How to prove harassment or identity theft to police or in court

If you're dealing with harassment or identity theft, first things first: if at any point you feel you're in danger, contact emergency services or the police before anyone else. What follows is general information on documenting digital evidence once you're safe.

Why a screenshot isn't always enough

A single screenshot is easy to challenge: it can be claimed to be edited, taken out of context, or missing the rest of the conversation. Police and courts generally don't give it the same weight as evidence extracted with a forensic methodology, which preserves metadata and can be verified.

What digital evidence actually holds weight

• Full, uncropped screenshots with visible date, time and sender.
• Forensic extraction of the full conversation from the original device, not just loose screenshots.
• A record of accounts or profiles linked to whoever is harassing or impersonating you, when it can be obtained.
• A clear chain of custody: who has had access to the evidence, when, and how it was preserved.

Steps to take if you're going through this

• Don't delete anything, even if it's painful to look at.
• Don't reply or engage with whoever is harassing you on the same channel.
• Save the context too: earlier messages, profile screenshots, the account's creation date.
• Get professional help to turn that evidence into a report with expert-witness methodology.

What an expert witness report is, and why courts ask for one

An IT expert witness report documents evidence following a recognized methodology, so it can be verified how it was obtained and that it hasn't been tampered with. As a Party-Appointed IT Expert Witness, AEPEJU Chartered Member, I prepare a simplified version of this report specifically for individual cases — harassment, fraud or identity theft — valid to support a police report or legal proceedings.