Digital Evidence in Divorce Cases: Collecting WhatsApp, Email, Location and Imagery

TL;DR: In divorce cases, WhatsApp messages, email correspondence, location data, photographs, and social media records can be used as evidence in court. What is decisive is how the evidence was collected. Accessing a spouse's phone without permission, installing spyware, or breaking into a cloud account by cracking the password is a crime under TCK 132-135, and records obtained this way are rejected by the court. The strongest path is an ISO/IEC 27037-compliant digital forensics report. Early coordination with your divorce lawyer and a digital forensics expert is essential.

In Which Cases Does Digital Evidence Help?

Digital evidence is not needed with the same weight in every type of divorce. In an uncontested divorce, the parties apply to the court together and the need for evidence decreases. In a contested divorce, every claim must be proven. A claim of a breach of fidelity, a demand for pecuniary and non-pecuniary damages, an alimony dispute, a custody battle, the division of property, and an abandonment claim are the headings where digital evidence most often comes into play. Article 166 of the Turkish Civil Code (TMK) treats the breakdown of the marital union as a ground for divorce; proving this breakdown requires concrete, admissible evidence.

The court relies not on an abstract claim but on documents. When witness testimony alone falls short, digital records make the picture concrete. For this reason, digital evidence planning in a divorce process should begin before the case is filed.

The Most Common Digital Evidence in Divorce Cases

In practice, the digital evidence submitted to court is gathered in the following categories:

  • WhatsApp messages and voice recordings
  • Telegram, Signal, Instagram DM, and Messenger correspondence
  • SMS and carrier call records
  • Email correspondence (Gmail, Outlook, corporate)
  • Location history (Google Maps Timeline, Apple Significant Locations)
  • Social media posts, likes, follower lists, and story records
  • Bank statements, credit card transactions, online payment platforms
  • Mobile phone call details and base station records
  • Dating app activity and notifications
  • Cloud backups and photo gallery metadata

Each category requires a different collection method and a different legal framework. Submitting them all to court in the same way often leads to the rejection of the evidence.

How Is Lawful Evidence Collected?

From Your Own Device

A WhatsApp message your spouse sent you, an email they sent you, a post they made in a shared group, or a photo they forwarded to you is data in your possession and sent to you. A screenshot, backup, or device handover for expert examination of these records is entirely lawful. From the standpoint of the Personal Data Protection Law (KVKK) as well, using your own correspondence on your own device falls within the data processing exception.

From Your Spouse's Device

Accessing your spouse's phone, computer, or tablet without permission is a crime under Turkish Penal Code (TCK) Article 132 (violation of confidentiality of communication), Article 134 (violation of privacy), and Article 135 (unlawful acquisition of personal data). Cracking the phone password, installing spyware, scanning your spouse's fingerprint while they sleep, or activating the facial recognition system are all evaluated within this framework. A record obtained this way is rejected by the court; moreover, a criminal case is opened against you, and the victim can claim damages.

From a Cloud Account

If the same Apple ID or the same Google account is shared within the family, your access using your own login details is deemed lawful. The decisive factor here is whether the account is genuinely used jointly. Accessing without permission an account registered only in your spouse's name and opened only with their password again falls within the scope of TCK 135.

Joint Bank and Credit Card

Financial records such as a joint account, a supplementary card, or a joint investment account are open to both parties. Direct access is possible, and details can also be requested from the bank through the court via an official letter. Article 219 and the following articles of the Code of Civil Procedure (HMK) regulate requesting a document through the court.

Is a Screenshot Enough?

On its own, a screenshot is the weakest evidence in court. The opposing party raises the objection "manipulated," "Photoshop," "fabricated," and the judge approaches it cautiously. Without the image's metadata, without verifying on which device and on which date it was taken, and without a hash signature, a screenshot remains weak. In a hypothetical scenario, claims based solely on a screenshot are reported by the expert as "low verifiability," and the judge finds the screenshot insufficient on its own.

The correct path is taking an image of the device, performing hash verification, and the digital forensics extraction we detail in our article can WhatsApp be used as evidence. A report taken from the raw database (msgstore.db, ChatStorage.sqlite) weakens any manipulation claim.

