Preserving Digital Evidence and Transaction Logs Following Suspected Cryptocurrency Fraud
Securing comprehensive records immediately after an incident is critical for tracing stolen funds and assisting formal investigations. Victims should systematically preserve transaction identifiers, communication histories, and exchange account records before digital evidence is altered or deleted.
- Export the complete transaction hash identifiers, timestamped transfer records, and relevant sending and receiving addresses directly from your software wallet or exchange withdrawal history before closing any active sessions.
- Archive unedited message histories, email headers, platform login logs, and web address URLs from conversations with suspected perpetrators to document the representations made throughout the engagement.
- Notify the compliance team of any custodial exchange used in the transfer and alert your bank immediately if fiat payments were initiated, requesting an urgent recall of associated funds.
- Lodge a comprehensive crime report with Action Fraud detailing the exact chronology, including all verified onchain destination addresses, to establish an official reference number for subsequent forensic tracing.
Written by the Wallsec investigations team. General information only, not legal or financial advice.
Need a case reviewed?
Tell us what happened and we will say honestly whether the onchain data supports a trace.