By Detective (ret.) Brandon Burley
In today’s digital world, social media has become a cornerstone of communication, connection and self-expression. Platforms like Facebook, Instagram and TikTok provide users with spaces to share their lives, but they also serve as treasure troves of information for law enforcement. Open-source intelligence (OSINT) — the practice of collecting and analyzing publicly available data — has become an essential tool in modern policing, with social media offering valuable insights into suspect movements, relationships and behaviors.
For investigators, these social media platforms provide opportunities to uncover leads, map connections and strengthen cases. As the variety and reach of social media continue to expand, staying informed about their functionalities and search capabilities is essential for effective investigations.
How social media expands investigative possibilities
Social media investigations are no longer just about reviewing public posts — they require creativity, technical knowledge and an understanding of how to leverage tools effectively.
Investigators must move beyond basic searches, employing techniques to connect seemingly unrelated data points, identify patterns and build comprehensive cases. With a strategic approach, even agencies with limited budgets can harness social media’s full potential to uncover leads, map suspect movements and solve crimes.
Using geotags to track suspect movements
Geotagged content provides one of the most valuable assets for investigators tracking suspect movements or linking them to specific locations. Platforms like Instagram, TikTok and Snapchat are particularly rich in geotagged posts that can reveal locations tied to criminal activity. For instance, Instagram Stories and TikTok videos often include location tags that allow officers to identify patterns in a suspect’s routine. Suppose a suspect regularly tags posts at the same gym or café. By mapping these locations, investigators can anticipate their movements or confirm connections to a crime scene. Snapchat’s Snap Map, which displays users’ real-time locations, is another powerful tool. Officers can use this feature to identify users near a crime scene or preserve ephemeral posts that may offer critical evidence.
This type of location data doesn’t stand alone. Geotags become even more powerful when combined with other evidence. Linking timestamps from social media posts to physical evidence, such as surveillance footage or witness statements, can help create a clear and actionable timeline of a suspect’s activities.
Uncovering networks and accomplices through online interactions
As investigators piece together a suspect’s timeline, they often encounter another critical layer of information: relationships. Social media platforms offer a wealth of data that can illuminate connections between suspects, accomplices, and even victims.
Facebook is particularly valuable for understanding social dynamics, with its ability to highlight mutual friends, public group memberships and interactions such as likes and comments. Meanwhile, platforms like Discord provide insights into group behavior through public servers. By monitoring these interactions, investigators can uncover hidden relationships or shared networks that are otherwise difficult to identify.
These social connections often intersect with location data. For example, geotags from a suspect’s Instagram post may coincide with comments or likes from an accomplice, revealing overlapping patterns that point to criminal collaboration. By layering social data onto geotagged timelines, investigators can better understand how individuals are connected and how they may be involved in criminal activity.
Real-time intelligence from social media activity
While timelines and relationships offer critical insights, social media’s real-time capabilities allow law enforcement to monitor unfolding events and adapt quickly. Platforms like Twitter (now X) and TikTok excel in providing up-to-the-minute updates on activities, trends, and movements. Twitter’s advanced search functions, for instance, allow investigators to filter posts by location, keywords and hashtags. During protests or large gatherings, this feature can reveal where individuals are congregating or identify public safety threats as they develop. Similarly, TikTok’s viral challenges or localized trends often contain geotags or visual clues that can place suspects at specific locations.
Real-time monitoring not only helps investigators react to ongoing situations but also enriches their broader understanding of suspect behavior. The ability to track posts as they happen can provide leads that complement long-term investigations, bridging the gap between immediate needs and larger case-building efforts.
OSINT tools and manual techniques
Social media investigations often benefit from advanced tools like Maltego and Echosec. These platforms simplify the process of mapping relationships, analyzing geotags and visualizing social media activity. However, for agencies without access to premium tools, manual methods can still produce meaningful results.
Starting with a suspect’s known username, investigators can manually search across platforms to uncover linked accounts or additional profiles. For instance, a consistent username might lead to accounts on Instagram, TikTok, or even niche platforms like Discord. Reverse image searches using free tools like Google Images can help trace photos back to their original sources, revealing critical details such as aliases, locations, or linked profiles. Combining manual methods with free mapping tools, such as Google My Maps, can also help visualize movements and relationships. For example, geotags from Instagram posts can be plotted alongside Twitter’s location-based data, creating a layered view of suspect activity. These techniques require time and persistence but can produce results comparable to those offered by paid platforms.
Ethical considerations when using OSINT
As powerful as social media is for law enforcement, its use must be guided by clear ethical and legal standards. Publicly available data — posts, comments, geotags — is accessible without a warrant, but accessing private information like messages or hidden metadata requires judicial authorization. Transparency and compliance are critical to maintaining public trust. Investigators should avoid practices like creating fake accounts to gain access to private groups or engaging with suspects online without proper authorization. Instead, they should focus on preserving publicly available content, such as screenshots or screen recordings, as evidence.
When private data is necessary, agencies must follow legal protocols. Warrants ensure investigations remain compliant with legal standards, protecting both the integrity of the case and the rights of individuals. Public outreach can further strengthen trust — when communities understand how social media tools are used responsibly, they are more likely to support law enforcement efforts.
Transforming digital data into actionable intelligence
Social media investigations are not just about collecting data — they’re about transforming fragmented information into actionable intelligence. By combining geotags, relationship mapping, and real-time monitoring, law enforcement can uncover leads that connect suspects to crimes, accomplices and larger networks.
These techniques, whether powered by advanced OSINT platforms or manual ingenuity, enable agencies to navigate the complex digital landscape effectively. As platforms evolve, staying informed and adaptable will ensure law enforcement remains a step ahead. With thoughtful planning, ethical practices and creative strategies, social media can become one of the most powerful tools in modern policing.
About the author
Brandon Burley, M.P.A., is a retired detective with law enforcement experience in investigations ranging from narcotics to violent crimes. He specializes in leveraging modern investigative tools like social media OSINT and geofencing to enhance public safety along with established tactics of HUMINT. Brandon is also an accomplished author and educator, dedicated to advancing ethical practices and practical solutions in criminal justice.
