A citation you cannot verify is worse than no citation. Every entry here can be pulled and read. The rules these cases apply →

Reference · United States, federal and state

Social media evidence case law. Fourteen decisions, full citations.

Authentication, best evidence and spoliation. Every entry carries a citation you can pull and read, because a case summary you cannot verify is worse than no case at all when you are about to put a proposition in a brief.

8 where the evidence did not get in 3 where it did 2 spoliation, 1 mixed

Free to use and free to cite. If this page is useful to your practice, a link is welcome and no attribution is required.

By Radim Motycka, Founder and Lead Engineer, ProofSnap Updated August 15, 2026 Not legal advice
14
decisions, full citations
2011
earliest, Griffin and Eleck
2022
latest, Weinhoffer
$722,000
largest sanction, Lester
SHA-256 and RSA-4096 on every capture Offline verification, no vendor lock-in Disig a.s., QTSP on the EU Trusted List Bitcoin OpenTimestamps anchor

Every package can be verified by anyone, for free, in the open Trust Verifier.

Quick answer

What does social media evidence case law actually hold?

Exhibits succeed when something outside the image ties the content to a person and a moment. Across these fourteen US decisions, failures split in two. Provenance failures, in Moroccanoil, Linscheid, Edwards and Weinhoffer, are preventable by collection method, which is what a ProofSnap capture supplies. Attribution failures, in Griffin, Vayner, Smith and Mangel, no tool can fix.

Courts also split on how much extra scrutiny social media deserves, with Griffin at the strict end and Tienda, Parker and Sublet at the reasonable-juror end. Curated and not exhaustive. Read every opinion in full before relying on it. Several turn on procedural posture or facts no summary conveys. This is a reference for practitioners, not legal advice, and jurisdictions differ in ways that decide cases.

Read together, the fourteen say one thing.

Exhibits succeed when something outside the image ties the content to a person and a moment. They fail when the image is asked to do that work alone. That is the whole doctrine, and it holds whether the forum applies greater scrutiny, the reasonable juror standard, or the conventional rule applied strictly.

“The appearance, contents, substance, internal patterns, or other distinctive characteristics of the item, taken together with all the circumstances.”
Federal Rule of Evidence 901(b)(4), the provision most of these decisions turn on, Legal Information Institute, Cornell Law School

It follows that the two halves of the problem are separable, and worth separating in your own head before you argue about either. Provenance is whether this artifact accurately shows a page that a named server actually served at a known time. Attribution is whether a particular human wrote what is on that page. A forensic capture answers the first completely and the second not at all, which is why an exhibit built on capture alone still loses on a Mangel objection.

Provenance, solved by method

  • • The URL as requested and as it resolved
  • • The HTTP response the server actually returned
  • • The TLS certificate presented at that moment
  • • A capture time verified independently of the workstation clock
  • • A hash of every file, so later alteration is detectable

Moroccanoil, Linscheid, Edwards and Weinhoffer are all provenance failures. Every one of them is preventable by method.

Attribution, solved by the record

  • • Admissions and discovery responses
  • • Content only the author would plausibly know
  • • Device evidence and platform records obtained by process
  • • Testimony from a participant in the exchange
  • • Third party content that identifies the person independently

Griffin, Eleck, Vayner, Smith and Mangel are attribution failures. No tool fixes these; they are built from the rest of the file.

The practical consequence. If your exhibit is going to be fought over, solve provenance at the moment of collection, when it is cheap, and budget for attribution as a separate exercise involving discovery rather than software. Practitioners who conflate the two tend to overinvest in capture and then find themselves arguing Mangel with nothing but a very well-documented screenshot.

Chronological, oldest first

The fourteen decisions.

Griffin v. State

419 Md. 343, 19 A.3d 415 (Md. Ct. App. 2011)

Not admitted

Issue: Authentication

What happened. MySpace pages printed and offered through the investigating officer were not properly authenticated. The court reasoned that internet-derived evidence carries a heightened possibility of manipulation and pointed to alternative routes: testimony from the purported creator, examination of the creator's device, or information obtained directly from the platform.

Why it matters. The origin of the greater scrutiny approach. Still the first case opposing counsel reaches for when an exhibit rests on a printout.

State v. Eleck

130 Conn. App. 632, 23 A.3d 818 (Conn. App. Ct. 2011)

Not admitted

Issue: Authentication

What happened. Facebook messages were excluded despite circumstantial evidence suggesting the purported sender wrote them. The court accepted that an electronic document may be authenticated by direct testimony or by distinctive characteristics, but found the proffer here fell short of connecting the messages to the person named.

Why it matters. An early demonstration that circumstantial detail has to actually distinguish the author, not merely be consistent with them.

