This page is educational and does not replace legal advice. Requests involving hacking, illegal tapping, spyware, intimidation, doxing, extortion, unlawful real-time tracking, or unauthorized account access are not accepted.
Evidence is easier to lose than people expect
Chats can be deleted, social profiles can change, payment links can disappear, and memories become less precise over time. Preserving evidence early helps the investigator understand the chronology and reduces confusion later.
Good preservation does not mean collecting everything. It means keeping the original context, dates, source notes, and the order of events so the material can be reviewed without guessing.
What to preserve
Keep original screenshots, chat exports where available, URLs, email headers, payment proof, document versions, profile names, usernames, dates, and the order of events. If possible, store copies in a safe folder without editing or renaming everything randomly.
For each item, add a short note: where it came from, why it matters, and whether it was received by you, captured from a public page, or provided by another party. This makes the later report easier to audit.
Do not create new risk while collecting evidence
Do not hack accounts, install spyware, secretly access someone’s device, impersonate another person, or pressure witnesses. Evidence collected through unsafe methods can damage the case and create new problems.
If the evidence involves a potential legal dispute, keep an untouched original and create a separate working copy for notes or redaction. Avoid forwarding sensitive files repeatedly through unsecured channels.
Build a clean timeline
A simple timeline is often more useful than a large folder of random files. Write down what happened, when, who was involved, what evidence supports each point, and what is still unverified.
Useful columns include date, event, person or account involved, supporting file, source note, and limitation. For reporting structure, see what a private investigation report should include.
Share less at first, preserve more privately
Clients often think they must send every file in the first message. A safer approach is to preserve everything privately, then share a short index of what exists. The investigator can decide which items are actually needed after scope and privacy handling are clear.
This reduces unnecessary exposure of personal documents, intimate material, family records, or company data. The first consultation should establish relevance and boundaries before sensitive files are transferred.
Start with a safe summary
Share case type, city/general location, short chronology, lawfully obtained initial evidence, and your verification objective. Do not send passwords, OTP codes, private account access, or excessive sensitive data at first contact.
Send Secure Summary via WhatsApp