

Foreigners Accused Based on Screenshots in Turkey: Are Screenshots Enough for Conviction? 2026 Guide
Can WhatsApp, Instagram, email, SMS or social-media screenshots be sufficient criminal evidence against a foreigner in Turkey? Learn how screenshots can be challenged through authenticity, account attribution, metadata, context, forensic examination and lawful-evidence rules in 2026.
A screenshot can potentially be used as evidence in a Turkish criminal investigation, but a screenshot does not automatically prove that a foreign suspect committed a criminal offence.
This distinction is particularly important in investigations involving WhatsApp conversations, social-media messages, emails, SMS messages, online fraud, threats, harassment, blackmail, commercial disputes and allegedly fake accounts.
A complainant may go to the police and submit several screenshots showing a name, profile photograph, telephone number or username. Those images may be relevant to the investigation, but important questions remain unanswered:
Is the screenshot authentic?
Is the conversation complete?
Who controlled the account?
Who actually sent the message?
Was the image edited?
Is the original device available?
Can the screenshot be corroborated through technical evidence?
Turkish criminal procedure requires criminal liability to be determined through lawfully obtained evidence, and digital evidence must be capable of meaningful examination and challenge. The Ministry of Justice’s Digital Evidence Guide emphasizes preservation, documentation, verification of copies, forensic acquisition and maintaining the integrity of the evidence chain.
Therefore, a screenshot should not simply be treated as an unquestionable digital fact.
A screenshot is an image capturing what appeared on a screen at a particular moment.
It may depict:
Screenshots can be useful because they preserve information that might later disappear.
But screenshots also have technical limitations.
This is one of the most important principles in screenshot cases.
Suppose a complainant produces a screenshot of an alleged WhatsApp conversation.
The image may display:
“John: Send the money and I will return it tomorrow.”
The screenshot shows what appeared on someone’s screen.
It does not necessarily reveal the complete underlying technical information.
Depending on the platform and circumstances, the original digital evidence may contain additional information concerning:
A screenshot is therefore a representation of digital content rather than necessarily the complete underlying digital dataset.
Screenshots may potentially be submitted and evaluated as evidence.
But admissibility and evidentiary weight are separate questions.
A court may consider a screenshot while still needing to determine whether it is:
A screenshot’s existence does not compel the court to accept everything displayed in it as true.
There is no sound universal rule that every screenshot is either automatically sufficient or automatically insufficient for conviction.
Criminal cases are evaluated according to the complete evidentiary record.
The decisive issue is whether the prosecution proves the offence and the defendant’s responsibility to the required criminal standard through lawful and reliable evidence.
A screenshot may be stronger where it is corroborated by:
A screenshot may be considerably weaker where its authenticity, source, completeness or authorship cannot be verified.
A particularly relevant Court of Cassation decision dated 4 May 2026 concerned allegedly criminal content published through a social-media account.
The defendant consistently denied making the posts and argued that accounts had been opened in the defendant’s name. Investigation reports indicated that the account might belong to the defendant, but also recognized possibilities including a fake account created using the defendant’s personal information or photographs, account takeover, or unauthorized use.
The Court of Cassation upheld the acquittal because it had not been established that the defendant committed the alleged offence.
The practical lesson for screenshot cases is important:
A name, photograph or apparent account identity does not automatically prove who actually controlled the account or created the disputed content.
Suppose a screenshot shows:
“Michael Smith”
with the foreign suspect’s photograph.
That does not necessarily establish that Michael Smith controlled the account.
Profiles can potentially be:
This is particularly important for social-media evidence.
The same principle applies to photographs.
Someone can potentially create an account using another person’s:
Therefore:
Profile identity ≠ technical account attribution.
Where identity is genuinely disputed, investigators should examine additional evidence.
WhatsApp and similar evidence may be stronger where the underlying telephone number can be reliably associated with the suspect.
But even then, further questions may remain.
For example:
Subscriber identity is relevant but should not automatically be equated with authorship of every message.
Yes, WhatsApp screenshots can potentially become evidence.
However, defense counsel should determine:
These questions can materially affect evidentiary weight.
Potentially.
But Instagram evidence creates similar attribution problems.
A screenshot may show a username and profile picture without proving:
Technical provider information and other corroborating evidence may therefore become important.
Potentially.
But an email screenshot may omit valuable technical information.
For example, it may not display:
Where authenticity is disputed, the original electronic email may provide substantially more information than a screenshot.
Yes, potentially.
Again, however, the screenshot should ideally be compared with the original device and other available records where authenticity is disputed.
The visible contact name is especially important.
A phone may display:
“David”
even though that is merely the name the phone owner assigned to a telephone number.
The contact label itself does not prove the legal identity of the sender.
This issue frequently causes confusion.
