iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Start a contemporaneous, chronological record. For each incident, preserve the original message or file, capture the whole screen before reporting or blocking, and record the platform, account identifier, exact URL, date and time with timezone, verbatim wording, surrounding context and what happened next. Keep untouched originals, a second secure backup and a log of every handoff. This creates organized material that police, a lawyer or a court can evaluate; it does not guarantee admissibility, which depends on local evidence, privacy and recording laws.
1. Stabilize your safety before collecting anything
If a message suggests immediate violence, stalking, kidnapping, self-harm or another imminent danger, use your jurisdiction’s emergency channel first. Do not delay an emergency report while trying to assemble a perfect evidence file.
Police.uk’s sextortion guidance says you do not have to collect screenshots, videos or messages before reporting. Report even if the post, account or media has disappeared; investigators may be able to obtain provider records. Avoid replying to a threatening account, arranging a meeting or announcing that you are collecting evidence.
- Move to a safer location and tell a trusted person if you feel at risk.
- Preserve your device as it is; do not reset, delete chats or reinstall the app.
- If the material includes intimate images, do not forward or upload them. Police.uk warns that taking or sharing sexual images involving anyone who may be under 18 can itself be a criminal offence.
2. Capture each incident before reporting or blocking
Save evidence while it is visible. Reporting can trigger removal, and blocking can make the page harder to retrieve. Singapore’s Online Safety Commission specifically advises saving evidence first when you may also report to police or take legal action.
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
Capture a complete view
- Open the original post, message, profile or file in the platform where it appeared.
- Take screenshots showing the platform name, account handle or profile identifier, the complete wording, attachments, visible date or time, and the surrounding replies or context. Capture more than one screen when necessary; do not cut off the URL or identity information.
- Record the exact URL, including any post, message or media identifier. Copy it as text into your incident log rather than relying only on an image.
- Save the original download, export, audio, video or email separately from the screenshot. Keep the source file in its native format.
- For fast-changing pages, make a screen recording that shows the navigation from the account or search result to the item. Keep the recording as an additional copy, not a replacement for still images.
Do not crop, annotate, filter or convert the master screenshot. Make a working copy for arrows, highlighting or notes and retain the unedited file with its original filename and timestamps.
Record the facts in words
Transcribe the threatening or harassing words exactly, preserving spelling, emojis, line breaks and apparent typos. Put your explanation in a separate notes field so a reader can distinguish the sender’s words from your interpretation. Note whether the item was public, private, a group post or a direct message, and identify anyone who saw it.
Export email and platform data
For email, download the message with full headers and print a readable copy without deleting the original. Headers can show routing, sender fields and timestamps that are absent from a screenshot. Use the platform’s data-download or chat-export function when available, but keep the account and device originals as well.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →3. Build a chronological incident log
Use one row per post, message, call, repost or consequential action. Write entries promptly while details are fresh. A separate diary can contain your impact and follow-up; the incident table should remain factual and time-ordered.
| Field | What to enter |
|---|---|
| Date and time | Local time, timezone and, if known, the platform’s displayed time. Note clock differences or uncertainty. |
| Platform and location | Service name, app or website, group, channel, subreddit-like forum or private-message area. |
| Account identity | Display name, handle, numeric user ID, profile URL and any changed names. Save a profile screenshot separately. |
| Exact source | Full post, message or media URL; include an identifier copied as text. |
| Verbatim content | Exact words, emojis, attachments and links. Quote; do not paraphrase in this field. |
| Context | Earlier messages, replies, relevant relationship, audience and whether the item was public or private. |
| Files captured | Original filename, file type, screenshot numbers, screen recording and export location. |
| Witnesses | People who saw the item directly, with contact details stored securely and separately when appropriate. |
| Action and result | Report, block, safety change, medical or emergency call, platform response and report number. |
| Later changes | Edits, deletion, account renaming, reposts, disappearing media or a changed URL, with the time observed. |
Use a consistent identifier such as 2026-10-16-001 for each incident and name related files with that identifier. Do not change the device’s clock to make timestamps look consistent; record the real timezone and explain discrepancies.
