SHORENET
← Shorenet Guides Messaging

WhatsApp Messages as Evidence

Usually admissible, frequently disputed, and only as strong as the account of where the messages came from

By Dr Anthony Rose-Edwards

Published , last reviewed

Yes, WhatsApp messages can be used as evidence, and they often are. The question that decides cases is not admissibility but authenticity: can you show the messages are what you say they are, sent by who you say sent them? A screenshot of a chat is easy to produce and easy to dispute, and when the device holding the originals is no longer available, the dispute tends to come down to whose account of events the court prefers.

This guide covers civil and family proceedings in England and Wales and is general information, not legal advice. Criminal proceedings have their own procedure rules, and Scotland and Northern Ireland have their own rules of evidence; neither is covered here. For the wider picture, see social media evidence in UK courts.

Shorenet does not capture WhatsApp. This guide is here because it is a question people ask, not because we sell an answer to it. See what we can and cannot capture at the foot of the page before assuming otherwise.

Can WhatsApp messages be used as evidence?

In principle yes. Messages between people are ordinary documentary evidence, and courts receive them constantly: in contract and debt disputes, in employment cases, in family proceedings, and in fraud claims.

What varies is the weight the court gives them, and weight is for the court to decide on the whole of the evidence. Being admissible is the start of the argument, not the end of it.

It is also worth knowing that admissibility is not entirely in the parties’ hands. CPR 32.1 gives the court power to control the evidence by directing “the issues on which it requires evidence”, “the nature of the evidence which it requires to decide those issues” and “the way in which the evidence is to be placed before the court”, and provides that the court “may use its power under this rule to exclude evidence that would otherwise be admissible”. Family proceedings have the same power in FPR 22.1.

How are WhatsApp screenshots challenged?

Usually not by proving a forgery, which is hard. Usually by establishing that a forgery was available, cheap and undetectable, and then asking how you know.

That is a lower bar, and it has fallen a long way. A messaging thread can be altered in a browser before a screenshot is taken, in which case the image is an honest capture of an altered page and carries no trace of editing at all. Or the image itself can be altered. We demonstrate both on three captures of one conversation in screenshots as evidence, where two of the three were faked in under a minute.

The formal route to the challenge is the notice to prove.

In civil proceedings, CPR 32.19 provides that a party “shall be deemed to admit the authenticity of a document disclosed to him under Part 31 ... unless he serves notice that he wishes the document to be proved at trial”. The notice must be served by the latest date for serving witness statements, or within 7 days of disclosure, whichever is later.

FPR 22.16 does the same in family proceedings: authenticity of a disclosed document is deemed admitted “unless notice is served” that the party wishes it proved at the final hearing.

Two limits on the civil rule. It bites only on documents disclosed under Part 31, and it does not apply to claims on the small claims track: CPR 27.2(1) disapplies Part 31 and Part 32 other than rule 32.1 for small claims.

So the default is that nobody makes you prove your screenshots. When somebody does, the burden of being able to is yours, and it is retrospective: you cannot improve the record after the fact.

This is not hypothetical, and the leading recent example is about WhatsApp screenshots. In Mold Investments Ltd v Holloway [2025] EWCA Civ 986, a freezing order had been obtained relying on four screenshots of WhatsApp messages, which the defendant said were forgeries. The joint experts agreed that the messages in the screenshots appeared correct, but could not rule out that data had been deleted from the one phone that had been examined; several other phones were no longer available. The Court of Appeal recorded that it was common ground that the expert evidence was unlikely to be determinative and that much would depend on the credibility of the witnesses, and directed that the challenge be heard together with the trial. The Supreme Court refused permission to appeal in December 2025.

Why does the device matter so much?

Because for an end-to-end encrypted messenger, the devices at each end are where the messages actually are.

