Cropped WhatsApp Screenshots Used Against a Foreigner in Turkey: How Can Authenticity Be Challenged? (2026 Updated Guide)

Cropped WhatsApp screenshots are used as evidence against a foreigner in Turkey. Learn how authenticity, context, metadata, device evidence and digital forensic examination can be challenged.

WhatsApp screenshots are increasingly presented as evidence in criminal investigations and prosecutions in Turkey. For a foreign defendant, the problem can become more complicated when the prosecution or complainant relies on cropped screenshots rather than the complete conversation. A screenshot may appear to show a particular message, but the image alone may not establish who created it, whether the conversation is complete, whether messages were deleted, whether the screenshot was edited or whether the surrounding messages materially change its meaning.

A cropped WhatsApp screenshot is therefore not necessarily equivalent to the complete underlying digital evidence. The defense should examine authenticity, integrity, continuity, context, device ownership, account attribution, metadata and the method by which the screenshot was obtained before accepting the document at face value.

Is a WhatsApp Screenshot Automatically Accepted as Conclusive Evidence?

No. A screenshot should be evaluated together with the circumstances in which it was obtained and other evidence in the criminal file.

The important question is not simply:

“Does this screenshot exist?”

The more important questions are:

Who created it?

From which device was it taken?

Is the conversation complete?

Has anything been deleted or omitted?

Can the underlying conversation be independently verified?

Does the screenshot accurately represent the original digital record?

A defendant can challenge these issues when they materially affect the reliability of the allegation.

Why Are Cropped Screenshots Particularly Problematic?

Cropping can remove information surrounding a message.

For example, a screenshot may show:

“Send the money today.”

But earlier messages may establish that the statement referred to a legitimate commercial payment, repayment or another transaction entirely.

The missing context can therefore materially alter the meaning of the displayed message.

A Screenshot Does Not Necessarily Show the Entire Conversation

A complete WhatsApp conversation may contain:

• Earlier messages;
• Later messages;
• Deleted messages;
• Replies;
• Voice messages;
• Photos;
• Documents;
• Contact information;
• Dates and times;
• Group participants.

A cropped image may show only one part of that chain.

Ask for the Original Digital Evidence

Where the authenticity or context of a screenshot is genuinely disputed, the defense can consider requesting examination of the underlying digital material where legally and procedurally available.

The objective is to determine whether the screenshot corresponds to an actual conversation and whether the presented extract accurately reflects the relevant communication.

Who Controlled the Device?

Attribution is fundamental.

Determine:

• Who owned the phone?
• Who had access to it?
• Who controlled the WhatsApp account?
• Was the device shared?
• Was the account transferred?
• Was WhatsApp Web or another linked device used?

The mere appearance of a person’s name or photograph on a screenshot does not necessarily resolve every attribution issue.

WhatsApp Profile Names Are Not Enough by Themselves

A WhatsApp contact can be saved under almost any name.

The defense should distinguish between:

contact name

telephone number

account information

device ownership

and

actual authorship of the message.

The evidentiary significance of each is different.

Examine the Telephone Number

The telephone number associated with the conversation may be important for attribution.

However, even possession or registration of a number does not automatically establish who physically typed a particular message at a particular time.

The entire evidentiary context should therefore be considered.

What If the Screenshot Contains No Telephone Number?

This can create an attribution issue.

If the image shows only a profile name and message text without sufficient identifying information, the defense can question how the prosecution established that the account belonged to the defendant.

Check the Date and Time

WhatsApp messages contain chronological information.

The defense should compare the screenshot’s displayed time and date with:

• The defendant’s location;
• Travel records;
• Telephone records;
• Other communications;
• Business records;
• CCTV;
• Witness evidence.

A claimed message may become questionable if the defendant can demonstrate that the relevant device or person was elsewhere.

Time Zone Issues Can Matter

Foreign defendants may have used Turkish and foreign telephone numbers or traveled between countries.

Time displayed in a digital communication should therefore be interpreted carefully when the timing of an alleged offence is disputed.

