Foreign Suspect’s WhatsApp Backup Is Examined in Turkey: Can Old Messages Be Used as Evidence? (2026 Updated Guide)

Can old WhatsApp messages from a foreign suspect’s backup be used as evidence in Turkey? Learn about digital evidence, authenticity, forensic examination, unlawful evidence and defense rights.

A foreign suspect involved in a criminal investigation in Turkey may discover that investigators have examined an old WhatsApp backup containing messages that were sent or received months or even years earlier. The fact that the messages are old does not by itself prevent them from being used as evidence. However, their evidentiary value depends on important questions concerning how the backup was obtained, whether the messages are authentic, whether the relevant device or account can be linked to the suspect, whether the data was altered, whether the examination complied with procedural safeguards and whether the evidence was lawfully obtained.

This distinction is particularly important for foreign nationals because language differences, foreign telephone numbers, cloud backups, multiple devices and international accounts can create additional evidentiary issues. A WhatsApp screenshot or extracted database should not automatically be treated as conclusive proof merely because it contains the suspect’s name or profile information.

Can Old WhatsApp Messages Be Used as Evidence in Turkey?

Potentially, yes.

Turkish criminal procedure operates under the principle that a criminal charge may be established through evidence lawfully obtained and evaluated by the court. The legality and reliability of digital evidence therefore become central questions.

The age of a WhatsApp message is generally not, by itself, a reason for excluding it.

A message from several years earlier can potentially be relevant if it concerns the alleged offence and can reliably be attributed to the relevant person.

Does the Fact That the Messages Are From a Backup Change the Analysis?

It can.

A backup is not necessarily identical to a live WhatsApp conversation on the device. Investigators may encounter:

• Cloud backups;
• Device backups;
• Exported chat files;
• Database files;
• Screenshots;
• Archived conversations;
• Restored application data;
• Media files;
• Deleted-message remnants.

The method used to obtain and examine the data should therefore be established.

How Was the Backup Obtained?

This is one of the first questions a defense lawyer should ask.

Was the data obtained:

• From the suspect’s phone?
• From another person’s phone?
• From a computer?
• From a cloud account?
• Through a forensic extraction?
• Through a voluntary disclosure?
• During a search and seizure?
• Through another investigation?

The legal analysis may differ depending on the source.

Was There a Lawful Search and Examination?

Digital evidence can involve significant privacy and communications issues.

The defense should examine the judicial or prosecutorial decision authorizing the relevant search, seizure or digital examination and determine precisely what was authorized.

A general reference to a criminal investigation does not necessarily answer whether every form of digital examination was legally authorized.

Computer and Digital Data Examination Requires Careful Analysis

Turkish criminal procedure contains specific provisions concerning searches and copying of computer systems and computer programs. The exact application depends on the device, circumstances and procedural stage.

The defense should therefore obtain the relevant search, seizure and forensic examination records rather than relying on a verbal description of what investigators allegedly did.

What If the Phone Was Already Seized?

If the phone was lawfully seized and subsequently subjected to an authorized forensic examination, WhatsApp data located on the device may potentially become part of the evidence.

However, the scope and manner of the examination can still be challenged where appropriate.

What If the Backup Was Taken From Another Person’s Phone?

This can create an important attribution issue.

For example, a message appearing on another person’s device may show a particular telephone number or WhatsApp profile, but that does not automatically establish who physically operated the account at the relevant time.

The defense should examine the entire evidentiary chain.

A WhatsApp Name Is Not Enough

A profile displaying the foreign suspect’s name does not necessarily prove that the suspect personally wrote every message.

The court may need to consider:

• Telephone number;
• Device ownership;
• SIM-card use;
• Account registration;
• Profile photograph;
• Message chronology;
• Other participants;
• Device records;
• Metadata;
• Witness evidence;
• Other corroborating evidence.

What If the Foreign Suspect Admits the Phone Number?

Even then, attribution of particular messages may remain a factual issue.

A person can own or register a number while another individual temporarily uses the device or account.

The strength of the attribution depends on the total evidence.

Can Deleted WhatsApp Messages Be Recovered?

Depending on the device, backup structure, operating system and forensic tools used, deleted or previously stored information may sometimes remain recoverable.

However, recovery is technically complex and should not be assumed in every case.

The defense should ask what exactly was recovered and from which source.

Does a Screenshot Prove That a Message Was Sent?

Not necessarily.

A screenshot can be useful evidence, but its authenticity and context may need to be established.

Turkish judicial materials discussing electronic evidence emphasize the importance of authenticity and the possibility of manipulation when evaluating electronic communications.

