This article is for general informational purposes only and does not constitute legal advice. If you have been a victim of fraud, contact your local law enforcement and consumer protection agencies.
- Scam sites shut down within days of the first complaints — save evidence the moment you suspect fraud
- Screenshots alone lack URL records and timestamps, making them weak evidence for disputes
- Save the product page, checkout confirmation, payment details, and any legal/contact pages on the site
- Kiroku archives pages with timestamps and SHA-256 hashes, providing tamper-proof evidence even after the site disappears
Fake online stores are designed to disappear. They collect payments for a few days or weeks, then shut down and reopen under a new domain. If you have been scammed, preserving the website before it vanishes is critical for chargebacks, police reports, and consumer complaints. This guide covers what evidence to save, why screenshots alone are not enough, and how to use Kiroku to create tamper-proof archives.
You placed an order on what looked like a legitimate online store, but the product never arrived — or what showed up was clearly counterfeit. When you try to go back to the website, it is already gone. This is the reality of online shopping fraud: scam sites are built to be disposable, shutting down within days once complaints start rolling in.
Filing a chargeback with your credit card company or a police report requires evidence that the fraudulent site existed and what it displayed. This guide explains exactly what to save, how to save it properly, and where to report the fraud.
Why scam sites disappear so quickly
Fraudulent online stores operate on a hit-and-run model. They set up a professional-looking storefront, run social media ads or search ads for a few days, collect as many payments as possible, then take the site offline before victims can organize complaints. The same operators often relaunch under a different domain within weeks, using the same product images and templates.
This disposable approach makes evidence preservation uniquely urgent. Unlike disputes with legitimate retailers, you cannot go back to the site later to gather information. Once the domain goes dark, the product pages, contact details, and legal disclaimers vanish with it.
- Sites are taken offline within days once chargebacks or police reports begin
- Operators reuse the same templates and product photos under new domains
- Domains are often registered just weeks before the scam begins
- Servers are frequently hosted overseas, making takedowns difficult
- Traffic comes from paid ads that are also removed, eliminating the access path
What evidence to save
When you suspect a site is fraudulent, save as much information as possible before the site disappears. The following checklist covers the most important items for police reports, chargebacks, and consumer complaints.
- Product page — including the product name, price, description, and images
- Legal/contact page — business name, address, phone number, and any registration numbers
- Order confirmation screen and order confirmation email (including email headers)
- Payment page — showing the payment method, bank account details, or payment gateway used
- The site's homepage and any 'About Us' or company information pages
- WHOIS lookup results for the domain (showing registration date and registrant info)
- Screenshots of any social media ads or search ads that led you to the site
Legitimate businesses are required to display their registered name, address, and contact details. On scam sites, this page is often missing, contains fake information, or uses a copied address from an unrelated business. The presence of false or missing legal information is itself evidence of fraud. Always save this page.
Why screenshots alone are not enough
Law enforcement and credit card companies may ask you to provide screenshots, but a phone screenshot alone has significant limitations as evidence. It may not show the URL, it lacks a verifiable timestamp, and image files can be easily edited. A more robust approach combines screenshots with web archiving.
| Method | URL recorded | Timestamp | Tamper proof | Full page | Rating |
|---|---|---|---|---|---|
| Phone screenshot | No | Partial | No | No | Weak |
| PC screenshot (with URL bar) | Yes | Partial | No | No | Fair |
| PDF save | Yes | Yes | No | Partial | Fair |
| Kiroku | Yes | Yes | Yes (SHA-256) | Yes (HTML) | Strong |
Kiroku automatically generates a SHA-256 hash when saving a page. This cryptographic fingerprint allows anyone to verify that the archived content has not been modified since it was captured, adding a layer of credibility to your evidence.
How to preserve fraud evidence with Kiroku
Kiroku captures a screenshot, self-contained HTML, AI summary, and SHA-256 hash from any URL — no account required. Follow these steps to build a complete evidence file before the scam site goes offline.
Copy the URL of the product you purchased from your browser's address bar and paste it into kiroku.today. The archive will capture the product name, price, description, and images as they appeared at the time of saving.