That has a blunt practical consequence. If the phone that held the thread is lost, broken, wiped or replaced, the strongest available record of the conversation may be gone, and what remains is a screenshot whose provenance rests on the word of the person who made it. Expert examination of an image can sometimes say “this shows signs of editing”; it is much less able to say “this was never edited”, which is the proposition you usually need.

Keep the device if you can, and keep it in a state that can be examined. An export or a screenshot taken from a phone that still exists is a very different proposition from the same file once the phone does not.

Can you get the messages from WhatsApp itself?

Do not plan on it. Obtaining anything from a messaging provider generally requires legal process, takes time, and for an end-to-end encrypted service the provider is not in the same position as a public platform when it comes to message content. Treat any application to a provider as a slow and uncertain route running in parallel with preserving what you can reach now, never as a substitute for it.

What about deleted and disappearing messages?

The honest answer is that a deletion you did not get ahead of is usually the end of the matter for that message.

If a thread still exists on a device you can reach, preserve it now, properly, and do not wait. The practical steps are in how to preserve social media evidence before it is deleted, which applies to messages as much as to posts. If it has already gone, the realistic options and their limits are in how to prove an online post existed, and when you can’t.

Would an expert settle it?

Sometimes, and less often than people expect, and permission is not automatic.

Permission is needed either way. In civil proceedings CPR 35.4 provides that “no party may call an expert or put in evidence an expert’s report without the court’s permission”, and CPR 35.1 restricts expert evidence to “that which is reasonably required to resolve the proceedings”.

On the small claims track the requirement is in CPR 27.5: “no expert may give evidence, whether written or oral, at a hearing without the permission of the court”. Part 35 is largely disapplied there by CPR 27.2(1)(e).

What changes is the test. In family proceedings other than children proceedings it is stricter: FPR 25.4 provides that “a person may not without the permission of the court put expert evidence (in any form) before the court”, and that the court may give permission “only if the court is of the opinion that the expert evidence is necessary to assist the court to resolve the proceedings”. Children proceedings are controlled separately.

And an expert is not an advocate: CPR 35.3 states that “it is the duty of experts to help the court on matters within their expertise” and that this duty “overrides any obligation to the person from whom experts have received instructions or by whom they are paid”. FPR 25.3 says the same, in the same words, for family proceedings.

So the realistic expectation is that an expert may narrow the dispute without closing it, at cost, with permission that is not guaranteed. That is a reason to make the record good at the point of capture rather than to plan on repairing it afterwards.

What Shorenet does and does not do here

Stating this plainly because it would be easy to imply otherwise on a page like this.

Shorenet does not capture WhatsApp today. It does not capture native mobile apps at all. What it captures is traffic from what you open in a capture browser on Windows, which today covers websites and web-based platforms, including Telegram on the web. WhatsApp support is in development. The current position, platform by platform, is in the FAQ.

Where Shorenet does apply, what it adds is this: its evidence is the web traffic itself, not a picture of the screen (a screen recording can run alongside as a guide to what the user saw, but it is the traffic that is sealed and checkable). That traffic crosses a relay we operate which is independent of whoever is capturing; the relay never decrypts and we never see the content; and the result is sealed so any later change shows, and is built to be checked by anyone holding it without needing anything from us.

Being exact about the tense, because it matters: that is the design, and the validator it depends on is not published yet. Shorenet is pre-deployment. What exists today is a demonstration of the decryption step that runs in your own browser on a sample baked into the page; it is not the validator and it does not accept a bundle of your own.

And what it does not do, which matters as much:

  • It shows what a website or platform sent, not that the content is true.
  • It does not detect deepfakes or synthetic media, and we do not claim to.
  • It cannot capture what is already deleted.
  • It makes no claim about anything that never crossed a browser.

How it works sets out the mechanism and the limits in detail.

Sources

Primary sources, each fetched and checked on 12 October 2026, and checked against the Ministry of Justice consolidated rules on 12 October 2026. Every rule quoted above is quoted from these.

Checked in the original on 12 October 2026, and re-read on 13 October 2026: