Preserving Evidence After a Scam: A Practical Checklist
Evidence collected in the first hours is usually the strongest. This checklist covers what to capture, how to capture it, and what to avoid deleting.
August 11, 2026Last updated August 12, 2026 1 min read
Capture before you block
Blocking an account often removes your access to the conversation history. Capture first, then block.
What to collect
- Full chat history, including timestamps and profile names, as screenshots or exports.
- Profile links, usernames, phone numbers and email addresses used to contact you.
- Website addresses, app names and any account or reference numbers.
- Payment records: bank references, card statements, transaction hashes and wallet addresses.
- Any documents, invoices or certificates you were sent.
How to capture it well
- Screenshot the whole screen, including the URL bar or app header, not just the message text.
- Keep original files rather than re-photographing a screen where possible.
- Record dates and amounts in a single written timeline while the detail is fresh.
- Store copies in more than one place.
What not to do
- Do not delete the conversation, the app or the emails.
- Do not send further payments to "test" whether the account still works.
- Do not share your seed phrase, private key, password or one-time codes with anyone offering help.
Next steps
Upload what you have collected to your case evidence vault. Evidence stays private to you and the staff handling your case, and you can add more at any time.
#evidence#guide#first-steps
Stay alert: legitimate organisations will never ask you for your password, private key, seed phrase or a one-time passcode. If something feels off, stop, verify independently, and avoid sending further funds.