The Vanishing Witness: WhatsApp, View Once, and Section 65B's Blind Spot

OPENING SCENE

At Patiala House Courts, the phone is in everyone's sight and the evidence is in everyone's mind, yet nowhere the law can neatly hold. A lawyer rises, trying to explain how the crucial WhatsApp message their client saw yesterday has vanished today, not because anyone destroyed it, but because it was built to disappear. That is the new crisis of digital proof: in an age of "view once," disappearing chats, and self-erasing media, truth can exist briefly, be believed widely, and still leave no retrievable trace. This blog explores that legal blind spot—where the law of electronic evidence meets vanishing evidence—and why lawyers, law students, and ordinary users must learn not just how to prove a message, but how to preserve it before the platform deletes it forever.

CHAPTER 1: WHY THIS ISN'T YOUR REGULAR EMAIL PRINTOUT

A regular email printout is comforting to courts because it comes from a world of digital permanence. Emails, PDFs, bank records, and call-detail records usually leave footprints on servers, backups, and service-provider systems; even if one copy is deleted, another can often be summoned, certified, and produced. That is why traditional electronic evidence behaves like a document.

But WhatsApp "View Once" media, disappearing messages, Snapchat snaps, and Instagram vanish mode do not behave like documents at all. They behave like timed events. They are not merely deleted by a careless user; they are designed to expire by architecture, often protected by end-to-end encryption and, in many cases, unavailable even from the platform's own backend once viewed or timed out. For lawyers, this changes everything: the problem is no longer proving a record that exists, but preserving a record before it ceases to exist.

That is the blind spot in one line: You can subpoena a server for an email; you cannot subpoena a server for a memory.

CHAPTER 2: THE LAW AS IT STANDS — FROM SECTION 65B TO SECTION 63 OF THE BSA

For decades, Section 65B of the Indian Evidence Act, 1872 was the gatekeeper for electronic evidence. Since 1 July 2024, that role has passed to the Bharatiya Sakshya Adhiniyam, 2023 (BSA), which has replaced the Indian Evidence Act entirely, along with the Bharatiya Nyaya Sanhita and Bharatiya Nagarik Suraksha Sanhita replacing the IPC and CrPC. Any practitioner still citing only Section 65B today is arguing under a repealed statute, even though the case law built around it remains highly persuasive.

The BSA does not deal with electronic evidence in a single provision. It works through a cluster of interlocking sections, and understanding the cluster matters more than memorising any one number:

• Section 61 is the recognition clause. It says nothing in the Adhiniyam shall be used to deny the admissibility of an electronic or digital record merely because it is electronic, and that such a record has the same legal effect, validity, and enforceability as any other document — subject to Section 63.

  
  

• Section 62 clarifies that the contents of an electronic record may be proved in accordance with Section 63.

  
  

• Section 63 is the operative provision — the direct successor to Section 65B. It provides that information contained in an electronic record, printed, stored, recorded, or copied on optical or magnetic media, semiconductor memory, or produced by a computer or communication device (the "computer output"), is deemed to be a document and is admissible without production of the original, provided the conditions in the section are satisfied. Sub-section (4) requires that a certificate accompany the record, identifying it, describing how it was produced, and giving particulars of the device involved.

  
  

• Section 39(2) is a lesser-known but important companion: where a court must form an opinion on information transmitted or stored in a computer resource or in any electronic or digital form, the opinion of the Examiner of Electronic Evidence (referred to under Section 79A of the Information Technology Act, 2000) is treated as a relevant fact, and that Examiner is deemed an expert for this purpose.

  
  

• Section 119, the BSA's version of the old Section 114 presumption-of-fact provision, retains illustration (g): a court may draw an adverse inference where a party withholds a document or piece of evidence that would have supported their case, subject to fair explanation — the statutory anchor for arguments about spoliation of ephemeral evidence, discussed further below.

  
  

The most significant structural change is in the certificate itself. Where Section 65B required only a single certificate from the person in charge of the device, the Schedule to the BSA now prescribes a two-part certificate: Part A, filled by the party producing the electronic record, and Part B, filled by an independent technical expert, who must additionally state the hash value of the record and the algorithm used to generate it — a cryptographic fingerprint meant to demonstrate that the record has not been altered since capture.

The case law that shaped Section 65B continues to guide the interpretation of Section 63, since the underlying conditions are almost identical:

• Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473 — established that a Section 65B certificate is a mandatory precondition for admitting electronic records as secondary evidence. (Source: Lexology commentary confirming citation and holding.)

  
  

• Shafhi Mohammad v. State of Himachal Pradesh, (2018) 2 SCC 801 — briefly relaxed the certificate requirement where the producing party did not control the originating device.

