How Is Digital Evidence Authenticated for Prosecution?
Introduction
Emails, chat messages, electronic invoices, screenshots, and other digital records are now common sources of proof in Philippine litigation and administrative proceedings. Their usefulness, however, depends not only on what they appear to show but also on whether their authenticity, integrity, and reliability can be established.
For legal departments and prosecutors, the central concern is preparation: identifying the person or system that created the record, preserving the original data, documenting its handling, and presenting competent testimony or affidavits. Failure to address these matters may result in exclusion, reduced evidentiary weight, or a finding that the evidence is hearsay.
What Rules Govern Digital Evidence?
The principal rules are the Rules on Electronic Evidence, A.M. No. 01-7-01-SC, and the 2019 Amendments to the 1989 Revised Rules on Evidence, A.M. No. 19-8-15-SC. The Rules on Electronic Evidence recognize electronic documents and electronic signatures as legally significant forms of evidence, subject to authentication and proof of reliability.
An electronic document includes information, data, figures, symbols, or other written expressions that establish a right, extinguish an obligation, or prove a fact, and that are received, recorded, transmitted, stored, processed, retrieved, or produced electronically. The definition covers digitally signed documents and accurate printouts of electronic data.
The 2019 amendments further recognize electronic, optical, and similar means of evidence under the Revised Rules on Evidence. Accordingly, digital evidence should not be rejected merely because it is not contained in traditional paper form. It must still satisfy the applicable requirements on relevance, authenticity, integrity, and evidentiary weight.
What Must Be Proven?
The party offering a private electronic document has the burden of proving its authenticity. Under Rule 5 of the Rules on Electronic Evidence, authentication may be established through any of the following:
- Evidence that the document was digitally signed by the person purported to have signed it;
- Evidence that appropriate security procedures or devices authorized by the Supreme Court or by law were applied; or
- Other evidence showing the document’s integrity and reliability to the satisfaction of the judge.
Authentication is distinct from the ultimate truth of the contents. A court may find that a screenshot genuinely came from a particular device or account but still determine that the message is incomplete, hearsay, altered, or insufficient to prove the disputed fact.
How Are Emails Authenticated?
An email should ordinarily be supported by evidence addressing its source, transmission, receipt, and preservation. Relevant proof may include the testimony of the sender or recipient, the testimony of a system administrator or records custodian, server or mail logs, complete message headers, authenticated attachments, and evidence showing that the account was controlled by the person alleged to have sent the message.
A printed email is not automatically equivalent to an authenticated original. The offering party should preserve the electronic version and be prepared to explain how the printout accurately reflects the original data.
Where the email contains a digital signature or was transmitted through a system with reliable authentication controls, those safeguards may support admissibility. The witness should also explain the system used, the ordinary method of recording messages, and whether the record was altered after receipt.
How Are Chat Logs and Text Messages Authenticated?
Chat logs and text messages require proof connecting the communication to the alleged sender and recipient. Useful evidence may include testimony from a person who participated in the conversation, device records, account information, telephone-number ownership, complete conversation history, and proof that the messages were preserved in the ordinary course of business or personal activity.
Under the Rules on Electronic Evidence, ephemeral electronic communications may be proven by the testimony of a person who was a party to the communication or who has personal knowledge of it. If such a witness is unavailable, other competent evidence may be admitted. When the communication is recorded or embodied in an electronic document, the authentication provisions for electronic documents apply.
In RCBC Bankard Services Corporation v. Oracion, Jr., et al., G.R. No. 223274, 2019, the Supreme Court emphasized that the party presenting an electronic document must comply with the authentication requirements under Rule 5. The Court also stressed the importance of affidavits and proof of the document’s integrity and reliability, as well as the need to present an original or a properly qualified duplicate where the Best Evidence Rule applies.
In Serrano v. Cruz-Angeles, et al., G.R. No. 10985, 2024, the Court reiterated that screenshots are not exempt from authentication and due-execution requirements. In an administrative case involving social media posts, the complainant was required to prove both ownership of the account and authenticity of the posts by substantial evidence.
The lesson is direct: a screenshot showing a name, profile picture, telephone number, or account handle is usually only one part of the authentication proof. It should be supported by testimony or other competent evidence that establishes who created, sent, received, or maintained the communication.
Are Screenshots Sufficient by Themselves?
Usually, screenshots alone present authentication and hearsay problems. They may omit message headers, surrounding communications, dates, time zones, account identifiers, attachments, or indications of alteration.
In GJJ v. Creditable Lending Corporation (Easy Peso), NPC Case No. 19-465, 2022, the National Privacy Commission found that unsubstantiated screenshots did not establish the origin or existence of the alleged messages. The Commission explained that screenshots should be supported by an affidavit authenticating and explaining their contents and establishing the affiant’s competence to testify.
