Encrypted and digital evidence
Police say you used EncroChat—what should you do? Contact Ghafar Khan, an experienced EncroChat lawyer and criminal defence solicitor, before making admissions about a handle, device or message. EncroChat is evidence rather than a standalone offence. Cases may depend on attribution, meaning, completeness and interpretation.
EncroChat and encrypted messages
The Court of Appeal has considered the admissibility of EncroChat material. In an individual case, separate questions may remain about attribution, context, interpretation and what the messages prove.
- Attribution of a handle or device
- Dates, locations and message context
- Alleged code words and expert interpretation
- Links to drugs, firearms or money allegations
Wider digital evidence
Cases may also involve ordinary phone downloads, cloud data, social-media records, cell-site analysis or financial information. The defence should consider reasonable lines of enquiry and disclosure that may assist the case.
- Completeness and continuity of data
- Who used or controlled an account
- Deleted, missing or unused material
- Expert evidence and analytical schedules
Technical evidence made clear
Complex data must be converted into a clear case theory that distinguishes what is proved from what is inferred. A prosecution schedule may present thousands of messages, locations or contacts as a single narrative; the defence should test the underlying material, chronology and assumptions rather than treating the schedule itself as proof.
What should I do if police rely on EncroChat or phone evidence?
- Keep copies of charge, bail, disclosure and digital-evidence schedules supplied to you.
- Do not delete, reset or alter phones, cloud accounts, messages, photographs or location data that may be relevant.
- Tell your solicitor about shared devices, shared accounts, previous handset ownership or other people who had legitimate access.
- Preserve independent records such as work logs, travel records, receipts, photographs and vehicle information that may test alleged dates or locations.
- Do not contact alleged co-conspirators to compare messages or coordinate explanations.
- Ask for legal advice before making admissions about a handle, device, account, code word or particular message.
Where the case also relies on mast or call data, see the separate guide to telephone and cell-site evidence. If the allegation is conspiracy, the criminal conspiracy defence guide explains the separate issue of proving an agreement.
Common questions
Can EncroChat evidence be challenged?+
The Court of Appeal has ruled on admissibility issues, but case-specific questions can remain about attribution, meaning, completeness, reliability and the conclusions drawn from the material.
What is device attribution?+
It is the process of trying to establish who possessed, controlled or used a device or account. The evidence may include messages, contacts, location, photographs and external records.
How do police try to prove an EncroChat handle belongs to me?+
Attribution may be built from a combination of evidence rather than one item. Investigators may rely on message content, contacts, nicknames, photographs, locations, other phones, vehicles, addresses, financial records and events said to correspond with messages. Each strand should be tested rather than assuming the handle identifies its user.
Can I be convicted on EncroChat messages alone?+
That depends on the evidence and the allegation. Important questions include whether the account is reliably attributed, whether the messages are complete, what they mean in context and whether they actually prove participation and the necessary state of mind for the offence charged.
What if several people had access to the phone or account?+
Shared access can be important to attribution. The defence may examine possession, patterns of use, message language, location evidence and external records to test whether the prosecution can reliably identify who sent particular communications.
Can deleted messages or missing digital material help the defence?+
Potentially. The significance depends on what material exists, what was recovered, what is missing and whether further disclosure or reasonable lines of enquiry could reveal material relevant to the defence case.
Can cell-site evidence prove where I was?+
Cell-site evidence can assist with the approximate areas in which a phone may have operated, but its interpretation requires care. It does not automatically establish that a particular person was holding the device or pinpoint an exact location in every case.
Do I need an expert for phone or digital evidence?+
Not every case requires a defence expert. Where technical interpretation, extraction, attribution, cell-site analysis or another specialist issue is genuinely disputed, expert assistance may be considered as part of the defence strategy.
Related specialist guidance: Read about cell-site evidence and mobile-phone attribution.
Speak to Ghafar Khan now.
For urgent criminal defence advice, call the 24/7 number.