Crypto Scam Evidence: How to Preserve Telegram and WhatsApp Messages
Learn how to preserve messaging evidence from Telegram, WhatsApp and other communication channels after a cryptocurrency scam.
# Preserve the original conversations
Do not delete messages after discovering a suspected scam.
Keep relevant conversations showing promises, payment instructions, wallet addresses and requests for additional funds.
Record account information
Where legally appropriate, document usernames, profile names, public contact information and dates.
Do not attempt to access another person's private account.
Save payment instructions
Messages containing wallet addresses, QR codes, transaction requests or payment references may become important evidence.
Capture supporting material
Screenshots can help preserve context, but original exports or records may provide additional value where available.
Record the date and time of the evidence collection.
Connect messages to blockchain records
Match payment instructions with transaction hashes where possible.
This can help establish the relationship between communications and actual blockchain transactions.
Preserve websites and advertisements
If the scam involved a website or advertisement, preserve the public page information and relevant screenshots.
Protect personal information
Investigation files can contain sensitive personal and financial information.
Store them securely and share them only with authorized parties.
Final thoughts
Messaging evidence can provide context that blockchain records alone cannot establish.
Zenith Hackers Intelligence supports authorized cryptocurrency investigations and evidence documentation.