Old image, new event
Footage of a past flood, fire or protest reshared as today's news.
Image and Video Verification OSINT: Where and When Was It Taken?
Image verification with OSINT answers a simple-sounding question, "is this real?", by splitting it into parts that can be tested: is this the original, where was it taken, when, and does it show what the caption says? Most misleading images are not fakes at all. They are real pictures from somewhere else, or from another year.
- First appearance and original
- Place and date
- Video keyframes and audio
- Claim checked against content
Short answer
Image verification OSINT tests a photo or video against the public record: reverse searches find its first appearance and the best original, landmarks and terrain fix the location, shadows, weather and dated imagery narrow the time, and the content is compared with the claim attached to it. OSINT-S answers each question separately, because a real image can still be the wrong evidence.
Five Questions an Image Verification OSINT Check Answers
Provenance, originality, place, time and claim. Each gets its own answer, because passing one test says nothing about the others.
| Question | How it is tested | Typical result |
|---|---|---|
| Where did it first appear? | Reverse image and keyframe searches across several engines, platforms and archives, sorted by date | An earliest known upload, or proof it circulated before the event |
| Is this the original? | Comparing copies for resolution, crop, watermarks, mirroring and compression | The best available version, and what was removed from the one you received |
| Where was it taken? | Matching visible features to satellite, aerial and street-level imagery | A location, from the region to the exact camera position |
| When was it taken? | Shadows, weather records, seasonal signs and changes visible in dated imagery | A date range, sometimes a time of day |
| Does it show what is claimed? | Checking people, vehicles, uniforms, logos, products and events against the caption | Consistent, inconsistent or not determinable |
Video Verification: Keyframes, Audio and Continuity
Video carries more evidence than a photo and more ways to go wrong. We test individual frames, the soundtrack and whether the clip is one continuous recording.
- Keyframes. Reverse search works on still images, so we extract distinctive frames and search each one. Older copies of a clip are often found from a single frame.
- Audio. Language and accent, announcements, sirens, traffic, weather and background music can support or contradict a location and date. Audio laid over unrelated footage is a common trick.
- Continuity. Shadows that jump, cuts hidden by camera movement, or a crowd that changes between frames suggest editing. We check whether the clip is one take.
- Re-uploads. Screen recordings, added captions and borders, mirroring and speed changes are signs the clip has passed through several hands; the first copy is usually cleaner and better dated.
- Live streams. A stream's start time and the account's history help date it, but the stream must be captured before the replay is cut.
Chronolocation Evidence That Holds Up
Dates rest on several independent clues, never on one. Metadata and search engine dates help but can be wrong or altered.
Shadow length and direction give the sun's position, which together with the location narrows the time of day and the season. Historical weather records confirm or exclude rain, snow or cloud. Dated satellite and street imagery show when a building, a sign or a road layout appeared. Posters, shop fronts and vehicles add more anchors.
Search engines help with the earliest appearance. Google's About this image shows when an image or visually similar images "may have first been seen by Google" and highlights early pages using it, but Google itself warns that credit and source-type metadata can be altered by editing tools (Google Search Help). We treat such dates as a ceiling, not an answer: the picture is at least that old, perhaps older.
Common Ways Real Images Mislead
Most false visuals are genuine pictures given a false story. These six patterns account for most of what we see.
Right event, wrong place
A real incident from another city or country presented as local.
Missing context
A crop that removes a sign, a crowd or a second party and changes the meaning.
Flipped or slowed
Mirroring, speed changes or filters added to defeat reverse search.
Real camera, set-up scene
An authentic recording of an arranged situation, such as a product placed to look contaminated.
Altered or synthetic parts
Objects added or removed, or AI-generated elements, which need forensic and provenance checks.
Deepfake checks →A Typical Image Verification (Illustrative)
A composite example of how a viral video about a company is checked before the company responds.
Illustrative scenario, not a client case. A video spreads showing pests in what is described as a food retailer's store opened last month. Keyframe searches find a near-identical clip posted two years earlier on a regional forum. Shelf labels and floor tiles match a different chain's store layout, and the price tags use another currency. The report states: video predates the claimed event (confirmed), location not the client's store (high confidence), content itself not manipulated (no indication found). Communications can respond with evidence rather than denial.
What You Receive From an OSINT Image Check
One line per question with a confidence level, then annotated evidence. Simple checks can take a business day; contested or bulk work from 10 business days.
The report opens with a verdict line for each of the five questions, then the annotated comparisons, the earliest-source trail, the hashes of files examined and a methods note. A single image with clear features can often be checked within a business day; videos for litigation or sets of media take from 10 business days, and large collections up to about a month. Urgent delivery adds 50%, the quote is fixed after written scoping, and the fee goes down if we miss the agreed date.
Where the media came from social platforms, we preserve it first through social media evidence capture; for viral clips see also our TikTok investigations. Claims teams can read how this fits OSINT for insurers, and newsrooms OSINT for media. For international and human rights work we follow the Berkeley Protocol. Verification is one of many OSINT services for media, legal and insurance teams; we do not use it to locate private individuals.
Check the Picture Before You Act on It
Send the file or link, the claim attached to it and the decision it affects. We tell you what can be verified and give you a fixed quote.
Image and Video Verification FAQ
A supplier sent us photos of their factory floor to pass our audit — can an image verification OSINT check tell us whether the photos are really from their site and recent?
Often, yes. We search for earlier copies of the photos online, including stock libraries and other companies' websites, then compare visible features with satellite and street imagery of the supplier's address and look for dating clues. Interiors are harder to place than exteriors, so the report may say the photos are consistent with the site rather than confirmed, and will say why.
I ran a reverse image search on a photo and found nothing — does that mean it's an original picture taken by the person who sent it to me?
No. No match only means the engines you used have not indexed a copy, or the image was cropped, mirrored or filtered to defeat matching. We search several engines and platforms, try altered versions and video keyframes, and use place and date analysis that does not rely on finding a copy. Absence of a match is one weak signal, not proof of originality.
We received a video that seems to show our delivery driver driving dangerously, but the date on it looks off — can you work out when it was really filmed?
Usually within a range. We look at shadows for the sun's position, weather in the scene against historical records, seasonal signs, and changes such as roadworks or new signs visible in dated street and satellite imagery. We also check the vehicle and livery against the period. The report gives a date range with a confidence level, and the clues behind it.
Our newsroom has a video with the sound of explosions over a city skyline — can you check whether the audio actually belongs to that footage?
Yes. We compare the audio with what is visible: whether flashes and sounds line up, whether the acoustics fit the setting, and whether the same soundtrack appears on other clips. We also search keyframes for older copies with different sound. Audio laid over unrelated footage is common, and the report states separately whether the picture and the sound are authentic.
If you verify our photos, will your report say they are definitely genuine so we can rely on that in a claim dispute?
We report what the evidence supports, question by question: first appearance, originality, place, time and whether the content matches the claim, each with a confidence level. Sometimes that is confirmed; sometimes consistent with but not proven. We will not overstate a result to fit a dispute, because a report the other side can pick apart helps nobody.
Sources and Notes
- Google Search Help: Learn more about an image (About this image)
- OHCHR and UC Berkeley: Berkeley Protocol on Digital Open Source Investigations
Sources checked 10 October 2026. Figures about third-party firms and tools are as published by them or by the cited source on that date.