Preserve the profile and messages before you block or report the account. Save unedited screenshots, the profile URL or account ID, the complete relevant conversation, original media, and a written collection log. Put untouched files in a protected archive, hash them, and keep a separate hash manifest. Then report the account to the dating service, the FTC and the FBI’s Internet Crime Complaint Center (IC3); if money changed hands, call the bank or payment provider immediately.
A screenshot proves what was displayed on your device at a particular time. It does not, by itself, prove who controlled the account or guarantee courtroom admissibility. Stronger evidence combines the images with the original device, account identifiers, URLs, exports, metadata, hash records and a clear chain-of-custody log.
As an Amazon Associate I earn from qualifying purchases.
Preserve first, then block or report
Romance scammers commonly build trust with a fake identity before asking for money. The FBI describes the tactic as using “the illusion of a romantic or close relationship to manipulate and/or steal from the victim.” A February 2025 FTC alert describes a frequent sequence: the match moves the conversation off the dating platform, avoids meeting, and later requests money or promotes an investment. Nearly 70,000 consumers reported romance scams and $1.3 billion in reported losses in 2022, according to the FTC’s 2023 statistics.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →- Assess immediate safety. Do not confront the person, send more money or provide additional documents. If there are threats, stalking, extortion or intimate-image abuse, contact local law enforcement and preserve the threats.
- Capture before taking action. Do not block, delete, unmatch or submit a report until you have saved the relevant material, unless leaving the conversation open creates a safety risk.
- Keep the account context. Record the display name, handle, age or location shown, bio, occupation claims, verification badge, profile URL or account ID and every visible photo.
- Save the conversation in sequence. Start with the earliest relevant contact and continue through the latest request. Include dates, times, message status, voice-note or video-call indicators and surrounding messages that establish the order of events.
- Record collection details. Write down the date and time, time zone, device and operating system, app name and visible version, account used and the exact steps used for any export.
If a profile is public, copy its full URL. If it is behind a login, record the account identifier and the exact navigation path used to reach it. These details help another person understand what was captured and where it came from.
#1 Best Overall
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Rugged Double-Layer Waterproof* Design - Protects the crypto drive against knocks, drops, break-in and submerging in water. The electronics are shielded by a hardended inner case. The rubberised silicone outer casing provides a final layer of protection
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
Capture a complete evidence set
Profile identity and context
- Take several frames when one screen cannot contain the whole profile. Overlapping frames are preferable to a cropped summary.
- Include the name, username or handle, age or location, biography, employment or military claims, verification indicators and profile URL or account ID.
- Capture each visible profile photograph. Save the original image file when the app allows a download, and note whether the image was downloaded or only displayed.
- Include the app’s surrounding interface when it identifies the service, account or navigation path. Avoid cropping away the information that gives the image context.
Messages and requests
- Capture the conversation from the first relevant contact through the most recent message. Keep enough surrounding text to show who said what and in what order.
- Preserve timestamps, dates, delivery or read status, disappearing-message indicators and icons showing voice or video calls.
- Capture requests for money, gift cards, cryptocurrency, bank details, identity documents, intimate images, “investment” instructions, shipping fees, emergency help or a move to another application.
- Save phone numbers, email addresses, payment handles, wallet addresses, links and usernames exactly as displayed. Do not retype them in place of the original display.
Original media and exports
Download photos, videos, voice notes and files in their original form when the platform provides that option. Use the platform’s account-data export if available and record the export date, account and steps used. Keep the untouched export beside the screenshots; do not rely on a re-saved copy from a messaging app or image editor.
How to make screenshots without altering the evidence
Use the operating system’s built-in capture function and leave the image unedited. Interface labels vary by device and app version, so verify that the resulting file contains the full screen and a visible time or other context where available.
iPhone or iPad
- Open the profile or message at the point you need to preserve.
- Press the hardware screenshot combination for your model (Face ID devices use the side button and volume-up button together; models with a Home button use the side or top button and Home button).
- Let the thumbnail disappear or save it without drawing, cropping or filtering. If you need to highlight text, make a second working copy later.
Android phone or tablet
- Open the relevant screen and wait for it to finish loading.
- Use the device’s screenshot gesture or press power and volume-down together. Some manufacturers provide a scrolling-capture option; use it only if it preserves the conversation in order and does not omit timestamps.
- Save the original in the device gallery and copy it to the archive without editing.
Windows, macOS or a web browser
- Display the complete profile or message pane at a readable zoom level.
- Use the operating system’s screen-capture utility to capture the window or a selected region. For long pages, take overlapping images rather than relying on an extension that may alter or re-render content.
- Save the files in a lossless format such as PNG when practical, and keep the original browser download or export separately.
Do not use markup, filters, perspective correction or OCR on the originals. If a long conversation requires many frames, number them in capture order in a separate index rather than renaming or rewriting the files in a way that changes their content.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteBuild an archive that another person can follow
Use a neutral case folder
Create a folder such as 2026-10-16_case-001. A simple structure separates untouched material from copies made for explanation:
2026-10-16_case-001/
originals/
screenshots/
media/
platform-export/
working/
hash-manifest.txt
collection-log.txt
transfer-log.txtPut screenshots, screen recordings, downloaded media and platform exports that you have not edited in originals. Use working for redactions, callouts or resized copies. Keep a note in the working folder describing every change and the original filename it came from.
