In short
Types of digital evidence in family law
Digital evidence is any electronically stored information that may be relevant to your family law matter. Understanding what types exist helps you identify and preserve material that supports your case.
- Text messages — SMS, iMessage, and messaging app conversations showing agreements, threats, admissions, or parenting communication patterns.
- Emails — threads with headers showing dates, times, and authenticity markers for formal communications and documented agreements.
- Social media posts — Facebook, Instagram, and TikTok content showing lifestyle, whereabouts, statements, or conduct relevant to parenting or finances.
- Messaging apps — WhatsApp, Facebook Messenger, Telegram, and Signal conversations, often containing more candid communications.
- Audio recordings — voice recordings of conversations, phone calls, or voicemails (subject to state recording consent laws).
- Video and CCTV — security camera footage, doorbell cameras, dashcam recordings, or video messages documenting events.
- Location data — GPS logs, Google Timeline, phone location history, toll records, or social check-ins establishing whereabouts.
- Photos with metadata — digital photographs containing EXIF data showing date, time, location, and device information.
Relevance matters
Text messages: capturing, preserving and presenting
Text messages are among the most commonly used digital evidence in family law proceedings. Proper preservation and presentation significantly impacts their evidentiary value.
Best practices
- Take comprehensive screenshots — screenshot entire conversation threads, not just selected messages. Include the contact name or number, date and time stamps, context before and after the key messages, and your phone's status bar showing the current date and time.
- Export with metadata — many phones allow you to export message threads including timestamps and sender/receiver information. On iPhone, use iCloud backup extraction tools; on Android, use built-in export features or apps such as SMS Backup & Restore. Exported data with metadata is stronger evidence than screenshots alone.
- Consider forensic extraction — for critical evidence, professional forensic extraction creates a legally defensible record. Forensic tools can recover deleted messages and provide certified reports with hash values proving authenticity.
- Preserve the original device — keep the original device with the messages intact. The device itself is the best evidence and may be examined if authenticity is disputed. Do not delete messages after taking screenshots.
Strong versus weak text evidence
Strong text evidence includes complete conversation threads, visible timestamps, a clearly identified contact, the original device available, a forensic extraction report, and sufficient context. Weak text evidence typically consists of isolated screenshots without context, no visible timestamps, the contact shown only as a phone number, original messages deleted, or images that appear cropped or edited.
Warning: editing or fabricating messages
Email evidence: headers, threads and preservation
Emails often contain more formal communications and are generally easier to authenticate than text messages. Proper preservation maintains their evidentiary value.
- Include full email headers — headers contain authentication information including sender IP addresses, server timestamps, and routing information. In Gmail open the email, click the three-dot menu, and choose "Show original". In Outlook, go to File > Properties > Internet headers. Print or save emails with headers visible.
- Save complete email threads — save the entire thread, not just the message you want to rely on. Context matters. Export emails as .eml or .msg files, which preserve formatting and metadata, or print to PDF with the complete thread visible.
- Archive rather than delete — once you are aware of potential legal proceedings, you have an obligation to preserve relevant evidence. Archive emails in a separate folder and back up to multiple locations. Deliberate destruction of evidence can result in adverse findings.
- Request provider records — in some cases, email records can be obtained directly from the provider through court subpoenas, providing independent verification of authenticity.
Email attachments
Social media: screenshots, archiving and authentication
Social media posts can reveal information about lifestyle, whereabouts, statements, and conduct that contradicts claims made in court. Proper preservation is essential as posts can be deleted at any time.
- Screenshot with URL visible — take screenshots that show the full URL in your browser's address bar, the post date, the poster's profile name or handle, and any engagement (likes, comments).
- Use web archiving services — archive posts using services like the Wayback Machine (web.archive.org) or Archive.today (archive.ph). These create timestamped, independent records that can be verified by anyone. This is stronger than screenshots alone.
- Screenshot the profile page — capture the poster's profile page showing their name, profile picture, and identifying information. This helps prove the account belongs to the person you claim.
- Save video content — for video posts (TikTok, Instagram Reels, Facebook videos), download the video file if possible. Video content is often deleted and cannot be recovered later.
- Document the capture date — note when you captured the evidence, including your device's date and time in screenshots. This establishes when the post was observed.
Privacy settings and access
Courts commonly see social media evidence showing lifestyle inconsistent with a claimed financial position, new relationships relevant to parenting, statements that contradict affidavit evidence, evidence of drug or alcohol use, whereabouts at relevant times, posts disparaging the other parent, or evidence concerning the children's welfare.
