Do WhatsApp screenshots stand up in court?
It is the question I am asked most often, and the short answer is: yes, it can be filed; no, on its own it proves next to nothing. The distance between those two statements is where a good many cases are decided.
What a screenshot is, technically
It is an image. A grid of coloured dots that, seen by a human being, resembles a conversation. It does not contain the message text as text, nor the internal identifiers the application assigns to each message, nor the timestamps the program keeps in its own database — which are a different thing from the times printed on the screen. It contains nothing tying the image to an account, a telephone number or a device.
Fabricating a false one takes no particular skill. Applications built precisely to generate convincing fake conversations have existed for years, and failing those, an image editor and a little patience will do. To be clear: in the great majority of cases the screenshots filed are genuine. The problem is not that they are usually false, it is that they contain nothing that allows the two cases to be told apart. And evidence that does not discriminate is evidence that empties out the moment it is challenged.
The mechanism of article 2712
Article 2712 of the Italian Civil Code provides that digital reproductions of facts and things constitute full proof of what they represent unless the party against whom they are produced disavows their conformity.
The structure is a conditional shift. So long as nobody objects, the screenshot has the force of full proof and the party filing it need add nothing. The moment the other side disavows conformity, that privileged status falls away: the document does not become unusable, but it drops to material the court weighs freely, and it falls to the party who filed it to support it with something else. If the image is all they have, they have nothing.
In practice this is what happens: a screenshot is filed, the other side disavows, and the evidence moves to the device. If the phone has since been replaced, or the conversation deleted, the point is lost — often by the party who was in the right.
In criminal proceedings the framework differs but the practical problem is similar: a printout or photograph of a conversation comes in as a document, and the defence can always ask for it to be checked against the original. Here too, solidity depends on what was preserved and how it was acquired.
How to disavow, and how not to
Disavowal is not a formula to be recited. On the settled approach of the Italian Supreme Court it must be timely, made at the first available opportunity, and above all specific. A generic denial — «the conformity of the reproductions filed is contested» — risks being held inadequate, with the effect of leaving full proof standing.
An effective disavowal states in what respect the image does not correspond to the facts: which messages were never written, which have been lifted out of context, which sequence has been altered, which date does not add up. This is where a party expert earns his keep before any examination has begun: helping to frame the disavowal so that it holds.
The next step is to ask for the original. It is the simplest and most effective request available, because it has only two outcomes: either the original exists and can be checked, or it no longer does and what remains is a photograph without parentage, which the court will weigh for what it is.
What can be examined on the image itself
Where the original is unavailable, something can still be done with the image, provided it is clear that these are indicators and not proof:
- Dimensions and proportions. Each handset model produces captures of known sizes. An image matching no plausible format is already an anomaly.
- Traces of reworking. Successive compressions and overlays leave detectable marks, the more so the less careful the manipulation.
- Internal consistency. Times that do not progress, delivery sequences that are impossible, status indicators that could not coexist.
- Historical consistency of the interface. Messaging applications change in appearance over time. A screenshot dated 2022 showing an interface introduced in 2024 is a contradiction.
None of these is conclusive alone, and their absence does not establish authenticity. But full consistency across all of them is a useful result for the party producing the evidence too.
What to do before filing
If you are the one who has to produce a conversation, time spent here is worth more than any later argument.
- Do not change the phone and do not delete anything. The device is the evidence; the image is only a photograph of the evidence.
- Have the conversation acquired from the device, not from the screen. Depending on the model this means an extraction recovering the application's internal archive, or an assisted acquisition documenting the operation, the device identifiers, the linked account and the system clock, closed with an integrity check on the result.
- Keep the record. It is the document that, months later, answers a challenge to genuineness.
- Consider proportionality. Filing one conversation does not require extracting the entire phone: narrowing the scope is faster, cheaper and attracts fewer objections about third parties' data.
The difference from a screenshot comes down to one thing: the result is anchored to an identified device. Anyone wishing to challenge it must challenge that device, with everything that entails, rather than an image nobody can trace.
The encryption misconception
One occasionally hears that because WhatsApp encrypts messages end to end, a conversation is authentic for that very reason. It is a mistake, and worth clearing up because it appears even in documents written by professionals.
Encryption protects the message in transit: it stops anyone in between, including the service provider, from reading or altering it. It says nothing whatever about the copy that arrived on the handset, which from that moment is data like any other, modifiable by anyone with access to the device. It protects the channel; it does not sign the content.
The converse follows, with immediate practical consequences: no request to the service provider will ever return the text of the messages, because the provider does not hold it. What may exist there is account information and traffic data — a different thing, governed by different rules and by statutory retention periods.
Practical checklist
If you have to produce a chat
- Set the device aside and stop using it for that conversation.
- Have the archive acquired, not the screen.
- Keep the record and the integrity values with the pleading.
If you have to challenge one
- Disavow at once and specifically: what does not correspond, and why.
- Ask for production of the device or the source archive.
- Ask that any check be carried out under documented procedures, not by opening the phone in the hearing room.