Rank #2
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
- SuperSpeed USB 3.0 - Transfer all your confidential files and folders faster than ever before. Works on both PC & Mac
Record the collection event
Your collection log should state:
- case identifier and collector;
- local time, UTC offset or time zone, and the device clock condition;
- device model, operating-system version, app name and visible app version;
- account used, profile URL or account ID, and navigation path;
- which screenshots, recordings, media or exports were collected;
- export steps, file format and any error or missing item.
Do not rely on memory. Write the entry immediately after each capture session, while you can still describe what happened.
Hash every original
Digital files are easy to change, so NIST identifies integrity as a critical concern. Generate a cryptographic hash for each file with a current, well-supported algorithm and store the results separately from the images. For example, on Linux or macOS you can run:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesfind originals -type f -print0 | sort -z | xargs -0 shasum -a 256 > hash-manifest.txtOn Windows, the built-in command for one file is:
certutil -hashfile "originals ile.png" SHA256Record the relative path and hash in the manifest. If a file is copied, verify the destination hash against the manifest; a mismatch means you should stop, preserve both versions and document what happened rather than overwriting either file.
Protect the archive and log transfers
Use encrypted, access-controlled storage with a strong passcode and multi-factor authentication where available. Keep at least one independent backup. An encrypted USB flash drive or external drive can be practical, but verify its actual security features; the drive does not prove authenticity or admissibility by itself.
Maintain a transfer log. NIST defines chain of custody as tracking evidence through collection, safeguarding and analysis by recording each handler, the date and time and the purpose of each transfer. A useful table has these columns:
Rank #3
- Certified to FIPS 197 - U.S. Government Approved High Level Information Security Standard.
- Protection against brute force password attacks - Data is automatically erased after 6 unsuccessful access attempts. The data of the USB flash drive type c encryption with dual connectors is destroyed and the cryptographic drive is reset.
- Durable dual-layer waterproof design* — Protects the crypto reader from bumps, drops, run-in and immersion in water. The electronics are protected by a hardened internal case. Rubberized silicone outer case provides a final layer of protection.
- Auto-Lock —The cryptographic key automatically encrypts all data and locks when removed from a PC/Mac or when screen protection or "computer lock" is enabled.
- Secure Entry —Data on these flash drives cannot be accessed without the correct alphanumeric password of 8 to 16 characters. A password indication option is available for this flash drive. The hint cannot match the password.
| File or folder | SHA-256 | Handler | Date/time and zone | Action | Destination | Purpose |
|---|---|---|---|---|---|---|
| originals/screenshots/001.png | hash from manifest | name or role | 2026-10-16 14:22 UTC | copied | encrypted archive | backup |
Store the hash manifest and transfer log in a separate protected location from the working files. Keep the phone or computer containing the live conversation intact when feasible. Do not repeatedly reopen a disappearing-message chat just to collect more images; preserve what you have and seek advice from the investigating agency.
Preserve disappearing chats and platform exports
Ephemeral messages are still electronic communications that may need to be preserved in an investigation or legal matter. FTC and DOJ preservation guidance warns that failing to preserve relevant material can lead to sanctions or obstruction consequences. That guidance is not a universal courtroom rule, so obtain jurisdiction-specific legal advice for an active case.
If the app offers an export, request it once, record the request and download process, and keep the resulting archive unchanged. If it requires a waiting period, save confirmation screens and the request date. Do not assume an export contains deleted, disappearing or encrypted messages; note exactly what the platform says it includes.
What screenshots can and cannot prove
A screenshot is a contemporaneous record of what appeared on a screen. It can support a report when combined with the original device, account identifiers, URLs, exports, metadata, hashes and collection records. It does not automatically authenticate the person who authored an account or message, establish that a photograph belongs to that person, or guarantee admissibility in every jurisdiction.
Investigators may seek server records, payment records, subscriber information, device data or testimony. Do not alter the original files to make them easier to understand; provide a clearly labeled working copy and explain every change. A lawyer or investigating agency can tell you what authentication and hearsay rules apply where you live.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- FIPS 197 with XTS-AES 256-bit Encryption: Provides business-grade security with hardware-based encryption to protect your sensitive data
- Brute Force and BadUSB Attack Protection: Safeguards against unauthorized access attempts and malicious USB attacks with digitally-signed firmware
- Multi-Password Option with Complex/Passphrase modes: Offers flexible password configuration options to meet various security requirements and user preferences
- New Passphrase Mode: Enhanced security feature allowing users to create longer, more memorable password phrases for easier access without compromising protection
- Dual Read-Only (Write-Protect) Settings: Enables write protection functionality to prevent accidental data modification or deletion when needed
Report in the right order
- Dating platform: submit the account report and attach the clearest originals or an unedited export in the format requested. Keep a copy of your submission and the platform’s confirmation.
