Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › digital evidence

How to Preserve Messages, Profiles, and Payment Records as Romance Scam Evidence

By Freedom251 Team · · 12 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Preserve first, report second. Stop sending money and stop substantive contact, but do not block, delete, or close the account until you have captured the profile, conversation, payment requests, and transaction records. Keep an untouched original set, make working copies, then contact the financial institution, platform, IC3, the FTC, and local law enforcement as appropriate.

What to do in the first hour

  1. Stop the loss. Do not send another payment, “refund,” tax, verification fee, or deposit. Avoid arguing with or warning the person; continued contact can create more risk.
  2. Preserve what is still visible. Capture the profile and conversation before blocking, deleting, reporting, or changing settings. Save more than one format when possible.
  3. Contact the payment provider immediately. Call the bank, card issuer, wire service, payment app, or cryptocurrency service using a verified number or its official app. Ask about a recall, freeze, chargeback, fraud review, or other recovery option.
  4. Secure the originals. Copy the files to a protected location and do not annotate, crop, translate, or rename the only copy.
  5. Report after preservation. Report the account to the platform, file an IC3 complaint, report to the FTC at ReportFraud.ftc.gov, and make a local police report when appropriate.

If there are threats, identity theft, a large loss, or immediate danger, contact law enforcement and your financial institution without waiting for a perfect evidence package.

As an Amazon Associate I earn from qualifying purchases.

The scale is significant: the FTC said nearly 70,000 consumers reported romance-scam losses of $1.3 billion in 2022. In that same reporting, 40% said the contact began on social media and 24% said gift cards were used. Those figures describe reports received by the FTC, not every scam that occurred.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Capture the scammer’s profile before it changes

Make an archival capture that identifies the account as a person or system would see it. Record the date and time, including your time zone if it matters to the investigation.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Profile fields to save

  • Display name and exact username or handle.
  • Profile URL, account ID, or other platform identifier.
  • Profile photograph and any banner images.
  • Bio, claimed occupation, claimed location, age, relationship status, and other assertions.
  • Linked social accounts, websites, email addresses, phone numbers, wallet addresses, and payment handles.
  • The platform name, the device and operating system used, and the account you used to view the profile.
  • A timestamp for each capture.

Take a full-page or scrolling capture where the platform allows it, then make close-up captures of identifiers and images. Do not crop away the username, URL, timestamp, or surrounding context in the archival copy. If the profile changes, create a new capture and record what changed; never overwrite the earlier file.

Preserve the conversation in context

Save messages before and after the first money request. The surrounding exchange can show how trust was built, what promises were made, and whether the sender later claimed a refund, tax, fee, or additional deposit.

  • Take screenshots that show the sender, message text, date or time, and conversation identity.
  • Use the platform’s export or download function if one exists.
  • Keep voice notes, photographs, videos, attachments, call logs, and links.
  • Copy wallet addresses, QR-code destinations, payment handles, and telephone numbers exactly.
  • For email, retain the original message with complete headers, not only a forwarded or printed copy.

IC3 identifies electronic web pages, chat transcripts, telephony logs, hard-drive images, financial receipts, and preferably electronic email copies with full headers as useful evidence. The FBI likewise tells financially motivated sextortion victims to save profiles or messages because they may help identify and stop the predator.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Build a payment record that an investigator can follow

Create one chronological transaction table. Use one row per attempted or completed payment, including payments that were later reversed.

Field What to record
Date and time When you authorized or attempted the payment, with time zone where known
Amount and currency Original amount, currency, and any conversion shown by the provider
Method Bank transfer, card, wire, payment app, gift card, cash, money order, prepaid card, or cryptocurrency
Recipient Name shown by the institution, account or payment handle, phone number, email, wallet address, or gift-card destination
Reference Confirmation, authorization, wire, transfer, order, or cryptocurrency transaction ID
Institution Bank, card issuer, wire company, payment app, exchange, wallet service, or retailer
Evidence files Names of the statement, receipt, message, screenshot, or export that supports the row
Status Pending, completed, rejected, reversed, frozen, disputed, or refunded

Keep both the request and the result

Preserve the message asking for money beside the payment confirmation. Retain bank and card statements, wire confirmations, canceled checks, money-order or prepaid-card receipts, cryptocurrency transaction IDs and wallet addresses, gift-card numbers and receipts, payment-app receipts, and emails or texts containing payment instructions. IC3 specifically asks for account information, transaction dates and amounts, recipients, and total loss, along with these types of receipts and communications.

Do not send investigators your account password or recovery codes. If a receipt contains unrelated transactions or another person’s private information, ask the investigator or provider how to redact a working copy while retaining the untouched original.

