How can you determine information received via air drop vs created?

My son was found with an inappropriate picture of a student on his phone. He says it was sent to him via air drop by someone it in his contact list. The school is claiming he took the picture because it was in his photo album. I need to know how to determine how he got the picture. Is there a way to find out pictures that are air dropped as opposed to actually taken?