I received photographs over email from a client which I suspect were taken in 2022 but the client insists are from 2021.
I looked at the metadata, filenames, and date modified timestamps to look for any inconsistencies but they all check out with the client's story. For example, the "date taken" and "date modified" field are all from around the right time and the filenames are ordered sequentially (IMG_0419.jpg, IMG_420.jpg, etc.) in the same order as the date taken timestamps, as you would expect if they were legitimate.
I'm wondering if if there's anything else I should take a look at or if those timestamps could have been altered. I searched and see there are tools that can do this (Attribute changer).
- Is it possible there is other timestamped information in the file that I'm missing besides those two fields?
- Should the date modified and the date taken fields be exactly the same down to the second? I noticed there are a few seconds difference in these values in each photo, which indicates to me it may have been altered (unless this is normal, I'm not sure).
- Is there other metadata that could somehow help me determine when the photo was taken? As an example, I noticed the metadata says that they were taken on an iPhone 12 pro, which obviously puts a bound on the earliest they could have been taken (the release date of that phone, October 23, 2020).
What else should I be looking for?