If you get a strange text, email, voicemail, or phone call, it can be tempting to delete it right away. But if it might be a scam or fraud attempt, saving the evidence first can help you understand what happened and share it with the right people later.
The goal is not to “prove” a scam by yourself. It is to keep a clear record in a safer way, so you can review it, ask someone you trust, or report it if needed.
What this means
Preserving evidence means keeping the original message or call details in a way that does not change them more than necessary. This can include:
- Text messages
- Emails
- Voicemails
- Call logs
- Screenshots
- Links or sender details
- Any payment request or attachment
A good record can help you spot patterns, compare messages, and explain what happened to a bank, platform, employer, family member, or official agency.
It is also important to be careful. Opening files, tapping links, or replying can sometimes create more risk. So the safest approach is usually to save what you can first, then pause.
Warning signs
A suspicious message or call may try to rush you, scare you, or keep you from checking details. Common warning signs include:
- Pressure to act right away
- Requests for passwords, codes, or payment
- Strange sender names or phone numbers
- Odd spelling, grammar, or formatting
- A link that looks close to a real company but not quite right
- Claims that your account is frozen, hacked, or overdue
- Someone asking you to move the conversation to another app
- A voicemail or call that leaves an urgent message with no clear company details
If any of this shows up, it is reasonable to slow down and save evidence before doing anything else.
Questions to ask
Before you respond, ask yourself:
- What exactly did I receive?
- Did it come from a known contact, or just a name I recognize?
- Is there a phone number, email address, or link I can record?
- Did the message ask for money, codes, login help, or personal details?
- Did it create urgency, fear, or secrecy?
- Have I seen this before from the same sender?
- Would a trusted person say this looks unusual?
If you are unsure, that is okay. You do not need to decide immediately whether it is a scam. You only need to preserve what you have.
Safer next steps
Here are practical ways to save evidence with less risk:
1. Take screenshots
Screenshots can capture the message, sender name, time, and phone number or email address.
Try to include:
- The full message
- The sender information
- The date and time
- Any links, attachments, or images
If there are many messages, take more than one screenshot so the conversation makes sense.
2. Copy the text into a note
For emails or texts, you can also copy the message into a note or document. Keep the original message too if possible.
Include:
- Exact wording
- Date and time
- Sender address or number
- Any reply you sent
If you copy text, do not change the words, even if there are mistakes. Exact wording can matter later.
3. Save voicemail safely
If you receive a suspicious voicemail, save the audio if your phone or carrier allows it.
You can also write down:
- The caller’s number
- The time and date
- The main message
- Any names, company names, or callback numbers mentioned
If your phone offers a share or download option for voicemail, use the built-in tool rather than a random app.
4. Keep the original message
Do not delete the message right away if you may need it later. Keep it in your inbox, message thread, or call log.
If you are worried about tapping something dangerous, avoid opening attachments or clicking links. You can still preserve the visible parts with a screenshot.
5. Save call details
For phone calls, record:
- Number shown on caller ID
- Time and date of the call
- Length of the call
- What was said
- Any voicemail left
If the call was from a withheld or unknown number, note that too.
6. Save related payment or account details
If the message mentions money, gifts, transfers, or account changes, keep records of:
- Transaction IDs
- Receipts
- Bank alerts
- App notifications
- Account change emails
Only save what you already received. Do not enter new information into a suspicious site or app.
7. Back up the evidence
If possible, store a copy somewhere safe, such as:
- A secure cloud account you already use
- A computer folder with a clear name and date
- A USB drive you trust
Use a folder name that helps you remember the context, like “Suspicious message - March 2026.”
8. Avoid spreading the message around
Do not forward the message to friends just to ask if it looks real, especially if it contains links or attachments. A screenshot or copied text is usually safer than forwarding the original item.
9. Be careful with attachments
If a suspicious email has an attachment, do not open it unless you have a strong reason and a safe way to check it. Save the email details and seek a trusted second opinion instead.
10. Write a short note about what happened
Along with the evidence, write down:
- What happened before the message or call
- What you did next
- Whether you responded
- Any change in account activity afterward
Small details can be useful later.
Ways to verify
Preserving evidence is not the same as proving fraud. If you want to check whether the message is real, use official and trusted channels:
- Go to the company’s official website by typing it yourself or using a saved bookmark
- Call the official number listed on the company’s website or statement
- Log in through the company’s official app, not a link in the message
- Ask a trusted friend, family member, or coworker to review the evidence with you
- Compare the message to earlier real messages from the same organization
If the message claims to be from a bank, delivery service, government office, or tech company, do not use the contact info in the suspicious message. Use official contact details instead.
Final reminder
You do not need to handle a suspicious message alone, and you do not need to decide everything at once. Save what you safely can, avoid clicking or replying, and get a second opinion through official channels.
Good evidence is clear, dated, and kept with care. The goal is not to panic. The goal is to protect yourself, keep your records, and make informed next steps.