Tienda v. State

358 S.W.3d 633 (Tex. Crim. App. 2012)

Admitted

Issue: Authentication

What happened. Social networking profile pages were properly authenticated by their own contents plus surrounding circumstances, including references to the offense, photographs, and music, from which a reasonable juror could conclude the profiles belonged to the defendant.

Why it matters. The counterweight to Griffin, and the more widely followed rule. Distinctive content on the page can do the authenticating work by itself.

Allied Concrete Co. v. Lester

285 Va. 295, 736 S.E.2d 699 (Va. 2013)

Sanctions

Issue: Spoliation

What happened. A wrongful death plaintiff was instructed by counsel's office to clean up his Facebook account, deactivated it, and the account's state was then misrepresented in discovery responses. The trial court's sanctions against the plaintiff and his attorney totaled roughly $722,000, and the Supreme Court of Virginia upheld the sanctions while sustaining the underlying verdict.

Why it matters. The standing warning to both sides. Deleting social media once a duty to preserve has attached is far more expensive than whatever the posts contained.

Parker v. State

85 A.3d 682 (Del. 2014)

Admitted

Issue: Authentication

What happened. Facebook posts were properly admitted. Delaware expressly declined to adopt the Griffin approach and adopted the Texas approach instead, holding that circumstantial evidence together with testimony explaining how the material was obtained better conforms to the ordinary operation of Rules 104 and 901.

Why it matters. A clean statement of the jurisdictional split, with a state supreme court choosing between the two approaches in so many words.

Smith v. State

136 So. 3d 424 (Miss. 2014)

Not admitted

Issue: Authentication

What happened. Photocopies of messages from a social media account, purportedly written by the defendant, were not properly authenticated where the only link was a matching name and a small, grainy, low-quality profile photograph. The Mississippi Supreme Court found the error harmless on the facts but the authentication holding stands.

Why it matters. The clearest statement that a name plus a thumbnail is not a link. Cited constantly alongside Mangel.

United States v. Vayner

769 F.3d 125 (2d Cir. 2014)

Not admitted

Issue: Authentication

What happened. A printout of a social networking profile page was admitted at trial and the Second Circuit reversed, holding that the government produced insufficient evidence that the page was the defendant's own profile as opposed to a page he neither created nor controlled. The court expressly declined to decide whether a heightened standard applies, and reversed under the ordinary rule.

Why it matters. The most cited federal authority on the point. Note the reasoning: it did not need a special social media rule to exclude the exhibit.

Moroccanoil, Inc. v. Marc Anthony Cosmetics, Inc.

57 F. Supp. 3d 1203 (C.D. Cal. 2014)

Not admitted

Issue: Authentication

What happened. In a trademark dispute the court declined to receive Facebook screenshots, finding no way to establish that the images were an accurate representation of the live page and therefore no adequate basis for evidentiary reliability.

Why it matters. The case to cite when the objection is specifically to the screenshot as a form, rather than to the identity of the author.

Linscheid v. Natus Medical Inc.

2015 WL 1470122 (N.D. Ga. 2015)

Not admitted

Issue: Authentication

What happened. A LinkedIn profile page printed from the internet and supported by a declaration from the person who printed it was not authenticated. The declaration established the act of printing, not that the page was what it was claimed to be.

Why it matters. Worth reading by anyone who assumes a sworn statement about the act of capture solves the authentication problem. It does not.

Sublet v. State

442 Md. 632, 113 A.3d 695 (Md. Ct. App. 2015)

Mixed

Issue: Authentication

What happened. Consolidating three appeals involving Facebook and Twitter material, Maryland's highest court adopted the reasonable juror formulation: the trial judge must determine that there is proof from which a reasonable juror could find the evidence is what the proponent claims. Some exhibits were properly excluded on the facts, others admitted.

Why it matters. Maryland moving toward the mainstream. Anyone citing Griffin for a strict rule should be met with Sublet.

United States v. Browne

834 F.3d 403 (3d Cir. 2016)

Admitted

Issue: Authentication

What happened. Facebook chat logs were properly admitted where the government supplied extrinsic evidence connecting the account and the conversations to the defendant, including testimony from participants and corroborating detail. The court rejected reliance on the platform's certification alone as a route to self-authentication of the chat contents.

Why it matters. Useful for the distinction it draws: a platform record certifying that data came from its systems does not certify who was typing.

Commonwealth v. Mangel

181 A.3d 1154 (Pa. Super. Ct. 2018)

Not admitted

Issue: Authentication

What happened. The Commonwealth's motion to introduce Facebook posts and messages was denied and the Superior Court affirmed. Authentication of social media is evaluated case by case, and the proponent must present direct or circumstantial evidence corroborating the identity of the author. A matching name, a photograph and a general location were not enough, particularly where other accounts shared the same name.

