After a suspected scam, speed and documentation matter. The goal is not to solve the entire case yourself. It is to reduce additional loss, preserve evidence and give banks, platforms or authorities something useful to work with. This guide focuses on one question: what evidence should you save after an online scam?. The goal is not to label a site from one clue. It is to identify warning lights, test the story the site is telling, and decide whether you have enough confidence to continue.
Start with the identity claim. Ask who is supposedly operating the site, what legal or public-facing name they use, where they say they are located, and how they expect to be contacted. Then step outside the website. Search for the organization or person independently instead of clicking only the links they provide. A convincing page can repeat its own story perfectly; independent sources are useful because they can contradict it.
Warning lights to check
- Save URLs, screenshots and full message threads.
- Record dates, amounts, transaction identifiers and recipient details.
- Preserve original emails when possible.
- Do not alter evidence merely to make it easier to read.
The useful signals are usually ordinary ones. Save URLs, screenshots and full message threads. Record dates, amounts, transaction identifiers and recipient details. Preserve original emails when possible. Do not alter evidence merely to make it easier to read.