Police investigations into contested digital evidence in the ‘Sandy’ case continued to widen as forensic findings raised new inconsistencies.

Authorities are seeking a secondary mobile phone described after forensic examination showed that the device handed over by the woman known as Sandy did not match the timeline of the messages under investigation.

According to findings, three deleted applications used to generate messages were identified on the device, but were installed on October 10, 2025, January 1, 2026 and March 13, 2026, dates which do not correspond to the period in which the alleged offences are said to have been relayed between 2019 and the present.

Sandy has reportedly retracted her initial stance and confessed to investigators that she created “hundreds of SMS messages” herself and handed over a phone to support that claim.

Related Articles

She later stated she had provided “another device” and that the original had been given to a third party “with the intention of keeping it”.

Investigators are continuing efforts to locate that device.

Police spokesman Vyron Vyronos said “the most serious aspect of the entire investigation” remains the authentication of the material and confirmed that all evidence has been submitted to Europol for forensic analysis.

Authorities have indicated that a criminal case is being prepared, with reports suggesting Sandy could face multiple charges including preparation, possession and circulation of forged documents and conspiracy to commit a crime.

The investigation has expanded following searches of the home and office of lawyer Nikos Clerides, who had received the material.

Officers seized three mobile phones, returning one after copying its data while retaining the others under evidential orders.

Sources indicate that none of the devices recovered in fact belong to Sandy.

Clerides criticised the search, stating he was treated “like a criminal” and raising concerns over legal confidentiality.

He is expected to challenge the warrant through legal proceedings aimed at annulling the order.

Former bar association president and Nikos Clerides’ lawyer, Christos Clerides, described the police’s draconian measures as “an act of terrorism” and said, “Cyprus has become a dictatorship”, questioning why other individuals named in the allegations had not been subject to similar searches.

The material at the centre of the case was publicised by journalist Makarios Drousiotis, who alleges a network involving state officials and a clandestine ‘Rosicrucian brotherhood’.

Drousiotis has further levied accusations against President Nikos Christodoulides as “a supporter of the Brotherhood” and claimed he acted as “a fixer”.

Former supreme court judge, Michalakis Christodoulou had rejecting the allegations of rape and corruption made against him.

In Greece, deputy minister Giorgos Mylonakis, who was intubated after having suffered a brain aneurysm at the prime minister’s residence on Wednesday, had previously announced legal action against Drousiotis, stating the allegations aim “to harm him and, through him, the Greek government”.

Former MEP Demetris Papadakis accused Drousiotis of “publishing false news and circulating false documents”.

Speaking to Alpha TV, Forensic digital expert Alexis Mavros identified inconsistencies in two messages made public.

He said there appears to be “an indication of inconsistency which creates reasonable suspicion as to their authenticity” but added “this element in itself is not sufficient for a definitive conclusion and requires further forensic analysis”.

Mavros remarked that the discrepancies could form “a starting point for competent authorities” to consider further investigative measures.

One message showed mismatched profile images within the same conversation, while another displayed a sequence where timestamps labelled “Today” and “Yesterday” appeared out of order.

These irregularities have been submitted for further examination.

Writing on the Greek news website Documento, journalist Stelios Orphanides, who alongside Drousiotis was privy to Sandy’s disclosures, claimed that she had approached police in the past but was dismissed.

He quoted an officer telling her to “take advantage of the situation you are describing to me, save up some money for your dowry, and find someone to marry”.

Orphanides described maintaining contact with Sandy over several months, saying she appeared “a very intelligent and cultured woman who was marked by traumatic experiences”.

He detailed efforts to relocate her to Germany, citing fears for her life whereupon communication later deteriorated after she received advice from “legal advisors” and eventually ceased.

Orphanides reported that Sandy later returned to Cyprus, stating she resumed living with the individual she had previously accused.

He said “all that effort went to waste” when he learned of her return.

Police have confirmed they are aware of Sandy’s whereabouts and have taken statements from her.

Despite her admission that the material was fabricated, questions remain over why no arrest has yet been made.

Investigators are examining whether further action is required to “protect testimony and avoid the destruction of evidence”.

Justice minister Costas Fitiris is expected to brief the cabinet on the case following an update from police chief Themistos Arnaoutis.

Fitiris said decisions on appointing an independent criminal investigator will depend on that briefing.

Police stated, “there is no targeting of individuals” and that all steps are taken “on the basis of assessed testimony and in accordance with the prescribed legal procedures”.