- Federal Trade Commission: report the fraud at ReportFraud.ftc.gov. The FTC also advises notifying the dating app, talking with someone you trust, searching the person’s job plus “scammer” and reverse-image searching the profile photo.
- FBI Internet Crime Complaint Center: file an IC3 complaint for internet-enabled fraud. The FBI’s romance-scam guidance directs victims there.
- Payment provider: if you sent money, contact your bank, card issuer, wire service, gift-card company, payment app or cryptocurrency exchange immediately. Provide transaction IDs, dates, recipient details and your preserved messages. Recovery is not guaranteed, and speed matters.
- Police and specialist support: contact local law enforcement for threats, stalking, extortion or intimate-image abuse. Preserve the threats and do not pay or send additional material.
Common problems and fixes
The profile vanished or the account blocked you
Do not keep trying to access it or create another account. Preserve the screenshots, account ID, URL, notification emails and collection log. Tell the platform and investigators that the profile is no longer accessible.
The app prevents screenshots
Use a second device to photograph the screen only if necessary, keeping the entire display, device clock and app context visible. Record that you used a camera, preserve the camera’s original file and do not delete the blocked-capture attempt. Ask the platform for an official export.
The conversation is too long for one image
Capture sequential, overlapping frames with timestamps and message order visible. Number them in a separate index. A screen recording can supplement, but do not substitute it for still images that clearly show the key requests.
Timestamps appear wrong
Record the device’s time zone and whether the app displays local time, UTC or relative labels such as “yesterday.” Preserve any date separators and compare them with notification or transaction records. Never manually change a timestamp in an original image.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Storage is full or cloud sync changes files
Stop editing and copy the originals to encrypted storage as soon as possible. Verify hashes after copying. Disable automatic “optimize storage” or photo conversion for the archive copy, and keep an offline backup.
Best Value
- FIPS 140-3 Level 3 (Pending) Certified Military-Grade Security
- OS/Device Independent
- XTS-AES Hardware Encryption
- Enforced Alphanumeric PIN
- Multi-PIN (Admin and User) Option
A hash changed after transfer
Keep both files, calculate hashes again, and document the source, destination, software and time. Check whether a photo app converted the format or embedded new metadata. Do not replace the manifest entry without recording the reason.
You accidentally annotated an original
Save the annotated image in working, locate an earlier unedited copy or recapture the screen, and explain the incident in the collection log. Never present the marked-up file as the untouched original.
Or skip the browser setup
For a public profile URL, ScreenshotNeo can return a screenshot or PDF through one request. It accepts the cookie or consent banner like a visitor and removes more than 60 known consent platforms, newsletter popups and chat widgets before capture; each cleanup step can be disabled. Only clean shots are billed: bot checks or CAPTCHAs, blank pages, timeouts, failed loads and cache hits cost nothing, and response headers identify the page verdict and whether it was billed. Do not send private dating-app credentials or capture a login-only conversation through a third-party service; use the local-device workflow for private evidence.
See the ScreenshotNeo documentation for parameter details. Replace the example URL with the public page you are preserving.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://example.com/public-profile -o profile.webpimport requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://example.com/public-profile"}, timeout=90)
open("profile.webp", "wb").write(r.content)const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://example.com/public-profile' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);ScreenshotNeo also provides an MCP server with take_screenshot, get_page_info and capture_pdf tools for Claude, Cursor and other MCP clients. Its options include full-page capture with lazy images loaded, CSS-selector element capture, device presets and custom viewports, dark mode, retina scale, PDF paper and page controls, custom CSS or JavaScript, click-before-capture, selector hiding, selector or network-idle waits, request and resource blocking, custom headers and cookies, timezone and geolocation, transparent backgrounds, resizing, TTL caching, signed links, asynchronous jobs with signed webhooks, bulk capture of up to 100 URLs per call, a usage API and an OpenAPI specification.
The Free plan includes 1,000 shots per month with no card. Paid plans start at $5 for 3,000 shots; yearly billing gives two months free, and every feature is available on every plan. Create an account at ScreenshotNeo’s free sign-up page.
Practical quality and privacy checks
- Capture at a readable scale; zooming too far out can make names and timestamps impossible to inspect.
- Keep the app’s own context, but hide unrelated private information only in a working copy. Never redact the original.
- Use a neutral case identifier rather than the alleged scammer’s name in filenames and backups.
- Limit access to people who need it. Intimate images, identity documents and financial details require extra care and may need specialist handling.
- Before sending an archive, verify the recipient, transfer method, destination and hash. Add the transfer to your log.
Frequently Asked Questions
Should I contact the suspected scammer to verify the story?
No. Verification attempts can warn the person, trigger deletion or expose you to further manipulation. Preserve what you have and let the platform, payment provider or investigators request additional information.
Free tools Windows power users keep installed
One-click scans. No signup required.
Can I submit only screenshots if the platform asks for evidence?
Follow the platform’s requested format and include the clearest unedited images, but retain your complete archive, exports, hashes and logs privately in case investigators later need the wider context.
What if I am worried about retaliation after reporting?
Tell the platform and law enforcement about the concern, secure your accounts with unique passwords and multi-factor authentication, and avoid publishing the person’s personal information yourself.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
