Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › Cybercrime

How to Report a Suspected Cyberattack to Law Enforcement and Preserve Evidence

By Freedom251 Team · · 5 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In the United States, report suspected cyber-enabled crime or fraud to the FBI’s Internet Crime Complaint Center (IC3) as soon as possible. If someone is in immediate danger, call 911 or local police; for ongoing crime, a threat to life, or a national-security threat, contact the FBI through its tips site or a local field office. Reporting is separate from containing the technical incident: preserve relevant records while taking steps to stop further harm.

Choose the reporting route that fits the urgency

Situation Where to report What to expect
Cyber-enabled crime or fraud, including a suspected online scam or breach involving criminal activity File a complaint with IC3 as soon as possible. IC3 reviews complaints and may refer information to law enforcement or partner agencies. Filing does not guarantee an investigation or a personal response.
Immediate danger to a person Call 911 or local police. Use emergency services for an urgent safety response; do not wait for an IC3 submission.
Ongoing crime, a threat to life, or a national-security threat Submit a tip at tips.fbi.gov or contact a local FBI field office. For a time-sensitive matter, also contact local law enforcement directly. These routes are for urgent or serious threats; they do not promise that a particular agency will take a case.

The FBI says, “If you are the victim of a cyber-enabled crime or fraud, file a report with the Internet Crime Complaint Center (IC3) as soon as possible.” See the FBI Cyber page for its reporting guidance. IC3 also explains its role and limits: it is an intake and referral channel, not an investigative agency. Analysts review complaints and may disseminate them as appropriate; receiving agencies decide whether to investigate or prosecute. IC3 does not provide complaint status or contact every complainant.

As an Amazon Associate I earn from qualifying purchases.

Prepare a clear complaint

Write the events in chronological order before opening the complaint form. Separate what you know from what you suspect, and use exact dates and times with the time zone where possible. The current IC3 complaint form asks for an incident narrative, technical details, witnesses or other affected people, and information about reports made to other agencies. It accepts reports even when some information is unavailable; provide as much as you can.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Timeline: When the activity began or was detected, how you discovered it, what happened next, and what response steps you took.
  • Impact: Accounts, devices, systems, files, or data that may be affected; changes you noticed; and any operational disruption.
  • People or accounts involved: Known subject details, account identifiers, suspicious domains or URLs, and any relevant contact information.
  • Financial loss: Transaction dates, amounts, recipient details, and total loss if money was transferred.
  • Technical context: Full email headers, relevant log excerpts, cryptocurrency transaction metadata, or ransomware hashes, if available. Preserve the original material rather than relying only on copied snippets.
  • Other reports: Note whether you have contacted local police, another agency, a bank, or another relevant organization.

IC3 does not require evidence to be attached to a complaint. Save or print the complaint when you submit it. If you need to add information later, IC3 advises filing a new complaint rather than assuming you can update the original; include the earlier complaint details so the new report can be connected where appropriate.

#1 Best Overall
zmybcpack 100 pcs Plastic Evidence Bag, 9" x 12" Crime Scene Evidence Bag
  • Package contains: 100 pcs 9x12 inch Plastic Evidence Bags for evidence collection
  • Tamper-Evident Evidence Bags:Self-sealing adhesive with tamper indicating graphics, which is easy to use and has security features
  • Coded to Track:Unique alphanumeric numbering and barcode design ensure easy classification and tracking
  • Writable Evidence Bag for Professionals or Mystery Game Lover. Label directly for clear identification. Ideal for secure storage and maintaining chain of custody
  • These clear evidence Bags ideal for CSI crime scenes, detective parties, classrooms, and true crime fans. Also perfect for lawyers and professionals who require secure storage for evidence gathering

Preserve records and their context

IC3 states, “IC3 does not collect evidence regarding complaints, nor do we accept attachments.” Keep relevant material securely because an agency may ask for it if it opens an investigation. The IC3 FAQ gives examples of useful records; CISA’s StopRansomware Guide also emphasizes preserving social messages and logs with dates, times, and time zones.

Evidence category Examples to retain Context to record
Documents and financial records Receipts and transaction records Transaction date, amount, recipient, and related account
Communications and web content Emails, preferably with full headers; printed emails; web pages; chat transcripts; social messages; telephony logs Sender or account, relevant URL or phone number, date and time, and time zone
Technical artifacts Hard-drive images, PCAP files containing malicious traffic, network, host, or security-appliance logs, and malware copies Which device or system produced the item, when it was collected, and the time zone used in its timestamps
Incident chronology Your notes about detection, changes, containment, and notifications Who observed or collected each item and when

Keep electronic originals when possible, and avoid editing the only copy. Make a separate working copy if you need to annotate or share material. Record who collected an item and when as sensible handling practice; this is not a claim that every victim must follow a formal chain-of-custody protocol. IC3’s examples are options to retain, not instructions for ordinary victims to acquire disk images, capture volatile data, or handle malware themselves.

