A Practical Guide to Analysing Case Timelines

A case timeline can look settled because it is printed in a court summary, repeated in a media report or accepted as part of a long-running public narrative. That does not make it accurate. A proper guide to analysing case timelines starts with a harder question: what can actually be proved to have happened, at a particular time, and what has merely been inferred?

In serious criminal matters, a few minutes can change the meaning of an alibi, a witness sighting, a phone record or an opportunity to commit an offence. Timelines are not administrative extras. They are a method of testing whether an account survives contact with the evidence.

Why a case timeline needs to be examined

An investigation is built from events, but evidence rarely arrives in a neat sequence. Witnesses recall events later. Statements may be taken days, months or years after the fact. CCTV systems record one time while a mobile service record uses another. A person may estimate that something occurred "about 3.00 pm" when the available records place it closer to 3.20 pm.

That is where errors begin. An estimate can gradually become a fixed time. A police theory can be placed into a timeline as though it were a proven event. A later statement can be used to fill a gap without identifying that it was made later, by whom, and on what basis.

The task is not to make a timeline look tidy. The task is to make uncertainty visible. A reliable chronology should show the difference between a fact supported by independent records and a proposition that remains contested.

Build the timeline from source material

Start with original or primary material wherever it is available: police statements, interview records, call logs, photographs, CCTV footage, dispatch records, medical notes, forensic reports, court exhibits and sworn evidence. A newspaper article or documentary may identify useful leads, but it is not a substitute for the underlying material.

Give every event a source reference. Record who supplied the information, when it was recorded, whether it was contemporaneous, and whether it has been independently corroborated. This is particularly important where a witness has given more than one version.

A useful working table has four basic fields: the time or time range, the event, the source, and an assessment of reliability. It should also have room for notes about conflicts. The point is not to assign a witness a permanent label such as reliable or unreliable. Reliability may differ from one detail to another. A witness can accurately describe a location while being wrong about the time.

Separate facts, estimates and allegations

Use clear language. A bank transaction timestamp is a recorded fact, subject to checking the system clock. A witness saying they saw a vehicle at approximately 4.00 pm is an estimate. An assertion that the vehicle was used to transport a victim is an allegation unless supported by further evidence.

This distinction prevents the most common timeline failure: treating every entry as equal. It is not equal. A contemporaneous emergency call, a later recollection and a prosecution submission have different evidentiary weight. They must not be merged into one unquestioned narrative.

Where the time is uncertain, record a range. It is better to write 2.10 pm to 2.30 pm than to select 2.20 pm simply because a single time looks more precise. False precision can create an apparent conflict where none exists, or conceal a conflict that matters.

Test the clock before testing the story

Time records come from systems, and systems can be wrong. CCTV may not have been adjusted after daylight saving. A camera can run several minutes fast or slow. An answering machine, a vehicle clock, a computer, a security alarm and a mobile handset may all display different times.

Before relying on a timestamp, establish what clock produced it and whether it can be calibrated against a known event. If footage captures a television broadcast, a radio time signal, an emergency vehicle arrival or another independently timed occurrence, it may be possible to measure the discrepancy. Record the correction openly rather than quietly altering the time in a spreadsheet.

Mobile phone evidence requires the same caution. A handset record, a billing record, mobile tower data and a call made through an app do not answer the same question. A mobile phone connecting to a tower may indicate a broad area, not a precise location. A lack of a call does not prove a person did not possess or use a mobile phone. The evidentiary limits belong beside the entry, not in fine print after the conclusion has been drawn.

Examine the gaps, not only the sequence

The most revealing part of a timeline is often the period with the least evidence. A gap may be entirely innocent. It may reflect no available CCTV, no calls made, no witnesses, or records that were never obtained. But it must be identified before anyone claims an uninterrupted account of events.

Ask what evidence should exist if a particular account is true. If a person says they drove across town at a certain time, are there toll, fuel, CCTV, phone, witness or vehicle records capable of supporting or challenging that claim? If there are none, say so. Do not turn absence of corroboration into proof of deception, but do not describe the account as corroborated either.

A gap is also where investigative decisions need scrutiny. Was footage collected promptly before it was overwritten? Were relevant witnesses identified and interviewed? Was an exhibit examined? Were telephone records sought for the appropriate period? In contested cases, the missing material can matter as much as the material that remains.

Check what was known at the time

A timeline should not be reconstructed with hindsight alone. Investigators make decisions based on what they knew, or should reasonably have known, at that point in the inquiry. Keep a parallel record of disclosure and action: when police received information, when it was assessed, and what followed.

This can reveal a significant distinction. Evidence may have existed, but not been available to investigators at the relevant time. Alternatively, it may have been available and not pursued. Those are very different issues when reviewing the adequacy of an investigation.

Use movement and geography as a reality check

A timeline without geography is incomplete. Plot key locations and test the travel time between them. Consider the route available at the relevant date and hour, traffic conditions, roadworks, weather, the vehicle used, and whether the person was on foot.

Do not use current mapping estimates as a definitive answer for an event decades ago. Roads change. Businesses close. A route may have been unsealed, inaccessible or much slower at the time. Where possible, test the journey physically or use contemporaneous maps, photographs and records.

Movement evidence should be tested against practical actions as well. Parking a car, making a purchase, collecting a child, changing clothes or travelling through a busy location all take time. These ordinary details can expose a compressed account that is physically possible only if every step occurred without delay.

Reconcile contradictions without forcing an answer

Conflicting accounts do not always mean one person is lying. Memory is vulnerable to stress, repetition, suggestion and the passage of time. People also use different reference points. One witness may describe the time they arrived; another may mean the time they first noticed an event.

Set the competing versions beside each other. Identify exactly what conflicts: the time, the location, the order of events, the identity of a person, or the action observed. Then ask whether the conflict can be resolved by objective material. If it cannot, preserve it as unresolved.

This is where a timeline must resist pressure to become a story. Courts and investigators may ultimately prefer one account, but an analyst should show the path to that conclusion. A chronology that hides its weak points is advocacy, not analysis.

Review the timeline as evidence changes

A case timeline is a living working document. New witness material, forensic results, disclosure, corrections to clock settings or fresh footage may alter the sequence. Every revision should be dated and explained so that readers can see what changed and why.

At Graeme Crowley Investigates, that discipline matters because a disputed case is rarely clarified by repeating the accepted version more forcefully. It is clarified by returning to the documents, the physical possibilities and the points where the record does not fit.

Before relying on any timeline, ask one final question: does it show the evidence as it is, including uncertainty and contradiction, or does it show the version someone wants the evidence to support? That question is often where meaningful scrutiny begins.