A strong fraud report depends on clear evidence. Victims often have the necessary information but it is scattered across phones, emails, bank statements, cryptocurrency wallets, screenshots, and messaging apps.
Organizing the evidence before reporting makes the case easier to understand. It also reduces the chance that important details are forgotten.
1. Identity and Contact Information
Record every name, username, email address, phone number, website, social-media profile, and messaging account used by the people involved.
Do not assume that a name is genuine. Record exactly how the person identified themselves and separately note any independent information you found. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
2. Investment Documents
Preserve contracts, invoices, account statements, certificates, promotional material, presentations, and PDFs.
Keep the original files and note when they were received. If a document contains claims of regulation or licensing, preserve those claims because they may be relevant to the investigation. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
3. Communication History
Export or screenshot messages showing the investment pitch, instructions, payment requests, withdrawal problems, and threats or pressure.
Include timestamps and account identifiers whenever possible. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
4. Payment Records
Collect bank statements, card records, wire confirmations, payment-app receipts, and cryptocurrency transaction details.
For each payment, record date, amount, currency, destination, transaction reference, and reason given for the payment. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
5. Blockchain Evidence
For crypto transfers, record the transaction hash, wallet addresses, network, asset, amount, and timestamp. If multiple assets or networks were involved, keep them separate.
A single incorrect character in a wallet address can make the record difficult to use, so copy addresses directly from reliable transaction records. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
6. Website Evidence
Save screenshots of relevant pages and preserve the domain name. Record the login page, account dashboard, withdrawal instructions, contact page, legal claims, and any warnings or notices.
If the website disappears later, your preserved evidence may become more important. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
7. Timeline
Create a chronological narrative from first contact to the last payment. Use exact dates when available.
A timeline should show how the relationship or communication developed, when the investment was introduced, how payments were requested, and what happened when a withdrawal was attempted. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
8. Provider Reports
Keep case numbers from banks, exchanges, payment providers, and reporting agencies. Save confirmation emails and submitted documents.
This allows you to demonstrate what has already been reported and avoid duplicating inconsistent statements. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
9. Evidence Integrity
Do not alter originals. Store them securely and use copies for annotation.
If you create a spreadsheet or summary, keep it separate from the original records and identify the source file for each important statement. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
10. Privacy
Do not publish account numbers, identity documents, passwords, private keys, seed phrases, or sensitive personal information online.
A fraud report should contain enough information for legitimate investigators without exposing additional opportunities for abuse. Another useful principle is to keep this step separate from conclusions about the identity of the perpetrator. At this stage, document what can be independently established: the account used, the instruction received, the payment made, the date and time, and the resulting record. This approach reduces errors and makes later review much easier.
It is also worth preserving the context around the event. A single screenshot may show an amount or message, but surrounding conversation, timestamps, account identifiers, and related records can explain why the transaction occurred. When information is missing, mark it as unknown rather than filling the gap with assumptions. A reliable record is more valuable than a confident but unsupported explanation.