Rank #2
TriTech Forensics Evidence Bags Tamper-Evident Secure Storage, 100 Pack (9" x 12")
  • Tamper-Evident Security: Self-sealing adhesive strip creates an instant, permanent seal that cannot be opened without visible damage, ensuring evidence integrity.
  • Durable & Tear-Resistant: Made from strong 4 mil polyethylene, these bags resist punctures and tears for reliable evidence protection.
  • Clear for Easy Viewing: Transparent material allows quick identification of contents without opening the bag.
  • Chain of Custody Ready: Features a white write-on panel with space for names, contents, and detailed chain-of-custody tracking.
  • Professional Evidence Handling: Includes preprinted control numbers and a tear-off officer receipt; sold in convenient packs of 100 with multiple size options

Contain the incident without wiping away useful evidence

Reporting does not stop an attacker’s access. IC3’s data-breach guidance recommends quarantining or taking potentially affected hosts offline, resetting or revoking compromised credentials, and submitting a detailed IC3 complaint using the words “data breach.” But reimaging or wiping a system can remove material that may be useful to an investigation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Limit access: Quarantine or take potentially affected hosts offline where appropriate, and reset or revoke compromised credentials to reduce continued access.
  2. Preserve relevant material: Keep logs, messages, suspicious files, and other records that may help explain what happened. Do not attach them to an IC3 complaint; retain them securely.
  3. Resolve the preservation question before reimaging: IC3 says compromised hosts should be reimaged as soon as possible to limit attacker reuse unless the victim is instructed to preserve them forensically. If evidence may need forensic preservation, coordinate with law enforcement or a qualified incident responder before reimaging.

Do not interpret the reimaging advice as a blanket instruction to wipe every device immediately. The right sequence depends on the risk of ongoing access and whether a system needs to be preserved; ordinary victims are not being asked by these sources to conduct forensic acquisition themselves.

Rank #3
Crime Scene Paper Evidence Bags (Medium)
  • 100 bags
  • 7 x 4 x 13 1/2 inches
  • Chain of custody label
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What happens after you submit an IC3 complaint?

IC3 says an analyst reviews the information and may forward it to law enforcement or partner agencies as appropriate. Its FAQ says, “After you file a complaint with the IC3, the information is reviewed by an analyst and forwarded to law enforcement and partner agencies as appropriate.” That referral is not the same as opening an investigation: agencies make their own decisions, and IC3 does not provide status updates or contact every person who files. Retain your complaint confirmation and evidence so you can respond if an agency contacts you.

The routes above are U.S.-specific. Reporting channels, privacy rules, and evidence requirements differ in other countries; this guide does not establish reporting deadlines or evidence-admissibility rules.

Quick Recap

Bestseller No. 1
zmybcpack 100 pcs Plastic Evidence Bag, 9' x 12' Crime Scene Evidence Bag
zmybcpack 100 pcs Plastic Evidence Bag, 9" x 12" Crime Scene Evidence Bag
Package contains: 100 pcs 9x12 inch Plastic Evidence Bags for evidence collection
$23.99
Bestseller No. 3
Crime Scene Paper Evidence Bags (Medium)
Crime Scene Paper Evidence Bags (Medium)
100 bags; 7 x 4 x 13 1/2 inches; Chain of custody label
$45.00
Bestseller No. 4
zmybcpack 200 pcs Plastic Evidence Bag, 6' x 9' Crime Scene Evidence Bag
zmybcpack 200 pcs Plastic Evidence Bag, 6" x 9" Crime Scene Evidence Bag
Package contains: 200 pcs 6x9 inch Plastic Evidence Bags for evidence collection
$23.99
Best Value
Affrolling 36 Pieces Evidence Bags Bulk, Police Detective Party Goodie Bag
  • Quality evidence bags: These evidence bags are made of quality food-grade PE material, suitable for storing fruits and vegetables, cheese, meat, fish in the refrigerator or freezer, and can also be applied for murder mystery parties or crime scene decorations
  • Package Included: You will receive 36 police party bags, each plastic bag measures approximately 7.09 x 7.87 inches, suitable for storing snacks, candies, small toys and party favors or displaying your murder mystery night favors and detective party decorations
  • Visual Design: the transparent design allows you to easily identify the items inside and avoid unnecessary rummaging; Each package contains many evidence treat bags, ensuring that you have enough bags to meet your various needs
  • Wide range of uses: These police goodie bags are not only practical, but also versatile. Want to add some horror to your Halloween decorations? Use these evidence bags to simulate a crime scene, which will definitely scare your guests! Whether it is storing food or creating a grotesque atmosphere, these police party favors bags are your ideal choice
  • Novel Design: our detective party decorations have a clear layout, you can write down the suspect's name, arrest time and other information to help you collect evidence in an orderly manner; Each bag is attached with stickers for enhanced security
Rank #4
zmybcpack 200 pcs Plastic Evidence Bag, 6" x 9" Crime Scene Evidence Bag
  • Package contains: 200 pcs 6x9 inch Plastic Evidence Bags for evidence collection
  • Tamper-Evident Evidence Bags:Self-sealing adhesive with tamper indicating graphics, which is easy to use and has security features
  • Coded to Track:Unique alphanumeric numbering and barcode design ensure easy classification and tracking
  • Writable Evidence Bag for Professionals or Mystery Game Lover. Label directly for clear identification. Ideal for secure storage and maintaining chain of custody
  • These clear evidence Bags ideal for CSI crime scenes, detective parties, classrooms, and true crime fans. Also perfect for lawyers and professionals who require secure storage for evidence gathering

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Cybercrimecybersecuritydigital evidenceFBI IC3incident response

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.