Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Capture the evidence now, preserve the untouched originals, and save more than a screenshot. Record the profile URL, handle, account name, visible dates, messages, transactions and surrounding page context. Keep an unedited master copy with its metadata, document who captured it and when, create a separate working copy for redactions, and store both the master and a backup where alteration or accidental deletion is controlled. Then submit the package in the format requested by the police agency, platform, regulator, insurer, court or lawyer.

What to preserve before a scam profile disappears

Online profiles, posts and messages can be edited or deleted without notice. Treat the first capture as a potentially one-time opportunity. The National Institute of Justice advises investigators to approach a crime scene as if it will be their only opportunity to preserve and recover evidence. The Internet Crime Complaint Center (IC3) likewise says it is important to keep any evidence related to a complaint.

Build an evidence set, not a single image

  • The profile’s displayed name, username or handle, platform name and profile URL.
  • The URL of the specific post, message or listing when the platform provides one.
  • Visible dates, times, time-zone indicators, account IDs and other identifiers.
  • Screenshots showing the relevant content and enough surrounding page context to identify where it appeared.
  • Conversation exports or chat transcripts, with attachments in their original form where possible.
  • Downloaded web pages, platform-provided exports and original files offered by the sender.
  • Payment and transaction records, including receipts, wire details or cryptocurrency records.
  • Emails with complete headers, phone or telephony logs, and relevant network or host logs when available.

A screenshot records what was visible in one view. It normally does not contain the full URL, hidden context, message history, original attachment metadata or the platform’s internal account identifier. Those additional records help a recipient understand what the image represents and may allow the platform or investigators to verify it independently.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Capture the page and context promptly

  1. Stop and record the state you found. Note the date and time in UTC, your local time if useful, the platform, profile name, handle, account status and every relevant URL. Do not assume the profile will remain available while you investigate.
  2. Capture the full visible page. Include the browser or app context needed to identify the account and the surrounding content. Take additional captures for long pages, separate posts, profile details and message threads rather than relying on one cropped image.
  3. Preserve the underlying material. When lawful and technically possible, download the page, export the conversation, or save the platform’s original file. IC3 identifies electronic copies of web pages, emails with full headers, chat transcripts, receipts, logs and hard-drive images as potentially relevant evidence.
  4. Save immediately to a dedicated evidence location. Do not leave the only copy in a browser download folder, temporary directory or messaging app that may synchronize, rename or delete it.
  5. Record actions that could change the view. If you opened a message, expanded a thread, accepted a consent prompt or changed a filter, write that down. Your notes should make clear what you did and what the page showed afterward.

Do not access an account without authorization, alter another person’s data, or publish sensitive personal information. Preservation should not become unauthorized access or public disclosure.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

Keep an untouched master and make working copies

The master is the first complete file or export you preserved. Do not crop, filter, annotate, compress repeatedly or overwrite it. The UK Defence Science and Technology Laboratory’s Digital Imaging and Multimedia Procedure v3.0 describes a definitive master copy that is documented, preserved for future viewing and stored to prevent alteration or accidental erasure.

Use a clear evidence ID and naming scheme

Give each item a stable identifier and a descriptive filename. For example, SCAM-001-profile-page-2026-10-15T1430Z.png identifies a case, item, subject and UTC capture time without changing the file itself. Keep a separate index that maps each ID to its description, source URL and storage location.

Separate masters from derivatives

  • Master: the original screenshot, export, download or attachment exactly as first saved.
  • Working copy: a duplicate used for highlighting, redaction, translation, resizing or explanatory notes.
  • Submission copy: a package prepared to meet a recipient’s size, format or privacy requirements.

Label derivatives as such. Never let a redacted or annotated copy replace the master.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Document provenance and create a chain-of-custody record

Provenance explains who created an item, how it was obtained and what happened to it afterward. NIST’s Digital Evidence Preservation: Considerations for Evidence Handlers (NISTIR 8387, 2022) emphasizes that digital objects and storage media have preservation concerns distinct from traditional evidence.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Record What to write down
Capture person Name or case role of the person who made the screenshot, export or download.
Device and software Device, operating system, browser or app, and the export or capture method.
Time Date and time in UTC; retain the device’s local time in notes when it helps explain the sequence.
Source Platform, profile or account identifiers, full URL and message or post URL where available.
Account state Whether the account was active, restricted, deleted, private or otherwise displayed a status at capture.
Actions Navigation, consent acceptance, expansion of a thread, download, export or other action taken.
File identity Evidence ID, original filename, format, size and storage location.
Integrity value A cryptographic hash, algorithm and resulting value for important files when practical.
Transfers and access Each copy, transfer, person receiving access and date, with the reason for the action.

A hash is a way to detect whether a file changed after you recorded its value; it does not prove that the content itself is truthful. Store the hash beside the evidence log, not only inside the file’s editable notes.

Store masters so they cannot be casually changed or lost

  1. Use dedicated, access-controlled storage. An external hard drive or equivalent can support a small case. Choose capacity, encryption and physical durability appropriate to the volume and sensitivity of the material.
  2. Keep a separate backup. A backup should be stored separately enough that accidental deletion, device failure or loss of the primary drive does not destroy both copies.
  3. Limit write access. Keep the master in a location where ordinary editing or synchronization cannot silently overwrite it. Give access only to people who need it.
  4. Maintain the chain log. Record every access, transfer, export and derivative. If someone receives a submission copy, the log should still show where the master remains.
  5. Test recovery. Periodically confirm that the backup can be opened and that the evidence IDs, hashes and index still correspond to the stored files.

For a larger or repeated investigation, evidence-archiving software may improve indexing and audit trails, but suitability depends on its security, export capability, access controls and the jurisdiction involved. No particular commercial archive product is universally appropriate.

Choose a preservation method that matches the case

Evaluate a method against six practical questions: Can it retain original files and metadata? Can another person reproduce the capture or verify a hash? Does it protect against alteration? Can it be backed up and recovered? Can you export a complete package? Does it meet privacy and jurisdictional requirements?

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Method Best use Important limitation to address
Screenshot Quickly records what was visible before a page changes. Does not by itself preserve the full URL, hidden context, conversation history or original-file metadata.
Downloaded page or PDF Preserves more page context and supports later review. May not include dynamic content, private messages or server-side records; keep the capture notes and URL.
Platform conversation export Retains a longer message history and platform-generated records. Export formats and available fields vary; preserve the original export unchanged.
Original attachment or file Retains the sender’s supplied file for metadata and technical examination. Do not open or resave the only copy in a way that changes metadata; work from a duplicate when analysis is needed.
External-drive evidence set Provides controlled storage for a small case and its backup. Requires a naming system, access control, separate backup and chain-of-custody log.

Preserve corroborating evidence

Connect the profile to the conduct you are reporting. Save receipts and payment confirmations, wire or cryptocurrency records, emails with complete headers, phone logs, chat transcripts and relevant network or host logs when available. Keep the relationship between items in your index: for example, identify which message contains a payment instruction and which receipt records the resulting transfer.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Do not edit a receipt to make it easier to read. If a recipient requires personal information to be redacted, make a derivative and retain the unredacted master securely.

Prepare the package for the recipient

  1. Ask for the process first. Police agencies, platforms, regulators, insurers, courts and lawyers may require different forms, file types, upload portals or authentication steps.
  2. Provide an index. List each evidence ID, a one-line description, source URL, capture time, file format and hash when recorded.
  3. Send copies, retain masters. Submit the requested derivative or export while keeping the untouched master and backup available for follow-up.
  4. Record the submission. Note the recipient, method, date, files sent and any confirmation number. Keep later requests and responses in the chain log.
  5. Expect direct verification requests. An agency may ask the platform, service provider or account holder for information directly. Your preserved originals remain important even if a third party is contacted.

Legal, privacy and authentication limits

Preservation guidance is not a universal admissibility rule. Whether a screenshot is authenticated or admitted depends on the jurisdiction, court, claim type, privacy rules and the receiving agency’s requirements. A careful chain of custody improves explainability but cannot guarantee admission.

  • Ask the receiving agency or a local lawyer what authentication, certification or format it requires.
  • Do not publish names, addresses, phone numbers, payment details or intimate material merely to prove a claim.
  • Preserve private messages only when you are authorized to access them and lawfully permitted to retain them.
  • Keep originals available even after submitting a report; deletion or alteration can make later verification harder.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting common preservation failures

The profile disappeared before you captured it

Save every earlier URL, notification, email, message, receipt and downloaded attachment you still possess. Record when you last saw the account and what its status showed. Submit those records promptly and tell the recipient that the profile is no longer available.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The screenshot is cropped or missing the URL

Keep the crop as a working copy, then capture the page again with the address or profile context visible. Add the full URL and account identifiers to the evidence index. Do not replace the original crop; preserve both with clear labels.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

A chat export opens incorrectly

Retain the original export in its supplied format. Make a duplicate for conversion or printing, record the software used and the conversion date, and submit both when the recipient allows it.

A file was renamed or moved

Do not overwrite it again. Record the old and new names, location, person who moved it and time of the change. Recalculate and record a hash for the file in its current state, while explaining the custody event.

You cannot prove who made the capture

Complete the provenance record now: identify the person, device, operating system, browser or app, UTC time, URL and actions taken. Ask anyone who witnessed the capture to preserve their own notes rather than editing yours.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The material contains another person’s sensitive information

Keep the unredacted master in restricted storage and create a redacted submission copy only if the recipient permits it. Ask the recipient what must be withheld and how it should be transferred.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

Or skip the browser setup

For a repeatable capture of a public profile or page, ScreenshotNeo can return a screenshot or PDF through one request. Before capture it accepts cookie or consent banners and removes more than 60 known consent platforms, newsletter popups and chat widgets; each step can be turned off. Bot checks or CAPTCHAs, blank pages, timeouts, failed loads and cache hits are not billed, and the response identifies the result with X-Page-Verdict and X-Billed headers. It also provides an MCP server for AI agents, including Claude, Cursor and other MCP clients, with take_screenshot, get_page_info and capture_pdf tools.

Use the API only where you are authorized to capture the page, and preserve the returned file as one item in the evidence set. Record the request URL, options, UTC time and response headers in your provenance log. Full-page capture, lazy-image loading, CSS-selector element capture, device and viewport settings, retina scale, waits, custom headers or cookies, hiding selectors, PDF page ranges, blocking rules, caching TTLs and signed links can help you reproduce a capture; choose only options that do not remove context you need to preserve.

See the ScreenshotNeo documentation for the request parameters. Example cURL:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://example.com/scam-profile -o shot.webp

Python:

import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://example.com/scam-profile"}, timeout=90)
open("shot.webp", "wb").write(r.content)

Node.js:

const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://example.com/scam-profile' }); const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);

The free plan includes 1,000 screenshots each month with no card; paid plans start at $5 for 3,000 shots. Create a free ScreenshotNeo account and keep the returned original alongside your other preserved records.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.