A protection order is meant to draw a clear line: no contact, or contact only on strict conditions. When that line is crossed, it is very often crossed digitally — a late-night text, a call from a private number, a message passed through a mutual friend, a comment from a brand-new social media account. Breaching a protection order is a criminal offence, but proving a breach depends on evidence. This article explains how digital contact can be preserved properly, why some well-intentioned reactions can weaken a case, and how forensic preservation supports police reports and court proceedings.

First, a note on names: these orders are called different things around Australia — a Domestic Violence Order (DVO) in Queensland, an Apprehended Violence Order (AVO) in New South Wales, an Intervention Order (IVO) in Victoria, with other names elsewhere. The terminology differs, but the principle is consistent: breaching the conditions of a protection order is a criminal matter for police, and evidence of the breach is what turns a report into a charge.

How breaches happen digitally

Digital contact that may breach an order’s conditions commonly includes:

  • Text messages and messaging apps — SMS, iMessage, WhatsApp, Messenger, and disappearing-message platforms like Snapchat chosen precisely because the content vanishes.
  • Calls — including repeated calls from private, blocked or unfamiliar numbers, and missed calls at deliberate times of day.
  • Social media — direct messages, comments, tags, reactions to stories, follows from new accounts, or posts plainly directed at the protected person without naming them.
  • Third-party contact — messages passed through friends or family members, which may breach an order where its conditions prohibit contact through others.
  • Spoofed and anonymous contact — texts or calls where the sender has disguised the originating number, or messages from newly created email addresses and accounts.

Respondents often assume anonymous or disappearing contact is unprovable. That is not necessarily true. Even where message content is gone, call logs, timestamps, notification records and account artefacts can survive on the recipient’s device — and telecommunications and platform records, which police can seek through their own powers, may identify a source. Establishing who sent a disguised communication can be difficult and is never guaranteed, but the trail is often richer than either party expects.

The two most important rules: don’t delete, don’t reply

When contact arrives from someone who is prohibited from making it, the instinct is often to delete it in disgust, or to fire back a reply. Both can undermine a breach report.

Don’t delete. The message, call log entry or notification is the evidence. Deleted content can sometimes be recovered — as we explain in our guide to recovering deleted messages — but recovery is never guaranteed, and it is far better for the original to remain untouched on your device. This includes resisting the urge to clear “upsetting” threads; preserve first, and manage your wellbeing by muting notifications rather than erasing history.

Don’t reply. Responding can complicate the picture the court sees, may be used to argue the contact was welcome or mutual, and in some situations could raise issues under cross-orders. Silence preserves the clarity of the record: they made contact; you did not invite or continue it.

Blocking is more nuanced. Blocking a number or account can stop future evidence from reaching your device at all. Many people reasonably choose safety and peace over evidence-gathering — that is a legitimate choice. But it is worth making it consciously, ideally after preserving what has already arrived and discussing options with police or your lawyer.

Preserving digital contact properly

Practical preservation steps that hold up well:

  1. Keep the device intact. Don’t delete threads, clear call logs or uninstall apps involved in the contact. Avoid factory resets and phone trade-ins until the material is preserved.
  2. Record the pattern. Keep a simple contemporaneous log — date, time, channel, what happened. Patterns of repeated contact are often more compelling than any single message.
  3. Screenshot as a stopgap, not a substitute. Screenshots are useful for quickly showing police what happened, but they capture no metadata and are increasingly easy to challenge — see screenshots versus forensic extraction. Where a matter is disputed, a forensic extraction of the device preserves messages, call logs and timestamps with their metadata intact.
  4. Preserve disappearing content fast. For Snapchat and similar apps, artefacts may exist only briefly. Early mobile phone forensics gives the best chance of capturing what remains.
  5. Report to police. Breaches are criminal offences and police are the enforcement pathway. Well-preserved evidence makes their job easier and decisions faster.

Where forensic examination adds weight

Police do excellent work, but their forensic resources are finite and prioritised. Independent forensic preservation can strengthen a matter by:

  • producing a verified, metadata-rich extraction of the relevant messages and call logs, with a documented chain of custody from device to report;
  • recovering deleted or partially deleted contact where recovery is realistically possible — assessed honestly upfront through deleted data retrieval;
  • analysing metadata around spoofed or anonymised contact to support further inquiries; and
  • providing an expert witness report that explains the findings in plain terms if the matter proceeds to a contested hearing.

Digital evidence of breaches can also matter beyond the criminal context — patterns of prohibited contact are sometimes relevant in related family law parenting proceedings, and they often sit alongside broader patterns discussed in our article on coercive control and digital evidence.

Your safety comes first

Evidence matters, but it is never worth your safety. If you are in immediate danger, call 000. If you suspect your device itself is being monitored, be careful about researching help on it — our domestic violence assistance page explains safer ways to reach support, and how we help protected persons preserve evidence discreetly.

Digital Forensics Group provides confidential, court-ready preservation of digital contact for protected persons and their lawyers across Australia and New Zealand. Call +61 499 475 408 or contact us — enquiries are handled with discretion.