How to Tell If a Screenshot Is Fake: Texts, DMs and Payment Screenshots

Last reviewed October 5, 2026 · 9 min read · By the PEA team (Lumina Spark)

Short answer: Often you can't, at least not from the image alone. A screenshot is just a picture of a screen, and a careful fake can look exactly like the real thing. Times that don't add up, cropping and text that doesn't match its surroundings are worth noticing, but they are reasons to check, not proof. What settles it is the original: the conversation on the actual phone or account, the post at its own link or, for a payment, the activity in your own account.

Why a screenshot proves less than it seems

A screenshot doesn't contain the message, only how the screen looked. Faking one takes little skill: besides ordinary image editors, there are websites and apps built to produce realistic "chats" in the style of popular messaging apps, and AI image tools add another route. Text on a web page can even be changed in the browser before the screenshot is taken, leaving no trace of editing in the image at all.

Real screenshots can mislead too. A crop can remove the message that changes the meaning. The name at the top of a chat is whatever the phone's owner saved the contact as, so "Mom" or "Boss" proves nothing about who was typing. And messages can change afterwards: an iMessage, for example, can be edited up to five times within 15 minutes of sending.

So any screenshot raises two separate questions:

  1. Does it accurately show what was on the screen?
  2. Did the person it's attributed to actually send or post it?

The image can sometimes help with the first. It can almost never answer the second.

The check that settles it: go to the source

Texts, DMs and chats

  • Ask to see it on the device. Have the person open the conversation and scroll to the message while you watch. A second screenshot is no better than the first.
  • Look past the display name. Tap the contact or profile to see the phone number or account handle behind it.
  • Compare with your own copy. If you were in the conversation, your phone holds your side of it: the same messages, in the same order, at the same times.
  • Ask for a link where one exists. A public post has its own address you can open yourself. On Discord, any message can be copied as a link ("Copy Message Link"), as Discord's reporting guide explains.

If the screenshot and the phone don't match, don't jump to "fake" yet. In iMessage, an edited message shows an Edited label and both people can view earlier versions, an unsent message leaves a note in both conversations, and deleted messages can stay in Recently Deleted for up to 30 days. Those records can explain a difference, or confirm one.

Payment screenshots

A payment screenshot proves nothing about the money in your account, and payment companies say so plainly:

  • PayPal warns that some fraudsters try to trick you into thinking you've been paid, and says a payment you received will always show in your PayPal activity. Before you ship, log in yourself (not through a link in an email or message) and check.
  • Venmo says scammers may send screenshots of fake emails to make it look as if they've paid, and that a payment that "arrives" only once you upload shipping details is not a Venmo feature.
  • Cash App says "money flip" pitches sometimes use fake payment-confirmation screenshots as "proof," and advises opening the app directly rather than tapping links.
  • The US Federal Trade Commission (FTC) warns that scammers posing as buyers may send a fake payment notification from a mobile payment app, hoping you'll ship before you notice, and advises sellers not to accept mobile payments from strangers.

Watch for overpayment, too. A buyer who "accidentally" pays too much and asks for the difference back is a scam pattern PayPal and the FTC both describe; the FTC notes that a fake check can show up in your balance and still be found fake weeks later. Whatever the payment method, trust your own account or banking app, opened by you, and nothing else.

Red flags: clues, not proof

These signs are worth a closer look, but each has innocent explanations. Use them to decide what to check, not what to conclude.

What to look atSuspicious whenInnocent explanation
Times and orderA reply is timed before the message it answers, or times jump backwardsDelayed delivery, a time zone change, or a wrongly set phone clock
Status bar clockThe clock at the top is earlier than the newest message, impossible on the same dayThe messages are from an earlier day, or the clock or time zone was changed
Fonts and spacingOne message, name or amount differs in font, size or alignment from the rest of the screenLinks, emoji, quoted replies and other languages are styled differently; compression blurs text unevenly
CroppingThe contact header, status bar or surrounding messages are cut awayPeople crop for privacy or to leave out unrelated messages
Who it's fromOnly a display name, with no number or handleSaved contact names are normal; most people never think to show more
Image qualityOne area is sharper, blurrier or a different color from the restForwarding, resizing and re-saving degrade images, sometimes unevenly
Read receipts and ticks"Read" or blue ticks where the other person says receipts are off, or ticks unlike the app'sSettings vary by person and, in iMessage, by conversation; WhatsApp lists many reasons receipts go missing
Edits and deletionsThe wording differs from the conversation on the phone nowThe message was edited or unsent after the screenshot was taken
Payment detailsThe screenshot says "paid" but your account shows nothingA bank transfer may still be processing or went to the wrong account; wait until it shows up

Knowing the app helps. WhatsApp says one gray check mark means sent, two gray mean delivered, two blue mean read, and the colors can't be changed. Apple says that with iMessage read receipts off, the sender sees only that a message was delivered.

