WhatsApp Chats as Evidence: From Screenshot to Certified Record
Screenshots are the most common and the weakest form of chat evidence. How to capture a conversation so that it holds up in court.
WhatsApp conversations now appear in everything from matrimonial disputes to commercial arbitration. They are also among the most frequently rejected pieces of evidence, because the way most people capture them, a screenshot forwarded to a lawyer, strips away everything that makes the record verifiable.
Why screenshots fail
A screenshot is a picture of a screen. It carries no sender identity beyond a display name, no timestamps that cannot be edited, and no link to the device it came from. Courts have repeatedly observed that a screenshot can be fabricated in minutes with free software, and have declined to attach weight to one without corroboration.
"The WhatsApp messages, which are virtual verbal communications, are matters of evidence with regard to their meaning and contents to be proved during trial by evidence-in-chief and cross-examination."
What a court actually needs
- Identification of the parties to the chat, ideally through phone numbers rather than saved contact names.
- The complete conversation in sequence, not selectively chosen messages.
- Timestamps that are consistent with the device clock and the network records.
- A Section 65B certificate from the person in control of the device, describing how the export was produced.
- A hash value for the exported file so that it can be matched against the original later.
A defensible capture process
Step 1: Preserve the device
Stop using the chat. Do not delete messages, do not clear media and do not change the device date or time. If the device is likely to be contested, switch it to flight mode so that no new messages alter the state of the conversation.
Step 2: Export, do not photograph
Use the built-in export function with media included. The resulting text file contains every message with a timestamp and sender, and the media folder holds the original attachments. Capture the device's phone number, model and operating system version at the same time.
Step 3: Hash and certify immediately
Compute the SHA-256 of the export file and of each media item, and generate the 65B certificate while the device is in front of you. Tools such as Evidify Creator automate this step so that the certificate, the hashes and the acquisition log are produced together.
Step 4: Keep the original
The device remains the primary evidence. Do not factory reset or hand over the phone until the matter has concluded, because a court may direct that the original be produced for verification.
None of this is complicated, but it has to be done in the right order. A chat preserved this way has, in our experience, never been excluded for want of authenticity.