start by recording where every device was found and its relationship to the others.
• Note which items are physically connected, charging together, paired by Bluetooth, using the same Wi-Fi network or displaying related notifications.
• Record each device’s power state, lock state, screen display, battery level and visible account information.
• Do not begin moving SIMs, swapping chargers, opening apps or pairing devices to see what connects.
• Record which account, number, SIM, identifier and connection appears on each device and at what time.