Home/Insights/Guide
// ADMISSIBILITY

Screenshots Aren't Evidence: Capturing Data Properly.

A screenshot is a photograph of a screen taken by an interested party. Here is how to capture the same material so it proves itself.

Bobby Pabla·Principal Digital Forensic Examiner·January 2026·Updated July 2026

Screenshots of text threads, social media posts and web pages appear in Australian courtrooms every day, and most are admitted without objection. But a screenshot is a photograph of a screen, taken by an interested party, with no metadata and no way to verify it hasn't been staged, cropped or edited. When the content is contested, that fragility becomes the cross-examination.

Why They Fail Under Pressure

Fabricating a convincing message thread takes minutes with freely available tools. A screenshot carries nothing that anchors it to a source device, an account or a time — the S 146 presumption for machine-produced documents has little to attach to. Once a party alleges fabrication, the proponent is left proving authenticity with nothing but the witness who took the picture.

Capture It Properly Instead

For messages: a forensic extraction of the handset preserves the thread with its database records, timestamps and participant identifiers intact. For social media and web content: captures that record the URL, time and content hash. For email: the message file with full headers, not a PDF of the inbox. Each capture is hashed at collection and documented by the collector — producing an exhibit that proves itself, rather than one that depends on being believed.

If the informal capture has already happened, don't discard it — but preserve the source now, before deletion or account changes take the proper exhibit off the table. For how Australian courts treat contested screenshots in more depth, see Are Screenshots Admissible Evidence?

Frequently Asked Questions

Are Screenshots Admissible in Australian Courts?

They are frequently admitted when no one objects. The problem arises when content is contested: a screenshot carries no metadata and nothing anchoring it to a source device, account or time, so the S 146 presumption for machine-produced documents has little to attach to, and the proponent is left proving authenticity through the witness who took the picture.

How Should Text Messages Be Preserved for Court?

Through a forensic extraction of the handset, which preserves the thread with its database records, timestamps and participant identifiers intact — hashed at collection and documented by the collector, producing an exhibit that proves itself rather than one that depends on being believed.

What If a Screenshot Is All I Have?

Keep it — but preserve the source now. Secure the device or account before deletion, an account change or data cycling takes the proper exhibit off the table. An informal capture plus a later forensic preservation is a far stronger position than the screenshot alone.

FURTHER READING · AUTHORITATIVE SOURCES
General information only — not legal advice. For guidance on a specific matter, speak with your lawyer or contact us in confidence.
RELATED SERVICES Digital Forensics → Evidence Review & eDiscovery → Social Media and Messaging Apps → Email and Cloud Forensics → Help for Scam Victims →

More Guides

Facing This Situation Now?

A certified examiner responds within one business day — in confidence, no obligation.

Request a Confidential Consult