How-To Guides
6 min read
·

How to Document an Online Scam for Police: Step-by-Step Guide

Why Most Scam Reports Go Nowhere

Every year, millions of online scams are reported to law enforcement. Most result in no investigation. The primary reason is not that police do not care — it is that victims fail to provide evidence in a form investigators can actually use.

Police need specific, verifiable documentation to open a case. Telling them "I was scammed on a website" is not enough. They need URLs, transaction records, communication logs, and — critically — proof that these records are authentic and have not been modified.

What Police Actually Need From You

The Scammer's Digital Footprint

Law enforcement investigators look for:

  • Website URLs — The exact addresses of fraudulent pages, not just the domain name
  • Profile/account pages — The scammer's identity on the platform where you interacted
  • Contact information used — Email addresses, phone numbers, messaging handles
  • Payment addresses — Bank account details, crypto wallet addresses, payment links
  • IP addresses — From email headers or communication metadata (if available)

Proof the Scam Occurred

  • The fraudulent listing or offer — Exactly what was promised
  • Your communications — The full conversation showing the deception
  • Payment proof — Records showing you sent money based on false pretenses
  • Delivery failure — Evidence that what was promised was not delivered (or was fake)

Verification That Evidence Is Real

This is where most reports fail. Investigators cannot act on screenshots that might be fabricated. They need:

  • Proof that web pages actually existed at the captured URL
  • Verification that evidence has not been modified
  • Independent timestamps showing when content was live
  • Complete records, not selective excerpts

Step-by-Step Documentation Process

Step 1: Stop All Contact With the Scammer (But Do Not Delete Anything)

Do not alert the scammer that you are collecting evidence. Do not delete any messages, emails, or communication. Every piece of interaction is potential evidence.

Step 2: Capture the Fraudulent Website or Listing

Before the scammer takes it down, capture:

  • The main listing/product/offer page (full page, including URL)
  • The seller/user profile page
  • Any "About" or contact pages
  • Trust signals they used (fake reviews, certifications, testimonials)
  • Terms and conditions or refund policy pages

Use forensic capture tools that record the full page content along with network verification data. TrueSnap creates evidence packages with SHA-256 hashes, blockchain timestamps, and HAR network logs — the kind of authenticated records that investigators can rely on.

Step 3: Preserve All Communications

Capture every message, email, and conversation:

  • Platform messages — Capture the full conversation thread on the platform
  • Email correspondence — Save complete emails with headers (not just the body text)
  • Messaging apps — Screenshot conversations showing the full thread with timestamps
  • Phone records — Note dates, times, and numbers for any phone calls

Step 4: Document Your Payments

Gather all payment evidence:

  • Bank statements showing the transfer
  • Payment app confirmations (PayPal, Venmo, Zelle, etc.)
  • Cryptocurrency transaction hashes
  • Credit card statements
  • Screenshots of payment confirmation pages (captured forensically if still accessible)
  • Any receipts or invoices the scammer provided

Step 5: Collect Identity Information

Document everything you know about the scammer:

  • Username or display name on each platform
  • Profile photos (reverse image search these — scammers often steal photos)
  • Any personal details they shared (name, location, business name)
  • Other listings or accounts that appear connected
  • Domain registration information (WHOIS lookup for their website)

Step 6: Document the Timeline

Create a chronological record:

  1. When and where you first encountered the scam
  2. When you made initial contact
  3. Key messages that established trust
  4. When you sent payment
  5. When you realized it was a scam
  6. What happened after (did the scammer disappear, make excuses, block you?)

Step 7: Check for Other Victims

Search for the scammer's username, email, phone number, or business name online. Other victims may have posted warnings. Capture these as well — they establish a pattern.

Where to Report

United States

  • FBI Internet Crime Complaint Center (IC3): ic3.gov — for internet crimes over $1,000 or involving multiple victims
  • Federal Trade Commission (FTC): reportfraud.ftc.gov — consumer fraud of all types
  • Local police: For in-jurisdiction crimes, especially if you can identify the scammer

United Kingdom

  • Action Fraud: actionfraud.police.uk — national reporting center for cybercrime
  • Citizens Advice: For consumer fraud and scams

International

  • econsumer.gov: Cross-border online scam reporting
  • Your bank's fraud department: They may be able to reverse transactions

How to Present Your Evidence

When filing your report, organize evidence clearly:

Summary document: A one-page overview with key facts — what happened, how much was lost, when it occurred.

Evidence folder: Organized by type (communications, payments, website captures) with clear file names and dates.

Timeline: A chronological list of events with references to supporting evidence.

Forensic captures: Authenticated web captures with verification data (hashes, timestamps, network logs) that prove the evidence is genuine.

Increasing Your Chances of Investigation

Law enforcement prioritizes cases where:

  • The loss is significant — Larger amounts get more attention
  • Multiple victims exist — Pattern cases are more likely to be investigated
  • The evidence is solid — Well-documented cases are easier to investigate
  • The scammer is identifiable — Cases with leads on the perpetrator's identity move faster
  • Jurisdiction is clear — Cases where the scammer is in the same country are easier to pursue

You cannot control all of these factors, but you can control the quality of your evidence. A well-documented report with forensic-grade captures, verified timestamps, and organized records stands out from the thousands of vague complaints investigators receive daily.

Protect Your Evidence Long-Term

Investigations take time — often months or years. Ensure your evidence survives:

  • Store copies in multiple locations (cloud storage, external drive, email to yourself)
  • Do not modify original evidence files
  • Keep forensic capture packages intact with their verification data
  • Maintain your chronological log as the case develops

The difference between a scam report that results in action and one that sits in a queue often comes down to evidence quality. Take the time to document properly, use tools that create verifiable records, and present everything in a clear, organized format. You are doing the investigator's job easier — and that dramatically improves your chances of seeing justice.

Protect Your Digital Evidence Today

TrueSnap captures web pages with forensic-grade integrity — SHA-256 hashes, blockchain timestamps, and tamper-proof packaging that courts accept.

Download TrueSnap Free

Related Articles

View all