How to Spot a Fake Screenshot: 9 Tells Fact-Checkers Look For

Why We Wrote This

Mockly makes fake chat screenshots. That is the whole product. So we spend our days looking at what separates a mockup that reads as real on screen from one that reads as staged, and we have a strong opinion about where the line is: mockups are for content, tutorials, demos, and props. They are not evidence, and they should never be passed off as a real conversation.

This guide is the other side of that coin. If you moderate a community, run a newsroom, teach a media-literacy class, or just got sent a screenshot that feels off, these are the nine details that give fakes away. Courts have thrown out fabricated iPhone screenshots over exactly these tells, and a forensic look at "message screenshots as evidence" reaches the same conclusion: they are easy to fake and easy to catch, if you know where to look.

Tell 1: The Timestamps Do Not Add Up

Timestamp logic is the first thing a fact-checker checks, because it is the first thing a faker forgets.

• Replies arrive too fast. Three messages in the same minute from two different people, each a full sentence. Real conversations have gaps.
• The status bar clock disagrees with the messages. The phone says 9:41 while the last message was sent at 11:30 PM "today".
• Wrong date format for the app. iMessage writes "Today 2:03 PM". WhatsApp writes "Today" in a pill and puts the time inside the bubble. Messenger writes "September 3, 2026 at 9:02 AM". A WhatsApp screenshot with an iMessage-style date line is not WhatsApp.
• Timezone mismatches. A screenshot supposedly taken in London with a timestamp that only makes sense in Los Angeles.

Tell 2: Read Receipts on the Wrong Side

Every app has its own delivery indicator, and every one of them only appears on messages you sent. A blue tick, a "Read" label, or a "Seen" avatar next to a message you received is impossible.

The per-app rules:

• WhatsApp: one gray tick sent, two gray ticks delivered, two blue ticks read. Always inside the green bubble, after the time.
• iMessage: a small "Delivered" or "Read 2:03 PM" label under your last blue bubble only. Never under a gray one.
• Instagram DMs: "Seen" under your last message, sometimes with the other person's tiny avatar.
• Snapchat, TikTok, Slack, Discord: no per-message read indicator in the thread at all. A "Read" label in any of these is a tell.

Tell 3: The Timestamp Is in the Wrong Place

Each app has a fixed spot for the time. Fakers who build a chat in one app and recolor it to look like another get this wrong every time.

• TikTok and WhatsApp: time inside the bubble, bottom right.
• iMessage: no time on individual bubbles. Only a centered "Today 2:03 PM" divider every so often, and the time appears on long-press.
• Snapchat: time in small gray text under the message, outside any bubble, because Snapchat has no bubbles.
• Slack and Discord: time next to the sender's name, on the same line.
• Messenger: no time on bubbles. A centered date line at the top of a session.

Tell 4: The Status Bar Is Generic

The strip at the top of the phone gives away more than people think.

• "Carrier" as the network name. That is the iOS Simulator default. Real phones show a carrier or, on newer iPhones, nothing at all.
• A perfect battery and a perfect signal at 3am. Possible, but combined with 9:41 (Apple's marketing time) it is a tell.
• Android status bar on an "iMessage" screenshot, or an iPhone Dynamic Island on a chat that only exists on Android.
• The status bar font does not match the OS version implied by the rest of the screen.

Tell 5: The Bubble Geometry Is Off

Apps draw bubbles with specific corner radii, padding, tails, and maximum widths. Editors who build fakes in a design tool tend to round to neat numbers and get the shapes wrong.

• iMessage has a tail on the last bubble in a run and consecutive bubbles stack tight.
• WhatsApp has a small tail on the first bubble in a run only.
• Snapchat has no bubbles. Red or blue text with a vertical accent bar.
• Slack has no bubbles either. Flat rows with avatar, bold name, time, text.
• Teams has bubbles, purple for you and gray for them.

A "Slack screenshot" with bubbles, or a "Snapchat screenshot" with bubbles, is fake on sight.

Tell 6: The Font Is Almost Right

Zoom to 200%. iOS uses SF Pro. Android uses Roboto or the phone maker's font. WhatsApp, Instagram, and TikTok inherit the system font. A screenshot where the messages are in Helvetica, Arial, or Inter, but the status bar is in SF, has been edited.

Look at the numerals in particular. SF Pro and Roboto have distinctive figures, and numbers in timestamps are where a substituted font shows first.

Tell 7: The Emoji Are From the Wrong Platform

Apple, Google, Samsung, and WhatsApp on Android all draw emoji differently. An "iPhone screenshot" with Google's flat emoji, or a WhatsApp Android screenshot with Apple's glossy ones, was assembled on a different platform than it claims. Courts have used exactly this mismatch to find screenshots fabricated.

Tell 8: The Compression Is Uneven

A real screenshot is one image saved once. An edited one has been opened, changed, and saved again, often as a JPEG.

• Zoom to 200% around the edited area. Look for blockier compression noise around a bubble or a line of text compared to the rest of the image.
• Sharp edges on one bubble, soft edges on the others. Pasted elements are often sharper or blurrier than their surroundings.
• Missing metadata. Real phone screenshots carry the device model and OS version in the file. A file with no metadata, or with "Adobe Photoshop" in the software field, is not a raw screenshot.

Tell 9: The Conversation Is Too Good

This is the tell that catches fakes the pixels miss.

• Everyone writes in complete sentences with perfect spelling, including the teenager.
• The damning line is the last line. Real conversations trail off. Fakes end on the reveal.
• No context before the important part. Real threads have a "hey" and a "u up?" before anything interesting happens.
• It confirms exactly what the person sharing it wants you to believe. Convenient screenshots deserve the most scrutiny.

A Quick Per-App Checklist

What This Means If You Make Mockups

If you make chat mockups for content, this list is also your realism checklist. Get the timestamps, the read receipts, and the bubble geometry right and the mockup will read as real on screen, which is the whole point of a skit, a tutorial, or a film prop.

But keep the line clear. Mockly renders each app's real layout so your content looks right, and it puts a watermark on free exports. It is built for creators, marketers, teachers, and production teams. It is not built to help anyone fabricate evidence, invent messages from a real person, or win an argument with a screenshot. If that is what you are looking at, run the nine tells above and ask for the original.

Related Guides

• What Makes a Mockup Feel Real on Screen
• How to Make Fake Chat Screenshots (2026 Guide)
• Best Fake Screenshot Generators 2026
• Chat Mockups for Teachers & Course Creators

FAQ

Can you tell if a screenshot is fake from the image alone?

Often, yes. Timestamp logic, read receipts on the wrong side, misplaced timestamps, generic status bars, and mismatched fonts or emoji catch most fakes. A well-made fake can pass all nine tells, which is why a screenshot should never be treated as proof on its own.

Is there a tool that detects fake screenshots automatically?

Some services check metadata and compression artifacts, and they catch sloppy edits. None can verify that a conversation happened. Ask for the original device or a message export.

Are fake screenshot generators illegal?

Making a mockup is legal. Using one to defame someone, commit fraud, or fabricate evidence is not, and courts have sanctioned people for it. Mockly is for fictional and consented content only.

How do I verify a screenshot of a tweet or post?

Search the account for the post, check the handle character by character, and compare the engagement numbers and layout with a live post from the same date. Fact-checkers at outlets like GIJN publish step-by-step guides for this.

Which tell catches the most fakes?

Read receipts on the wrong side and timestamps in the wrong place. Both come from building the chat in one app or tool and dressing it up as another.