Suppose a complainant saves a telephone number as:
“Foreign Investor John.”
A screenshot then displays messages under that name.
The screenshot proves only that the contact was displayed using that saved label.
The investigation should establish the underlying telephone number and its connection to the suspect.
Technically, yes.
Digital images can potentially be:
But the possibility of editing does not mean every screenshot should automatically be rejected.
A defense argument should identify concrete reasons for questioning authenticity where possible.
Even an authentic screenshot can be misleading if it is incomplete.
Suppose the complete conversation reads:
Person A: “Can you send me €10,000 today?”
Foreigner: “No. I will not participate in that transaction.”
But the submitted screenshot displays only:
“send me €10,000 today.”
Cropping can radically alter meaning.
The defense should therefore request the complete conversation rather than accepting selected screenshots in isolation.
Context can be crucial in criminal cases involving:
A sentence that appears criminal when isolated may have an entirely different meaning when surrounding communications are reviewed.
Suppose a screenshot says:
“You will regret this.”
Whether this constitutes criminal evidence cannot be determined solely from the sentence.
The investigation may need to consider:
A screenshot is evidence to be interpreted, not an automatic legal conclusion.
Screenshots frequently appear in online-fraud investigations.
The complainant may submit screenshots showing:
But identifying the actual perpetrator may require additional evidence.
Investigators may need to compare the screenshots with:
A screenshot showing a foreigner’s photograph does not automatically prove that the foreigner received the money or operated the fraudulent account.
This can be important evidence but still does not automatically establish the complete offence.
The investigation may need to determine:
Digital communication evidence should therefore be evaluated together with financial evidence.
Yes.
A fake account can potentially use another person’s:
The 2026 Court of Cassation decision discussed above is particularly relevant because the investigation itself recognized the possibility that the disputed social-media account might have been created or used by someone other than the person whose identity appeared on it.
This demonstrates why account attribution should be technically investigated rather than assumed.
That claim should be investigated objectively.
Potentially relevant evidence includes:
The defense should preserve evidence showing impersonation or unauthorized access.
Account compromise can create a serious attribution problem.
Potential evidence includes:
A foreign suspect claiming account compromise should preserve this information immediately.
This is common in commercial criminal investigations.
A company’s messaging or social-media account may be accessed by:
Therefore, a screenshot from a company account may not establish which individual employee created the communication.
An IP address may sometimes help investigate who accessed an account.
But IP evidence has its own limitations.
An IP address may identify a connection rather than a particular human user.
Shared Wi-Fi, corporate networks, VPNs, dynamic addressing and other technical factors can complicate attribution.
Therefore:
Screenshot + IP address ≠ automatic proof of authorship.
If police seize the suspect’s phone, forensic examination may help determine whether the disputed conversation actually exists on the device.
The Ministry of Justice’s Digital Evidence Guide explains that forensic acquisition should preserve digital evidence carefully, maintain the evidence chain, document the process and verify forensic images and copies.
A proper forensic examination may therefore provide stronger technical evidence than a screenshot standing alone.
The original device may help establish:
This does not mean the original device must exist in every case for a screenshot to have any evidentiary value.
But where authenticity is seriously disputed, access to the source can become particularly important.
Potentially, where necessary and lawfully authorized.
If the complainant relies on screenshots, examination of the source device may help determine whether the communications are authentic and complete.
The defense can request that disputed digital evidence be technically examined where appropriate.
Digital forensic examination involves technical methods designed to preserve and analyze electronic information.
The Ministry of Justice’s Digital Evidence Guide explains that, where possible, a complete forensic image of seized digital storage should be created and analysis should generally be performed on the image rather than the original. It also emphasizes hash calculation, verification and maintaining the evidence chain.
These methods can be important where screenshot authenticity is disputed.
A hash is a technical value used to help verify whether digital data has changed.
Screenshots submitted as ordinary image files may not have the same evidentiary history as forensic data acquired directly from a device.
However, the absence of an original hash does not automatically mean a screenshot is fake or inadmissible.
It is one factor in the broader authenticity analysis.
An image file may contain metadata concerning matters such as creation or modification.
But metadata itself must be interpreted carefully.
It can potentially be changed and may not establish the underlying conversation’s authenticity by itself.
The strongest analysis usually considers multiple independent indicators.
When a screenshot is forwarded repeatedly through messaging platforms, technical characteristics can change.
The file may be:
Therefore, the defense should determine whether investigators possess:
These are technically different forms of evidence.
Sometimes the “screenshot” in a criminal file is actually a photograph taken of another phone.
That photograph may show useful information.
But it is even further removed from the underlying application data.
The source device becomes especially relevant where authenticity is disputed.
Potentially.
A printed image may still be considered together with other evidence.
But paper removes much of the technical information that may have existed in the original digital file.