Find the site's legal information, terms, or contact page (usually linked in the footer) and save that URL as well. Even if the information is fake, the record of what was displayed is valuable evidence.
Order confirmation screens and emails cannot be archived via URL, so take screenshots of these separately. Include the email headers (sender address) as they can help investigators trace the operation.
To protect your privacy, set your saved archives to private mode. This ensures only you can access them while still preserving the evidence with its timestamp and hash.
Organize all archive URLs, screenshots, and payment records in a single document or spreadsheet. Having a complete evidence package ready makes filing reports significantly faster.
Where to report fraud and how to spot scam sites
Once you have preserved the evidence, report the fraud to the appropriate authorities. The faster you act, the better your chances of recovering funds — especially for credit card chargebacks, which have strict time limits (typically 60 to 120 days).
- Credit card company — file a chargeback dispute immediately, providing your evidence package
- Bank — if you paid by bank transfer, request a freeze on the recipient account
- Local police or cybercrime unit — file a report with your preserved evidence
- Federal Trade Commission (FTC) at reportfraud.ftc.gov — for US consumers
- Action Fraud (actionfraud.police.uk) — for UK consumers
- Consumer protection agency in your country — for mediation and further guidance
Watch for these warning signs: prices far below market value (50-80% off), unnatural language or poor translations, payment only by bank transfer to a personal account, a newly registered domain (check WHOIS), missing or fake legal/contact information, and contact only via free email services with no phone number listed. An SSL certificate (https) alone does not guarantee legitimacy.
Summary
Fake online stores are designed to disappear. They collect payments for a few days or weeks, then shut down and reopen under a new domain. If you have been scammed, preserving the website before it vanishes is critical for chargebacks, police reports, and consumer complaints. This guide covers what evidence to save, why screenshots alone are not enough, and how to use Kiroku to create tamper-proof archives.
FAQ
I already bought from a scam site. What should I do first?
Preserve evidence immediately — save the product page, legal/contact page, and any confirmation emails before the site disappears. Then contact your credit card company to initiate a chargeback, or your bank to request a freeze on the transfer. Finally, file a police report with your local cybercrime unit, bringing all your preserved evidence.
The scam site is already down. Is there anything I can do?
Gather whatever evidence you still have: order confirmation emails, payment receipts, bank statements, and any screenshots you took. Check Google Cache or the Wayback Machine for cached copies of the site. If you had previously saved the site with Kiroku, your archives remain accessible regardless of whether the original site is online. Going forward, consider archiving any suspicious site before making a purchase.
Can I get a refund if I paid by credit card?
Credit card companies offer a chargeback process for fraudulent transactions. Contact your card issuer, explain that you were a victim of fraud, and provide your evidence. Chargeback time limits vary (usually 60 to 120 days from the transaction), so act quickly. Having archived evidence of the fraudulent site strengthens your case significantly.
Where should I submit my preserved evidence?
Submit evidence to your credit card company or bank for chargeback claims, to local police or cybercrime units for criminal reports, and to consumer protection agencies for mediation. In the US, you can also report to the FTC at reportfraud.ftc.gov. Organize your Kiroku archive URLs, screenshots, and payment records into a single evidence package for efficient submission.
Will evidence saved with Kiroku be accepted by authorities?
Kiroku archives include automatic timestamps and SHA-256 hashes, which provide objective proof of when the page was captured and that the content has not been altered. While the admissibility of any evidence depends on the specific jurisdiction and case, combining Kiroku archives with screenshots, emails, and payment records creates a comprehensive evidence package that is difficult to dispute.
Sources
- FBI Internet Crime Complaint Center (IC3)https://www.ic3.gov/
- FTC: Online Shopping Scamshttps://consumer.ftc.gov/articles/online-shopping
- Action Fraud (UK)https://www.actionfraud.police.uk/
Save the evidence before the scam site disappears
Fraudulent online stores shut down within days of the first complaints. Kiroku lets you archive any page with a screenshot, full HTML, and SHA-256 hash — no account required, completely free. Your evidence stays accessible even after the site is gone.