iPhone, MacBook Forensics Expose £113,000 Property Fraud

Key Takeaways

• A property operator, Jason Cunningham, was convicted of defrauding landlords and investors of over £113,000.
• The conviction was secured through digital forensics analysis of an iPhone and a damaged MacBook.
• Investigators used specialized tools, including Belkasoft X, to recover and correlate crucial evidence from the seized devices.
• The forensic findings exposed Cunningham’s fraudulent activities, which involved forged contracts and misrepresentation of his business.

Digital Forensics Uncovers £113,000 Property Fraud Scheme

A sophisticated digital forensics investigation, spearheaded by Belkasoft, played a pivotal role in the conviction of Jason Cunningham, a property operator who orchestrated a significant fraud. Cunningham was found guilty of defrauding landlords and investors of more than £113,000 through a scheme involving forged contracts and deceitful promises, using an iPhone and a damaged MacBook as key operational tools.

Cunningham operated several companies within the rent-to-rent property sector. While the business model of leasing properties and subletting them as Houses in Multiple Occupation (HMOs) or serviced accommodation is legitimate, Cunningham exploited it to defraud victims. He meticulously cultivated an image of extravagant success to lure his targets.

Mark Morris, a digital forensic expert at Aardvark Forensics, detailed Cunningham’s elaborate facade. “He styled himself as a multi-millionaire, jet-setting business guru, with regular trips to Dubai,” Morris stated. “He scammed both landlords and tenants with forged documents and, when challenged by his victims, he would attempt to play them off against each other and threaten litigation.”

Extracting Evidence from Compromised Devices

Following Cunningham’s arrest, Morris was tasked with examining two seized electronic devices: an iPhone and a MacBook. The MacBook presented a challenge as its screen and keyboard were non-functional, requiring specialized techniques for data extraction.

To access the compromised MacBook, Morris connected it to an external monitor and keyboard using a powered docking station. He then created a Time Machine backup to an external hard drive, which was subsequently processed using Belkasoft X. A secondary Mac-to-Mac acquisition was performed using AweClone software to maximize data recovery from the device. The iPhone’s data was acquired through a local iTunes-format backup, also entirely processed within Belkasoft X.

Belkasoft X allowed Morris to simultaneously examine and correlate data from both devices, a critical step as communications and documents frequently spanned both sources. Extensive keyword searches across WhatsApp, iMessage, and SMS/MMS artifacts unveiled the full scope of the fraud. Additionally, date-filtering helped to isolate communications relevant to specific transaction periods, providing a clear timeline of the illicit activities.

Morris noted that documents presented by Cunningham, purporting to represent agreements with landlords and tenants, did not align with witness timelines. “The digital material recovered from the MacBook and iPhone was considered alongside bank records and witness evidence,” Morris explained. “Taken together, that material did not support the existence of a genuine or legitimately operating business.”

Dismantling the Defense and Securing Conviction

Cunningham’s defense team argued that a successful businessman would lack the motive to commit fraud. However, the forensic evidence unequivocally refuted this claim. Financial flow analysis revealed that leased Lamborghinis, stays at five-star hotels, and private jet travel were funded not by legitimate profits, but by stolen money. To date, over £100,000 has been recovered from identified bank accounts, with ongoing inquiries under the Proceeds of Crime Act.

The court proceedings, a nine-week trial featuring over 30 witnesses, included exhibits such as recovered documents, message printouts, photographs, and detailed financial flow analyses. Cunningham was ultimately convicted on two counts of fraudulent trading and five counts of using a false instrument. He was subsequently jailed in November.

Morris also highlighted the growing influence of artificial intelligence in digital forensics, referencing BelkaGPT, Belkasoft’s new AI feature. This tool can describe images, extract text from scanned documents, and transcribe audio and video, transforming visual and spoken evidence into searchable text alongside traditional chat and email data. In fraud investigations, this capability allows investigators to use natural language queries, such as “find images of luxury vehicles” or “show conversations about investor payments,” to uncover connections that might be missed by conventional keyword searches.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.