What to Save After a Crypto Scam
Your crypto is gone, and you want to keep everything that can help trace it.
Updated 2026-09-29 · Independent resource. Legal review pending.
Why crypto scam evidence needs a different checklist
A crypto scam leaves evidence in places a bank transfer does not, mainly on the blockchain itself and inside the exchange or wallet app you used. Saving the right details now makes tracing far more realistic later.
Some of this evidence, like an app’s transaction history, can disappear if the platform shuts down or blocks your access. Save what you can as soon as you notice a problem.
Save every wallet address you sent to
Write down or copy the exact wallet address you sent funds to, for each transfer if there was more than one. Even a single character wrong can point tracing efforts at the wrong wallet entirely.
If the scammer asked you to send to different addresses over time, keep them in the order you used them. This sequence can show funds moving further along the same trail.
Save the transaction hash for every transfer
Every transaction on a blockchain has a unique transaction hash, sometimes called a transaction ID, that identifies it exactly. Save this alongside the wallet address, since it lets anyone tracing the funds confirm your specific transfer among millions of others.
Most wallet apps and exchanges show this hash in the transaction details or history. Copy it as text rather than relying only on a screenshot, since text is easier to search and verify later.
Save your exchange account records and any KYC correspondence
If you used an exchange to buy or send the cryptocurrency, save your account records, deposit and withdrawal history, and any identity verification (know your customer, or KYC) correspondence. This shows what the exchange already knows about your own account.
If the scammer directed you to open an account on a specific exchange or platform, save that too, along with any support tickets or emails exchanged about the blocked withdrawal.
Save screenshots and every chat log
Screenshot the app or platform showing your balance, the withdrawal block, and any fees demanded to release funds. Keep the full chat history with the scammer, not only the messages mentioning money.
Even if the scammer used a false name, the conversation itself is useful. It can contain details, such as a phone number or another platform mentioned in passing, that help identify the person later.
What to do next
Gather everything into one place: wallet addresses, transaction hashes, exchange records, and chat logs. This is what a tracing effort or a police report will be built on.
File a police report and report the case to the exchange involved if one was used. If part of the money passed through a Malaysian bank account, call the National Scam Response Centre on 997.
Once you have a fuller picture of what happened, ask about whether legal action is worth it.
If you sent cryptocurrency and still have the wallet address or transaction details, tell us what you have and we can help you see what else is worth saving.
Common questions
Do I need the wallet address, or is a screenshot of the app enough?
Save both. The exact wallet address you sent to is needed for any tracing, while screenshots of the app show the balance, the platform, and how the withdrawal was blocked. Together they give a fuller picture than either alone.
What is a transaction hash, and why does it matter?
A transaction hash, also called a transaction ID, is a unique code identifying a specific transfer on the blockchain. It lets anyone tracing the funds confirm exactly which transaction is yours, so save it alongside the wallet address.
The scammer used a fake name. Is there still a point in saving chat logs?
Yes. A fake name does not remove the value of the conversation, since it shows how the scam unfolded and may contain details, such as a phone number or another platform, that help identify the person later.
Read next
How to make a police report
If you want to report a scam, here is how to make a police report, what the Commercial Crime Investigation Department handles, and what to bring.
Read thisCrypto tracing: following where it went
Here is how cryptocurrency sent to a scammer can be traced through wallet addresses and exchange records, and what evidence matters most.
Read thisHow to build a transaction chronology
If your scam involved more than one payment, here is how to build a clear transaction chronology that a bank, the police, or a lawyer can follow.
Read thisFiling a police report for a scam
A police report matters even for a small loss. Here is where to file one, what to bring, and why it supports later steps.
Read thisIf you sent cryptocurrency and still have the wallet address or transaction details, tell us what you have and we can help you see what else is worth saving.