WhatsApp Screenshots Can Require Further Verification

A screenshot may not show:

• The underlying database;
• Complete conversation history;
• The original telephone number;
• Whether messages were deleted;
• Whether the image was edited;
• The surrounding messages;
• The original device.

The defense can therefore request examination of the underlying source where attribution or authenticity is disputed.

Yargıtay Has Required Investigation of the Actual Telephone Line

Recent Turkish Court of Cassation practice illustrates the importance of properly establishing the source of WhatsApp messages. In a 2025 decision concerning alleged threatening WhatsApp messages, the Court noted that the existence of screenshots bearing the defendant’s name was not sufficient where the relevant telephone line from which the messages were allegedly sent had not been adequately established. It required further examination of the relevant phone and, where necessary, the profile information before determining the defendant’s legal position.

This is highly relevant when defending a foreign suspect whose name, photograph or number appears in an electronic conversation.

What If the Messages Were Sent From a Foreign Number?

A foreign telephone number does not make the messages inadmissible.

However, investigators may need to establish who controlled that number and account at the relevant time.

Foreign SIM cards, roaming records, device ownership and international account information can become relevant.

What If the Foreign Suspect Used Several Phones?

This can create both attribution problems and defense opportunities.

The investigation should distinguish between:

ownership of a phone

and

actual use of the phone at the relevant time.

A foreign national who changed devices frequently should preserve evidence explaining those changes where they are relevant.

What If the WhatsApp Account Was Shared?

Shared devices or accounts can make attribution more complicated.

The defense should identify every person who had access to the relevant device, SIM card or account.

Can Old Messages Be Used Even If They Are Not About the Current Investigation?

Relevance is essential.

The prosecution should establish a connection between the evidence and the alleged offence. A message that has no meaningful connection to the charged conduct should not automatically become incriminating merely because it was discovered during a broader digital examination.

What About Messages Discovered Accidentally?

The legal consequences can depend heavily on how the information was discovered and the legal basis of the original measure.

Turkish Court of Cassation decisions emphasize that evidence obtained through communications-monitoring measures is subject to specific statutory conditions, including limitations concerning evidence discovered incidentally.

The defense should therefore determine whether the WhatsApp material came from a device search, communications interception, another person’s device or a different investigative method.

WhatsApp Messages Are Different From Telecommunications Interception

This distinction is important.

A historical WhatsApp backup stored on a device is not necessarily the same thing as a live interception of telecommunications.

The legal framework applicable to the collection method must therefore be identified before assessing admissibility.

What If Investigators Intercepted Communications Without the Required Conditions?

Turkish law imposes specific conditions on telecommunications interception. The Court of Cassation has emphasized that evidence obtained outside the statutory framework may not be used as ordinary lawful evidence.

If the prosecution describes the evidence as an intercepted communication, the defense should examine the relevant judicial authorization and statutory requirements.

Can the Defense Request a Forensic Examination?

Potentially, yes.

Where authenticity or attribution is disputed, a technically appropriate forensic examination may be important.

Questions may include:

• Which device generated the data?
• Which number was associated with the account?
• When were the messages created?
• Are the records internally consistent?
• Were databases altered?
• Are the screenshots consistent with the underlying data?
• Are deleted-message claims technically supported?

Preserve the Original Device

If the defense has access to a relevant phone or computer, do not modify, reset or delete data merely to “clean up” the device.

Changes can destroy potentially exculpatory evidence and create unnecessary suspicion.

Do Not Delete the WhatsApp Backup

Deleting a backup after learning of an investigation can create additional problems.

Preserve the original data in its existing condition and allow counsel to determine the appropriate forensic strategy.

The Complete Conversation May Be More Important Than One Message

A single message can be misleading when separated from the surrounding conversation.

The defense should examine:

• Messages before the disputed statement;
• Messages afterward;
• Deleted or missing portions;
• Voice messages;
• Images;
• Documents;
• Dates;
• Participants;
• Group membership.

Context can materially change the meaning of an isolated message.

Translation Can Change the Meaning

This issue is particularly important for foreign suspects.

A WhatsApp message written in English, Arabic, Russian, French or another language may be translated into Turkish during the investigation.

The defense should compare the original message with the Turkish translation.

A mistranslated expression can materially affect the interpretation of intent.

Slang and Informal Language Require Context

Machine translation may not accurately capture:

• Slang;
• Irony;
• Sarcasm;
• Idioms;
• Cultural references;
• Abbreviations;
• Industry terminology.

A qualified translator may be necessary where the meaning is disputed.

