When law enforcement finds illegal material on a computer or traces illegal online activity to an IP address, they typically charge the person who owns the device or pays for the internet subscription. The assumption is straightforward: it’s your computer, so it must be your activity.
But that assumption is often wrong. Computers, phones, tablets, and Wi-Fi networks are shared by family members, roommates, guests, coworkers, and sometimes by strangers who gain unauthorized access. When someone else’s activity on your device or network leads to criminal charges against you, digital forensics becomes the key to proving you were not responsible.
Common Scenarios Where the Wrong Person Is Charged
Shared Household Computers
A family computer in a common area may be used by multiple household members such as a spouse, children, extended family, or visitors. If illegal material is found on the computer or illegal activity is traced to the household’s IP address, the account holder or primary user may be charged even though another household member was responsible.
Unsecured Wi-Fi Networks
If your home Wi-Fi network is unsecured or uses a weak password, anyone within range can connect to it. Their internet activity will be traced to your IP address. In P2P cases, law enforcement traces the IP address to the subscriber and may arrest the subscriber without establishing which device on the network was actually responsible.
Guest and Shared Access
Employers, landlords, roommates, and guests who use your computer or network may engage in activity that later becomes the basis for criminal charges against you.
Malware and Remote Access
Malware can give a remote attacker control of your computer without your knowledge. The attacker can download files, upload material, access illegal websites, and engage in other criminal activity, all of which will appear to originate from your computer and your IP address.
What Digital Forensics Can Prove
A thorough forensic examination of the device can identify evidence that distinguishes between users:
- User accounts and login history. Which user account was active when the illegal activity occurred? Were multiple accounts configured on the device? Did the activity occur under a different user profile than the defendant’s?
- Browser profiles. Modern browsers support multiple profiles. Forensic analysis can determine which profile was active during the activity in question.
- Activity timelines. Forensic tools create detailed timelines of all device activity, including logins, file access, application launches, and internet connections. This timeline can be compared to the defendant’s known whereabouts to establish whether they were using the device at the relevant time.
- File access metadata. Metadata associated with files — creation dates, modification dates, access dates, and the user account under which files were created or accessed — can help attribute specific activity to specific users.
- Network analysis. If multiple devices were connected to the same network, forensic analysis of the router logs and network traffic can identify which device was responsible for the activity in question.
- Malware analysis. A thorough examination of the device for malware, trojans, remote access tools, and other unauthorized software can determine whether the device was compromised.
Why This Defense Requires Forensic Expertise
The shared-access defense is not simply telling the jury “someone else could have done it.” That argument, standing alone, is rarely persuasive. What the defense needs is specific forensic evidence demonstrating that the activity is attributable to someone other than the defendant or, at minimum, that the forensic evidence cannot reliably attribute the activity to the defendant.
Doug’s training with Garrett Discovery’s forensic experts gives him the knowledge to direct a targeted forensic investigation, identify the specific evidence that supports the shared-access defense, and present that evidence to the jury through independent expert testimony.
Case Results
Talk to a Defense Team That Understands Digital Evidence
At Deandra Grant Law, Attorney Douglas Huff is our Partner and Criminal Division Chief — a senior trial attorney who has completed advanced training in digital forensics with Garrett Discovery, one of the nation’s leading digital forensics firms. Doug doesn’t just read the prosecution’s forensic reports. He has the training to understand the tools, challenge the methods, and expose the weaknesses in digital evidence.
If you are facing criminal charges involving digital evidence of any kind, contact Deandra Grant Law for a free, confidential consultation.
Call (214) 225-7117 or schedule an appointment online at texasdwisite.com.
Firm Accolades

























