What can a payment record not prove?¶
A payment record may look definitive because it contains names, account details, timestamps and an amount.
Avoid this assumption: Those fields answer every important investigative question.
A payment record usually cannot prove, on its own, the identity of the person who initiated the transaction. It may identify an account holder, cardholder, wallet customer, merchant or beneficiary, but those roles do not automatically identify the actual user.
It usually cannot prove who was holding the device, who entered the payment details or who approved the transaction. Accounts can be shared, compromised, remotely controlled or accessed through an existing authenticated session. Cards can be used by family members, associates or offenders. A wallet address can be controlled by one person, several people, an organisation or a service.
The record also may not prove consent or knowledge. A victim may have been manipulated into making an authorised payment. Malware or remote-access software may have assisted the transaction. A scheduled payment may have executed without any fresh action at the recorded time.
It may not prove the purpose of the payment. Merchant descriptors, references and notes can be incomplete, misleading or entered by the customer. A payment to a business does not, by itself, prove which goods or services were obtained.
It may not prove benefit or ownership. Money can pass through mule accounts, payment processors, exchanges, escrow services or temporary wallets. Receipt of funds does not automatically establish that the recipient retained them, knew their origin or was involved in the underlying offence.
Finally, the timestamp may not represent the moment the user acted. It could reflect authorisation, processing, posting, settlement or provider-system time.
These limitations do not make the record weak. They define what further evidence is needed. Seek the underlying provider records, authentication history, device data, communications, account changes, transaction-chain information and evidence of what happened before and after the payment.
Operational takeaway¶
Do not use a payment record alone to prove identity, intent, consent, purpose or benefit when those issues require separate evidence.