  
  

• Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1 — a three-judge bench reaffirmed the certificate as mandatory, while clarifying that courts may direct production of the certificate where a party has sought it and been refused or ignored. This position is now understood to carry over directly to Section 63(4) of the BSA, since the sub-section preserves the same non-obstante structure and conditions as the old Section 65B(2).

  
  

The real problem is this: Sections 61, 62, 63, and the Schedule all assume the record still exists somewhere so that it can be described, certified, and hash-verified. A disappearing WhatsApp message breaks that assumption before the lawyer even enters court.

CHAPTER 3: THE BLIND SPOT — WHERE THE LAW RUNS OUT OF ROAD

The real procedural question is brutally simple: what exactly do you certify under Section 63(4), and what hash value does an expert compute under the Schedule, when the original electronic record no longer exists to be hashed? Section 63 works best when a record survives somewhere — on a server, a hard drive, a backup, or a device. But a WhatsApp "View Once" image or disappearing message may vanish by design before any lawyer, let alone any expert under Section 39(2), can reduce it into a certifiable, hashable form.

A screenshot, then, is not the original record. It is a secondary, human-created derivative captured before the primary evidence self-destructed. That creates the problem courts have not squarely answered yet: chain of custody. Who created the screenshot, on which device, at what moment, with what possibility of editing, cropping, or manipulation — and whose device becomes the "computer" or "communication device" referred to in Section 63 for certification purposes?

In real courtrooms — Patiala House, Tis Hazari, Saket — judges routinely handle bank statements, CDRs, invoices, and ledger printouts because those records have institutional custodians who can sign a Part A certificate and arrange a Part B expert without difficulty. Ephemeral chats do not. Their only custodian is usually a private phone in someone's pocket, often belonging to the opposite party or a vulnerable witness. That makes authenticity harder, but it also raises a fairness question.

If a party knew a crucial message was set to disappear and still failed to preserve it, should the court treat that silence as innocent? Or can the adverse-inference logic under Section 119, illustration (g), support an inference against them? That is where hearsay concerns and spoliation principles collide. The law is comfortable with deleted records, where a Section 63 certificate can still be built around backups or a service provider's logs. It is far less prepared for records designed never to stay alive long enough to be certified or hashed at all.

CHAPTER 4: THE PRACTITIONER'S TOOLKIT — WHAT TO ACTUALLY DO

When disappearing WhatsApp messages become the centre of a dispute, delay is defeat. The law of electronic evidence often rewards the party who preserves fastest, documents cleanly, and thinks about Section 63 admissibility at the very beginning rather than at trial.

Here is the practical checklist that general practitioners, law students, and even self-represented litigants can actually use.

1. Capture immediately — and capture forensically. Do not rely on a bare screenshot if the content is visible only briefly. A screen recording usually preserves more context, such as the sender's identity, time stamp, chat continuity, and the fact that the content appeared on the device at all, making fabrication objections harder to sustain.

   
   

2. Use a forensic or mirroring tool where lawfully possible. If the stakes are serious, involve a certified digital forensic expert early — ideally one qualified to act as the Examiner of Electronic Evidence contemplated by Section 39(2), whose opinion carries independent evidentiary weight. Professional extraction tools can sometimes recover cache data, thumbnails, or related artefacts even where media appears deleted. Do not attempt self-help extraction; it can damage evidence, create admissibility problems, and raise legality concerns.

   
   

3. Draft the Section 63 certificate immediately from the capturing device. This is the overlooked workaround. If the evidence is preserved through screen recording or secondary capture, the certificate — now in the two-part Schedule format, Part A from the party and Part B (with hash value) from the expert — can be framed with reference to the device that produced that output, treating the capturing device as the relevant "computer" or "communication device" for evidentiary purposes.

   
   

4. Get an independent witness involved in real time. If a dispute is foreseeable, ask a neutral person to observe the disappearing content while it is being viewed and recorded. In matrimonial, cheque-bounce, intimidation, or extortion-linked matters, this single step can significantly strengthen credibility later, and can support the certifying party's account under Part A of the Schedule certificate.

   
   

5. Move the court early. Do not wait for the formal evidence stage. If the electronic record is central, file the Section 63-related application at the interim or urgent stage itself so the other side cannot later argue delay, afterthought, or manipulation.

   
   

6. Plead deletion as spoliation where the facts justify it. Spoliation means destruction or loss of relevant evidence. If a party allowed crucial disappearing material to vanish after litigation was anticipated, ask the court to consider an adverse inference under Section 119 illustration (g) rather than treating the disappearance as legally neutral.

   
   

7. Preserve the metadata trail, not just the message. Content matters, but surrounding technical data matters too. Backups, sync records, device logs, email notifications, and cloud retention history may help show that the message existed, when it existed, and on which account or device — and can supply the hash-verifiable material a Part B expert needs under the Schedule.

