Evidence Preservation Guide

Evidence Preservation Guide

How to safely document extortion attempts without putting yourself at risk.

Why Evidence Matters

Evidence helps:

• Police investigate — Screenshots, messages, and call logs connect cases
• Prosecutors build cases — Digital evidence is admissible in court
• Protect others — Patterns in your evidence may help identify serial extortionists
• Protect you — Documentation proves you were victimized, not complicit

You don’t need to review distressing content. Just preserve it — you can hand it to authorities without looking at it again.

The Golden Rule

Do not delete anything.

Even if the content is embarrassing, threatening, or upsetting — do not delete it.

• Don’t delete messages
• Don’t delete call history
• Don’t delete emails
• Don’t delete voicemails
• Don’t delete social media DMs
• Don’t clear browser history

Deleted content is much harder (sometimes impossible) to recover.

What to Preserve

Communications

Digital Evidence

Financial Records

How to Take Good Screenshots

1. Capture the whole screen — Don’t crop out timestamps, phone numbers, or profile info
2. Include context — Show the sender’s name/number and the date/time
3. Take multiple shots — If a conversation spans multiple screens, capture all of them
4. Check clarity — Make sure text is readable

On iPhone

• Press Side button + Volume Up simultaneously
• Find screenshots in Photos app

On Android

• Press Power + Volume Down simultaneously
• Find screenshots in Gallery or Files

On Computer

• Mac: Command + Shift + 3 (full screen) or Command + Shift + 4 (selection)
• Windows: Print Screen key, or Windows + Shift + S

Where to Store Evidence

Recommended: Multiple Locations

1. Your device — Keep originals where they are
2. Cloud backup — iCloud, Google Drive, or Dropbox (use a strong password + 2FA)
3. External storage — USB drive or external hard drive kept somewhere safe
4. Email to yourself — Send copies to an email account only you can access

Security Tips

• Use a dedicated folder labeled something neutral (not “Extortion Evidence”)
• Enable two-factor authentication on cloud accounts
• Use a strong, unique password for accounts holding evidence
• Consider a password manager (1Password, Bitwarden)

Do NOT Store Evidence

• On shared family devices without your own secure account
• On devices the extortionist may have access to
• In locations where others might accidentally delete it

For WhatsApp Users

WhatsApp is commonly used in extortion targeting South Asian communities. Here’s how to preserve evidence:

Export a Chat

1. Open the chat with the extortionist
2. Tap the contact name at the top
3. Scroll down to Export Chat
4. Choose Include Media (if asked)
5. Save to Files, email it to yourself, or upload to cloud storage

Important Settings

• Turn OFF auto-delete for this conversation if disappearing messages are enabled
• Disable auto-download of media if you don’t want to view content (Settings → Storage and Data → Media Auto-Download → turn all off)

For Call Records

Even if you can’t record calls, you can document them:

Immediately After a Call

Write down:

• Date and time
• Phone number (from recent calls)
• Duration
• What the caller said (as close to exact words as you can remember)
• What you said (if anything)
• Any names, amounts, or threats mentioned
• Background noises or accents you noticed

Call Recording (Know the Law)

In Canada, one-party consent applies — you can record a call you’re part of without telling the other person. However:

• Some phones don’t allow call recording without third-party apps
• Check your phone’s capabilities
• If you can record, save the files securely

What If I Already Deleted Something?

Don’t panic. Some options:

• Recently deleted folder — Check your phone’s “Recently Deleted” (Photos, Messages)
• Cloud backups — iCloud, Google, WhatsApp backups may have older copies
• Contact your carrier — Phone companies may retain call records (not content)
• Tell police — They have forensic tools that can sometimes recover deleted data

Even partial evidence is useful. Don’t let fear of imperfect documentation stop you from reporting.

Handing Evidence to Police

When you report:

1. Don’t alter originals — Give copies, keep your originals
2. Organize chronologically — Put screenshots in date order
3. Create a summary — A simple timeline helps investigators
4. Be honest about gaps — If you deleted something, say so

Sample Timeline Format

Privacy Note

The evidence you collect is for law enforcement and your own protection.

Do not:

• Share evidence publicly
• Post screenshots on social media
• Forward content to people who don’t need to see it
• Attempt to identify or track the extortionist yourself

Let authorities handle investigation. Your job is to preserve and report.

Summary Checklist

• Screenshot all messages (texts, WhatsApp, DMs, emails)
• Document all phone calls (date, time, number, what was said)
• Screenshot the extortionist’s profile(s)
• Save any payment demands or account numbers
• Back up evidence to at least 2 locations
• Do NOT delete anything
• Do NOT share evidence publicly
• Report to police with copies, keep originals

Need Help?

VictimLink BC: 1-800-563-0808 (24/7, free, confidential, 240+ languages)

Victim service workers can help you organize evidence and prepare to report.

→ Back to What To Do
→ How to Report

Last updated: February 2026