EVIDENCE & DOCUMENTATION
Collecting and Preserving Evidence
Strong evidence helps create a clear understanding of an
incident. Collect and preserve all available information
before accounts, messages, or online content are removed.
What evidence should I collect?
Collect any information related to the incident,
including screenshots, emails, text messages,
chat conversations, social media interactions,
financial records, payment confirmations,
transaction receipts, account details,
cryptocurrency wallet addresses,
website URLs, phone numbers,
usernames, and any other relevant documents.
Are screenshots acceptable as evidence?
Yes. Screenshots can help preserve conversations,
advertisements, payment confirmations,
account information, and webpages exactly as they
appeared during the incident. Whenever possible,
capture the full screen including the date,
time, and website address.
Should I keep emails and chat messages?
Absolutely. Do not delete emails,
text messages, chat logs, or direct messages.
These communications often contain valuable
information that helps establish a complete
timeline of events.
What financial records should I preserve?
Keep bank statements, payment confirmations,
invoices, cryptocurrency transaction IDs,
credit card statements,
transfer receipts, invoices,
and any documentation showing financial activity
related to the incident.
What if I don't have every piece of information?
Submit the information currently available and
continue gathering additional evidence whenever
possible. Even partial information may help build
a more complete understanding of the incident.
Can I upload supporting documents?
If document uploads are available within the
reporting system, include clear copies of
relevant evidence. Ensure files remain
readable, complete, and accurately represent
the original information.
Should I modify screenshots or documents?
No. Avoid editing, cropping, or altering
evidence whenever possible. Original files
help preserve important details that may
assist with future review or investigation.
How can I organize my evidence?
Arrange documents and communications in
chronological order. Group similar records
together and clearly label files so the
sequence of events is easy to understand.
A well-organized case file improves clarity
and helps present the incident more effectively.