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
4. Preserve deleted, edited or disappearing material
Deletion does not make an incident unreportable. Keep every trace that remains:
- Original screenshots and screen recordings, including the account and URL view before removal.
- Notification emails, push-notification screenshots and platform moderation notices.
- Reposts, quotations, replies, search-result snippets or cached copies, clearly labeled as copies rather than originals.
- Messages from recipients who saw the item, with their own screenshots and a written statement of when they viewed it.
- The URL, account ID and the time you confirmed that the item was gone.
Do not present a repost as if it came directly from the original account. Label its source and chain of custody. Report both the original threat and its deletion to police or the relevant regulator. Police.uk says unavailable media should still be reported because authorities may be able to recover it.
5. Preserve originals and prove handling
Use controlled, redundant storage
Keep the source phone or computer intact. Copy originals to a dedicated USB drive or other controlled storage and maintain a second backup, such as encrypted cloud storage or a separate drive. PPSNI identifies cloud storage or a USB drive for screenshots; Victoria Police advises secure storage of screenshots, emails and chat logs before reporting.
- Restrict access to people who need it and use a strong, unique password with encryption where available.
- Keep the first copy read-only when practical. Work from duplicates.
- Record when each file was copied, by whom, from which device and to which destination.
- Preserve file extensions and embedded metadata. Avoid messaging apps that recompress images when transferring originals.
Maintain a chain-of-custody log
For every transfer, record the file identifier, date and time, sender, recipient, method and purpose. A lawyer or investigator can then see which file is the source and which is a demonstrative copy. Hash values can help detect later changes, but a hash does not by itself prove who created or authored a message; keep the underlying device, account information and context.
6. Report and request provider preservation
Report through the platform’s safety channel and to police or another authority when appropriate. Save confirmation pages, ticket numbers, emails and the time of submission in your log. If you need a platform record that you cannot obtain yourself, ask investigators or counsel to send a preservation request promptly.
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
United States preservation rule
In the United States, 18 U.S.C. § 2703(f), in the 2024 U.S. Code edition, provides that a provider must preserve records and evidence on request from a governmental entity pending legal process. The initial preservation period is 90 days and may be renewed once for another 90 days. This is a preservation obligation, not an automatic release of the records to a private requester; the exact disclosure process depends on the legal process and jurisdiction.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Outside the United States
Retention periods, emergency disclosure rules and the power to demand records differ by country. Tell police or counsel the provider, account identifier, URL and approximate time range so they can use the procedure available where the provider and incident are located.
7. Assemble a handoff packet
Give an investigator or lawyer an indexed, readable package rather than an unsorted camera roll.
- Cover sheet with your name or case identifier, a safe contact method and the date prepared.
- One-page chronology keyed to incident IDs.
- Original files in a separate, clearly labeled folder; never overwrite them with annotations.
- Readable PDFs or printouts of screenshots, email headers and exports, with page numbers that match the index.
- URL and account-identifier list, including deleted or renamed accounts.
- Platform and police report confirmations, ticket numbers and dates.
- Witness list and statements, stored with appropriate privacy controls.
- Short declaration for each item explaining when and how you made the copy and whether it is an original, export or working copy.
- Copy-transfer log showing who received each package and when.
Keep a personal master set. Send only the material needed for the recipient’s role, especially where unrelated private conversations or intimate images are present.
8. What makes a record useful in court
Courts commonly examine authenticity, relevance, hearsay, privacy and the reliability of the preservation process. A screenshot can show what appeared on your screen, but it may not alone establish who controlled the account or that the image was not altered. Full URLs, account IDs, platform exports, original devices, witness testimony and provider records can add context. A lawyer in the relevant jurisdiction can advise on authentication and admissibility.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
Recording laws also vary. Before recording a voice call, video call or in-person conversation, check whether all participants must consent. Do not secretly record merely because a screenshot would be inconvenient. Similarly, do not publish the evidence online; provide it through a controlled report or legal channel.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Or skip the browser setup
If you need a repeatable screenshot of a public URL, ScreenshotNeo can capture it by API. It is not a substitute for preserving the original account, message export or device, and it cannot recover a page that was already deleted, but it can provide a clean copy of a page that is still available.
