Understanding Clue Categories in Who Did It?
Published: June 2026 · 4 min read
In Who Did It?, clues are the heart of the investigation. But not all clues work the same way. The game distributes clues across five distinct categories, each designed to create different kinds of discussion and suspicion. Understanding these categories will make you a better investigator — and a more dangerous criminal.
1. Material Evidence
Material evidence refers to physical objects found at or near the crime scene. These are tangible items that can be collected and analyzed. In the game, material evidence might include a torn piece of fabric, a broken lock, a discarded glove, a weapon, or a personal belonging.
As an investigator, ask: Who owns clothing matching this description? Who had access to this location? As a criminal, argue: Many people wear similar clothing. This is common material found anywhere.
2. Witness Observation
Witness observations describe something someone saw or heard. These clues are inherently unreliable because witnesses can be mistaken, biased, or lying. In the game, witness observations might include footsteps, muffled voices, a shadow in the hallway, or a door opening and closing.
As an investigator, ask: Who was near the scene at the time? Does anyone's character description mention being awake at night? As a criminal, question the witness's reliability: The guard was probably sleepy. It could have been anything.
3. Document or Record
Documents and records are written evidence that connects characters to the crime. These are often the most concrete clues. They might include letters, emails, phone records, receipts, medical reports, financial documents, or diary entries.
As an investigator, ask: Who had financial motive? Who handles money in their profession? As a criminal, argue: This could be unrelated. The victim had many financial dealings. It does not prove who took the money.
4. Circumstantial Fact
Circumstantial facts are pieces of information that create suspicion without directly proving guilt. They build a picture when combined with other clues. Examples include someone being seen near the scene, having access to restricted areas, possessing a relevant skill, or having a history of similar behavior.
As an investigator, ask: Who had access? Whose schedule does not align with their story? As a criminal, explain: Someone else could have borrowed the key card. The logs only show the card, not who used it.
5. Relationship Trace
Relationship traces reveal connections between characters that may not be obvious from the story alone. These clues uncover past disputes, shared secrets, romantic relationships, business partnerships, or family connections that provide motive.
As an investigator, ask: Who had a personal connection to the victim? Who had a reason to want them gone? As a criminal, admit the connection but downplay it: Yes, we had issues, but that was months ago. Many people had problems with the victim.
How Clues Work Together
The key to winning as an investigator is connecting clues across categories. A single material evidence clue might not identify the criminal, but when combined with a circumstantial fact and a relationship trace, the picture becomes clearer. Criminals, on the other hand, need to attack each clue's reliability and offer alternative explanations.
The Two Interpretations Rule
Every clue in Who Did It? is designed with two interpretations. One interpretation points toward an innocent player (the red herring), and the other contributes to the truth when combined with other clues. This means no single clue can conclusively identify the criminal. The truth emerges from the discussion and the connections players make between clues and character information.
Pro Tip: The best players in Who Did It? do not just repeat clues — they connect them. A witness observation becomes more meaningful when paired with a relationship trace. A document becomes suspicious when combined with a circumstantial fact. Think like a detective building a case, not a prosecutor pointing at one person.