Social media is used in an investigation by saving what a person has already published. The investigator records the post, the date, the name on the account, and the picture that was visible without a password. That is the whole lawful core. It is not hacking, it is not a fake friendship, and it is not a purchased dump of private messages.
How social media is used in investigations
A client arrives with a question that a public post might answer. Did this person list a city they denied in a form? Did they publish a photo at a time they said they were elsewhere? Is the account the same one that asked a relative for money? The work is to capture the page as it stood, in a way a lawyer can look at later, and to say clearly what was not visible.
The commercial service, if you already know you need the work done, is social media investigation. This article is the boundary: what “using social media” means, and what it does not mean. Hiring language belongs on that service page, not here.
What gets saved
- The URL, the date you captured it, and a screenshot that shows the name and the photos together.
- A post that is visible without logging into an account that is not yours.
- A change you can describe: a photo removed, a city edited, a job title that does not match the form.
- What you could not see. A locked account is a locked account. Guessing the contents is not a result.
A screenshot of a photo alone is easy to explain away. A screenshot of the conversation that asked for money, with the date visible, is the piece people wish they had after the account disappears. Export the thread if the app allows it. Do not edit the images to circle faces or add arrows before you have a clean copy.
What is refused
An investigator does not break into the account, reset a password, or buy a set of private messages from someone who claims to have hacked them. An investigator does not build a second, fake profile to befriend the person and draw out a confession. That second fake profile is the same problem the client is often trying to escape. The reader checklist for accounts that are not what they claim is fake profile red flags. Use it to slow down. Do not use it as a script for inventing an identity.
Those refusals exist because the material has to be explainable. A court can reject a record that was taken by breaking the law, and the client can inherit the problem. Admissibility is covered on whether investigator evidence is admissible in court. A clever capture that no one can lawfully explain is not a better capture.
Family files and stranger files
Public posts show up in parenting cases when a lawyer has asked whether a lifestyle described in court matches what was published. That decision belongs on the child custody investigation page, not in a general social-media article. The method limit does not change because the case is emotional. A public photo can be saved. A private message on a phone you do not have authority to open cannot.
If the worry is a stranger asking for money, stop sending it. Save the profile. Tell the bank if money already moved, and tell the police if there is a threat. A private review is for the slower question: whether the public details match a real person you can identify from records you are allowed to use. It is the wrong tool if you are in immediate danger.
What to hand over before anyone starts
Send the URL, the date you last saw the page, and the one fact the capture has to test. “I think they are lying” is not yet a fact. “The form says they live in Hamilton, and this public profile lists another city on this date” is a fact. Also say who will read the result: you, a lawyer, or an insurer. A capture with no reader becomes a folder of screenshots nobody asked for.
Ask, before the hours, what will be refused. You should hear that locked accounts stay locked, that no fake profile will be created, and that no paid dump of private messages will be bought. If those sentences are missing from the quote, the quote is for a different business than the one this page describes. Add them in writing. A verbal promise to “see what we can do” is how a public-post job turns into a request this firm will not accept.
Call (416) 205-9114 if you want a public profile scoped before anyone spends days chasing a name. Bring the URL and the decision the screenshots have to support. Do not bring a request to get inside the account. That request will be declined, and it should be.
To learn more, contact Investigation Hotline at