Before capture, ScreenshotNeo accepts cookie or consent banners and removes more than 60 known consent platforms, newsletter popups and chat widgets; each step can be turned off. Only clean shots are billed: bot checks or CAPTCHAs, blank pages, timeouts, failed loads and cache hits cost nothing, and the response identifies the result with X-Page-Verdict and X-Billed headers. Its MCP server provides take_screenshot, get_page_info and capture_pdf tools for Claude, Cursor and other MCP clients.
The API supports full-page captures with lazy images loaded, CSS-selector element captures, dark mode, 12 device presets or a custom viewport, retina scale, PDF paper size and margins, custom CSS and JavaScript, clicks before capture, hidden selectors, waits for a selector, delay or network idle, blocking ads, trackers, requests or resource types, custom headers, cookies, user agent and Authorization, timezone and geolocation, transparent backgrounds, image resizing, a chosen cache TTL, signed links, asynchronous jobs with signed webhooks, bulk capture of up to 100 URLs per call, a usage API and an OpenAPI specification. Parameters used by other screenshot APIs also work, which can simplify migration.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallUse the URL and options documented at ScreenshotNeo’s documentation. Basic cURL example:
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpPython:
import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
open("shot.webp", "wb").write(r.content)Node.js:
const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);The Free plan includes 1,000 shots per month with no card. Paid plans start at $5 for 3,000 shots; yearly billing provides two months free, and every feature is included on every plan. After saving the response, record the capture time, requested URL, options and verdict headers in your incident log, and keep the downloaded file as a separate copy.
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
Create a free ScreenshotNeo account to get 1,000 screenshots a month without a card.
9. Troubleshooting common evidence problems
| Problem | Likely cause | Action |
|---|---|---|
| The post vanished before capture | Deletion, moderation or an expiring story | Report it anyway; preserve notifications, URLs, reposts and witness copies, and ask police or counsel about provider preservation. |
| Screenshot lacks the URL or account | Mobile layout or cropped image | Capture the profile and address view separately, copy the URL as text and explain why multiple images form one incident. |
| Times conflict | Different timezones, device clock or platform display | Keep each displayed time, state the timezone, check notification and email headers, and document the discrepancy rather than editing it. |
| Only a forwarded copy exists | Recipient saved or reposted the item | Label it as a copy, obtain the recipient’s statement and preserve the forwarding message and original URL. |
| Files were compressed by a chat app | Automatic image or video recompression | Retrieve the original from the source device or platform export; retain the compressed copy only as an additional exhibit. |
| API capture is blank or blocked | Bot check, timeout, failed load or consent overlay | Keep the API response headers and verdict, try a permitted wait or authenticated request, and use an interactive capture when access requires a human challenge. ScreenshotNeo does not bill these failed or blocked outcomes. |
| A platform asks for more personal data | Safety-report workflow or account verification | Provide only what is required, save the submission confirmation and consider reporting through police or counsel instead of publishing the evidence. |
10. Practical checklist
- Safety assessed; emergency report made when needed.
- Original message, file or export retained.
- Full-context screenshots or recording captured before blocking or reporting.
- Platform, account ID, URL, exact words, date, time and timezone logged.
- Headers saved for email; working copies separated from masters.
- Deleted material, notifications, reposts and witness copies preserved.
- Encrypted or access-controlled primary storage plus a second backup created.
- Platform and police reports, confirmation numbers and preservation requests logged.
- Indexed handoff packet and copy-transfer log prepared.
- Jurisdiction-specific advice obtained before recording calls or sharing sensitive material.
Frequently Asked Questions
Should I warn the person that I am preserving their messages?
Usually no. A warning can prompt deletion or escalation. Preserve what is visible, use the platform’s safety tools and let police or counsel guide any contact.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Can a screenshot prove who sent a threat?
Not by itself in every case. Account identifiers, original exports, device evidence, witnesses and provider records may be needed to authenticate authorship.
How long should I keep the files?
Keep originals and the handling log until the investigation, legal advice and any appeal or limitation period are finished. Your lawyer or local authority can set a case-specific retention date.
Is a screen recording better than a screenshot?
They serve different purposes. A recording can show navigation and changing content; still screenshots are easier to index and print. Preserve both when the material is fast-changing.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