TMK Article 166 and Breach of Fidelity

Article 166 of the Turkish Civil Code treats the breakdown of the marital union as a ground for divorce. A breach of the duty of fidelity is one of the classic examples of this breakdown. However, to prove it, suspicion, gossip, or a single message fragment on its own is not enough. In the decisions of the Court of Cassation General Assembly of Civil Chambers, it is emphasized that the burden of proof lies in establishing the breach with concrete evidence. When evaluating the content, the court simultaneously questions both the authenticity of the message and whether it was obtained by lawful means.

For this reason, digital evidence must be both technically sound and legally clean. Evidence missing one of these legs produces no result in court.

The Digital Forensics Report in a Divorce Case

The ISO/IEC 27037 standard is the international guide on the identification, collection, acquisition, and preservation of digital evidence. A report prepared in compliance with this standard is the strongest form of document the court accepts. The report must clearly answer the following questions: Which device was examined, what is its physical serial number, on which date was it received, by which method was the image taken, what is the hash value (SHA-256), was the environment in which the report was prepared isolated, and with which tool was the finding verified.

Article 293 of the HMK grants the parties the right to obtain an expert opinion. A report a lawyer obtains within this scope from an independent digital forensics expert is submitted to the court as an expert opinion. If the court wishes, it appoints an expert panel and has a separate examination conducted. Consistency between the two reports strengthens the evidence.

Seizing a Device by an Interim Injunction

The family court can, if there are special circumstances during the case, issue an order to seize the spouse's phone or computer. The interim injunction provisions in Article 389 and the following articles of the HMK come into play here. However, in practice the conditions are narrow; the court evaluates by considering proportionality and the protection of privacy. Before resorting to this path, the lawyer must concretely set out in the petition which evidence is needed and why.

A device obtained by an interim injunction is handed over not directly to the party but to the expert. The expert prepares the examination report and submits it to the file.

How Is Location History Extracted?

Location evidence is very valuable in most divorce files. Google Maps Timeline shows the user's location history retrospectively through their own Google account. On Apple devices, Significant Locations holds similar information. If the user is the owner of their own account, extracting their own location history is entirely lawful and can be used in the case as a voluntary statement.

If access to the spouse's location history is sought, the legal path is again a court request. Carrier base station records can be requested through a prosecutor's office or court letter. Location data obtained through individual initiative again falls within the scope of TCK 134.

Social Media Evidence

Correspondence, likes, stories, and followed accounts on platforms such as Instagram, Facebook, TikTok, and X are frequently used in a divorce file. Posts visible on public profiles can be seen by everyone, so submitting them as evidence is lawful. Content shared on a private profile, however, can only be accessed with the user's own account, as part of their own follower list.

Here, to strengthen the evidence, having a website determination carried out through a notary is an established practice. The notary records the content visible on the screen in an official report; this report is a far stronger document in court than a screenshot.

Email Evidence

The authenticity of email correspondence is verified through header analysis. The sender server IP, SPF, DKIM, and DMARC records, receipt time stamps, and the mail servers it passed through are examined in this analysis. The digital forensics expert reports this way whether the email genuinely came from the claimed person. Only the content text or a forwarding screenshot is open to a manipulation claim; a report that includes header analysis, on the other hand, technically proves authenticity.

Digital Evidence in a Custody Case

In custody disputes, matters such as the communication pattern with the child, allegations of neglect, and a harmful-influence environment are supported by digital evidence. The spouse's messaging frequency with the child, inappropriate posts about the child on social media, and the unauthorized publication of the child's photos can be brought before the court. Here KVKK Article 6 in particular comes into play; the child's personal data is deemed special category and its protection is stricter. When submitting evidence, masking it so as not to reveal the child's identity is the lawyer's responsibility.

Digital Evidence in the Division of Property

Within the framework of the regime of participation in acquired property (TMK 218-241), digital traces play a critical role when dividing property. Bank records, credit card spending details, crypto wallet addresses and transaction history, online seller accounts (Trendyol, Hepsiburada, eBay), rental income from platforms such as Airbnb, in-game digital assets, and domain portfolios can be submitted to court.

