Cybercrime
Cybercrime can include account takeover, extortion, malware, ransomware, phishing, identity theft, stalking, impersonation, hacking, stolen data, payment-app fraud, crypto scams, or unauthorized access.
Cybercrime situations are best understood by looking at the behavior, the people with access, the timing, the location, the motive, and the evidence that connects those facts. Motives include money, identity theft, blackmail, control, spying, revenge, embarrassment, business advantage, credential theft, account resale, or gaining access to a person through their digital life.
Authoritative references: FBI IC3: Cybercrime ReportingFBI: The Cyber ThreatFTC: IdentityTheft.govFTC: ReportFraud.gov
It often happens after password reuse, data breaches, social engineering, phishing messages, relationship conflict, lost devices, suspicious links, fake support calls, or someone gaining access to accounts or devices.
It can happen through email, texts, social media, cloud accounts, banking apps, payment apps, websites, phones, laptops, cameras, smart-home devices, routers, and workplace systems.
Authoritative references: FBI: The Cyber Threat
People involved can include the victim, attacker, account owner, platform, bank, phone carrier, employer, device user, IT provider, scam network, impersonator, or someone close enough to know passwords and habits.
- A person creates urgency, secrecy, fear, romance, authority, or a fake emergency to move money or account access quickly.
- Account alerts, password resets, SIM changes, suspicious links, payment reversals, or new devices appear around the same time.
- The same username, phone number, wallet, email, payment handle, or story appears across multiple platforms.
Authoritative references: FBI: The Cyber Threat
The useful evidence usually shows the timeline, the people involved, the location, the source of the information, and whether the event is isolated or part of a pattern. Preserve original files and context whenever you can.
- Screenshots, emails, texts, DMs, account alerts, transaction records, payment receipts, usernames, phone numbers, and web links.
- A timeline showing first contact, promises made, money sent, account changes, suspicious logins, and each platform involved.
- Device, account, bank, platform, and carrier records that show what happened without altering the original evidence.
Authoritative references: FBI IC3: Cybercrime ReportingFTC: IdentityTheft.gov
- Deleting messages, blocking accounts, or wiping devices too early can remove useful evidence.
- A scam can be real even if the person used a fake name, fake number, or stolen identity.
- Digital evidence is strongest when it preserves original context: sender, timestamp, platform, URL, and transaction trail.
- Preserve screenshots and original messages before changing accounts, then secure passwords, recovery methods, and devices.
- Report financial losses to the relevant platform, bank, carrier, FTC, IC3, or police when appropriate.
- Build a timeline that connects contact, promises, account activity, payments, device alerts, and identity information.
Authoritative references: FBI IC3: Cybercrime ReportingFTC: IdentityTheft.govFTC: ReportFraud.gov
What does cybercrime mean in plain English?
Cybercrime involves computers, phones, accounts, networks, digital identities, online platforms, or electronic communications being used as the target or tool of a crime.
What evidence usually matters in a situation involving cybercrime?
Screenshots, emails, texts, DMs, account alerts, transaction records, payment receipts, usernames, phone numbers, and web links. A timeline showing first contact, promises made, money sent, account changes, suspicious logins, and each platform involved.
Is one incident involving cybercrime enough to matter?
Sometimes. One serious incident can matter immediately, but many situations involving cybercrime become clearer when the timeline shows repetition, access, motive, witnesses, and supporting evidence.
When should someone stop researching cybercrime and get help?
If someone is in immediate danger, a weapon is involved, a person is missing or vulnerable, medical care is needed, or evidence may disappear quickly, contact emergency services, law enforcement, an attorney, an advocate, or another qualified professional right away.