Cropping Can Hide Earlier Messages

An earlier message may change the meaning of a later statement.

For example:

Message A: “Do not send anything until the documents are approved.”

Message B: “Send it today.”

If only Message B is presented, the apparent instruction may be misleading.

Cropping Can Also Hide Later Messages

Later communications may clarify what the parties actually meant.

A message that appears threatening or suspicious in isolation may be followed by an explanation, correction or clarification.

The defense should therefore consider the complete chronology.

Deleted Messages May Be Relevant

A screenshot cannot necessarily establish what happened to messages that are not shown.

Where deletion is alleged, the defense should determine whether there is an evidentiary basis for the claim and whether the underlying device or backup data can be examined through lawful procedures.

Can a Digital Forensic Examination Be Requested?

Depending on the procedural circumstances, the defense may seek appropriate examination of relevant digital evidence.

A forensic examination can potentially address questions concerning the device, application data, account information, message chronology and integrity of digital material.

The precise procedure depends on how the evidence was obtained and where it is located.

Do Not Assume That a Forensic Examination Will Recover Everything

Modern applications can involve encryption, backups, synchronization and device-specific storage.

The absence of recoverable data does not automatically prove that a screenshot is false.

Likewise, the existence of a screenshot does not automatically prove that the underlying allegation is true.

The evidentiary picture must be assessed as a whole.

Was the Screenshot Edited?

The defense can question whether the image was altered.

Potential issues include:

• Text added or removed;
• Different fonts or formatting;
• Missing interface elements;
• Inconsistent timestamps;
• Inconsistent profile information;
• Image manipulation;
• Repeated cropping;
• Splicing of separate screenshots.

A digital forensic expert may be able to examine the file and its characteristics.

The Original Image File May Matter

A screenshot transmitted through several applications can be compressed or altered.

The defense should determine whether the prosecution has:

the original screenshot file

or merely

a copy of a copy of an image.

The evidentiary significance may differ.

Ask How the Screenshot Was Obtained

This is often overlooked.

Determine whether the screenshot was:

• Taken directly from the alleged recipient’s phone;
• Sent by another person;
• Downloaded from cloud storage;
• Printed;
• Scanned;
• Extracted from another application;
• Submitted anonymously.

The chain by which the evidence reached the investigation can affect its reliability.

Chain of Custody Can Be Important

Digital evidence should be evaluated with attention to how it was collected, preserved and transferred.

If a screenshot has passed through multiple people without reliable preservation of the original material, the defense may have grounds to question its integrity or evidentiary weight.

What If the Complainant Took the Screenshot?

A complainant can present communications to the authorities. That does not automatically make the screenshot inadmissible.

However, the defense can still question:

• Completeness;
• Authenticity;
• Context;
• Attribution;
• Timing;
• Editing;
• Device source.

What If the Screenshot Came From Someone Else’s Phone?

The evidentiary analysis becomes more complicated.

The defense should establish the relationship between the device owner, the WhatsApp account and the defendant.

Can the Defendant Deny Sending the Message?

Yes. A defendant can dispute authorship where there is a genuine basis for doing so.

But a bare denial may be weaker than a denial supported by objective evidence.

The defense should identify what evidence supports the alternative explanation.

Use Contradictory Evidence Strategically

Potentially useful evidence may include:

• Travel records;
• Passport records;
• Telephone records;
• Location evidence;
• CCTV;
• Bank transactions;
• Emails;
• Complete WhatsApp conversations;
• Other messaging applications;
• Witness statements;
• Business records.

The objective is to test whether the screenshot fits the wider factual timeline.

What If the Defendant Was Abroad?

For a foreign defendant, international travel records can sometimes become particularly relevant.

If a message allegedly sent from Turkey was supposedly authored at a time when the defendant was demonstrably abroad, that may create a significant factual issue.

It does not automatically resolve the case, but it can undermine a particular attribution theory.

What If the Phone Was Lost or Stolen?

This can create a separate attribution issue.

Determine:

• When the phone was lost;
• Whether the SIM remained active;
• Whether the WhatsApp account was transferred;
• Whether the device was remotely secured;
• Whether another person could access the account.

Supporting records should be preserved.

What If Someone Else Had Access to the Phone?

Shared devices or unlocked phones can create attribution disputes.

The defense should establish who had physical access and whether the alleged communication could realistically have been sent by another person.

What If WhatsApp Web Was Used?

A WhatsApp account may be linked to other devices.

The defense should consider whether another computer or device could have been used to send the message.

This can be particularly important when the defendant denies physically typing the message.

Translation Can Create Another Problem

For a foreign defendant, WhatsApp evidence may be translated into Turkish.

The defense should compare the original-language message with the translated version.

A translation can change:

• Tone;
• Meaning;
• Slang;
• Legal terminology;
• Conditional language;
• Sarcasm;
• Threat-related wording.

A materially inaccurate translation can affect the evidentiary assessment.

Do Not Accept an Incomplete Translation

If only selected messages were translated, request examination of the surrounding conversation where it is relevant to meaning.

The defense should be able to understand the evidentiary context.

Can the Defendant Submit the Complete Conversation?

Potentially, yes, where the defendant lawfully possesses the relevant material and it supports the defense.

A complete conversation may be more informative than arguing only about one screenshot.

However, the defense should consider privacy and third-party information before submitting large volumes of unrelated private communications.

What If the Complete Conversation Contradicts the Screenshot?

This can be highly significant.

If the screenshot omits messages that materially alter the meaning of the displayed text, the defense should identify the discrepancy precisely rather than simply arguing that the screenshot is “fake.”

Authenticity and Evidentiary Weight Are Different Questions

A screenshot can be genuine but still have limited evidentiary significance.

For example, the image may accurately show a message but fail to establish:

• Who authored it;
• Why it was written;
• What earlier messages meant;
• Whether another person had access;
• Whether the message was part of a larger conversation.

The defense should distinguish authenticity from interpretation and evidentiary weight.

Can a Single Screenshot Prove a Criminal Offence?

That depends on the offence and the complete evidentiary record.

Turkish criminal procedure does not generally operate on a mechanical rule that one screenshot automatically proves guilt. The court evaluates the evidence in the case as a whole.

A defense should therefore challenge both the reliability of the screenshot and whether the prosecution has established the legal elements of the alleged offence.

What If the Screenshot Is the Main Evidence?

This is a particularly important situation.

If the prosecution’s allegation depends heavily on one cropped image, the defense should identify every missing evidentiary link:

Who sent it?

Who received it?

When was it sent?

From which device?

Is the conversation complete?

Has the file been altered?

What does the surrounding conversation show?

Is there independent evidence supporting the allegation?

Corroborating Evidence Should Be Examined

Look for evidence that independently supports or contradicts the screenshot.

Examples may include:

• Bank transfers;
• Telephone records;
• Physical meetings;
• Emails;
• Contracts;
• CCTV;
• Witness testimony;
• Device data.

A screenshot unsupported by other evidence may raise different questions from a screenshot strongly corroborated by independent records.

Do Not Delete Your Own Messages

A foreign defendant should not attempt to destroy or manipulate potentially relevant evidence.

Deleting evidence after learning about a criminal investigation can create additional legal and practical complications.

Preserve original devices and relevant communications through lawful means.

Do Not Alter or “Clean Up” the Conversation

Never edit screenshots to make them appear more favorable.

The defense should present genuine evidence and explain contradictions transparently.

Request the Relevant Evidence Through the Proper Criminal Procedure

The defense should work through the appropriate procedural mechanisms to inspect and challenge evidence contained in the investigation or prosecution file.

The precise rights and timing can depend on the procedural stage and whether the investigation remains confidential or has proceeded to trial.

Challenge Unsupported Digital Evidence

Where the screenshot is materially disputed, the defense can raise specific objections concerning authenticity, attribution, integrity, completeness, collection method and context.

Specific objections are generally more effective than a general statement that “WhatsApp screenshots are unreliable.”

Consider a Digital Forensic Expert

A specialist may assist in evaluating:

• Image characteristics;
• File history;
• Device data;
• Application records;
• Metadata where available;
• Account and device relationships;
• Chronology;
• Potential manipulation.

The expert’s role should be clearly defined around the actual disputed issue.

Preserve the Foreign Defendant’s Other Evidence

A foreign defendant should also preserve:

• Passport entry and exit records;
• Flight tickets;
• Residence records;
• Employment documents;
• Bank records;
• Hotel records;
• Emails;
• Telephone records.

These materials can become important when testing the chronology alleged by the prosecution.

What If the Screenshot Was Obtained Illegally?

The method of obtaining digital evidence can create an additional legal issue.

The defense should determine how the material was obtained and whether the collection process complied with applicable procedural safeguards.

The admissibility and evidentiary value of unlawfully obtained evidence should be assessed under the specific circumstances rather than assumed from the fact that the evidence is digital.

Build a Digital Evidence Timeline

Create a chronology showing:

Alleged message

→ Screenshot creation

→ Submission to authorities

→ Device/account evidence

→ Supporting or contradictory evidence

This can expose gaps that are difficult to see when documents are reviewed separately.

What Should a Foreign Defendant Do Immediately?

The defendant should avoid deleting messages, preserve the original device, keep the complete conversation where available, save original files rather than only screenshots, identify the phone number and account involved, record travel and location information, obtain the criminal file through counsel, compare original and translated messages and request appropriate forensic examination where authenticity is genuinely disputed.

Frequently Asked Questions

Can a cropped WhatsApp screenshot be challenged in Turkey?

Yes. The defense can raise specific issues concerning authenticity, completeness, attribution, context, integrity and the method by which the evidence was obtained.

Does a screenshot automatically prove that the defendant sent the message?

No. Attribution should be assessed together with telephone numbers, devices, account information and other evidence.

Can the defense request the complete WhatsApp conversation?

Where legally and procedurally available, the defense can seek examination of the underlying communication and relevant digital evidence rather than relying solely on a cropped image.

What if the screenshot was edited?

The defense can request appropriate examination and point to inconsistencies suggesting alteration or manipulation.

Does cropping make the screenshot automatically invalid?

Not automatically. Cropping alone does not necessarily determine admissibility. The important issue is whether the omitted material affects authenticity, context or evidentiary weight.

What if the WhatsApp message was translated incorrectly?

The original message should be compared with the translation. Material translation errors can affect how the communication is interpreted.

Can a digital forensic expert examine WhatsApp evidence?

Depending on the available device and data, forensic examination may assist in evaluating the origin, integrity and context of digital material.

What if the defendant was outside Turkey when the message was allegedly sent?

Travel and other objective records can be used to challenge the prosecution’s attribution theory where they are inconsistent with the alleged chronology.

Can the defendant simply deny the WhatsApp messages?

A denial is possible, but it is usually stronger when supported by objective evidence concerning the device, account, timing, location or complete conversation.

What is the most important defense step?

Preserve the original digital evidence and challenge the specific evidentiary gap: authorship, completeness, context, integrity, timing or collection method. A cropped screenshot should not be treated as a complete substitute for the underlying communication without examining what it actually proves.

Client-Focused Legal Support for Foreign Defendants Facing WhatsApp Evidence

Digital evidence can become decisive in a criminal investigation involving a foreign national in Turkey. Fırat Fesih Kaya Law Office assists foreign defendants in cases involving WhatsApp messages, screenshots, digital evidence, disputed translations, device searches and allegations based on incomplete electronic communications. Lawyer Fırat Fesih Kaya provides legal assistance in reviewing criminal files, challenging disputed digital evidence, coordinating forensic examinations, evaluating evidence obtained from phones and messaging applications and developing defense strategies based on the complete factual record.

Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey