Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If it is safe, document the deepfake immediately, before reporting it. Save screenshots showing the post and surrounding page, copy the complete URL, record the account name or handle, and note the date and time you saw it. Preserve relevant messages, threats, payment demands and earlier report confirmations. Keep any original digital file unchanged, store everything securely, and maintain a short log explaining what you collected and when.
Then report every copy to the platform hosting it. Screenshots help establish what was visible, but they may omit metadata and do not by themselves prove who created the media, that it was manipulated, or that a court will admit it. If collecting the material is unsafe or distressing, ask a trusted person or qualified advocate to help.
1. Put safety before evidence collection
Do not put yourself in danger to obtain a file. If the poster is threatening you, knows where you live, demands money, or suggests imminent physical harm, contact local emergency services or law enforcement first. Do not confront the poster if doing so could escalate harassment, stalking or extortion.
Viewing sexual or violent material repeatedly can be traumatic. A trusted friend, advocate or lawyer can capture the page, preserve records and submit reports while you limit your exposure. RAINN’s guidance for sexual deepfakes and non-consensual intimate images specifically recommends saving evidence only when it can be done safely and using a trusted person for assistance.
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
If a child appears in sexual material, do not download, forward or otherwise redistribute it. Use child-specific reporting guidance and contact the appropriate authorities. Tell the platform that a minor may be involved and preserve only the information needed to identify the location and circumstances.
2. Make a factual incident record
Start a contemporaneous note in plain language. Do not speculate about who made the deepfake or assert that it is authentic. Record what you observed and how you found it.
- The date and time you first saw the material, including your time zone.
- Where it appeared: platform, group, profile, channel, website or messaging service.
- The poster’s display name, username, handle, profile URL and any visible account ID.
- Whether the same material appears on other platforms or accounts.
- Messages, threats, blackmail, payment demands or claims made by the poster.
- Dates and reference numbers for reports already submitted.
- Names of people who helped collect or receive the records.
Use a separate entry for every location. A single deepfake copied to three accounts creates three preservation and reporting records, even if the image or video is identical.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →3. Capture the complete online context
A cropped image rarely shows enough to identify where it came from. Capture the post and the surrounding page so the record shows the account, caption, comments, date indicator and platform interface.
Save screenshots that show more than the media
- Include the full browser window or app view when practical.
- Show the account name, handle, profile image and post identifier if visible.
- Include the caption, replies, quoted posts, warnings and visible timestamps.
- Take additional screenshots of direct messages, threats, payment requests and report confirmations.
- Do not add drawings, text or other marks to the only copy. Make a duplicate if you need to annotate it for a lawyer or support worker.
On a computer, a screenshot can include the address bar. On a phone, capture the page showing the profile or post identifier, then separately record the URL because mobile screenshots often hide it. Keep the original image files produced by your device rather than pasting them into a document that may recompress them.
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
Copy the full URL and identifiers
Copy the complete address from the browser’s address bar, including the path after the domain. Record the account’s exact spelling, capitalization and punctuation. If a service uses a short link, save that link as displayed and, if it resolves to another address, record the resolved page as well. Do not rely on a search result title or a copied snippet as the location record.
Record times consistently
Write the local time and time zone for each observation. If the platform displays only “yesterday” or “2 hours ago,” record that wording and the exact time your device showed when you captured it. Do not convert an approximate platform label into a precise posting time.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 114. Preserve digital copies without changing them
If you lawfully and safely possess the original file, retain it exactly as received or downloaded. Do not crop, edit, filter, annotate, recompress or repeatedly convert the sole copy. Create a separate working copy for redaction, transcription or sharing with a support provider.
Keep the file’s original filename and extension. In a separate note, record when and from where you obtained it, which device or account was used, and whether the platform provided a download button or you saved an attachment from a message. Do not claim that a file’s extension proves its contents; file names and metadata can be changed.
Use secure, limited-access storage
Store the screenshots, files, URLs and notes in a location protected by a strong password and, where available, multi-factor authentication. Limit access to people who need it. A removable USB drive is one possible storage medium, but it is optional and does not by itself establish evidentiary integrity. Keep a second copy in a secure location if losing the first copy would be a serious problem, while avoiding unnecessary duplication of intimate material.
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
Do not upload sensitive files to public “proof” sites, social media or unverified analysis services. Each upload creates another copy and may expose you to further distribution, terms-of-service issues or privacy loss.
Keep a collection log
A simple log makes your records easier to understand later. For each item, write:
- A sequential item number, such as
IMG-001orMSG-003. - What the item is: screenshot, downloaded attachment, URL note, message export or report receipt.
- When and how it was collected.
- The source account, page or conversation.
- Where the original is stored and who has accessed it.
- Any action that created a working copy, such as cropping a duplicate for a report.
Do not backdate entries. If you discover an error, add a dated correction rather than silently replacing the earlier note.
5. Understand what screenshots can and cannot show
Screenshots preserve the visible appearance and surrounding context at a particular moment. They can help establish that an account displayed particular material, text or threats. They normally do not retain the underlying post data, file metadata, server logs or information about how the media was created.
California Department of Justice law-enforcement guidance cautions that printouts and screenshots do not include valuable metadata that may assist an investigation. That guidance is directed to law enforcement and does not mean an ordinary reader should try to obtain private server data or an IP address. It means screenshots should be one layer of preservation, not the entire record.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
Keep the original digital file when it is already in your possession and safe to retain. A platform’s own download or export may preserve information that a screenshot omits, but neither a download nor metadata automatically establishes authenticity. Avoid changing file properties while trying to “improve” the evidence.
6. Report every occurrence and save the receipts
After documenting each location, use the platform’s own reporting flow. Submit a separate report for every account, post, message, group or website where the material appears. Save the confirmation screen, case number, submission date, category selected and any response.
- Open the specific post, profile or message containing the material.
- Choose the platform’s report or safety option.
- Select the most accurate category available, such as non-consensual intimate imagery, impersonation, harassment, extortion or manipulated media.
- Describe the facts briefly and identify the exact URL or account.
- Save the confirmation page, email or ticket number before closing the report.
- Repeat the process for every copy and update your incident log.
A request to a search engine can reduce visibility in search results without removing the material from the website that hosts it. Report the source page as well as any search result. Keep both records separate.
Sexual deepfakes and intimate-image abuse
RAINN provides platform-specific reporting links and support information for sexual deepfakes and non-consensual intimate images. Its guidance states that, under the TAKE IT DOWN Act, covered platforms must remove covered non-consensual intimate images after a valid or verified request within 48 hours. This is a narrowly scoped statement about covered intimate-image situations; it is not a universal deadline for every deepfake, platform or country. RAINN directs users to the Federal Trade Commission if covered material has not been removed 48 hours after a platform report.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
7. Escalate threats, sextortion and serious harm
The FBI’s June 5, 2023 public safety alert describes deepfakes as a broad range of AI- or machine-learning-generated or manipulated images, video, audio or text, and addresses malicious explicit-image manipulation and sextortion schemes. For incidents within that scope, the alert identifies the FBI’s Internet Crime Complaint Center (IC3), an FBI field office and the National Center for Missing & Exploited Children (NCMEC) as reporting routes, depending on the circumstances.
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
Retain the incident number from any report and provide the factual timeline, URLs, account identifiers, messages, demands and platform receipts. Do not pay a blackmailer simply to obtain a promise of deletion; payment may not stop distribution and can create additional demands. If you already paid, preserve transaction records and do not delete the related communications.
Jurisdiction matters. Laws concerning impersonation, intimate images, harassment, fraud, defamation and extortion differ by location. A local victim-support organization, attorney or law-enforcement agency can explain which route applies to your situation.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.8. When to use a digital-forensics professional
Formal investigations may require controlled acquisition, examination of metadata, preservation of volatile online information or testimony about handling procedures. National Institute of Justice first-responder guidance and the National Institute of Standards and Technology’s NISTIR 8387 publication describe specialized digital-evidence practices; they are not consumer instructions for extracting private platform data.
Free tools Windows power users keep installed
One-click scans. No signup required.
Consider qualified digital-forensics help when identity, employment, custody, immigration, criminal allegations or substantial financial loss are at stake; when the original file must be examined; or when the platform has removed the content and only partial records remain. Ask how the provider will preserve originals, document each action, protect intimate material and return or securely destroy copies. Do not give an unknown “deepfake detector” unrestricted access to your accounts or private files.
9. Common mistakes and safer alternatives
| Mistake | Why it causes problems | Safer approach |
|---|---|---|
| Saving only a cropped image | It may omit the account, URL, caption and timestamp. | Capture the surrounding page and record the complete URL separately. |
| Editing or recompressing the only file | Changes can remove information and make the handling history unclear. | Keep the original untouched and work from a duplicate. |
| Confronting the poster | It can escalate threats or prompt deletion before you document the page. | Preserve what is safe, report through the platform and seek support. |
| Posting the material publicly as proof | It can increase distribution and harm the targeted person. | Share only with the platform, authorities, an advocate or a qualified professional who needs it. |
| Reporting one copy only | Other accounts or sites may remain active. | Log and report every occurrence separately. |
| Assuming removal proves falsity | Platforms remove content under many policies and do not necessarily make a technical finding. | Describe what was displayed and what action the platform took without claiming more. |
| Assuming a screenshot proves authorship | It shows what was visible, not who created or uploaded the media. | Preserve account identifiers, messages, URLs and report history, then seek qualified investigation if needed. |
10. A compact checklist
- Confirm that collecting the material will not put anyone at risk.
- Ask a trusted person to help if the content is distressing.
- Write who posted it, where it appeared and when you found it.
- Capture the post, surrounding context, account details and threats.
- Copy every complete URL and record each platform location separately.
- Preserve any original file unchanged; create working copies only when necessary.
- Store records securely with access limited to people who need them.
- Maintain a dated collection and access log.
- Report every occurrence to its host and save confirmations.
- Use RAINN, IC3, an FBI field office, NCMEC or local services when the facts fit their respective scopes.
- Consult a qualified digital-evidence professional for formal collection or complex cases.
What this record can establish
A carefully maintained record can show what was visible at a particular URL, which account displayed it, when you observed it, what communications accompanied it and how platforms responded. It can help an investigator locate copies before they disappear.
It cannot, by itself, establish who made the media, whether an image or voice was manipulated, the identity of an anonymous poster, or whether a court will admit a particular item. Those conclusions may require platform records, technical examination, witness evidence and rules specific to the relevant jurisdiction. Preserve the material accurately, avoid speculation and let qualified investigators determine what it proves.
The Bottom Line
Document the full context quickly and safely, preserve originals without alteration, keep a dated handling log, report every copy and escalate threats or sexual-image abuse through the appropriate platform, support service or authority. A screenshot is valuable evidence of what you saw, but it is only one part of a reliable record.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