When submitting these records, the exceptions under KVKK Article 5 and Article 28 are considered first, followed by the balance of legitimate interest. Documenting the joint financial life is deemed a legitimate interest for the liquidation of the property regime.

What Should the Lawyer Do?

The divorce lawyer's role on digital evidence has four stages. The first is to warn the client early against the risk of "committing a crime in the excitement of collecting evidence." The second is coordination with a digital forensics expert before the file is opened; the collection plan must fit the case strategy. The third is requesting an expert opinion within the framework of HMK Article 293. The fourth is, if deemed necessary, requesting an interim injunction from the court for the handover of a device.

A lawyer who skips these four stages faces weak evidence in court, and the client's pecuniary and non-pecuniary loss grows.

Consequences of Unlawful Evidence

Evidence collected by the wrong method has four consequences. First, it is rejected in court and the case strategy collapses. Second, the opposing party can file a complaint against you under TCK 132-135; the penalty for the offense is six months to three years of imprisonment. Third, as a victim, the opposing party can file a case for pecuniary and non-pecuniary damages. Fourth, if the evidence was collected at the lawyer's direction, disciplinary liability arises within the framework of the Union of Turkish Bar Associations' Professional Rules.

In conclusion, unlawful evidence both harms the divorce case and gives rise to new cases.

KVKK and the Legal Framework

KVKK Article 6 defines special category personal data; headings such as health, sexual life, biometric data, and criminal conviction fall here, and their processing is subject to far stricter conditions. Article 28 lists the exceptions; situations where data processing is mandatory for the establishment, exercise, or protection of a right are foremost among them. Evidence submitted in a divorce case is often evaluated within this exception, but the principle of proportionality is always observed.

TCK 132 criminalizes the violation of confidentiality of communication, TCK 134 the violation of privacy, and TCK 135 the unlawful processing of personal data. TMK 166 regulates the breakdown of the marital union as a ground for divorce. ISO/IEC 27037 provides the technical framework. Digital forensics practice combines these four axes; an axis left incomplete vitiates the evidence.

Frequently Asked Questions

I looked at my spouse's WhatsApp while the phone was open, is it evidence?

Looking at someone else's device without permission, even if the lock is open, can be deemed a violation of confidentiality of communication. The screenshot can be rejected on the grounds that it was obtained by unlawful means, and it can also be the subject of a criminal complaint against you.

I knew their old password and got into their email, can I use it?

No. The fact that the password was previously shared does not grant a lawful right of access today. If it is not an account still actively shared and jointly used, it counts as unauthorized access.

My spouse's correspondence turned up on the child's phone, is it evidence?

Data obtained from the child's device may be partly legitimate within the framework of the right of custody, but how the content is presented matters. Hypothetically, it should not be forgotten that the child is also a personal data subject, and KVKK Article 6 must be taken into account.

Is a backup taken while cloud backup is active evidence?

If the backup goes to a joint account you can also access, a backup taken with your own login details is lawful. Accessing only the backup of an account belonging to your spouse is unlawful.

The computer is shared and my spouse last logged in, can I look at the information?

Even if the device is shared, the user session is personal. Browsing in a session left open can be interpreted as monitoring your spouse's communication. The safe path is to close the session and proceed through legal channels.

Is a digital forensics report always accepted in court?

If the report is ISO/IEC 27037-compliant, hash-verified, and the expert's credentials are documented, the court exercises strong discretion. Even so, the judge can appoint an official expert panel upon the opposing party's objection.

How long does an expert opinion take in a divorce case?

The duration depends on the scope of the file, the number of devices, and the data volume. A few business days may be needed for a single device, and a few weeks for a multi-device and cloud examination.

Working with DSET

In your divorce case, the process of correctly collecting, reporting, and submitting digital evidence to court requires expertise. For a detailed view of the process, take a look at our pillar article The Digital Forensics Process 2026 and our specific analysis can WhatsApp be used as evidence.

The DSET team, in its office at Hacettepe Teknokent in Ankara, provides ISO/IEC 27037-compliant digital forensics examination, preparation of an HMK 293 expert opinion, and evidence collection coordinated with divorce lawyers. An early consultation changes the course of the case.

Contact: Hacettepe Teknokent Ankara, +90 536 662 38 09.

Sources: