After you finish reporting a phishing site, many people think the process is over. But if you lost crypto or money to the scam, reporting is only the first step. Complete evidence is the most critical support for you to recover your losses later.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
I have seen many people delete chat records right after reporting, fail to save screenshots, and forget to note down the transaction hash. When the police ask for their evidence, all they have left is a blurry transfer screenshot that does not even clearly show the scammer's wallet address.
Today we will explain exactly what evidence you need to save, and how to save it properly.
Step 1: Figure out what counts as "valid evidence"
Goal: Know exactly what to keep, and do not miss any critical information.
The more complete your evidence chain is, the more efficiently the police will file your case and trace the scammer later. You need to collect 3 main categories of evidence:
1. On-chain transaction data (most critical)
Transaction Hash (TxID / TxHash)
Your outgoing wallet address, and the scammer's receiving wallet address
Exact transfer amount and precise timestamp
You can screenshot all this information from blockchain explorers including Etherscan, Tronscan, BscScan and more
2. Communication records
All chat records with the scammer (Telegram, WeChat, email, etc.)
Key messages where the scammer promised high returns, guaranteed principal and interest, etc.
Scam project website URLs, app download links, and customer service contact information
3. Fund flow records
Bank transfer receipts or transaction records from your payment platform
It is recommended to print a stamped paper copy of your fund flow records from the bank
Completion check: You have at least one verifiable record for each of the 3 categories above.
Step 2: Save evidence in order, do not delete any data while saving
Goal: Fix evidence in a verifiable way, to avoid any doubt about its validity later.
How to do it (in order of priority):
Task 1: Screenshot and save on-chain transaction records first
Go to the blockchain explorer, enter your wallet address, and find the specific scam transfer record. Your screenshots need to include: TxID, outgoing address, receiving address, amount, timestamp, number of block confirmations. Take multiple screenshots from different views, do not only save one general overview screenshot.
Task 2: Export full chat records
Telegram: Tap the "..." menu at the top right of the chat window, select "Export Chat History", and export the file in HTML or JSON format.
WeChat: Tap the "..." menu in the chat window, select "Multi-select", select all messages in bulk, and save them as a long screenshot.
Email: Save the full original email as a
.emlfile, do not only screenshot the email content. The sender server information in the email header is a key clue for police to trace the scammer.
Task 3: Record full screen if you operated on a phishing website
If you completed the scam operation on a phishing site, record the full screen process from the moment you enter the URL to the time the scam page loads. Record the whole process. Use the built-in screen recorder on your phone, or OBS / QuickTime on your computer. Make sure to show your browser address bar during recording, to prove you are visiting the real phishing site, not a modified fake page.
Completion check: Save one copy of all the above materials to your local hard drive, and another copy to a cloud drive. Make sure all screenshots are clear and readable, and the screen recording is kept in original format, do not compress it.
Important risk reminder: Some people will edit the screenshots to circle key information or add notes, do not make any modifications to the original screenshots. If you need to mark key points, write explanations in a separate document, and keep the original screenshots untouched. Modified screenshots will be considered less valid by the police or court.
Step 3: Use blockchain notarization to secure key evidence (advanced tip)
Goal: Lock the immutability of key evidence in a legally recognized way.
How to do it: If the total amount of your lost funds is large, we recommend you use a third-party blockchain notarization platform (such as Feiyin) to notarize your key evidence. Data from these platforms is synced to the judicial alliance blockchain, and many cases at Hangzhou Internet Court have recognized their legal validity. To complete notarization, you usually need to finish real-name authentication, select the "webpage evidence collection" or "screen recording evidence collection" function, and follow the instructions to complete the process.
Completion check: You get an official notarization certificate or evidence report issued by the notarization platform.
Common mistake: Many people think "a screenshot is enough", but ordinary screenshots are easy to be questioned as edited in legal practice. The core value of blockchain notarization is that it cannot be technically tampered with, as it records exactly "who saw what content on which website at what time", which ordinary screenshots cannot achieve.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Step 4: Bring all your evidence to file a police report
Goal: Let the police accept and file your case quickly.
How to do it: Bring your original ID card, paper copies and digital copies (saved on a USB drive) of all evidence, and go to the local police station in the place where the scam happened or where you live to report the case. When reporting, describe the whole scam process clearly in chronological order: how you met the scammer, how they tricked you into making the transfer, how much money you lost, and when you realized it was a scam.
Available reporting channels:
Dial 110 directly: The operator will transfer your call to the economic investigation department or anti-fraud center
Dial 96110: The national unified anti-fraud warning and consultation hotline, for initial consultation and confirmation
National Anti-Fraud Center App: Submit your clues through the "Report Now" module
Completion check: You get the Case Acceptance Receipt or Case Filing Notice issued by the police station.
Final verification: You have saved a copy of on-chain transaction screenshots, chat export files, and web screen recordings to both local storage and cloud storage. If you used a blockchain notarization platform, you have downloaded and saved the notarization certificate. You have the receipt number for your police report.
Next step: Name your sorted evidence folder with "date + event", for example "20260822_Crypto Phishing Scam Loss". Store it in a safe place. You can reuse this process directly if you encounter similar situations in the future.