Why it matters. The single most useful citation for the ownership-is-not-authorship distinction. Expect it from the other side whenever your exhibit rests on a profile match.

Edwards v. Junior State of America Foundation

No. 4:19-cv-140-SDJ (E.D. Tex. 2021)

Sanctions

Issue: Best evidence and spoliation

What happened. Facebook message screenshots offered in place of native files were held insufficient: an electronic file should be produced in native format or as a properly processed image inclusive of metadata, and screenshots that truncate posts and omit metadata do not accurately reflect the information. Because the native messages had been lost after a duty to preserve attached, the court applied Rule 37(e) and precluded the plaintiffs from offering evidence about the messages.

Why it matters. The best evidence case, and the one that turns a screenshot habit into sanctions exposure rather than merely a weak exhibit.

Weinhoffer v. Davie Shoring, Inc.

23 F.4th 579 (5th Cir. 2022)

Not admitted

Issue: Judicial notice and authentication

What happened. An Internet Archive Wayback Machine capture of auction terms was not a proper subject of judicial notice and was not self-authenticating. The court noted that the archive's own terms of use disclaim guarantees of accuracy, so testimony from someone with personal knowledge of the archive's reliability would be required.

Why it matters. Read this before assuming an archive link answers the question of what a page said on a given date. It does not, by itself.

Curated, not exhaustive. Longer lists circulate with partial citations that cannot be verified, which is worse than useless in a brief. Every case here can be located from the citation given, and every one should be read in full before it is relied on: several turn on procedural posture or facts a summary cannot convey, and Smith found the authentication error harmless on the facts even though the holding stands. Corrections and additions are welcome at support@getproofsnap.com.

The tool itself

This is the whole interface.

This is what the provenance half of the problem looks like when tooling solves it instead of testimony. A side panel in Chrome or Edge, and one button that produces the record.

The ProofSnap side panel in Chrome: capture page snapshot button, case and examiner details, evidence language selector, capture visible area only, record capture video, EU qualified eIDAS timestamp toggle, Trust Verifier and File Certifier

The side panel, actual size relative to a browser window.

Capture page snapshot

The one button that does the work. Scrolls and stitches the full page, saves the HTML as served and the DOM text, records the response headers, DNS, WHOIS and TLS, checks the clock against NTP, hashes everything and signs it. About 41 seconds.

Case and examiner details

Optional matter reference and examiner identity, written into the evidence PDF and the chain of custody so the package identifies the file it belongs to without a covering note.

Evidence language

The evidence PDF can be exported in a different language from the interface, which matters when the investigator and the tribunal do not share one. The structured JSON files stay in their standard form for verification tooling.

Whitelabel branding

A toggle, not a professional services engagement. Your logo, color, firm name, address and contact email replace the default header on the evidence PDF. Enterprise, and the administrator on the Company plan.

Record capture video

Records the capture as it happens and puts the recording inside the sealed package, which answers the question of what the operator did between opening the page and producing the file.

EU qualified timestamp

One toggle adds an eIDAS qualified RFC 3161 timestamp from Disig a.s., a Qualified Trust Service Provider on the EU Trusted List. The counter shows the remaining allowance on the plan.

Trust Verifier and File Certifier sit in the same panel. The verifier checks any ProofSnap package, including one somebody else produced, so the receiving side can validate without installing anything of their own. The certifier seals files you already hold, such as an export, a photograph or a PDF, rather than a web page. Nothing here needs configuration before the first capture.

Questions about these decisions

FAQ

Four of these fourteen were preventable at the moment of collection.

Moroccanoil, Linscheid, Edwards and Weinhoffer all failed on provenance, not on the underlying facts. A capture that records the URL, the server response, an independently verified time and a hash of every file closes that category. Download the sample package and check the claim yourself.

Start the 7-day trial

Credit card required. Cancel any time during the trial at zero cost. Or buy a $4.99 SnapPack for 10 captures with no subscription and no auto-renewal.

Disclaimer: This page is a reference for practitioners and is not legal advice. It does not create an attorney-client relationship. ProofSnap is not a law firm and does not act as an expert witness. Case summaries are provided for orientation only and are necessarily compressed; several of these decisions turn on procedural posture, preservation of error, or facts that a paragraph cannot convey, and at least one found the relevant error harmless notwithstanding the holding described. Verify every citation against the reporter and read the opinion before relying on it in any filing. Rules and their interpretation differ by jurisdiction and change over time.

Start 7-day trial →

From $4.99 · card required · cancel any time