Chain of custody sounds like courtroom talk. It is not.
It is one simple question.
Where did this come from, and how do we know it was not altered.
If you cannot answer that, you do not have evidence. You have a file.
What chain of custody means in plain English
Chain of custody is the documented path of an item from creation to presentation.
For everyday people, that means you can explain:
- Who captured it
- When it was captured
- Where it was captured
- How it was stored
- Who handled it
- Whether it was edited
- How you can verify it is the same file
This is how you separate truth from “trust me bro.”
The everyday chain of custody checklist
If you are collecting something as evidence, try to capture these details.
1. Identify the source
- Who created it. Name or account.
- How you got it. Direct file, email, download, screen recording, shared link.
- Where it appeared first. Original post, original site, original stream.
2. Capture the time and place
- Date and time captured or published
- Location, if relevant and safe
- Event context. What was happening and why it matters
3. Preserve the original
- Save the original file if possible, not a screenshot
- Do not edit the original. Make a copy if you must edit
- Keep the earliest version you can find
4. Record the context
- Full video, not a clip
- Full quote, not a cropped image
- Full document, not one page out of the middle
Most misinformation survives by cutting off the context.
5. Document handling
- Who had access to the file
- Where it was stored. Phone, cloud drive, external drive
- Whether it was forwarded through apps that compress or re save
6. Note edits and transformations
- If you cropped, highlight, blurred, or added text, say so
- If you converted formats, say so
- If you pulled still frames from a video, say so
7. Add verification breadcrumbs
- Link to the original source page
- Archive link or saved copy if the page can change
- Any cross checks you used. Other footage, official schedules, transcripts
Quick red flags
If any of these are true, treat it as unverified until proven otherwise.
- “My friend sent this” and there is no original source
- The only version is a screenshot
- The clip is short and highly emotional
- No date, no location, no context
- The file has been reposted dozens of times with different captions
How to talk about chain of custody without sounding like a lawyer
Try this sentence.
“Before we treat that as evidence, where did it come from and can we verify it is the original.”
That is it. That is the whole concept.
Bottom line
Evidence is not just a file. Evidence is a file plus a story you can prove about how it got to you.
If you want truth to survive the internet, chain of custody is your seatbelt.