iPhone and MacBook Forensics Uncover £113,000 Property Fraud Scheme
A digital forensics investigation leveraging Belkasoft X and AweClone software has led to the conviction of Jason Cunningham for defrauding landlords and investors of over £113,000.
A sophisticated digital forensics investigation has successfully uncovered a property fraud operation, leading to the conviction of Jason Cunningham for defrauding landlords and investors of more than £113,000. The case, which involved the meticulous examination of a damaged MacBook and an iPhone, highlighted the critical role of forensic tools in prosecuting complex financial crimes.
Cunningham operated several companies within the rent-to-rent property sector, a legitimate business model where properties are leased from landlords and then sublet. However, Cunningham exploited this model, using forged contracts and false promises to defraud his victims while projecting an image of extravagant success. "He styled himself as a multi-millionaire, jet-setting business guru, with regular trips to Dubai," stated Mark Morris, a digital forensic expert at Aardvark Forensics. Morris further elaborated that Cunningham would "scam both landlords and tenants with forged documents and, when challenged by his victims, he would attempt to play them off against each other and threaten litigation."
The investigation began after Cunningham's arrest, when forensic expert Mark Morris was tasked with examining two seized devices: an iPhone and a MacBook with significant physical damage, including a non-functioning screen and keyboard. To access the MacBook, Morris employed a workaround, connecting it to an external monitor and keyboard via a powered docking station. He then created a Time Machine backup, which was subsequently processed using Belkasoft X. To maximize data recovery from the compromised device, AweClone software was utilized to perform a secondary Mac-to-Mac acquisition.
The iPhone was acquired through a local iTunes-format backup, with all data from both devices being processed entirely within the Belkasoft X forensic platform. This allowed Morris to simultaneously examine and correlate data from both the MacBook and the iPhone, as crucial communications and documents were found to be distributed across both sources. The software's capabilities were instrumental in piecing together the fraudulent activities.
Keyword searches within WhatsApp, iMessage, and SMS/MMS artifacts proved vital in revealing the full extent of Cunningham's fraud. By applying date filters, Morris was able to isolate communications that corresponded with specific transaction periods, providing a chronological timeline of the illicit activities. Furthermore, documents that were presented as agreements with landlords and tenants did not align with the timelines provided by witnesses, further undermining Cunningham's defense.
"The digital material recovered from the MacBook and iPhone was considered alongside bank records and witness evidence," Morris explained. "Taken together, that material did not support the existence of a genuine or legitimately operating business." Cunningham's defense team argued that a successful businessman would have no motive to defraud, but the forensic evidence dismantled this claim. Financial analysis revealed that stolen funds, not legitimate profits, were used to finance luxury items such as leased Lamborghinis, five-star hotel stays, and private jet travel.
Over £100,000 has already been recovered from identified bank accounts, with ongoing Proceeds of Crime Act inquiries expected to recover more. The prosecution presented a comprehensive case to the jury over a nine-week trial, including documents, message printouts, photographs, and detailed financial flow analysis, supported by testimony from over 30 witnesses. Cunningham was ultimately convicted on two counts of fraudulent trading and five counts of using a false instrument, resulting in his imprisonment in November.
Morris also highlighted the growing impact of Artificial Intelligence in digital forensics, specifically mentioning Belkasoft's AI feature, BelkaGPT. This tool can describe images, extract text from scanned documents, and transcribe audio/video, converting various forms of evidence into searchable text. In fraud cases like this, investigators can use natural language queries, such as "find images of luxury vehicles" or "show conversations about investor payments," to uncover connections that might be missed by traditional keyword searches, thereby accelerating the investigative process.