This article explains what scam evidence to save, how to protect yourself fast, and where to report it properly.
Don’t Panic. Don’t Delete the Proof.
Online scammers move fast because panic helps them. They rush you with fear, romance, fake urgency, investment pressure, tech-support lies, refund promises, or impersonation threats.
The worst mistake is reacting emotionally: blocking the account, deleting the messages, closing the chat, reporting the profile inside the app, and then realizing the proof is gone.
The smarter move is simple:
Secure yourself first. Save the evidence. Report through the right channels. Do not keep feeding the scam.
That does not mean you should play detective. It means you should preserve what already exists before you destroy the trail.
The Rule: Protect First, Document Fast, Report Properly
If money, identity documents, bank details, passwords, threats, blackmail, or account access are involved, act immediately. Contact your bank, card provider, payment app, crypto exchange, mobile provider, or local police where necessary.
But before you delete anything, preserve it. Screenshots, payment records, phone numbers, usernames, crypto wallet addresses, profile links, call logs, and timelines can help agencies connect reports across victims.
The principle is blunt: act fast to limit damage, but document deliberately.
The FBI’s Internet Crime Complaint Center says it does not accept attachments, but victims should keep original evidence securely because investigators may request it later.
If You Sent Money, Move Immediately
If you paid a scammer, do not waste time arguing with them. Do not beg. Do not negotiate. Do not send “one last payment.”
Contact the payment source first.
What to do immediately
- Call your bank or card provider.
- Freeze or cancel compromised cards.
- Dispute unauthorized transactions.
- Ask whether a wire, transfer, or payment can be recalled.
- Change passwords on affected accounts.
- Enable two-factor authentication.
- Run device security checks if you clicked links or downloaded files.
- Report identity exposure if you shared ID, tax details, passport details, or banking information.
Australia’s Scamwatch tells victims to act fast, contact their bank or card provider immediately, stop sending money, report the scam, and watch for follow-up scams.
Save the Evidence Before You Block
Before you block, delete, or report the scammer inside an app, save the evidence. Platform reports can sometimes remove accounts quickly, which is good for public safety but bad if you forgot to capture the proof first.
Save These Details
| Evidence Type | What to Capture |
|---|---|
| Messages | Full screenshots, chat exports, voice notes, timestamps |
| Profiles | Username, display name, profile URL, account ID, photos |
| Emails | Sender address, subject line, full body, attachments, headers if possible |
| Websites | Full URL, domain name, screenshots, checkout pages, fake company details |
| Payments | Receipts, invoices, bank records, wire details, card charges |
| Crypto | Wallet addresses, transaction hashes, amounts, coin/token type, timestamps |
| Phone contact | Call logs, voicemail, phone numbers, SMS messages |
| Social media | Profile links, post links, DMs, comments, impersonation pages |
| Threats | Blackmail demands, extortion messages, deadlines, threats to expose data |
| Timeline | Dates, times, what happened, what you sent, what they asked for |
Do not crop screenshots so tightly that the username, date, URL, or platform disappears. The context matters.
Build a Clean Evidence File
Do not throw everything into a messy folder called “scam stuff.” Build a clean case file.
Use a simple structure:
Scam Evidence — [Date] — [Platform or Scammer Name]
Inside that folder, create subfolders:
- Screenshots
- Messages
- Payments
- Profiles
- Websites
- Emails
- Call Logs
- Timeline
- Reports Filed
Then create a short timeline document:
| Date | What Happened | Evidence Saved |
|---|---|---|
| May 1 | First message received on Instagram | Screenshot 001 |
| May 2 | Scammer sent fake investment link | Screenshot 004, URL saved |
| May 3 | Payment requested by crypto wallet | Wallet address, message screenshot |
| May 4 | Report filed | IC3/FTC/Scamwatch reference number |
This makes your report easier to understand. It also helps if your bank, police, platform, insurer, employer, or legal adviser asks for details later.
Do Not Keep the Scam Going
This is where people get reckless.
Some victims think they can outsmart scammers by keeping the conversation alive. Sometimes, continued messages may reveal more identifiers. But ordinary people should not turn themselves into bait.
Scammers are professional manipulators. They may escalate pressure, threaten you, send malware, target your family, impersonate police, or move you to encrypted apps.
Do Not Do This
- Do not send more money.
- Do not send fake documents.
- Do not send real documents.
- Do not click new links.
- Do not download files.
- Do not threaten the scammer.
- Do not hack back.
- Do not give them your real address, employer, school, family details, or bank details.
- Do not keep talking “just to see what happens.”
- Do not record calls unless it is legal where you are.
If they keep messaging you, document it. But do not escalate it.
Collect passively. Do not perform for the scammer.
