How to Report a Crypto Scam and Preserve Evidence the Right Way

Source-tracked CryptoRescue article.

If you think you have been caught in a crypto scam, the safest first move is to stop and preserve records before deleting messages, resetting devices, or continuing the conversation. Public cyber-safety authorities consistently frame incident handling around protecting evidence, documenting what happened, and using official reporting channels rather than improvising. That matters in crypto cases because digital traces can be scattered across wallets, exchanges, messaging apps, email accounts, and web pages.

A careful record helps you do three things: explain the event clearly, support any report you file, and reduce the risk of making the situation worse. Even when recovery is uncertain, preserving transaction details, communications, and account activity can still matter for platform review, cyber incident reporting, or later law-enforcement follow-up.

Use this checklist before links expire, messages disappear, or scam sites change:

1. Stop communicating with the suspected scammer.
2. Save chat logs, emails, usernames, phone numbers, and profile links.
3. Record wallet addresses, transaction hashes, dates, times, and amounts.
4. Capture screenshots that show full URLs, account names, and transaction status where possible.
5. Write a short timeline of what happened in order.
6. Keep records of any website, app, or social media account involved.
7. Note what personal data you shared, if any.
8. Avoid deleting files, messages, or browser history until you have copied what you need.
9. Secure affected accounts and devices after evidence is saved.

In practice, reporting works best as a sequence, not a single form. First preserve evidence. Next, secure any remaining accounts or devices. Then report through the most relevant official or service channels available to you, such as a national cyber incident channel or the service provider involved. Government cyber-safety pages and national cyber institutions emphasize incident reporting, protective action, and using recognized reporting paths rather than relying on informal help from strangers online.

If an exchange, wallet app, email provider, bank, mobile carrier, or social platform was part of the event, report to that service as well. A platform may be able to review abuse on its own systems, but that is not the same as guaranteeing a refund or identifying the person behind a wallet address. Keep expectations realistic and focus on clean documentation.

For readers in different countries, the exact agency name will vary. The consistent principle supported by the official sources here is to use government cyber-security reporting resources and recognized public reporting channels, especially when the incident involves fraud, account compromise, malware, phishing, or data exposure. If there is immediate risk to your safety or a broader criminal matter, local law enforcement may also be relevant.

The exact documents requested will differ by case, but official cyber-safety guidance supports the same basic discipline: preserve the original records, document what happened, and report through recognized channels. A simple timeline plus copies of the underlying records usually makes your report more useful than a vague description written from memory later.

After a suspected crypto scam, avoid steps that create fresh risk:

• Do not share private keys, seed phrases, or wallet credentials with anyone.
• Do not grant remote access to your phone or computer to a supposed helper.
• Do not send additional funds because someone claims it is needed to unlock, verify, trace, or release your assets.
• Do not delete messages or transaction details before saving them.
• Do not rely on unofficial intermediaries when a government or platform reporting route exists.

A good report does not guarantee recovery, but it can preserve the facts before they are lost and route the incident into the right systems. That is the realistic goal: secure what you still control, document what happened, and submit consistent information through official channels. Treat anyone promising certain recovery, secret access, or fast results with extreme caution.

This article is for general information, not legal advice. If your case involves major losses, identity theft, device compromise, or cross-border fraud, consider getting advice from a qualified local professional after you have secured and preserved your records.

• CERT Polska
• NASK
• Gov.pl: Cyberbezpieczeństwo
• CryptoRescue internal site page inventory reference