Capture everything before you report or block. Take full-screen screenshots that show who said it and when, copy every profile and post link as text, screen-record stories and disappearing messages, and keep a dated log. Then report. For intimate images, do not keep copies; report to the police and the platform. For threats, go to the police promptly.
Summary
Save the evidence before you report or block, because a successful report can remove the post and blocking can remove the other person's comments from your posts.
Take full-screen screenshots that show the username, the message and the date, and copy each profile link and post link as text.
Screen-record stories, live videos and disappearing messages straight away, and keep a simple dated log of every incident.
For intimate images or images of a child, do not save or share copies; report to the police and use the platform form or StopNCII instead.
For physical or death threats, go to the police promptly, and never engage the harasser or pay anyone who offers to unmask the account.
Someone keeps posting about you, filling your comments with abuse or sending messages that make you feel unsafe. Your first instinct is to report the account and block it so it stops. That is a fair instinct, but doing it first can wipe out the proof you will need later.
The short answer: capture everything before you report or block. Take full-screen screenshots that show who said it and when, copy every link as text, record anything that disappears, and keep a dated log. Then report.
This guide is a practical evidence checklist for harassment on Instagram, Facebook, TikTok, WhatsApp, Telegram and similar apps, written for people in Malaysia who may later go to the platform, MCMC or the police. It is general information, not legal advice. If what you are facing is specifically an anonymous gossip account built around you, our guide to removing an anonymous gossip account in Malaysia covers that case directly.
Last checked: 9 November 2026.
#How Do You Save Evidence of Online Harassment Before Reporting?
Before you press report or block, take a full-screen screenshot of each abusive post, comment or message so the username, the words and the date are all visible, and copy the profile link and the post link into a note. Screen-record stories, lives and disappearing messages straight away. Write each incident into a dated log, back the files up somewhere private, then report on the platform. For physical or death threats, MCMC's FAQ on threats says you may consider lodging a report at the nearest police station immediately. If someone is in immediate danger, call 999.
Reporting and blocking are the right steps. They just come after the evidence.
A report that works removes the content. Instagram's page on reporting harassment or bullying asks you to report accounts, photos or comments meant to bully or harass. If the platform agrees, the post goes, and so does your proof of what it said.
Blocking changes what you can see. Instagram's blocking help pages note that comments and likes are removed when you block someone, and other apps hide the blocked person's profile or messages from you in different ways.
The person may delete it themselves once they see you are reacting, especially if they think you will go to the police.
Stories, live videos and disappearing messages expire on their own, often within a day.
A cropped image of one cruel sentence, with no name and no date, proves very little.
Open the post or message in the app, not a notification preview.
Make sure the username or display name is on screen with the words.
Find the date. Many apps show a relative time such as "2h" or "3d"; tap or hover where the app lets you, and write the actual date in your log too.
Take a full-screen capture without cropping. The status bar with the phone's clock adds context.
For long threads, take overlapping screenshots so nothing is missing between them.
Copy the link to the post and paste it into your log next to the screenshot's file name.
Do not edit, annotate or draw on the original. If you need to highlight something for a report, make a separate copy.
#Recording Stories, Lives and Disappearing Messages
Content that expires needs to be captured while it is still there. Most iPhones and Android phones have a built-in screen recorder in the control or quick settings panel. Start it before you open the story or live, keep the username visible, and let it run until the abusive part has finished.
For disappearing messages, record or screenshot each one as it arrives. Then add a line to your log saying what was recorded, on which app and when, because a video file does not explain itself. If the video itself has been edited or AI-generated to look like you, treat it as its own problem; our guide to removing an AI deepfake video of yourself covers that evidence and reporting separately.
Some evidence sits in your own account, such as messages you received and comments on your posts. Its help page on exporting your Facebook information says the tool sits under "Export your information" (Settings and privacy, then Settings, then Accounts Centre, then Your information and permissions). You can choose specific types of information and a date range, and pick HTML for a copy you can open like a web page.
Meta says that once an export is ready you have four days to save it from "Available downloads", and that exporting is a password-protected process. The same page also calls the tool "Download your information". The file holds private information, so store it as carefully as the rest of your evidence. The export is a backup of your side of things. It does not replace screenshots of public posts made by someone else.
A log turns a pile of screenshots into a story someone else can follow quickly. A note on your phone or a simple spreadsheet is enough. One line per incident, with these columns:
Date and time it happened (and when you found it, if different).