Report Fast, But Report With Useful Details
There are two types of reporting:
- Urgent protection reporting — bank, card provider, crypto exchange, local police, account provider.
- Evidence-based fraud reporting — national fraud portals, cybercrime agencies, consumer protection bodies, platforms.
Do both when needed.
If you lost money, report fast. If you only spotted a scam attempt, save enough detail first so your report is useful.
Where to Report Online Scams
| Region | Where to Report | Best For |
|---|---|---|
| USA | FBI IC3 and FTC ReportFraud | Internet crime, fraud, scams, bad business practices |
| UK | Report Fraud / Police Scotland depending on location | Fraud, cybercrime, phishing, online scams |
| EU | National police or cybercrime reporting portals | Country-specific cybercrime and fraud reports |
| Australia | Bank/card provider, Scamwatch, police where needed | Consumer scams, financial scams, scam intelligence |
| Canada | Canadian Anti-Fraud Centre / RCMP reporting system | Fraud and cybercrime reports |
| New Zealand | NCSC reporting tool, bank, police where needed | Cyber security incidents and online scams |
The FTC’s ReportFraud site is the US federal portal for reporting fraud, scams, and bad business practices.
In the UK, GOV.UK directs people in England and Wales to Report Fraud if they lost money or were hacked because of an online scam, while Scotland routes reports through Police Scotland.
Europol does not act as the direct reporting desk for every European victim. It redirects cybercrime victims to their own national reporting websites, and local or national police handle the first report.
Canada’s official fraud and cybercrime reporting system is run through the Canadian Anti-Fraud Centre and RCMP reporting channels.
New Zealand’s NCSC provides a reporting tool for individuals and small businesses to report cyber security issues and get next steps.
What to Include in Your Report
A weak report says:
“Someone scammed me online.”
A useful report says:
“On May 3, 2026, an Instagram account using the handle @example contacted me about a crypto investment. They directed me to example-domain.com and requested payment to wallet address X. I sent $500 in USDT at 3:42 p.m. The transaction hash is X. Screenshots, chat records, and payment records are preserved.”
Be specific.
Include These Details
- Your name and contact information.
- Date and time of the scam.
- Platform used.
- Scammer’s username, phone number, email, profile URL, or website.
- Amount lost.
- Payment method.
- Bank, crypto exchange, card provider, or payment app involved.
- Transaction IDs, crypto hashes, wallet addresses, or invoice numbers.
- What the scammer claimed.
- Whether you clicked links, downloaded files, or shared personal information.
- Whether threats, blackmail, impersonation, or identity theft were involved.
- Whether you already reported it to your bank, platform, or police.
If the reporting portal does not allow attachments, explain what evidence you have and keep the originals secure.
Watch for the Second Scam
After someone loses money, scammers often come back.
They may pretend to be:
- Crypto recovery experts
- Private investigators
- Fake lawyers
- Fake police
- Fake FBI, Interpol, Europol, or government agents
- “Refund departments”
- Hackers who claim they can recover funds
- People who say they already found your stolen money
This is usually another scam.
The FTC warns that refund and recovery scammers target people who already lost money and often demand payment before supposedly recovering funds.
A real agency will not ask you to pay upfront fees in gift cards, crypto, wire transfers, or payment apps to recover stolen money.
Reporting Helps More Than You Think
One report may not instantly bring your money back. That is the hard truth.
But detailed reports still matter.
They help agencies identify repeat scam infrastructure, fake websites, mule accounts, phone numbers, crypto wallets, phishing campaigns, impersonation networks, and cross-border fraud patterns.
Scamwatch says reports help authorities work with organisations to remove scam websites, scam ads, and contact details, and help warn the community about emerging scams.
That is why clean evidence matters. Your report may connect to other victims’ reports and help show a larger pattern.
The Blunt Safety Checklist
Before you block or delete anything, ask yourself:
- Did I screenshot the profile?
- Did I save the username and profile URL?
- Did I capture the messages with timestamps?
- Did I save the payment details?
- Did I preserve emails or headers?
- Did I write a timeline?
- Did I contact my bank or payment provider?
- Did I change exposed passwords?
- Did I report identity exposure?
- Did I avoid clicking more links?
- Did I avoid sending more money?
- Did I report through the correct national channel?
If the answer is no, fix that before you wipe the evidence.
Conclusion: Outsmarting Scammers Means Staying Safe, Not Playing Games
Outsmarting online scammers does not mean baiting them, threatening them, or trying to become an amateur investigator.
It means staying calm enough to protect yourself.
Save the proof before you delete it. Contact your bank before the money moves further. Change passwords before accounts get taken over. Report through the right channels before the scammer disappears into a new username, new number, or new fake website.
The best response is not panic.
The best response is:
Secure yourself. Preserve the evidence. Report properly. Stop engaging.