Coercive control is difficult to explain precisely because no single moment captures it. Any one message can be explained away — “I was just checking in”, “I was worried about you”. It is the accumulation that tells the truth: hundreds of check-ins, demands for photos as proof of where you are, money that must be accounted for to the dollar, passwords that must be shared, friendships that quietly become impossible. The harm is the pattern.
Australian law is increasingly built to recognise this. New South Wales criminalised coercive control in intimate partner relationships from 1 July 2024, and other states and territories are at various stages of similar reform. Family courts and protection order proceedings, too, are asked to look at patterns of behaviour, not just discrete incidents. That shift raises a practical question for anyone experiencing this, and for the lawyers and supporters helping them: how do you actually prove a pattern?
The answer, very often, is digital evidence — because coercive control in the 2020s runs substantially through phones, accounts and money, and all of it leaves records.
Why patterns are hard to show — and why devices hold the answer
A person describing coercive control from memory faces an unfair task. They are asked to recall dates, frequencies and specifics of behaviour that was deliberately constant and wearing, often over years. Memory compresses it into “he messaged all the time” — accurate, but easy for the other side to minimise.
Devices do not compress. A phone holds every message with a timestamp. Banking apps hold every transfer and its description. Accounts hold login histories and settings changes. Individually these records are mundane; assembled in order, they can show the architecture of control with a clarity no witness statement can match.
Here is what that looks like across the common forms of coercive control.
Message volume and timing
It is one thing to say a former partner messaged excessively. It is another to show that over a six-month period they sent an average of 80 messages a day; that messages arrived every few minutes whenever you were out without them; that unanswered messages escalated in tone within the hour; that demands for photo “proof” of your location recur on a weekly rhythm. Volume, frequency, timing and escalation can all be quantified from a proper extraction of a device — and patterns like “messaging spikes whenever you attend a particular place” become visible in a way no one reading messages one by one would catch.
Financial control
Financial abuse leaves an unusually good paper trail: accounts you were removed from, transfers labelled with demeaning descriptions, allowance-style deposits that must be acquitted, purchases questioned by message minutes after they occur (which itself suggests real-time monitoring of the account). Bank records alone show transactions; paired with message records, they show the coercion around the transactions. That pairing — the transfer, then the interrogation — is the pattern made visible.
Account takeovers and surveillance
Coercive control frequently includes digital intrusion: demanding passwords, logging into your email or social media, reading messages, sometimes impersonating you. These acts leave traces — login records, security notifications, sessions from unfamiliar devices, forwarding rules quietly added to an email account. Location surveillance, whether through tracking devices or monitoring software on a phone, similarly leaves installation dates and data trails that can be tied to the period of the relationship. The eSafety Commissioner treats this kind of technology-facilitated abuse as a core feature of modern domestic violence, and courts increasingly understand it the same way.
Isolation and micro-management
Even the quieter forms of control leave marks: messages instructing who you may see, calendar interrogations, ultimatums about work or family. A timeline can show the correlation — contact with a friend, followed by conflict; a shift starting, followed by a barrage.
From raw data to a forensic timeline
Collecting this material is one challenge; presenting it is another. A court cannot absorb thirty thousand messages. Screenshots of the worst examples are a start, but they invite exactly the response coercive control depends on: these are isolated incidents, taken out of context.
This is where forensic work earns its place. A forensic extraction of a phone captures the complete message history — including, in many cases, messages that were deleted, which matters because perpetrators sometimes delete their worst messages from a shared thread, and because “he made me delete them” is a common feature of these relationships. Cloud accounts can add email, backups and account activity records.
From the complete dataset, an examiner can produce what the pattern actually needs: a timeline. Message frequency charted over months. Escalation mapped against events like separation or court dates. Financial transactions interleaved with the messages that accompanied them. Login events from unfamiliar devices plotted against what the other person later “knew”. The metadata — exact timestamps, senders, devices — is preserved and verifiable, which screenshots cannot offer. We compare the two approaches in more detail in Screenshots vs Forensic Extraction.
Presented this way, the pattern stops being an impression and becomes a documented, testable fact. And because the material is extracted forensically with proper chain of custody, an expert witness can stand behind it: explain how the data was obtained, confirm it has not been altered, and answer the court’s questions. That independence matters — a pattern demonstrated by a neutral expert is much harder to dismiss than one asserted by a party.
If this is your situation
A few practical, safety-first notes.
Preserve before you change anything. The instinct after separation is to delete threads, block accounts and reset devices. Understandable — but it can destroy the very record that proves the pattern. Where possible, preserve first (or take advice first), then clean up. Our step-by-step guide to securing your phone after separation walks through the sequence.
Assume you might be observed. If any surveillance is suspected, do your research and outreach from a safe device the other person has never accessed — a trusted friend’s phone or a library computer. Sudden changes in your digital behaviour can alert the person monitoring.
You do not need to have it all organised. Support services and lawyers are used to helping people start from “I just know what it was like”. 1800RESPECT (1800 737 732) offers confidential support and safety planning; in immediate danger, call 000.
For matters heading to court — protection orders, criminal complaints or family law proceedings — Digital Forensics Group works with clients and their lawyers across Australia and New Zealand to preserve devices and accounts, recover what has been deleted, and turn years of scattered data into a clear, court-ready timeline. Our domestic violence assistance page explains how we work, or you can contact us confidentially on +61 499 475 408.
