Message Screenshots Are Terrible Evidence—Courts Accept Them Anyway

Recently, I consulted on a matter where the other side's evidence arrived as screenshots of text messages. Pages of gray and blue bubbles, clean and readable. The client's question was the right one. How do we know these conversations actually happened? The screenshots could not answer it. Standing alone, they never can.

What A Screenshot Actually Is

A bank will not cash a photocopy of a check. The copy might be perfectly faithful, and it is still disconnected from everything that makes a check worth honoring: the paper, the ink, the account behind it, the signature on file.

A screenshot of a text message is a photocopy of evidence. It is an image showing whatever pixels a screen displayed at some moment. Between the real message record and those pixels sits everything you cannot see: the app that rendered them, a contact name someone may have edited, a web page someone may have altered, a mockup tool that never needed a real message at all.

Free websites have generated fake text message exchanges for more than a decade. They exist for app demos, film props and marketing mockups. Pick the platform, set the clock, type both sides of the conversation, download the image. Often no account, no cost, no skill. Fabricating a convincing picture of a conversation was easy long before anyone said the words generative AI.

The Real Record Lives In The Smartphone

On the device, a text message is not a picture. It is an entry in a database, sitting in sequence among thousands of other entries, wrapped in structure the user never sees: system-written timestamps, sender and recipient identifiers, delivery and read flags, the artifacts deletion leaves behind. The phone is the machine that transmitted the data, and the system around the message writes records as it moves. That record has neighbors, and the neighbors can corroborate it or expose it.

A screenshot shows what a screen displayed. The device shows whether the conversation ever happened. One of those can be tested. The other can only be believed.

Phone Records And Cloud Backups Cannot Settle It

When screenshots get challenged, the first instinct is usually carrier phone records or a cloud backup. Both can help, and both stop short.

Carrier records can show that messages moved between two numbers, and for many modern messaging apps not even that, because those messages travel as ordinary internet data. What carrier records generally do not carry is content, the actual words making up the messages sent back and forth.

Even if they can corroborate time and date, when the content is not there, the records cannot tell you what was said, and they cannot authenticate a picture of what was said.

Cloud backups come with their own asterisks. A backup can be stale, partial or never enabled, and it holds what the phone or user chose to sync, not necessarily the full record with its artifacts.

When the question is whether a specific conversation ever existed, the strongest, and often only, available answer comes from a digital forensic examination of the device itself. Counsel demands the phone, a court can compel it if needed, and a digital forensic expert examines the record where it actually lives. If the thread is real, the device can often corroborate it. If it is not, the device usually has something to say about that too.

Courts Keep Learning This The Hard Way

In Rossbach v. Montefiore Medical Center, an employment case in federal court in New York, the plaintiff's central evidence was an image of harassing text messages she said arrived on her iPhone 5. The court found, by clear and convincing evidence, that the document was fabricated. According to the forensic analysis the court credited, the image was not a photograph at all, and the messages it showed did not match how texts render on an iPhone 5, or on any iPhone: wrong icons, wrong font, wrong emoji designs. The case was dismissed with prejudice.

The fabrications have not stopped. A Colorado disciplinary ruling disbarred a former Denver prosecutor at the end of 2024 after finding she fabricated harassing text messages attributed to a coworker. According to the ruling, she sent the messages to herself, changed the contact name to make them look like his, altered a spreadsheet of her own carrier message logs before producing it, and destroyed her phone and laptop shortly before they were to be examined. The coworker cleared his name with a device. He asked for a forensic examination of his own phone, and according to the ruling it showed no communication between his number and hers.

I warned about this pattern in 2024, and the recent consult on my desk says the habit is intact. Screenshots keep arriving as exhibits because they are convenient, judges and juries understand them without a tutorial, and most of the messages, in my experience, are real. The whole arrangement runs on an assumption that fabricating evidence is rare because fabricating evidence is hard. Making a convincing screenshot of messages has been easy for more than a decade.

Generative AI Made The Old Problem Worse

The screenshot era was the warning shot, and generative AI is the escalation. The fake thread was one file type, faked by hand, one case at a time. Now a photo of damage that never happened can take a sentence to make, a cloned voice can take a few seconds of sample audio, and fabricated documents and medical images follow the same curve. Every common file type can now be faked by software, and at volume. The flood cuts a second way too: when anything can be fabricated, everything can be denied, and the person caught on a real recording suddenly has a story to tell. The habit the screenshot exposed, trusting a picture of evidence instead of the evidence, is the same habit deepfakes now punish at scale.

What The Evidence Rule Actually Asks

Federal Rule of Evidence 901 requires the party offering an exhibit to produce evidence sufficient to support a finding that the item is what they claim it is. A picture of a conversation, standing alone, strains to do that job. The picture claims a conversation happened on a device. The device is where that claim gets tested.

Most of the message evidence I see is real, and this is no reason to panic. It is a reason to change the reflex. If you decide cases, pay claims or negotiate settlements on message exhibits, the fabricated threads that surface in court are the ones that got caught, and they were caught when someone stopped taking the picture at its word and examined the file, the records or the phone. The person framed by a fake thread pays for every month nobody asks for the device. The next fake will look even more like the real thing, because looking real is the only job a fake has. Ask for the smartphone before you believe the screenshot of messages.