How to Save Evidence of Online Harassment

Someone keeps posting about you, filling your comments with abuse or sending messages that make you feel unsafe. Your first instinct is to report the account and block it so it stops. That is a fair instinct, but doing it first can wipe out the proof you will need later.

The short answer: capture everything before you report or block. Take full-screen screenshots that show who said it and when, copy every link as text, record anything that disappears, and keep a dated log. Then report.

This guide is a practical evidence checklist for harassment on Instagram, Facebook, TikTok, WhatsApp, Telegram and similar apps, written for people in Malaysia who may later go to the platform, MCMC or the police. It is general information, not legal advice. If what you are facing is specifically an anonymous gossip account built around you, our guide to removing an anonymous gossip account in Malaysia covers that case directly.

Last checked: 5 October 2026.

#How Do You Save Evidence of Online Harassment Before Reporting?

Before you press report or block, take a full-screen screenshot of each abusive post, comment or message so the username, the words and the date are all visible, and copy the profile link and the post link into a note. Screen-record stories, lives and disappearing messages straight away. Write each incident into a dated log, back the files up somewhere private, then report on the platform. For physical or death threats, MCMC's FAQ on threats says you may consider lodging a report at the nearest police station immediately. If someone is in immediate danger, call 999.

#Why Capture First, Report Second

Reporting and blocking are the right steps. They just come after the evidence.

• A report that works removes the content. Instagram's page on reporting harassment or bullying asks you to report accounts, photos or comments meant to bully or harass. If the platform agrees, the post goes, and so does your proof of what it said.
• Blocking changes what you can see. Instagram's blocking help pages note that comments and likes are removed when you block someone, and other apps hide the blocked person's profile or messages from you in different ways.
• The person may delete it themselves once they see you are reacting, especially if they think you will go to the police.
• Stories, live videos and disappearing messages expire on their own, often within a day.

#The Evidence Checklist

Work through this for each incident, and keep everything in one folder on your phone.

#How to Take Screenshots That Hold Up

A cropped image of one cruel sentence, with no name and no date, proves very little.

1. Open the post or message in the app, not a notification preview.
2. Make sure the username or display name is on screen with the words.
3. Find the date. Many apps show a relative time such as "2h" or "3d"; tap or hover where the app lets you, and write the actual date in your log too.
4. Take a full-screen capture without cropping. The status bar with the phone's clock adds context.
5. For long threads, take overlapping screenshots so nothing is missing between them.
6. Copy the link to the post and paste it into your log next to the screenshot's file name.
7. Do not edit, annotate or draw on the original. If you need to highlight something for a report, make a separate copy.

#Recording Stories, Lives and Disappearing Messages

Content that expires needs to be captured while it is still there. Most iPhones and Android phones have a built-in screen recorder in the control or quick settings panel. Start it before you open the story or live, keep the username visible, and let it run until the abusive part has finished.

For disappearing messages, record or screenshot each one as it arrives. Then add a line to your log saying what was recorded, on which app and when, because a video file does not explain itself. If the video itself has been edited or AI-generated to look like you, treat it as its own problem; our guide to removing an AI deepfake video of yourself covers that evidence and reporting separately.

#Exporting Your Own Data From Facebook

Some evidence sits in your own account, such as messages you received and comments on your posts. Its help page on exporting your Facebook information says the tool sits under "Export your information" (Settings and privacy, then Settings, then Accounts Centre, then Your information and permissions). You can choose specific types of information and a date range, and pick HTML for a copy you can open like a web page.

Meta says that once an export is ready you have four days to save it from "Available downloads", and that exporting is a password-protected process. The same page also calls the tool "Download your information". The file holds private information, so store it as carefully as the rest of your evidence. The export is a backup of your side of things. It does not replace screenshots of public posts made by someone else.

