Act from a trusted device and avoid irreversible changes before preserving the information already available.
Keep originals whenever possible
Avoid editing the only copy. Export messages using platform tools, save original files, and note where and when each item was collected.
Capture context, not only screenshots
Record profile URLs, usernames, transaction references, dates, time zones, email headers, and the sequence of events. Context makes individual images more useful.
Store evidence safely
Use a protected location and restrict access. Do not upload sensitive material to public file-sharing links, and never include passwords or private cryptographic keys.
Remember
No legitimate recovery assessment requires your password, one-time code, wallet seed phrase, or private key. Verify providers independently.