Keep originals and build a chronology
Start with a dated account of how contact began, what was promised, which payments you made and when concerns arose. Keep the original files and messages where possible. Make a separate working copy for notes rather than editing the source record.
Payment records
For cryptocurrency, record the network, asset, sending and receiving addresses, transaction identifiers and exchange statements. For bank or card payments, retain confirmations and relevant beneficiary details. Distinguish amounts actually paid from balances or returns displayed on a website.
Communications and platform details
Preserve exact domains, profile links, email addresses, messages, account statements and withdrawal requests. Capture dates and context. A screenshot without a source or timestamp may be less useful than the original conversation or export.
Protect sensitive information
Never share a recovery phrase, private key, password or one-time code. Do not send identity documents or complete financial account details through the initial enquiry. We will discuss any further evidence requirements and an appropriate exchange method separately.
Describe uncertainty honestly
If a date or amount is approximate, say so. If a document is missing, note the gap. A reliable investigation distinguishes confirmed records from recollection and inference.