#Keep a Simple Dated Log

A log turns a pile of screenshots into a story someone else can follow quickly. A note on your phone or a simple spreadsheet is enough. One line per incident, with these columns:

• Date and time it happened (and when you found it, if different).
• Platform and account username, with the profile link.
• Link to the post, comment or chat.
• What was said or done, in a short factual sentence. Quote exact threatening words.
• The file names of the matching screenshots or recordings.
• What you did: reported, blocked, restricted, and any reference number.

Keep the tone factual: "posted my workplace name and said they would wait outside" is easier for a reviewer or officer to act on than a description of how it felt.

#Storing Your Evidence Safely

• Keep at least two copies: one on your phone and one in a private cloud folder or on a computer.
• Protect the account that holds the folder with a strong password and two-factor authentication.
• Do not keep the evidence in a shared family album or group chat where others can see or delete it.
• Do not delete your own chats with the harasser. Archive them instead.

#If Intimate Images or a Child Are Involved

This is the one situation where the normal advice to save copies does not apply. Keeping, forwarding or sharing intimate images, even as proof, can spread the harm, and the law treats sexual images of anyone under 18 far more seriously than other content.

1. If anyone is in danger or being threatened, contact the police first, or call 999 in an emergency.
2. Write down the account name, profile link, post link and date as text. Describe the image in words without saving it.
3. Report it on the platform using its nudity, intimate image or child safety report option.
4. If you are an adult and you are the person in the image, StopNCII creates a digital fingerprint (a hash) on your own device, so the image itself is never uploaded. Participating platforms then look for matches and remove ones that break their rules. Its FAQ says it covers participating public platforms only, not the whole internet or encrypted messaging apps, and that you can only submit images of yourself.
5. If the image was taken before you were 18, StopNCII points to Take It Down, run by the US National Center for Missing & Exploited Children, which works the same way. It asks you not to send, share or download any image in order to submit it.

Our guides to intimate image abuse removal and sextortion in Malaysia cover the next steps in more detail, including what to do if someone is demanding money.

#Where the Evidence Goes Next

With the evidence saved, report in this order. MCMC's complaint steps set out the same sequence.

1. Report on the platform first. MCMC encourages complaints directly to the content owner, moderator or the site's report abuse tool, and says a self-report from the person affected is prioritised by website administrators.
2. Complain to MCMC at aduan.mcmc.gov.my if the content stays up. MCMC asks for detailed information and supporting documents about the content, plus copies of emails or letters you sent the platform or other enforcement agencies. It says it acknowledges each complaint with a reference number. Our MCMC complaint walkthrough covers the form.
3. Go to the police for threats, doxxing, extortion or sustained abuse. Your log and screenshots are what the officer will ask for. See what to bring to a police report for online harassment.

If money was lost, for example to someone demanding payment, call your bank and the National Scam Response Centre on 997 as soon as you can. For the legal side, including the Penal Code and the Online Safety Act 2025, see our plain-language explainer on Malaysia's harassment laws.

#What Not to Do While Collecting Evidence

• Do not reply, argue or threaten the person. Your messages become part of the record and can escalate things.
• Do not try to find out who runs an anonymous account by hacking, tracking, fake profiles or asking someone to dig up their details. That can be an offence itself. Leave identification to the police.
• Do not ask friends to mass-report the account. Coordinated or false reporting can break platform rules and does not speed up a review.
• Do not pay "investigators" or "hackers" who offer to unmask the account or delete the posts. These offers are often scams.
• Never give anyone your password, login codes, OTP or backup codes, whatever they promise in return.

#When a Case Review Makes Sense

Everything above can be done on your own, and the platform, MCMC, the police and the courts are the ones who act on the content or the person. Some people want a second pair of hands, for example when harassment spreads across several accounts and apps, or when reports keep coming back rejected. SocialSafe by AwareXone reviews each request first and prepares rights-based reports through official platform and legal channels only. We do not identify or contact the person harassing you, we never file false or mass reports, and we never ask for passwords or login codes. The platform makes the final decision. Our content removal support page explains the review, and the Trust Center sets out what we will never ask for.

#Frequently Asked Questions