Where the screenshot is decisive, the defense should ask whether the original digital version and source device are available.
Yes.
This distinction is critical.
Evidence can be lawfully obtained yet technically unreliable or incomplete.
For example:
A complainant lawfully possesses a WhatsApp screenshot, but the screenshot has been cropped and the complete conversation contradicts its apparent meaning.
The issue is not necessarily unlawful acquisition.
It is reliability and completeness.
Yes.
This is another critical distinction.
A screenshot might accurately reproduce a real conversation.
But the prosecution may still be wrong about who controlled the account.
Therefore:
Authenticity ≠ authorship.
Yes.
Even authentic messages can be misunderstood because of:
Foreign defendants are particularly vulnerable to translation problems.
A screenshot written in English, Arabic, Russian, German, Persian or another language may be translated into Turkish for the criminal file.
An inaccurate translation can materially alter meaning.
Defense counsel should compare:
original message → translation → alleged criminal meaning.
Where necessary, a translation can be challenged.
Modern digital conversations frequently use emojis, GIFs and reactions.
A translation or written police report may fail to capture these contextual features.
For example, the meaning of a sentence can change depending on whether it was accompanied by:
The complete interface context can therefore matter.
Screenshots may display timestamps.
But investigators should consider:
This is particularly important for foreigners traveling between countries.
Usually not by themselves.
A screenshot may show communication at a particular time.
It does not automatically prove the sender’s physical location.
Location may require separate evidence such as:
This creates a separate evidentiary issue.
Article 38 of the Turkish Constitution prohibits the use of unlawfully obtained findings as evidence. Turkish criminal procedure also requires criminal proof to be based on lawfully obtained evidence.
The Constitutional Court has emphasized that lawful evidence collection is a fundamental component of criminal proceedings.
Therefore, counsel should ask not only whether the screenshot is authentic but also how it was obtained.
Suppose a person secretly accesses another person’s private messaging account without authorization and takes screenshots.
That scenario is different from receiving messages directly as a participant in the conversation.
The Constitutional Court has recognized strong privacy and communications interests in private messaging. In a case concerning employer access to WhatsApp communications, the Court found significant problems where private messages were accessed without prior information or consent and the lower courts failed to address the applicant’s objections adequately.
The precise criminal-evidence consequences nevertheless depend on the circumstances of the individual case.
It would be incorrect to assume either that:
every privately obtained screenshot is automatically lawful
or that
every privately obtained screenshot must automatically be excluded.
The method of acquisition, privacy interests, circumstances and applicable case law must be examined.
A screenshot of a message received by the complainant is different from secretly recording a private conversation to which the recorder may or may not be a participant.
The Constitutional Court has separately examined privacy violations involving non-public conversations recorded without authorization.
The legal analysis should therefore identify precisely what kind of digital evidence is involved.
That may create an unlawful-evidence challenge.
The Constitution prohibits acceptance of unlawfully obtained findings as evidence, and the legality of the underlying device search can therefore matter.
Defense counsel should obtain and examine:
The legal framework governing digital searches underwent an important constitutional development in 2026.
On 12 February 2026, the Constitutional Court annulled specified portions of Article 134 of the Criminal Procedure Code governing searches of computers and computer records, copying and seizure. The Court found shortcomings in statutory safeguards concerning digital searches and personal information.
However, the annulment was not immediately effective. The Constitutional Court ordered it to take effect nine months after publication of the decision in the Official Gazette.
Accordingly, where screenshots or underlying messages were obtained through a phone or computer examination during 2026, counsel must determine the precise date and the legal framework applicable to the investigative measure at that time.
No.
The Constitutional Court decision does not mean screenshots are automatically inadmissible.
It concerns statutory rules governing particular forms of digital search, copying and seizure.
Screenshot evidence must still be analyzed according to:
Digital evidence should not become unquestionable merely because it appears technical.
In its digital-evidence jurisprudence, the Constitutional Court has considered whether defendants had a meaningful opportunity to challenge the authenticity and reliability of electronic evidence. In the ByLock litigation, the Court specifically noted that the defense had an opportunity to object to the authenticity and use of the digital evidence.
This principle is relevant when screenshots are important to a prosecution.
A strong defense may compare the screenshot with:
Contradictions can materially weaken the prosecution’s interpretation.
Assume a complainant submits a WhatsApp screenshot showing:
“Send €25,000 to this account and your investment will double.”
The profile displays the foreign suspect’s photograph.
That alone leaves multiple questions:
Who created the profile?
Which telephone number was used?
Who owned the number?
Who controlled the phone?
Who owned the bank account?
Who received the money?
Was the foreigner’s photograph copied?
Was the account compromised?
Did provider or device records corroborate the screenshot?
