Certification & Online Trace Collection · service active
WACZ · ISO 28500/ eIDAS timestamping/ Client area
C.E.R.T.O.
Sign in Register free
IT EN
C.E.R.T.O. / Guides / WhatsApp

WhatsApp as evidence in court

Messages, voice notes, photos shared in chat: today a WhatsApp conversation can be decisive in a separation, an employment claim, a debt-recovery case or a defamation matter. The problem is that the way most people bring that chat into a case — the screenshot — is also the easiest to take apart.

"You staged that conversation." That is the objection that destroys a chat screenshot in one second. To avoid it, the chat must be captured, not photographed.

Why a chat screenshot is fragile

A conversation is a sequence: who wrote what, when, in which order. A screenshot captures only one frame of it, and carries all the weaknesses covered in the guide "Does a screenshot hold up in court?". With chats, though, the objections are even trickier:

  • Deleted or hidden messages. A screenshot shows only what you choose to show. "What about the messages before and after?"
  • Editable text. There are apps that fake conversations. An image alone cannot tell the genuine from the fabricated.
  • Attribution. "That number isn't mine", "I didn't write that". Without verifiable context, the author is disputable.

What it takes for a disputable-proof chat

The same three pillars of any digital evidence apply, this time to the whole conversation and not a single frame:

  • a battery of hashes (several digital fingerprints computed with different algorithms on the captured content: they change if even a single character is altered), so any later edit is detectable;
  • a timestamp (a date certified by an independent third party) that fixes the moment of capture;
  • a chain of custody documenting how the chat was collected, preserved and handed over.

How to capture a WhatsApp chat with C.E.R.T.O.

With the WhatsApp module, C.E.R.T.O. captures the conversation and produces a bundle (a BagIt package, the international standard for digital exhibits) holding the content, its fingerprint, the timestamp and a structured description of the chain of custody. No crops, no "trust me": a dated, sealed exhibit.

The same goes for Telegram and the other channels. And as with every C.E.R.T.O. acquisition, verification is within the opposing party's reach: anyone can independently re-check the bundle's integrity, offline. If it is authentic, verification confirms it; if it was touched, it shows.

Don't photograph the chat — capture it. That is the difference between evidence you argue over and evidence that holds.

Read first: Does a screenshot hold up in court?