The same decision recognized that the Rules on Electronic Evidence apply in administrative proceedings. It further observed that hearsay evidence must be supplemented and corroborated by other evidence that is not hearsay before it can satisfy the substantial-evidence standard.
How Should Digital Invoices Be Presented?
Electronic invoices should be authenticated through evidence concerning their creation, issuance, storage, and retrieval. A company should identify the employee or system that generated the invoice, describe the accounting or invoicing platform, and establish that the system records transactions accurately and routinely.
Useful supporting evidence may include transaction records, purchase orders, delivery receipts, payment confirmations, tax records, system-generated audit trails, and testimony from the records custodian or responsible employee. The invoice should also be linked to the relevant customer, transaction, product, service, and date.
A company should avoid presenting only an isolated PDF or printed copy when the underlying accounting system is available. The electronic file, metadata, audit history, and related business records may provide stronger proof of integrity and reliability.
What Evidence Supports Integrity and Reliability?
Rule 7 of the Rules on Electronic Evidence identifies factors that may be considered in assessing evidentiary weight. These include the reliability of the method by which the document was generated, stored, or communicated; the reliability of identifying its originator; the integrity of the information and communication system; the witness’s familiarity with the system; the nature and quality of the information entered into it; and other circumstances affecting accuracy or integrity.
| Evidence concern | Supporting proof |
|---|---|
| Identity of sender | Account ownership, telephone-number records, digital-signature records, testimony, or system authentication logs |
| Integrity of the record | Original electronic file, metadata, audit logs, access controls, hash values, and evidence of secure preservation |
| Accuracy of the system | Records-custodian testimony, system policies, ordinary-course procedures, and reliability checks |
| Completeness of the communication | Full conversation history, complete email headers, attachments, related messages, and surrounding transaction records |
What Should the Authentication Affidavit Contain?
Rule 9 of the Rules on Electronic Evidence permits matters concerning the admissibility and evidentiary weight of an electronic document to be established by affidavit. The affidavit should state facts within the affiant’s direct personal knowledge or based on authentic records and should affirmatively establish the affiant’s competence to testify.
An effective affidavit should identify the document, explain how it was created or received, describe the system or device involved, establish the affiant’s relationship to the record, account for its preservation, and state that the copy accurately reflects the original. It should also disclose any relevant extraction, conversion, printing, or redaction process.
An affidavit cannot cure every defect. If the affiant lacks personal knowledge, cannot explain the system, or relies solely on an unidentified forwarded message, the document may remain unreliable or hearsay.
When Must Objections Be Raised?
Authentication objections should be raised at the earliest proper opportunity. In Trimillos v. FCash Global Lending, Inc., G.R. No. 271360, 2025, the Supreme Court held that failure to timely object to electronic evidence may constitute waiver of the objection, even where the evidence could otherwise have been challenged as inadmissible.
The ruling is particularly significant in quasi-judicial proceedings. A party that had access to screenshots or other digital evidence but failed to object during the appropriate stage may be prevented from raising the objection for the first time on appeal.
This rule does not eliminate the need for proper authentication. It means that counsel must assert objections promptly and specifically, while the opposing party must still prepare adequate proof of authenticity rather than rely on the possibility of waiver.
Common Errors in Presenting Digital Evidence
- Offering a screenshot without identifying the device, account, sender, recipient, or source;
- Presenting a forwarded message rather than the original message or complete communication;
- Failing to produce the electronic original or a qualified duplicate;
- Using an affidavit from a person who lacks personal knowledge or cannot explain the system;
- Ignoring objections until appeal or failing to object when the evidence is first presented.
Recommended Process for Legal Departments
- Preserve the original. Retain the native email, chat export, electronic invoice, device image, or system record whenever possible.
- Document collection. Record who collected the evidence, when it was collected, from what device or system, and what method was used.
- Protect integrity. Restrict access, preserve metadata, maintain audit trails, and avoid unnecessary editing, renaming, or conversion.
- Identify witnesses. Locate the sender, recipient, records custodian, system administrator, or other person able to explain the creation and preservation of the record.
- Prepare authentication affidavits. Ensure that the affiant addresses personal knowledge, system reliability, accuracy, preservation, and completeness.
- Anticipate objections. Assess authenticity, hearsay, relevance, completeness, best evidence, and potential alteration before filing or offering the evidence.
Conclusion
Digital evidence is admissible in Philippine proceedings when its authenticity and reliability are properly established. Emails, chat logs, text messages, and electronic invoices should be presented with the original electronic data or a qualified duplicate, competent testimony or affidavit, and documentation showing how the record was created, preserved, and connected to the alleged sender or transaction.
Legal departments should treat authentication as an evidence-preservation process that begins when the record is collected, not as a formality performed only during trial. Early preservation, reliable witnesses, complete records, and timely objections substantially improve the likelihood that digital evidence will be admitted and given appropriate weight.
About Nicolas and De Vega Law Offices
Nicolas and de Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.