Platform and account username, with the profile link.
Link to the post, comment or chat.
What was said or done, in a short factual sentence. Quote exact threatening words.
The file names of the matching screenshots or recordings.
What you did: reported, blocked, restricted, and any reference number.
Keep the tone factual: "posted my workplace name and said they would wait outside" is easier for a reviewer or officer to act on than a description of how it felt.
This is the one situation where the normal advice to save copies does not apply. Keeping, forwarding or sharing intimate images, even as proof, can spread the harm, and the law treats sexual images of anyone under 18 far more seriously than other content.
If anyone is in danger or being threatened, contact the police first, or call 999 in an emergency.
Write down the account name, profile link, post link and date as text. Describe the image in words without saving it.
Report it on the platform using its nudity, intimate image or child safety report option.
If you are an adult and you are the person in the image, StopNCII creates a digital fingerprint (a hash) on your own device, so the image itself is never uploaded. Participating platforms then look for matches and remove ones that break their rules. Its FAQ says it covers participating public platforms only, not the whole internet or encrypted messaging apps, and that you can only submit images of yourself.
If the image was taken before you were 18, StopNCII points to Take It Down, run by the US National Center for Missing & Exploited Children, which works the same way. It asks you not to send, share or download any image in order to submit it.
With the evidence saved, report in this order. MCMC's complaint steps set out the same sequence.
Report on the platform first. MCMC encourages complaints directly to the content owner, moderator or the site's report abuse tool, and says a self-report from the person affected is prioritised by website administrators.
Complain to MCMC at aduan.mcmc.gov.my if the content stays up. MCMC asks for detailed information and supporting documents about the content, plus copies of emails or letters you sent the platform or other enforcement agencies. It says it acknowledges each complaint with a reference number. Our MCMC complaint walkthrough covers the form.
If money was lost, for example to someone demanding payment, call your bank and the National Scam Response Centre on 997 as soon as you can. For the legal side, including the Penal Code and the Online Safety Act 2025, see our plain-language explainer on Malaysia's harassment laws.
Do not reply, argue or threaten the person. Your messages become part of the record and can escalate things.
Do not try to find out who runs an anonymous account by hacking, tracking, fake profiles or asking someone to dig up their details. That can be an offence itself. Leave identification to the police.
Do not ask friends to mass-report the account. Coordinated or false reporting can break platform rules and does not speed up a review.
Do not pay "investigators" or "hackers" who offer to unmask the account or delete the posts. These offers are often scams.
Never give anyone your password, login codes, OTP or backup codes, whatever they promise in return.
Everything above can be done on your own, and the platform, MCMC, the police and the courts are the ones who act on the content or the person. Some people want a second pair of hands, for example when harassment spreads across several accounts and apps, or when reports keep coming back rejected. AwareXone reviews each request first and prepares rights-based reports through official platform and legal channels only. We do not identify or contact the person harassing you, we never file false or mass reports, and we never ask for passwords or login codes. The platform makes the final decision. Our content removal support page explains the review, and the Trust Center sets out what we will never ask for.
Are screenshots accepted as evidence for a police report in Malaysia?
Screenshots are commonly given to the police and to MCMC as supporting evidence, especially when they show the account, the words and the date. Bring the links as text too, so the content can be checked at the source. Whether evidence is accepted in court is a legal question for the police, prosecutors and a lawyer.
Will the other person know I took a screenshot?
It depends on the app and the type of content, and app behaviour changes over time. If you are worried, a screen recording or a photo of the screen taken with another device are alternatives, but your safety matters more than whether they find out.
The post was already deleted. Is it too late?
Not always. Write down what you remember, with the date, and ask anyone who saw it whether they kept a screenshot. Report the account anyway, since platforms can look at its wider behaviour.
Should I report or block first?
Capture the evidence first, then report, then block. Blocking first can remove the person's comments and hide their profile, which makes the report harder to file.
Can I keep a copy of intimate images someone posted of me as proof?
No. Do not save, forward or share them. Record the account and link in words, report to the police and the platform, and use StopNCII or, for images taken before you were 18, Take It Down.
Can AwareXone find out who is behind an anonymous account?
No. We do not unmask, track or contact anyone. Identifying a person is a matter for the police, and we only help with rights-based reports through official channels.