Voice Messages Require Separate Examination

A WhatsApp voice message raises additional questions concerning:

• Speaker identity;
• Authenticity;
• Editing;
• Completeness;
• Translation;
• Transcription.

A transcript should not automatically be treated as equivalent to the original recording.

Images and Documents Sent Through WhatsApp Also Need Verification

An image or PDF received through WhatsApp does not automatically establish who created it, who owns it or whether its contents are authentic.

The original file, metadata where available and surrounding conversation may need to be examined.

What If the Suspect Says Someone Else Used the Account?

The defense should provide a concrete evidentiary basis where possible.

Relevant evidence may include:

• Travel records;
• Location information lawfully obtained;
• Employment records;
• Device ownership;
• Other communications;
• Witness testimony;
• SIM-card records;
• Accommodation records;
• Other digital evidence.

Simply denying authorship may be less effective than demonstrating why the account could not have been controlled by the suspect at the relevant time.

What If the Suspect Was Outside Turkey?

This can become particularly important.

If the suspect was abroad when a message was allegedly sent, the defense should investigate whether objective evidence supports that fact.

However, travel abroad does not automatically disprove authorship because accounts can potentially be accessed remotely.

The complete circumstances must be examined.

Can the Court Convict Based Only on WhatsApp Messages?

There is no general rule that a WhatsApp message is automatically sufficient or insufficient in every criminal case.

The court evaluates the evidence as a whole and must determine whether the charge has been established through lawful evidence.

Turkish criminal procedure recognizes free evaluation of evidence, but evidence obtained unlawfully cannot simply be converted into admissible evidence because it appears persuasive. Turkish judicial materials expressly emphasize the requirement that evidence used for conviction be lawfully obtained.

What If the Messages Are Genuine but Were Obtained Unlawfully?

Authenticity and legality are separate questions.

A genuine message may still raise a legal-evidence objection if the method by which it was obtained violated applicable procedural requirements.

The defense should therefore address both:

“Is this message genuine?”

and

“Was this evidence lawfully obtained?”

Can the Defense Request Exclusion of the Evidence?

Where the applicable legal requirements are not satisfied, the defense may raise an objection concerning unlawful evidence and request that the material not be relied upon.

The precise procedural mechanism depends on the stage of the investigation or prosecution.

Obtain the Digital Evidence Report

If investigators extracted WhatsApp data, request and examine the forensic report where legally accessible.

The report should help establish:

• Device examined;
• Method used;
• Data extracted;
• Software or forensic methodology;
• Dates;
• Hash values or integrity information where applicable;
• Files examined;
• Findings.

Examine the Chain of Custody

The defense should determine who seized the device, where it was stored, who examined it and how the extracted data was transferred into the case file.

Unexpected gaps may create questions concerning integrity.

What If the Backup Came From Cloud Storage?

Cloud backups create additional questions concerning account ownership, access authorization, authentication and the method used to obtain the data.

The defense should identify the exact legal and technical pathway through which the backup entered the investigation.

Foreign Cloud Accounts Require Particular Attention

A foreign suspect may use cloud services registered outside Turkey.

International account information, foreign devices and cross-border data collection can create additional procedural and jurisdictional issues.

The exact circumstances should be reviewed rather than assuming that every foreign cloud record was obtained under the same procedure.

Review the Search and Seizure Record

If the WhatsApp data came from a physical device, examine the search and seizure documents.

Determine:

• Which device was seized;
• Where it was found;
• Who possessed it;
• What was authorized;
• What was actually examined;
• Whether additional data were copied.

What Should a Foreign Suspect Do Immediately?

The suspect should avoid deleting or altering communications, preserve relevant devices and backups, obtain the investigation documents through counsel where legally available, identify the source of the WhatsApp evidence, compare original-language messages with translations and request appropriate technical examination where authenticity or attribution is disputed.

Client-Focused Legal Support for Foreign Suspects and Digital Evidence

A WhatsApp backup can become significant evidence in a Turkish criminal investigation, but message age, screenshots, account names and extracted databases should not automatically be treated as conclusive proof of authorship or guilt. Fırat Fesih Kaya Law Office assists foreign nationals facing criminal investigations involving WhatsApp messages, digital devices, cloud backups and electronic evidence in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance in reviewing digital evidence, challenging attribution and authenticity problems, examining search and seizure procedures, addressing translation issues, requesting forensic analysis and developing defenses concerning unlawfully obtained evidence.

Phone: +90 312 434 22 22

Mobile: +90 532 769 22 22

Email: info@firatfesihkaya.av.tr

Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey