iPhone Forensics

Seized iPhone: Whose Is It and Where Is He?

In some cases, iPhones have been recovered from a crime scene without immediate evidence of whom it belongs to. It could have been dropped by a fleeing suspect or left by a victim. In addition to finding out who he is, it may also be important to find out where he is. This is especially important if the owner was the victim of a kidnapping or other such crime, or if he is a suspect and possibly dangerous.

Who?

The easiest way to track an iPhone back to its owner is by the phone number. The phone number can be found by tapping on the phone icon, then pressing the Contacts button on the bottom bar. Scroll to the very top of the contacts list and you will see the text My Number, followed by the phone number programmed onto the SIM. This phone number, combined with a subpoena, is usually the easiest way to get a name and address from a telecommunications provider, or possibly from Apple, Inc.^[1]

If you are unable to identify the owner based on the phone number, examination of the device can provide you with much more information about the individual:

• Saved email may contain the owner’s name and the service provider used. If the owner is connected to his corporate email, you’ll be able to find out what company he works for. If a name is unavailable and there are no other useful leads as to the person’s identity, consider scanning all email (including deleted email) for passwords or other account information. If the owner has recently signed up ...