Use more than one preservation format

No single format is universally sufficient. Screenshots are easy to understand but can omit searchable text or metadata. Exports may retain more structure but depend on the platform’s implementation. Paper copies are useful in a meeting but lose interactive context. Preserve multiple forms when feasible.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Method Strengths Limitations and precautions
Screenshots or screen recordings Show the visible sender, timestamp, profile, URL, and surrounding interface; easy to share Can omit hidden metadata, be difficult to search, and may not establish authenticity by themselves; keep uncropped originals
In-app export or download Often preserves conversation order and searchable text; may include attachments or account identifiers Availability and contents vary by platform; export immediately and retain the platform’s original file
Original email files Can retain complete headers, routing data, and attachments A printout or forwarded copy may omit headers; keep the original message file
Paper copies Useful when handing a chronological packet to an investigator Not searchable and usually lacks metadata; use as a working or meeting copy, not the sole archive
Screen recording Shows navigation through a profile or conversation and can document disappearing content as it appears Large files and sensitive audio or images require strict access control; preserve still captures as well

IC3 accepts printed or electronic copies, but its guidance favors electronic copies and asks that printed emails include full headers. Follow the receiving agency’s instructions if they request a particular file type.

Keep originals intact and make working copies

Create an originals folder

Put the first exports, screenshots, downloaded emails, receipts, and statements in an “originals” folder. Do not highlight, translate, crop, rotate, compress, or add notes to those files. Make a separate working copy for a timeline, redactions, or explanatory labels. This is a practical organization method, not a legal certification.

Use a consistent index

A simple index lets an investigator connect a message to a payment. For example, a filename can follow this pattern:

2026-10-16_1430_platform_username_message.png

Record the file name, what it contains, the capture date and time, platform, device, and any relevant change. Keep a dated chronology that points to the supporting file rather than rewriting the message in your own words.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Protect access and create a second copy

Store a second copy in a separate secure location with access controls. Because these records can contain identity, account, financial, or intimate information, avoid public links and open shared folders. Use encryption or the strongest access protection available to you, and do not give a scammer access while attempting to preserve evidence.

Do not destroy the source prematurely

If it is safe to leave the account and conversation in place, do not delete them before capture. Do not continue engaging to obtain more evidence. Safety and stopping further loss take priority over collecting a more complete record. The Department of Justice victim framework discusses instructing victims not to delete cellphone material while prosecutors identify relevant evidence, and IC3 instructs complainants to retain original documentation and communication logs.

Report in an order that protects recovery options

  1. Financial institution or payment service: Ask immediately about recall, freeze, chargeback, fraud review, or cryptocurrency tracing options. Use only a verified telephone number or official app. Give the transaction IDs, dates, amounts, recipient details, and the message containing the payment request.
  2. Platform: Report the dating, social, messaging, or gaming account. Attach only what the platform requests and save the case or ticket number. Do not assume reporting removes the need to preserve your own copy.
  3. IC3: File a complaint with the scammer’s names and identifiers, profile URLs or IDs, communication methods, payment destinations, transaction details, total loss, and screenshots or exports. IC3 says the accuracy and completeness of a complaint affect its ability to act.
  4. FTC: Submit a report at ReportFraud.ftc.gov. The FTC says reports help investigators identify scammers and stop them.
  5. Local police: Report when appropriate, especially for a large loss, threats, identity theft, or continuing contact. Give investigators indexed working copies or originals as requested, and keep your own copies.
  6. After preservation and reporting: Block the account, change reused passwords, enable multifactor authentication, review account-recovery details, and monitor financial and credit accounts. The FBI advises victims to stop all contact.

When speaking with an investigator, explain how you collected each item: which device and account you used, when you captured it, whether it was exported or photographed, and whether the profile later changed.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

What to do when messages are disappearing

Tell every reporting agency that the conversation is ephemeral, auto-deleting, or already disappearing. Provide the platform name, account identifier, profile URL or ID, dates and approximate times, and why preservation is urgent.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Under 18 U.S.C. §2703(f), a governmental entity may request that an electronic-communications or remote-computing provider preserve records and other evidence while legal process is obtained. The initial preservation period is 90 days and can be renewed for another 90 days. This mechanism is ordinarily used by investigators or lawyers, not directly by a victim. Your role is to alert the reporting agency quickly and give it precise identifiers.

FTC and DOJ guidance recognizes that preservation responsibilities can apply to collaboration tools and ephemeral messaging when an investigation or litigation is pending. A preservation request does not guarantee that deleted content can be recovered, and a platform is not required to restore every deleted message for a private complainant.

Capture public web pages without exposing private conversations

For a public profile page, payment portal receipt, or other web page that you are authorized to view, use a normal browser first: sign in only through the legitimate site, open the page, verify the visible URL and account identifier, and save a full-page capture plus a copy of any downloadable record. Do not paste private messages, passwords, recovery codes, or payment credentials into an unfamiliar capture service. Keep the browser capture and the original download together.

