Preserving Digital Evidence

What counts as digital evidence

Digital evidence is any record on a phone, computer or online: chat messages, screenshots, call logs, transaction alerts, emails and app history. In mule account cases, these records can show how you were really approached.

Some people are recruited through chat apps, social media and fake job offers. The messages left behind can show you were tricked, not part of the scheme.

Unlike memory, a saved message does not fade or change. It shows the exact words, the promises and the pressure. That is why it can speak for you more clearly than anything you say later.

Why it can decide how your role is seen

Handing control of your own account to someone else without lawful authority or lawful purpose is an offence under Penal Code section 424B. It carries 1 to 7 years in jail, or a fine of RM10,000 to RM100,000, or both. ^[f2] So the reason you handed over your details matters a great deal.

Chats showing a convincing fake job or investment offer can support your account that you were tricked. Without them, your explanation rests on memory alone.

Capture chats without changing them

Leave the original chat in the app untouched. Then take clear screenshots showing the sender, the dates and the whole conversation.

If the app allows it, export the chat as a file too. Do not edit anything or crop out parts of the conversation.

Back up your screenshots and exports to a second place, such as cloud storage or a trusted family member’s phone. Phones get lost, broken or reset, and evidence kept in one place can disappear in a moment.

Never delete things to look clean

A serious mistake is deleting apps, messages or call logs to look tidy. Missing records can look worse than awkward ones, and they can be hard to recover.

Keep everything as it is, even messages that embarrass you. Let a lawyer decide what is relevant and how to use it.

Do not reset your phone, change your number or wipe an app while the case is open. Tidying up can destroy the very records that would have helped you.

Logs and numbers to keep

Besides chats, keep call logs, transaction alerts, e-wallet history and emails. Write down the reference number of any report you made.

Note the account and phone numbers involved. You can check them on the PDRM Semak Mule portal, a public tool that shows if a number is flagged. ^[f1] If you reported a scam to the National Scam Response Centre hotline 997, that call also creates a record. ^[f3]

Keep it private and give it to a lawyer

Do not post your evidence online or confront the people involved. It can warn the syndicate, expose you to harassment or complicate the investigation.

Police detected 46,048 mule accounts in 2023 and 50,295 in 2024 ^[f4]. Well organised evidence helps your own side of the story be understood.

A lawyer can tell you which pieces carry the most weight, how they fit your timeline, and when to hand them to the police.

Organise what you have kept

An ordered set helps more than a pile of screenshots. Sort your material by type: recruitment chats, transaction alerts, call logs and reports you made.

Within each group, put items in date order. Name each file with the date and a short label.

Make a one-page list of each item, its date and what it shows. Work only from copies, keep the originals untouched, and store one full set in a second safe place.

Sources

1. https://semakmule.rmp.gov.my/
2. https://www.lawnet.com.my/penal-code
3. https://www.nsrc.gov.my/
4. https://www.rmp.gov.my/