Evidence in Cybercrime Cases: What Victims Need to Collect

Indian cybercrime cases are on a continuous upward trend and in the majority of the cases, digital evidence is instrumental in deciding whether a cybercrime complaint is accepted or rejected. From a UPI fraud to a hacked social media account to a phishing scam, the evidence you have in the first few hours of an incident can be a big help in building your case. Quickness is important with digital evidence such as messages, screenshots and transaction records, it is possible for them to be lost, overwritten or deleted if the time goes too long. This blog will guide you on what to save, the proper way to save it, and then, when you’re ready, how to file a complaint.

It is important to have a good conversation with experienced cyber crime lawyers in Bangalore at the initial stage of a cybercrime incident, to ensure that evidence is gathered correctly from the outset.

Why Is Evidence Important in Cybercrime Cases?

Understanding Digital Evidence

Any information that is stored or passed through digital means that can be used to prove what occurred in the commission of a cyber offence is Digital evidence, such as messages, emails, transaction logs, screenshots and device information. Electronic records are the most telling signs of a cybercrime, giving them weight and importance. They have been recognized as evidence under the Information Technology Act, 2000, and the Bharatiya Sakshya Adhiniyam, 2023 (Indian Evidence Act) that governs admissibility of Digital Evidence in Indian Courts.

How Evidence is Used in Investigation

Well-preserved evidence can be a factor in every stage of a case:

It provides an aid to investigators when identifying offenders.
Helps Police in the development and advancement of the investigation
It strengthens the prosecution case if the case ends up in court

For the general overview, refer to our guide on cybercrime laws in India.

What is the Best Evidence for Victim to Gather?

1. A Screen Shot Of the Incident

It is important that any victim attempt to save any screenshots of fraudulent websites, fake profiles, suspicious messages and any error messages that could prove to be evidence of their cyber fraud.

2. Email Message and Email Header

Save a copy of any suspicious e-mails, attachments, sender information, and email headers in case it helps determine where the emails originated, and how the fraud was implemented.

3. Chat and Messaging Records

Store conversations from WhatsApp, Telegram, Instagram, Facebook Messenger and SMS. Do not delete or change the original messages.

4. Bank Transaction Details

Keep UPI transaction IDs, bank statements, payment receipts, and the transaction history for the wallet to prove the financial damage and track the transactions.

5. Website URL and IP Information.

Document fake URL, login URLs, suspicious link and any possible IP data. The information can help determine the origin of the illegal activity.

6. Device Information

Save pertinent details of the device used including mobile phone or computer usage and browser history and any installed applications, especially those that may relate to the incident.

Evidence for Various Forms of Cyber Offences

Each type of cybercrime requires a bit different type of evidence:

Online Banking & UPI Fraud : Transaction ID, bank statements and payment app notifications.
Social Media Account Hacking : Alerts to login, activity logs, and interaction with the platform’s support team.
Identity Theft : Fraudulent profiles, stolen documents and any messages from fake profiles.
Online Shopping Fraud: Confirmation of fraud in online shopping, receipts of payment and communication with sellers.
Phishing and Email Scams: Save a copy of any suspicious e-mails, attachments, sender information, and email headers in case it helps determine where the emails originated, and how the fraud was implemented.

Read our guide on types of cyber crimes in India for better understanding.

Common Errors That Victims Should Stay Away from Doing

Formatting or Resetting Devices : This can cause evidence used in an investigation to be lost forever.
Deleting Chat History : All messages are potentially useful during investigation, even those apparently irrelevant.
Sharing Sensitive Evidence Publicly : The sharing of evidence on social media platforms can only undermine the investigation and your privacy.
Delaying the Complaint : Delaying too long may cause evidence to be lost and make recovery and/or action less likely.

How to Submit Digital Evidence When Filing a Complaint:

Uploading Evidence on the National Cyber Crime Portal: You can upload Evidence on the National Cyber Crime Portal. Evidence supporting a victim’s complaint can be uploaded to the Portal on their own.
Submitting Evidence to the Cyber Crime Police Station: The evidence may also be presented on paper or in electronic format at the appropriate police station.
Supporting Documents to be provided during Investigation : Investigators may ask for other documents as the investigation expands.

Read our guide how to file a cyber crime complaint online for better understanding

What Happens Once the Evidence is Submitted?

Verify the Digital Evidence : The evidence submitted is examined by the authorities to determine its authenticity and relevance.
Registration of FIR (where applicable) : The FIR may be framed if the evidence and the nature of the offence is such.
Digital Forensic Examination : In a few instances, evidence may be submitted for forensic examination to determine technical information of the offense.
The cyber crime authorities have been investigating the matter : Cyber Crime Authorities are investigating the matter. The case will then go into investigation, including traces of devices, account(s) or transactions associated with the crime.

How Prime Legal Can Assist Victims of Cyber Crime

A lawyer will be able to assess what evidence is admissible and how it should be recorded in a court of law.
Supporting in the preparation of complaints
Legal support from the drafting of your complaint to the provision of supporting documents makes sure that your complaint is complete and clear.
Working with Investigating Authorities
A lawyer may communicate with the police and the cyber cell on your part all through the method.

How Prime Legal Can Assist Victims of Cyber Crime

Guidance on Evidence Collection : We help the victims to find, trace, save and compile all the digital and financial evidence, whether it be screenshots, texts, emails, business records and so on and so forth.
Cyber Crime Complaint Assistance: Our team can assist in preparing and filing a detailed cyber crime complaint with the appropriate authorities, ensuring that the relevant facts and supporting evidence are properly presented.
Legal Representation During Investigation: We provide legal assistance and representation during the investigation, helping victims understand the process and protecting their legal interests.
Court Representation and Recovery Support : Where necessary, we assist victims with court proceedings and appropriate legal remedies aimed at securing justice and pursuing recovery of losses.

Conclusion

One of the most critical elements following a cybercrime incident is the collection and preservation of digital evidence. Appropriate documentation and timely reporting can assist the effectiveness of the investigation and legal advice can help to preserve and present evidence in a proper manner.

Frequently Asked Questions

1. Are screenshots valid evidence in cybercrime investigations?

Yes, screenshots can serve as valid evidence, provided they are captured promptly and, where required, supported by additional details such as timestamps and URLs.

2. Can deleted messages be recovered as evidence?

In some cases, deleted messages can be recovered through forensic examination, though this isn’t guaranteed which is why avoiding deletion in the first place is important.

3. Is there enough data on banks to support cybercrime complaints?

While bank transaction history is an important piece of supporting evidence, it’s usually suggested to use other pieces of evidence, such as screenshots or communication records to strengthen a complaint.

4. Should I turn over my cell phone to the police?

This is dependent on the case itself, and the needs of the investigating officer. A lawyer will be able to advise you when and how this should be done.

5. Is there evidence that can be obtained from a CCTV camera or a call recording?

Yes, CCTV footage and call recordings can be used as evidence for a cybercrime complaint (if applicable and available)

6. Do I need a lawyer to gather cybercrime evidence and file it?

It is not a requirement, but a lawyer can do a lot to help you gather the evidence in a legally admissible and correct manner which can only help strengthen your case.