One clue rarely means much. Several together, plus a refusal to show the original, are a good reason to treat a screenshot as unverified. And a clean-looking screenshot is not proof that it's real.

If someone shows you a screenshot

  1. Pause before acting on it. Don't ship, pay, confront anyone or pass it on yet.
  2. Ask for the source: the conversation on the device, the link, or your own account activity.
  3. Check with the supposed sender through contact details you already had, not a number or account shown in the screenshot.
  4. Keep what you were sent. Save the file as you received it, and note who sent it and when.
  5. Don't post accusations publicly. If the screenshot is fake, or real but misleading, you could hurt an innocent person and expose yourself to legal claims such as defamation. Report impersonation or harassment to the platform instead, and report scams at ReportFraud.ftc.gov in the US or to your national fraud reporting service elsewhere.

If you're accused because of a screenshot

  1. Don't argue in public. Respond calmly, privately or through whoever is handling the complaint.
  2. Preserve your side. Don't delete anything. Your phone holds your version of the conversation; capture complete screens or use the app's export option, and note when.
  3. Point to specifics. "It's fake" is easy to dismiss. "That number isn't mine" or "that message isn't in my conversation" can be checked.
  4. Ask for the original to be checked on the device or account it supposedly came from, not just the image.
  5. Report impersonation if someone has set up an account in your name.
  6. Get advice if the stakes are high, such as a workplace or school investigation or a court case. Our guide to authenticating text message screenshots for court covers what courts look at.

How to show your screenshot is real

If you're the one relying on a screenshot, make it easy to check:

  • Keep the original conversation and the device. The screenshot is only a copy.
  • Capture the whole screen, including the status bar, the contact header and the messages around the key one. Capture the contact details too, so the number or handle is on record.
  • Consider a screen recording that scrolls from the contact's profile down to the message, and note who captured it, on which device, and when.
  • Fix the file. A SHA-256 hash lets you show later that the file hasn't changed, and an RFC 3161 timestamp from a third-party time-stamping authority shows it existed no later than a given time. Neither proves the content is true.

In US federal courts, Rule of Evidence 901(a) asks for evidence "sufficient to support a finding" that an item is what it's claimed to be, such as a witness who saw the messages or distinctive details tying them to the sender. If a photo is involved too, see how to check whether a photo is AI-generated before using it as evidence.

What PEA can and can't do

PEA (Professional Evidence Authenticator), from Lumina Spark in Japan, runs several independent analyses on an uploaded image and shows its findings, separating confirmed facts from concerns, with a grade from 1 to 10.

  • Screenshots: it checks whether the details that identify a message or post are visible (the date and time, the account name or handle, who it replies to, the page URL, the status bar that shows a full-screen capture, and the surrounding messages), and looks for signs of cropping, of text or app elements that don't match the rest of the screen, and of AI generation.
  • Its limit: with no traces of editing found, a screenshot can get at most a 6, because PEA cannot confirm that what was on the screen really existed or who sent it.
  • When it can't tell: for a frame from a video, a photo of a screen or printout, or no usable material, it says "Not assessed (Grade –)" instead of guessing, and suggests a human review.
  • Certificates: it fixes the file with a SHA-256 hash and seals it with an Ed25519 digital signature and an RFC 3161 timestamp from a third-party time-stamping authority; anyone can verify it by certificate number on PEA's public verification page. It does not prove who sent a message, and whether evidence is accepted is always for the court.
  • Privacy: staff see an image only if you request a human review and consent. Free results are deleted after 7 days.

PEA runs in Japanese today and the English version is in early access. If it sounds useful, you're welcome to join the early-access list at our early-access page.

This article is general information, not legal advice.

Sources