Screenshots, logs, devices and metadata — how electronic evidence is collected, authenticated and challenged in Nepali courts, and why most digital cases are won at preservation stage.
Modern prosecutions run on pixels: chat exports, transaction logs, CCTV, call records, device images and platform data. Yet digital evidence is the most fragile kind — a deleted message, an overwritten log or a mishandled phone can erase a case overnight. Nepali law admits electronic records, but admission is only the start; authentication and attribution decide outcomes.
Legal recognition
The Electronic Transactions Act, 2063 gives electronic records and digital signatures the same validity as paper equivalents, and the Evidence Act framework applies to proof. Fabricating electronic evidence or false entries intended for judicial proceedings is itself an offence under the Penal Code. Courts therefore demand more than printouts: lawful collection, intact metadata, and a demonstrable chain from source to courtroom.
Collection that survives trial
For victims and investigators, the protocol is: preserve originals first (no deletions, no edits), capture with context (full URLs, timestamps, account identifiers — not cropped fragments), image devices forensically rather than browsing them, and log every handler in a chain-of-custody record. Transaction cases add bank IDs and reference numbers; telephonic offences add call detail records. The Cyber Bureau's filing checklist mirrors exactly this discipline.
Attribution: who typed it?
The fiercest fights concern attribution, not content. Shared family devices, hacked or spoofed accounts, SIM misuse and deepfaked media all break the link between an account and an accused. Prosecution must connect the keystrokes to the person through IP and device forensics, access patterns, corroborating witnesses and admissions — each link independently attackable by defence.
Challenging digital evidence
Defence testing targets collection legality (unauthorised access to obtain the evidence itself), integrity gaps (edits, selective exports, broken custody), expert reliability (unaccredited tools and conclusions), and alternative explanations (shared access, compromise). Illegally obtained material faces exclusion arguments, and courts have grown visibly more sophisticated in weighing metadata over bare screenshots.
Practical guidance
Never 'clean up' a device involved in a case — spoliation inferences hurt worse than the content. Businesses should maintain log-retention and legal-hold policies before incidents, since post-incident reconstruction rarely satisfies courts. And both sides should engage technical expertise early: digital cases are argued as much by forensic analysts as by advocates.
Key takeaways
- Electronic records are admissible — authentication and attribution decide cases
- Preserve originals with metadata; cropped screenshots fail
- Shared devices and hacked accounts break attribution — the main defence front
- Chain of custody from source to courtroom must be unbroken
General information for public awareness — not legal advice for your specific situation. Consult an advocate →
Frequently asked questions
Are screenshots enough to prove online harassment?
Rarely alone. Courts expect full context — URLs, timestamps, originals with metadata — plus corroboration. A bare cropped image invites exclusion or disbelief.
Police want to seize my phone. Must I unlock it?
Device search and compelled unlocking raise self-incrimination and privacy issues to be contested with counsel present. Do not consent casually or resist physically — invoke rights and call your advocate.
How long should businesses keep logs?
Retention must balance the Individual Privacy Act's minimisation duties against investigation needs. A documented policy with legal-hold triggers satisfies both regulators and courts.
References
- Electronic Transactions Act, 2063, Chs. 2, 9 — records validity and cyber offences
- Evidence Act, 2031 — admissibility and proof standards
- Individual Privacy Act, 2075 — data collection and consent duties
Verify current wording and commencement at the Nepal Law Commission (lawcommission.gov.np) before relying on any provision. Reviewed by a Nepal-qualified advocate in August 2026.