WhatsApp, Messenger and app-based messages
Messaging apps like WhatsApp, Facebook Messenger, Telegram, and Signal are commonly used for family communications. Each app has different preservation methods.
WhatsApp has built-in export features. Open the chat, tap the three-dot menu, then More > Export chat. You can export with or without media; the export creates a .txt file with timestamps and a folder of media files. This is more reliable than screenshots. Backups to Google Drive or iCloud preserve deleted messages in backups.
Facebook Messenger
Download your Facebook data including Messenger conversations. Go to Settings > Your Facebook Information > Download Your Information, select your date range, and include Messages. This creates a comprehensive record with timestamps, sent and received media, and read receipts.
Telegram
Telegram Desktop allows you to export chat history. Open the chat, click the three-dot menu, and select Export chat history. Choose HTML format for the most readable output. Note that secret chats cannot be exported and are device-specific; regular chats are stored on Telegram's servers.
Signal and encrypted apps
Signal prioritises privacy and does not have export features. Screenshots are your primary preservation method. Be aware that disappearing messages cannot be recovered once they have deleted themselves.
Recording laws by state: one-party vs all-party consent
Whether you can legally record conversations without the other person's knowledge depends on which Australian state or territory you are in. Getting this wrong can make your evidence inadmissible and may constitute a criminal offence.
| State / Territory | Rule | Legislation |
|---|---|---|
| Queensland (QLD) | One-party consent — you can record a conversation you are party to without notifying others | Invasion of Privacy Act 1971 |
| Victoria (VIC) | One-party consent — a principal party to a conversation may record without consent of others | Surveillance Devices Act 1999 |
| Western Australia (WA) | One-party consent — permitted for private conversations | Surveillance Devices Act 1998 |
| Northern Territory (NT) | One-party consent — a party to a private conversation may record it | Surveillance Devices Act 2007 |
| New South Wales (NSW) | All-party consent required — recording without consent is an offence (up to 5 years imprisonment) | Surveillance Devices Act 2007 |
| Australian Capital Territory (ACT) | All-party consent required | Listening Devices Act 1992 |
| Tasmania (TAS) | All-party consent required — recording without consent is prohibited | Listening Devices Act 1991 |
| South Australia (SA) | All-party consent required | Surveillance Devices Act 2016 |
Critical warning
Admissibility vs legality
CCTV and video footage
Video evidence from security cameras, doorbell cameras, and dashcams can provide compelling visual proof of events.
- Home security and CCTV — footage from your own property showing arrivals, departures, incidents, or the condition of children during handovers. Download footage before it auto-deletes, note the camera position and coverage area, and check timestamp accuracy.
- Doorbell cameras — Ring, Nest, and similar devices capture handover interactions and can show punctuality, conduct, and conversations at your door. Download from the cloud before the subscription lapses; note that audio may be subject to recording laws.
- Dashcam footage — vehicle cameras may capture incidents during transport, handover locations, or driving conduct. Dashcams often overwrite old footage, so download relevant sections promptly.
- Third-party CCTV — footage from shops, schools, or public places may be obtainable via subpoena if relevant. Act quickly; footage is often deleted after 30 days. Identify the business and camera location as soon as possible.
Video presentation tips
GPS and location data
Location data can establish whereabouts at specific times, which may be relevant to contraventions, alibi evidence, or demonstrating care arrangements.
- Google Timeline — if enabled on your Android phone or Google account, Google Maps stores your location history. Access it via Google Maps > Your Timeline. You can export data showing where you were on specific dates and times.
- iPhone location history — iPhone stores "Significant Locations" in Settings > Privacy > Location Services > System Services > Significant Locations. Less detailed than Google but still useful.
- Photo metadata (EXIF data) — photos taken with location services enabled contain GPS coordinates. Use tools like ExifTool or an online EXIF viewer to extract this data. Screenshots do not contain location data.
- Toll records and transaction history — e-toll records, bank transaction locations, and EFTPOS records can establish whereabouts at specific times. These can be obtained from your own accounts or via subpoena.
Warning: tracking others
Authentication and admissibility
For digital evidence to be useful in court, you must be able to prove it is genuine (authentication) and the court must be willing to consider it (admissibility).
Authentication methods
- Witness evidence — in your affidavit, swear that you personally received or sent the communication, that you recognise the sender or recipient, and that the annexure is a true copy. This is often sufficient for routine text messages and emails.
