Can screenshots be used as evidence?

Can screenshots be used as evidence? The short answer

Screenshots are an everyday way to save what someone said or posted, and official guidance in Australia treats them that way. eSafety tells people experiencing online abuse to collect evidence before content is removed, and says: “Taking screenshots or photos of your device’s screen is a quick and effective way to save evidence”.

Being allowed in is only the first step. The person deciding your matter will weigh a screenshot against everything else: the other side’s account, the original messages, and any records held by the platform. Whether a screenshot is accepted, and how much it counts, depends on the rules and decision-maker involved.

This guide gives general information, not legal advice. If your matter is going to court, a tribunal or the police, ask a lawyer or legal aid service what your forum expects.

Why screenshots get challenged

A screenshot is a picture of a screen. That makes it easy to share, and easy to doubt. Common objections:

• It’s cropped. A single message without the messages around it can read very differently.
• There’s no date or sender. The screenshot shows words, but not clearly who sent them or when.
• It might be edited. Text and images in a screenshot can be changed, and the person deciding may ask how they know it wasn’t.
• The original is gone. If the post was deleted or the account closed, there’s nothing to compare it to.
• It was taken later than you say. Without a record of when you saved it, the date rests on your word.

If the other side says your screenshots are fake or AI-made, our guide on what to do when the other side says your evidence is a deepfake covers that next step.

What makes screenshots hold up better

eSafety’s guide on how to collect evidence gives a clear checklist. You should capture details such as:

• the service or platform used
• the webpage address or link (URL)
• the usernames of the accounts and URLs of the profiles involved
• “the times and dates the content was sent or shared”

Its advice on collecting evidence safely adds: “Try to save the original evidence, without making any changes to it. For example, avoid highlighting abusive comments within a screenshot or cropping images.” And: “Include the full conversation (rather than the abusive comment on its own), as well as account details, dates and times.”

In practice:

1. Capture the whole thread, not just the worst message. Take several screenshots in order if you need to.
2. Show who and when. Include the profile name, handle or phone number, and the date and time stamps.
3. Don’t mark up the original. If you want to highlight something, make a copy and highlight that.
4. Save the URL and the page source for web content. eSafety notes that “once the content is removed or deleted the URL may no longer be available”, and suggests saving the HTML source too.
5. Keep the files as they are. Store the original image files in one folder, rather than only in your camera roll or a chat.
6. Record when they existed. See the timestamping section below.

Two cautions from eSafety: “some apps notify the other person if a screenshot or screen recording is taken”, so think about your safety first. And “Do not take screenshots or photos of illegal and restricted content”. Report that content to eSafety instead.

For public pages, an archive copy made by someone else can help. See using the Wayback Machine as a record of a page.

Presenting screenshots to a tribunal: an Australian example

Queensland’s tribunal, QCAT, explains how to prepare evidence for minor civil disputes. It lists forms evidence can take, including “letters or other correspondence” and photos or videos that support your claim. It also says: “It is important that the evidence you present to QCAT is clear, concise and understandable.”

Its practical tips work for screenshots too:

• put them in date order
• “number any attachments to your statements and clearly refer to them in your statements”
• explain in your statement what each screenshot shows and how you saved it

Other courts and tribunals have their own rules, so check the guidance for yours. If your dispute is about a rental, our guide to entry condition report photos in Queensland covers that kind of record.

How to check if a screenshot is fake

You can’t always tell from the image. Practical checks:

• Ask for the original. The original message, export or file is better than a picture of it.
• Look for gaps. Missing messages, odd time jumps or cropped headers are worth asking about.
• Compare with other records. The other person’s phone, the platform, emails or bank records may confirm or contradict it.
• Check the file still matches its record. If a screenshot was timestamped, you can check a file still matches its fingerprint. A match shows it’s the same file that was recorded. It doesn’t show the screen was genuine when captured.

Where timestamping fits, and its limits

A common challenge is “you made that later”. You can answer that one by recording when your files existed, soon after you save them.

With TimeBinder^®, each screenshot’s SHA-256 fingerprint is recorded on the Bitcoin blockchain. That shows the file existed no later than the recorded time. Files are hashed in your browser and never uploaded, so private messages stay with you. One TimeBind can include up to 10 files. Our screenshot timestamping guide shows the steps, and the blockchain evidence explainer covers how a recorded fingerprint can be checked later.

There are two ways to TimeBind:

• Pooled (1 Token): Your fingerprint is grouped with other users’ in one shared Bitcoin entry, usually recorded within 24 to 48 hours, and often sooner, depending on Bitcoin network activity. It’s verified through TimeBinder.
• ASAP (3 Tokens): It gets its own Bitcoin transaction, sent straight away, and can be verified independently from the certificate and the Bitcoin blockchain.

The ASAP vs Pooled verification guide explains the difference.

When TimeBinder isn’t the right tool

• The content is illegal or restricted. Don’t capture it; report it to eSafety or the police.
• You’re in danger. Contact police or a support service first. Evidence can wait.
• You need the platform’s own records. Only the platform, or a court order, can provide those.
• A free option is enough for now. Emailing files to yourself or using cloud history leaves a date trail; see emailing yourself as a record for how it compares.
• You need advice on your case. Talk to a lawyer or legal aid.

For other file types, see how to show a file existed before a date.

TimeBinder pricing

• Free: $0. 1 Token a month.
• Essential: $20 a month for 5 Tokens.
• Expert: $50 a month for 15 Tokens.
• Business: $149 a month for 60 Tokens.
• Business Plus: $299 a month for 150 Tokens.
• Enterprise: custom.

A paid plan replaces the Free plan’s Token. A Pooled TimeBind uses 1 Token and an ASAP TimeBind uses 3. Prices are in US dollars. Service terms for every plan are set out in the TimeBinder Terms and Conditions.

Save your screenshots with a date

Record when your screenshots existed while things are fresh. The Free plan is $0 with 1 Token a month, enough for one Pooled TimeBind. See pricing