   
   

The bottom line is simple: in disappearing-message cases, the winning strategy is not clever argument after loss, but disciplined preservation before loss, structured from day one around the two-part certificate that Section 63 now demands.

Illustrative Example: In X v. Y (illustrative), a matrimonial dispute, the wife's counsel sought to rely on a "view once" WhatsApp photo allegedly showing threatening conduct by the husband. The image had already disappeared by the time of filing. Counsel produced a screen recording taken at the moment of viewing, accompanied by a Section 63 certificate — Part A completed by the wife identifying the recording device, and Part B completed by a forensic expert stating the hash value of the recorded file — identifying the recording device, not the original phone, as the source. The court admitted the recording as primary evidence of the derivative record, while leaving weight and credibility to be tested in cross-examination.

CHAPTER 5: FOR THE LAYMAN — WHAT YOU SHOULD DO BEFORE YOU EVER REACH A LAWYER

If you receive a threatening WhatsApp message, a confession, an admission of liability, or evidence of harassment in disappearing mode, do not simply open it and move on. The moment you suspect it may matter legally, start a screen recording before viewing it, so the recording captures the sender's name, the chat window, the timing, and the message appearing in real time.

Better still, have a friend or family member present while you open it, so their face or voice is part of the recording. That small detail can later help show that what you saw was real, and seen when you say it was — and it can support the certificate that will eventually need to be filed under Section 63 of the BSA.

Do not rely on screenshots alone. Courts often treat screenshots cautiously because they are easy to edit, easy to mislabel, and usually do not carry reliable metadata (technical data that helps show when and how a digital record was created, and which an expert would need to compute a hash value against under the Schedule).

Remember this line because it is true: the five seconds it takes to hit "screen record" instead of just reading the message could be the difference between winning and losing your case.

In disappearing-message disputes, speed is evidence. Before you ever reach a lawyer, preserve first.

CHAPTER 6: THE ROAD AHEAD — WHAT THE LAW NEEDS TO CATCH UP ON

The law's real challenge is no longer whether disappearing WhatsApp evidence exists, but whether procedure is ready to deal with how modern communication actually works. Sections 61 and 62 of the BSA already declare, in principle, that an electronic record cannot be denied admissibility simply because it is electronic. If courts can accept CCTV copies, call-detail records, and device-generated outputs, there is a strong case for rules or judicial practice directions under Section 63 to expressly treat screen recordings of ephemeral content as primary proof of the derivative record created on the capturing device, rather than merely secondary proof of a vanished original.

There is also an unresolved practical question specific to the new Schedule: what happens when no expert is reasonably available to complete Part B of the certificate within the short life of a disappearing message? Commentators have already flagged that the dual-signature requirement, while it strengthens integrity through hash verification, was not obviously designed with ephemeral content in mind, and courts or rule-makers may need to clarify how Part B can be satisfied for content that self-destructs in seconds.

Global practice is already moving in a related direction. In US e-discovery, courts increasingly expect parties to preserve relevant material once litigation is reasonably anticipated, even where communication happens on auto-delete or ephemeral messaging platforms. India has not yet developed a full litigation-hold doctrine in this area, but the logic of adverse inference under Section 119, preservation duties, and procedural fairness could evolve in that direction sooner than many expect.

That reform would matter not just to large corporate disputes, but to everyday litigants in matrimonial, commercial, harassment, and extortion-linked cases, where disappearing messages can contain the most probative evidence and the least durable proof.

Ephemeral evidence is not a glitch in modern litigation. It is fast becoming the default language of digital life, and Indian procedural law — now built around Sections 61, 62, 63, 39(2), and 119 of the BSA — is one high-profile case away from a reckoning.

CLOSING — THE ONE-LINE TAKEAWAY

"In an age where evidence is designed to disappear, the lawyer's job is no longer just to find the truth, it's to catch it before it vanishes."

Every courtroom generation faces a new kind of witness. Ours is the vanishing message, present one moment, gone the next, leaving only belief where proof should stand. Section 65B was written for a world of permanent records; its successor, Section 63 of the Bharatiya Sakshya Adhiniyam, carries the same assumption forward even as it tightens the certificate into a two-part, hash-verified format. Ephemeral evidence demands permanent instincts instead — speed, documentation, and foresight, exercised the moment a disappearing message appears on screen.

The gap between technology and procedure will eventually close. Until it does, the practitioner who preserves fastest, and certifies correctly under Section 63, wins.

Have you faced a disappearing-evidence dilemma in your own practice — a client's deleted chat, a "view once" photo, a vanished voice note? Share your courtroom experience in the comments below, or reach out if you're navigating a matter involving digital evidence certification under the BSA. The next landmark case on ephemeral evidence may well begin with a story like yours.