Or skip the browser setup:

ScreenshotNeo can capture an authorized web URL through one request. Before the capture, it accepts cookie or consent banners like a visitor and removes more than 60 known consent platforms, newsletter popups, and chat widgets; each cleanup step can be turned off. Only clean shots are billed: bot checks or CAPTCHAs, blank pages, timeouts, failed loads, and cache hits cost nothing, and the response identifies the result with X-Page-Verdict and X-Billed headers. Use it for public pages or pages you are permitted to access, not as a way to bypass account security or obtain someone else’s private messages.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Every plan includes full-page capture with lazy images loaded, CSS-selector element capture, dark mode, device presets or a custom viewport, retina scale, PDF output, custom CSS and JavaScript, click-before-capture, hidden selectors, waits for a selector, delay or network idle, request and resource blocking, custom headers, cookies, user agent and Authorization, timezone and geolocation, transparent backgrounds, resizing, TTL caching, signed links, asynchronous jobs with signed webhooks, bulk capture of up to 100 URLs per call, a usage API, and an OpenAPI specification. Parameter names used by other screenshot APIs also work, which can simplify a migration.

cURL

See the ScreenshotNeo documentation for authentication and options.

curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webp

Python

import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
open("shot.webp", "wb").write(r.content)

Node.js

const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);

The free plan includes 1,000 screenshots per month with no card. Paid plans start at $5 for 3,000 shots; Growth is $15 for 15,000, Pro $39 for 60,000, Scale $99 for 250,000, and Business $249 for 1,000,000. Yearly billing gives two months free, and every feature is on every plan. An MCP server provides take_screenshot, get_page_info, and capture_pdf tools for Claude, Cursor, and other MCP clients, so AI agents can capture authorized pages. Create a free ScreenshotNeo account to start with 1,000 screenshots a month and no card.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting and recovery

The account disappeared before you captured it

Save any notification, email, cached URL, username, phone number, wallet address, or payment handle you still have. Tell the platform, financial institution, IC3, FTC, and police that the account was deleted or blocked and provide the approximate dates. Ask the reporting agency to consider a provider-preservation request.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The platform export is incomplete

Take screenshots of the missing range, save attachments separately, and note the export date and what was absent. Do not edit the export to fill gaps. Provide both the incomplete export and the index describing the gap.

Timestamps do not match

Record the time zone and device clock shown when you captured the item. Platforms may display local time while a receipt uses UTC. Keep the original display and explain the difference rather than changing timestamps in the file.

The payment is pending

Contact the provider immediately with the pending confirmation number and request a fraud hold or recall if available. Preserve the pending screen and later status changes as separate files.

You already blocked the scammer

Do not unblock solely to collect more evidence. Save what remains in notifications, email, device backups, exports, and payment records, then report that the account was blocked before complete capture. Ask the platform or investigators about preservation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You are asked to send originals

Ask whether a secure upload is available and retain a copy before transfer. If an agency needs the original device or a forensic image, obtain a receipt and document what was provided. Never send your only copy through ordinary email.

A capture contains private information about another person

Keep the untouched original secured, create a redacted working copy only when requested, and ask the recipient what must be removed. Do not publish the material or post it to social media.

Frequently asked questions

Can screenshots alone prove that a profile or message is authentic?

No. Screenshots show what was visible on your device but do not, by themselves, establish authorship or prevent later questions about editing. Preserve exports, original email files with headers, payment-provider records, and the collection details so an investigator can assess the complete set.

How long should I keep my copies?

The cited authorities do not set a universal retention period for a victim’s personal copies. Keep the originals and working copies until the financial institution, investigators, prosecutor, or attorney tells you they are no longer needed, while maintaining secure access controls.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can I request the platform’s records myself?

You can report the account and ask the platform what data-export or support process is available, but formal provider preservation is ordinarily requested by investigators or lawyers under applicable legal process. Tell the reporting agency immediately when content is ephemeral and provide exact account identifiers and dates.

Frequently Asked Questions

What if the scammer is threatening me with intimate images?

Stop contact, preserve the profile and messages without forwarding them publicly, and report the threats to law enforcement and the platform. The FBI advises victims of financially motivated sextortion to save profiles or messages that may help identify the predator.

Should I print every page before reporting?

No. Use electronic originals and exports where possible, then make a clearly labeled paper packet only if an investigator requests or prefers it. Printed emails should include complete headers.

What information should I give a cryptocurrency investigator?

Provide the transaction ID, sending and receiving wallet addresses, exchange or wallet-service details, date, amount and currency, the message containing the payment instructions, and any follow-up claiming a refund, fee, tax, or additional deposit.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

digital evidencefraud reportingOnline Safetypayment fraudromance scams

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.