Network

Home / ACC Tip / Preserve evidence safely

Victim of cybercriminals? Report your incident to help prevent further attacks.

Preserve evidence safely

When dealing with fraud, scams, or account compromise, evidence is extremely important. The information you collect can help banks investigate transactions, assist law enforcement, and strengthen reports to online platforms.

Many victims lose valuable evidence because they delete messages, edit screenshots, or wait too long before saving important information.

Preserving evidence properly increases the chances of a successful investigation.


Why Evidence Matters

Investigators rely on clear documentation to understand what happened.

Good evidence can help confirm:

  • How the scam began
  • Who contacted you
  • What instructions were given
  • When payments were made
  • Which accounts were involved

Without documentation, it becomes much harder to trace events.


Capture Conversations Completely

Save the full conversation history when possible.

Document messages from:

  • Email
  • Messaging apps
  • Social media platforms
  • Online marketplaces

Make sure screenshots include:

  • Usernames or account names
  • Profile images if visible
  • Time stamps
  • The full message thread

Avoid cropping out context.


Record Financial Transactions

Financial records are often the most important evidence.

Save:

  • Transaction confirmations
  • Payment receipts
  • Reference numbers
  • Dates and times of transfers
  • Amounts sent

If possible, capture the transaction page from your bank or payment app.


Document Websites and Links

If a website was involved in the scam, record:

  • The full website address
  • Screenshots of the page
  • Product listings or offers
  • Checkout pages

Some fraudulent websites disappear quickly, so capture them early.


Save Files and Attachments

If the scam involved attachments or downloaded files:

  • Save the original files
  • Keep email attachments intact
  • Do not modify file names
  • Store them in a secure folder

Original files may contain useful metadata.


Keep Evidence Organized

Create a folder dedicated to the incident.

Inside that folder store:

  • Screenshots
  • Payment records
  • Conversation logs
  • Website captures
  • A written timeline of events

Organized evidence is easier to review and share.


Avoid Editing Original Evidence

Do not alter original screenshots or files.

Avoid:

  • Cropping original images
  • Adding markings or annotations
  • Compressing files unnecessarily

If you want to highlight something, create a copy and edit the copy instead.


Back Up Evidence Safely

Evidence should be stored in more than one place.

Consider:

  • A secure cloud storage account
  • An external storage device
  • A secondary encrypted folder

Redundant storage protects against accidental loss.


Report the Incident

Once evidence is collected, report the incident through appropriate channels.

This may include:

  • Your bank or payment provider
  • The platform where the scam occurred
  • National cybercrime reporting centers

Provide clear documentation when submitting reports.


Final Thoughts

In scam investigations, evidence is often the strongest tool available.

Act quickly to capture information before it disappears.

Save conversations.
Document payments.
Store files securely.

Careful evidence preservation helps investigators understand the full picture and may improve the chances of recovery.

Back
Report a Scam
Contact Us
Get Help

Support the Fight Against Cybercrime

One-time contribution. No subscriptions.
 
Awareness Support
Helps educate people to recognize scams and digital threats.
$15
Builder
Supports
Supports educational tools and scam-prevention resources.
$35
Mission Accelerator
Directly strengthens the fight against cybercrime worldwide.
$50
Donate a Custom Amount
Choose an amount that matches the impact you want to make.

*Your contribution supports education, awareness, and community-driven cybercrime prevention

;