A criminal conviction should depend on proof connecting the accused person to the offence, not simply visual similarity between a profile and the accused.
Suppose the screenshot reads:
“I am coming for you tonight.”
The defense may examine:
The apparent seriousness of the sentence does not eliminate the need to establish authenticity and authorship.
Suppose someone creates an account using a foreign business owner’s photograph and sends fraudulent messages.
Victims screenshot the account.
Those screenshots may prove that the fraudulent communications existed.
They do not necessarily prove that the person whose photograph appears on the account sent them.
This distinction is consistent with the attribution concerns reflected in the Court of Cassation’s 4 May 2026 social-media decision.
Deletion can make verification more difficult but does not necessarily make the screenshots worthless.
Investigators may examine:
The Ministry of Justice Digital Evidence Guide notes that forensic examination can potentially recover deleted files and analyze application data such as chat logs.
Recovery, however, is not guaranteed.
No.
Do not:
Potentially exculpatory evidence may exist on the suspect’s own device.
Preservation is generally more useful to the defense than destruction.
If a foreigner claims the screenshot came from a fake or compromised account, preserve:
These can become important corroborating evidence.
When screenshots are being used against a foreign suspect in Turkey:
As of September 2026, screenshots can form part of the evidentiary record in Turkish criminal investigations, but there is no reliable legal basis for treating every screenshot as self-authenticating or automatically sufficient to establish criminal responsibility.
The Ministry of Justice’s forensic guidance emphasizes proper acquisition, preservation, documentation, verification and maintenance of the digital-evidence chain.
Recent Court of Cassation practice also demonstrates the importance of attribution. In its 4 May 2026 decision concerning a disputed social-media account, the Court upheld an acquittal where the evidence did not establish that the defendant personally committed the alleged act and alternative possibilities included fake-account creation, account compromise or unauthorized use.
The correct analysis of screenshot evidence should therefore proceed through:
Source → authenticity → completeness → account attribution → actual user → context → technical corroboration → lawful acquisition → other evidence.
A screenshot can be important evidence.
It should not automatically be treated as the end of the investigation.
Yes, they can potentially be considered as evidence. Their authenticity, completeness, source, authorship and consistency with other evidence may nevertheless be challenged.
There is no universal rule that a screenshot alone is automatically sufficient or insufficient. The court must evaluate the entire lawful evidentiary record and whether the prosecution has actually established the defendant’s responsibility.
No. Photographs and names can potentially be copied. A 2026 Court of Cassation decision illustrates why fake accounts, account takeover and unauthorized use must be considered where account attribution is genuinely disputed.
Yes. The defense can raise authenticity and completeness objections and seek examination of the original device, underlying conversation or other technical evidence where appropriate.
Yes. Cropping can remove earlier or later messages that materially alter the meaning of the conversation.
Not necessarily by themselves. Provider information, telephone numbers, login records, IP information, devices and other evidence may be relevant to account attribution.
Preserve login alerts, password-reset records, security emails, unknown-device notifications and other objective evidence supporting unauthorized access.
Yes. Where the screenshot results from an unlawful investigative measure, the defense can raise the constitutional and criminal-procedure rules governing unlawfully obtained evidence.
Where legally appropriate, examination of the source device can help assess whether the conversation exists in its original context and whether the submitted images are complete and authentic.
Preserve the relevant phone, account and security records; do not delete messages; identify the underlying account or number; obtain the complete conversation where possible; and have counsel assess authenticity, attribution, context, translation, lawful acquisition and technical corroboration.
Screenshots can appear persuasive because they visually resemble the original conversation. But a criminal investigation should distinguish between what appears on an image and what can actually be proved about its source, authenticity and author.
A foreign suspect may be falsely connected to a message because of a copied photograph, fake social-media account, compromised account, shared corporate credentials, misleading saved contact name or incomplete conversation.
Fırat Fesih Kaya Law Office provides criminal-law assistance to foreign nationals, tourists, employees, executives, investors and foreign-owned companies facing criminal investigations involving screenshots and other digital evidence in Turkey.
Lawyer Fırat Fesih Kaya assists foreign clients with WhatsApp and social-media screenshots, email and SMS evidence, fake accounts, account-compromise allegations, IP and login records, seized phones, forensic examinations, deleted messages, digital-evidence authenticity, unlawful searches and challenges to incorrect account attribution.
Early legal intervention can be particularly important because the original device, complete conversation, account-security records and other technical evidence may later become unavailable.
Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower No:148, 06520 Balgat, Çankaya, Ankara, Turkey
This publication is provided for general informational purposes and does not constitute legal advice. The evidentiary value of a screenshot depends on its source, authenticity, completeness, method of acquisition, account attribution, surrounding context, technical corroboration and the complete circumstances of the individual criminal case.