A remarkable share of modern litigation runs on chat logs. Agreements are closed in WhatsApp, threats are made in WhatsApp, dismissals are foreshadowed in WhatsApp. And then the conversation arrives in court as the weakest artifact imaginable: a cropped screenshot, exported from the interested party's own phone.
Courts have noticed. Colombia's Constitutional Court, in ruling T-238 of 2022, put it plainly: printed screenshots of chats carry reduced, merely indicative evidentiary weight, precisely because digital files can be altered or selectively omitted, and must therefore be weighed together with other evidence. Different jurisdictions phrase it differently; the underlying reasoning is universal.
Why chat screenshots are especially fragile
Chat evidence stacks every weakness of the screenshot on top of problems of its own:
- Selective framing. A conversation is a sequence. A screenshot is a window. What came before the captured messages — the provocation, the retraction, the context — is invisible, and the other side knows it.
- Trivial fabrication. Fake-conversation generators are a commodity; a fabricated chat is indistinguishable from a real one at the pixel level.
- Contact-name illusion. The name at the top of the screen is a label in the presenter's own address book. It identifies nobody.
- Disappearing source. Messages get deleted, accounts vanish, retention timers run out. By the time authenticity is questioned, the source may no longer exist to check against.
What proper preservation looks like
The goal is to move the conversation from "image I produced" to "record captured under documented conditions":
Capture the platform, not the photo. Preserving the conversation through the service's own interface (such as WhatsApp Web) in a controlled environment documents that the content came from the platform's servers at capture time — not from an image editor.
Capture the whole thread, in motion. Video of the session scrolling through the full conversation defeats the selective-framing objection: the context is inside the record, timestamps and all.
Fingerprint and chain immediately. Hashes computed at capture and a custody chain started at the same moment close the "what happened to it since" gap before it opens.
Anchor the moment. Independent time references prove the conversation existed in this exact form on that date — which matters enormously when messages later disappear.
The honest boundary
None of this proves who was physically typing, and preservation must respect the legal limits on accessing communications — capture what you legitimately have access to, as a participant. What proper preservation does is narrower and decisive: it establishes what the platform displayed, when, in full context, unaltered since. That converts the weakest common form of evidence into one of the hardest to dismiss.