Email Expert Witness

An email can be central to a dispute without providing the complete story. The displayed sender, a forwarded copy or a screenshot may leave important questions unanswered. GDF examines available messages, headers, attachments and supporting records to assess authenticity, sequence and the limits of attribution.

Counsel may need to establish whether a communication existed in the form presented, whether its attachment changed, or whether it reached a particular account. These are separate questions. We define the disputed proposition first, then identify the records that could support or contradict it. A message that looks convincing on paper can still require examination of the underlying file.

Was the message altered? Do independent records support its timing and delivery? Are attachments consistent with the supplied message? What evidence connects an account to an action, and what remains uncertain about the person responsible?

Consider a dispute involving an instruction allegedly sent before a transaction. The examination should compare the supplied copy with available recipient records and related communications. A difference between displayed times may reflect a time-zone setting rather than an alteration. Conversely, agreement between two printouts does not establish that either is an independent original.

Relevant material can include native message files, mailbox exports, server records and related device evidence. An examination should distinguish the contents of a message from evidence of transmission, receipt or human review. The report explains missing records and timestamp discrepancies.

Collection history matters. We document who supplied each item, its format and the available information about how it was exported or preserved. Where possible, comparisons use independently retained copies. We also identify what the available record cannot answer, including whether delivery to a mailbox establishes that a particular person read the message.

The agreed work may include a documented analysis, an evidence timeline, source-linked exhibits, review of opposing technical conclusions and expert testimony. Scope and expert suitability are established before opinions are offered.

An authenticity exhibit should show the specific difference being discussed and identify its source. Counsel should be able to follow the comparison without relying on an unexplained screenshot or a software-generated label. Where the evidence supports more than one explanation, the report sets out the alternatives and the additional records that could help distinguish them.

A disputed message may arrive as a PDF, a forwarded attachment or a printed page. Each format preserves some information and omits other information. We identify the supplied format, compare available copies and look for native messages or independent delivery records that can test the account being presented.

The examination can address headers, message identifiers, attachment versions, time handling and differences between the sender’s and recipient’s records. A discrepancy needs an explanation: migration, forwarding and export software can change how a message appears. We test those possibilities before attributing a difference to deliberate alteration.

For counsel, the useful result is a supported answer to the disputed question. That may be a finding that copies are consistent, evidence of an alteration, or a conclusion that the remaining records cannot resolve authenticity. The report identifies the material examined and the basis for each opinion.

In COMLAB v. Kal Tire, the email-evidence question extended beyond the face of the supplied messages. GDF’s case study describes Joseph Caruso’s examination of metadata and the computer-virus explanation offered for missing records, including disputed emails and invoices.

For an email dispute, this example illustrates the role of underlying records in testing an explanation. The linked court opinion provides the judicial context; GDF’s examination and the court’s conclusions should be read separately. Read the Kal Tire case study and court record.

For email expert witness work, discuss the disputed questions and the experience needed before defining the engagement. Joseph Caruso is profiled in our expert directory. Meet the GDF team and discuss the technology, questions and availability with us. The expert selected for a matter depends on its scope and the required experience.