- Metadata and headers — preserve metadata showing sender, recipient, date, time, and routing information. For emails, full headers provide authentication markers; for photos, EXIF data shows device and timestamp information.
- Forensic extraction — professional digital forensics extract data in a legally defensible manner, creating certified reports with hash values proving files have not been modified. This is the gold standard for critical evidence.
- Provider records — records obtained directly from service providers via subpoena provide independent verification. Carriers, email providers, and social media platforms can supply records that cannot be disputed as fabricated.
- Chain of custody — document how you obtained and preserved the evidence. Note when you took screenshots, when you exported data, and how you have stored it. This demonstrates the evidence has not been tampered with.
Common challenges and how to counter them
- "The messages were edited or fabricated" — counter by preserving originals on the device, providing forensic extraction, obtaining provider records, showing complete conversation context, and supplying corroborating evidence.
- "That's not my account / someone else sent it" — counter by linking the account to a known phone number or email, showing profile information, demonstrating knowledge shown in the messages, and providing circumstantial evidence.
- "The messages are taken out of context" — counter by providing complete conversation threads, not just selected excerpts. Allow the other party to provide the "context" they claim is missing.
- "The recording was obtained illegally" — counter by knowing and complying with your state's recording laws before recording. If challenged, demonstrate the recording was lawful under applicable legislation.
Common questions
Can text messages be used as evidence in family court?
Yes, text messages can be used as evidence in Australian family court proceedings. They are commonly used to demonstrate communication patterns, agreements, threats, or admissions. However, you must be able to authenticate them — prove they are genuine and unaltered. Screenshots alone may be challenged; consider exporting messages with metadata or using forensic extraction tools. The messages must also be relevant to the issues before the court.
Are text messages admissible in Australian family court?
Text messages are commonly admitted as evidence in Australian family court proceedings, but admissibility is not automatic. The messages must be relevant to the issues in dispute, and you must be able to authenticate them — that is, prove they are genuine and unaltered. You can authenticate routine messages by swearing in your affidavit that you sent or received them and that the annexure is a true copy; preserving the original device, metadata, or a forensic extraction report strengthens this. The court ultimately assesses authenticity on the balance of probabilities.
How do you prepare text messages for court?
Take comprehensive screenshots of entire conversation threads — not just selected messages — showing the contact name or number, date and time stamps, and the context before and after the key messages. Where possible, export the thread with its metadata, which is stronger than screenshots alone, and for critical evidence consider professional forensic extraction. Preserve the original device intact and do not delete messages after screenshotting, as the device itself is the best evidence if authenticity is disputed.
Can I record phone calls with my ex-partner without their consent?
This depends on which state you are in. Queensland, Victoria, Western Australia, and the Northern Territory allow 'one-party consent' — meaning you can legally record a conversation you are participating in without telling the other person. However, New South Wales, ACT, Tasmania, and South Australia require 'all-party consent' — meaning recording without consent is a criminal offence. Even legally obtained recordings may face admissibility challenges in court.
How do I use social media posts as evidence in family court?
Social media posts can be powerful evidence but must be properly preserved and authenticated. Take screenshots showing the URL, date, time, and the poster's profile. Better still, use web archiving services like the Wayback Machine or Archive.today. Print the posts with metadata visible. Be aware that screenshots can be challenged as potentially altered — corroborating evidence from multiple sources strengthens your case.
Can deleted text messages or emails be recovered for court?
Deleted messages can sometimes be recovered through forensic data extraction from the original device, backups (iCloud, Google, carrier records), or from the recipient's device. Professional digital forensics experts can assist with this process. Courts may also draw adverse inferences if a party has deliberately destroyed evidence. If you suspect evidence may be deleted, consider seeking urgent court orders for preservation.
How do I prove digital evidence is authentic and not fabricated?
Authentication requires demonstrating the evidence is genuine and unaltered. Methods include: preserving original metadata (timestamps, device information), using certified forensic extraction, obtaining records directly from service providers, having witnesses who can verify the communication, maintaining a clear chain of custody, and using hash values to prove files haven't been modified. The court assesses authenticity on the balance of probabilities.
Can GPS or location data be used as evidence in family court?
Yes, location data can be used to establish whereabouts at specific times, which may be relevant to parenting disputes or contraventions. Sources include phone GPS logs, Google Timeline, vehicle tracking, CCTV footage, and electronic toll records. However, obtaining location data about another person without consent may breach privacy laws or constitute surveillance. Generally, you can use your own device's location history but not track another person.
Legal disclaimer