Active Incident? 24/7 Response →
SleuthX

For Attorneys

Authenticating Social-Media Evidence (Facebook, Instagram, TikTok) for Trial

The account existed — but who wrote the post? The distinctive-characteristics route under Rule 901, the Griffin–Tienda–Sublet split, and the SCA subpoena wall.

All articles·8 min read·June 20, 2026

The account existed. Who wrote the post?

Social-media evidence carries a problem text messages share but in sharper form: anyone can create an account in someone's name, and accounts get shared, hacked, and spoofed. So the gap between showing that an account exists and showing that a particular person authored a particular post is the whole authentication battle for Facebook, Instagram, and TikTok content. This page is social-media-specific; for the text-message walkthrough of the same rules, see how to authenticate text messages in court. This is informational, not legal advice.

The low bar of Rule 901 — and the distinctive-characteristics route

Federal Rule of Evidence 901(a) asks only for evidence sufficient to support a finding that the item is what its proponent claims; the judge screens, the jury weighs. The workhorse for social media is 901(b)(4)distinctive characteristics. Authorship is shown circumstantially: account details tied to the person, content only the author would plausibly know, the reply context of a conversation, references to events the person was part of, or a forensic extraction connecting the post to a device. The more of these converge, the easier the prima facie showing.

Two poles and a middle: Griffin, Tienda, Sublet

Courts split on how much circumstantial proof the proponent must muster. Griffin v. Statemarks the cautious pole: Maryland's high court reversed where the only proof was a printout of a page bearing the person's name, photo, and birth date — that showed the account existed, not that she wrote the post, and the court worried that someone else could have accessed the account. Tienda v. State marks the permissive pole: the Texas Court of Criminal Appeals held that an accumulation of distinctive characteristics could authenticate social-media content, with the risk of fabrication going to weight rather than admissibility.

Maryland later moved toward the middle. In Sublet v. State, the court realigned with the federal standard, asking whether a reasonable jurorcould find the evidence authentic — softening Griffin's near-categorical skepticism into the ordinary prima facie test. The United States v. Vaynerdecision is the federal echo of Griffin's core point: a page that looks like the defendant's proves a page existed, not who created it.

Getting the evidence: platforms and the SCA

Counsel often assume they can subpoena the platform for the messages. For content, usually not. The Stored Communications Act, 18 U.S.C. § 2702, bars providers from disclosing the content of communications, and a civil subpoena is not among the statute's exceptions — which is why platforms routinely refuse to produce direct messages to civil litigants. The realistic paths are the account holder's own production, consent, or a forensic extraction from a device. Where a platform does produce records through proper process, certified business-records and electronic-process provisions can streamline authenticating what it returns.

What this means for your matter

Build authentication before you need it: gather the distinctive characteristics, preserve the native content with its metadata rather than a screenshot, and plan for the SCA wall on platform content. When a contested post will carry real weight, a forensic extraction handled through digital forensics for attorneys is what ties the post to a device and survives the authorship challenge.

Sources

  1. Legal Information Institute, Cornell Law School, Federal Rule of Evidence 901 — Authenticating or Identifying Evidence. https://www.law.cornell.edu/rules/fre/rule_901
  2. Court of Appeals of Maryland, Griffin v. State, 419 Md. 343 (2011). https://www.courts.state.md.us/data/opinions/coa/2011/74a10.pdf
  3. Court of Appeals of Maryland, Sublet v. State, 442 Md. 632 (2015). https://law.justia.com/cases/maryland/court-of-appeals/2015/42-14.html
  4. Texas Court of Criminal Appeals, Tienda v. State, 358 S.W.3d 633 (Tex. Crim. App. 2012). https://www.courtlistener.com/opinion/2947098/tienda-ronnie-jr/
  5. Legal Information Institute, Cornell Law School, 18 U.S.C. § 2702 — Voluntary disclosure of customer communications or records. https://www.law.cornell.edu/uscode/text/18/2702

Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 15 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Social-media authentication: quick answers

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management