Could another person have used the handset?¶
Yes, but shared use should be tested as a time-specific hypothesis rather than assumed or dismissed in the abstract. The question is whether another person had access and opportunity and whether that explanation fits the device activity at the disputed time.
Establish who could access it¶
Consider who possessed or was near the handset, knew or could observe the passcode, had enrolled biometrics, regularly borrowed it or could act through a linked device. Establish whether the handset was already unlocked and whether individual applications had separate protection.
A strong passcode and active biometric protection may reduce the likelihood of casual use. They do not exclude deliberate sharing, coercion, observation of the passcode or access while the device was unlocked. Notifications and linked devices may also expose some functions without a fresh handset unlock.
Test the relevant time¶
Use unlocks, application launches, calls, messages, photographs, searches, movement records and active account or profile evidence to distinguish possible users. Content can help: language, knowledge and relationships may be more consistent with one person than another. Independent evidence may place somebody with the handset or show that the usual owner could not have used it.
The alternative should explain the sequence, not merely remain theoretically possible. Ask whether the proposed user knew the necessary credentials or content and whether their use fits local files, timestamps and later behaviour.
Consider the wider pattern¶
A one-off message in a different style may justify another-user enquiries. Continuous personal activity before and after the disputed event may support the usual user. Another person's accounts, photographs or browsing may demonstrate genuine shared use, although old, restored or synchronised data does not establish relevant-time control.
Possession at seizure is not proof of earlier use. Handsets can be stolen, sold, lent or restored from backups, so attribution must remain tied to the event period.
Do not assume protection made other use impossible. Equally, a vague claim that somebody else might have used the phone does not defeat a supported attribution. State the evidence for access, timing and the surviving alternative.
Key takeaway
Assess an alternative user against evidenced access, opportunity, timing and the full activity pattern rather than ownership or possibility alone.
Related questions¶
- Can a mobile extraction identify the person using the phone?
- Does possession of the phone prove authorship of its messages?
- Could the handset have been remotely accessed or controlled?
