Mobile evidence guidance
Can linking a device change the evidence?
Yes. A new linked session can create account records, trigger notifications and synchronise only some history. It should be authorised and documented separately, rather than described as a passive copy of a historic archive.
Potential evidence sources
Where relevant records may exist.
- Existing client data
- Session lists and account events
- Documented collection record
Decision factors
What materially changes the prospects.
- 01Existing versus newly created session
- 02History synchronisation limits
- 03Account-holder notification
Evidential limitations
What must not be overstated.
Linking does not recreate expired content
Do not link an account casually before preservation advice
Sources and interpretation
Each entry identifies its limited supporting proposition and documentation-check date. General methodology is not a current device-support list. These checks are not laboratory validation; availability and method suitability require assessment for the exact source and configuration.
- WhatsApp linked-device history
Linked endpoints may receive only part of the history.
Platform documentation · Documentation checked
- WhatsApp linked devices
Linking is an account operation, not a passive historic archive.
Platform documentation · Documentation checked
- NIST mobile device forensics guidance
Methodological background (2014), not a current device-support list.
General methodology · Documentation checked
Confidential case review
