Chapter 86: Messages and Correspondence: Preserving the Original

In the previous chapter, we discussed the art of the screenshot—that digital first aid which allows us to memorialize a moment in time before it vanishes. However, if the screenshot is a photograph of a crime scene, then the original messages, database files, and raw exports of correspondence are the DNA of your legal case. In a world where the "Delete for Everyone" button is a significant tool in the arsenal of hostile actors, the ability to preserve the original is often the decisive factor in assessing the possibility of asset recovery or the enforcement of rights.

Throughout his professional career, Adv. Zion Behalul has encountered diverse cases and numerous inquiries concerning a similar tragedy: victims presenting a stack of printed pages of screenshots from text messages. Often, the other party—whether a private individual or an institutional entity—may argue that the screenshots are edited or partial. Without the "original," and without the ability to prove the authenticity of the text, the evidence may be weakened. In this chapter, we will examine how to transform correspondence into significant, irrefutable evidence.

The following scenario is an educational example based on common fraud patterns. The characters and events are for illustrative purposes only.

Dov's Story: When Words Dissolve into the Cloud

Dov, a retired mechanical engineer, was a man of order and precision. When he received a message on a messaging app from a woman who introduced herself as an investment advisor at a prestigious firm, he was not easily convinced. He checked her profile, saw professional photos, and received links to websites that appeared completely legitimate. Over time, a relationship was built based on professional trust. She sent him charts, screenshots of profits, and reassuring voice messages.

"Dov," she wrote to him one day, "the investment opportunity closes in an hour. If you transfer the amount now, we can increase your portfolio significantly. I have sent you the transfer details."

Dov, having seen virtual "profits" accumulating over the last few months in the account shown to him, executed the transfer. He took a screenshot of the transfer confirmation and sent it to her. She replied warmly: "Received. You are on the right path to financial independence."

Two days later, Dov tried to log into the app to ask a question. He found that the chat window was empty. The entire conversation history had vanished without a trace. Dov felt helpless. He took a screenshot of the empty window, but found it difficult to prove the promises made by that persona.

In this scenario, when legal counsel is sought, the inherent difficulty of the digital age arises: information is liquid and can be deleted with a single click by the other party. In this chapter, we will learn how to act to prevent such a situation, and what options are available to those who find themselves in a similar situation.

Why a Screenshot Is Not Enough? Limitations of Secondary Evidence

To understand why it is important to save the "original," one must recognize an important legal principle: the closer the evidence is to its technological source, the greater its weight may be in a legal examination.

A screenshot is considered evidence whose authenticity can be challenged, as there are currently technological tools that allow for the creation of screenshots of conversations that never took place. Therefore, in a professional examination of the case, arguments may be raised against the admissibility or weight of a screenshot without additional backing.

Preserving the "original" means saving the digital file itself, including its metadata—data that shows when the file was created, from which device, and whether it was altered. When exporting an entire chat as a text file or a backup file, you maintain a stronger chain of evidence than with a single screenshot.

The Risk of Remote Deletion

In many cases of bad faith, the other party deletes the history the moment they suspect the other side has become wary. Without a real-time backup of the original, the evidence may disappear.

The Practical Guide: How to Properly Preserve the Original

The act of preserving the original should be performed as early as possible. Below are steps that can be taken:

WhatsApp: Export Chat

WhatsApp has a built-in "Export Chat" feature. It creates a text file containing the messages, including dates and times, and allows for the attachment of media files (photos, voice messages) from the conversation.

How is it done? Enter the chat > click on the contact's name > scroll to "Export Chat" > select "Include Media." The file should be saved in a secure location. This file constitutes continuous documentation and strengthens the credibility of the evidence.

Telegram: History Management

In Telegram, where one can delete conversations for both parties, you can use the Desktop version to perform an "Export Chat History." If there is a suspicion of improper conduct, it is recommended to perform a full export of the history and files as soon as possible.

E-mail: Saving the Original File (EML/MSG)

Printing emails to PDF does not always include technical data showing the email's route through servers. To maintain complete digital evidence, it is recommended to use the "Save As" option and save the email in EML or MSG format.

Legal Aspects: Admissibility vs. Weight

In the legal system, there is a distinction between the "admissibility" of evidence and the "weight" that will be given to it. In accordance with the Computer Law and the Evidence Ordinance, for digital evidence to be given significant weight, the reliability of the device, the reliability of the output, and the chain of evidence must be examined.

When the original is saved in its original format, the ability to prove the sequence of events is strengthened. If a party to the proceedings claims that things were never written, presenting a full export including metadata may refute this claim. Conversely, a single screenshot may be vulnerable to allegations of forgery, which may shift the burden of proof back to the party submitting the evidence.

Liability of Financial Institutions in Light of Documentation

In cases of disputes with banks or credit card issuers regarding fund transfers, the question of negligence is sometimes examined. Saving the original correspondence allows for the presentation of the misrepresentation that was directed at the client. Full documentation may show how techniques of undue influence or impersonation were used, thereby assisting in examining the liability of the involved parties. The documentation presents the full picture of the matter.

Case Study: The Importance of Documentation

In the educational scenario based on Dov's case, one can see how proactive documentation may help. If, for example, a "Chat Export" was performed at an early stage of the contact, it is possible that messages or recordings would be found instructing the client on how to operate against the bank's security mechanisms.

Within the framework of examining legal options in similar cases, one can see that presenting the full sequence of correspondence, including original files and recordings, may assist in clarifying the truth and examining whether the client acted under deception. Legal analysis of such cases teaches that presenting high-quality digital evidence may lead to a settlement or asset recovery, depending on the specific circumstances of each case.

Technology in the Service of Evidence: Should You Use Recovery Software?

In cases where messages have already been deleted, it is sometimes possible to use "digital forensics" to recover information from the device's memory. If a suspicion of fraud has been discovered and messages have been deleted, it is recommended to stop using the device immediately, put it in flight mode to prevent data overwriting, and consult an expert in the field.

Warning Signs in Correspondence Management

• Insistence on switching to a specific platform: A demand to move to an app where messages can be easily deleted may raise suspicion.
• Use of disappearing messages: Enabling a feature for messages that are automatically deleted during the management of a business relationship is a red flag.
• Selective deletion of messages: Identifying the retrospective deletion of certain messages by the other party.

What Can Be Done? (Documentation Checklist)

1. Avoid premature confrontation: Before confronting the suspected party, it is recommended to ensure that the evidence is documented.
2. Perform a full export: Use the built-in functions of the apps to export the conversation history including media.
3. Secure backup: Save the exported files in separate and secure storage locations.
4. Save emails in original format: Prefer the EML format over regular printing.
5. Document landing pages: Use tools to save a snapshot of websites.

Legal Aspect: The Lesson from Case Law

In a general analysis of legal options and a review of trends in the courts, there is a growing demand to present the full "context" and not just partial screenshots. Submitting the original conveys credibility and allows for a transparent examination of the facts. In a world where frauds are sometimes based on the distortion of reality, the original documentation is a significant tool. The chances of success in managing proceedings depend to a great extent on the quality of the evidence and the circumstances of the case.