Digital Evidence & Forensics
Preserving, authenticating, and documenting digital evidence so it stays usable for claims, disputes, and legal proceedings.
Digital evidence is fragile. Posts get deleted, websites change, accounts disappear, and metadata is stripped when files are shared. By the time a dispute reaches a lawyer or a claims desk, the strongest evidence has often already vanished. NCRB preserves digital evidence early and documents it in a way that keeps it usable.
We forensically capture websites, social media content, chat conversations, emails, and documents, with timestamps, source documentation, and integrity checks where applicable. We also analyse what others send you: email headers to verify a sender, document metadata to establish origin and editing history, and images for provenance and manipulation indicators.
Everything is done with lawful methods. We do not access devices or accounts without proper authorization, and every step is documented so the origin and handling of each item can be explained later. That documentation is what separates usable evidence from a loose screenshot.
Evidence preservation is available as a standalone service, for example when a law firm needs online content captured before it disappears, or as part of a broader fraud, insurance, or OSINT investigation.
What We Handle
What You Receive
-
Evidence Preservation Package
Captured content with timestamps, source URLs, and capture documentation, stored and delivered securely.
-
Authentication and Metadata Report
Findings on email headers, document metadata, and image indicators, explained in plain language.
-
Integrity Documentation
Hash values and handling notes where applicable, so the integrity of preserved material can be demonstrated.
-
Legal-Ready Structure
Reports formatted for use by counsel, claims teams, or internal decision-makers.
Who This Is For
Law Firms
Capturing online evidence before it disappears and verifying the authenticity of digital material in disputes.
Insurers
Preserved, documented social media and web evidence that supports claim decisions and is built to hold up under review.
Organizations & HR
Documenting online harassment, leaks, impersonation, or policy violations for internal proceedings.
Private Clients
Securing evidence of fraud, threats, or defamation before accounts and messages are deleted.
Read also
What to Do After a Crypto Scam: Evidence Checklist for Victims
A practical evidence checklist for crypto scam victims: what to save, what not to do, and when professional tracing may be useful.
Read article
Is That Webshop Legit? How to Check an Online Store Before You Buy
Practical checks to spot a fake webshop: domain age, company details, payment methods, reviews, and what to do if you already paid.
Read articleQuestions about this service
What is digital evidence preservation?
Digital evidence preservation is securing online evidence before it disappears: messages, profiles, web pages, advertisements, emails, and transactions, captured with timestamp, metadata, and hash values so that authenticity and the moment of capture can be demonstrated later. NCRB does this as a licensed Dutch agency (POB 1737).
Why is an ordinary screenshot often not enough?
A screenshot does not prove when and where something was captured and is easy to edit. When contested in proceedings, provenance matters. We record the source URL, time, technical context, and an integrity check, and describe the method, so the opposing party cannot simply dismiss the evidence.
Can NCRB assess the authenticity of an email, document, or photo?
Yes. We analyse email headers (sender, route, spoofing), metadata of documents and images, editing traces, and consistency with other sources. This is used in invoice fraud, CEO fraud, forged evidence, and AI-generated images.
Does NCRB perform forensic examination of computers and phones?
Our core is evidence preservation and forensic documentation of online and digital sources. For the extraction of seized devices we work with specialized partners or refer you on. We are honest up front about what falls within our scope.
How quickly can evidence be preserved?
For volatile evidence (a profile that may disappear at any moment, an advertisement, a chat) we can often start the same day after a short intake. The earlier you call, the more there is left to preserve.
Is the preserved evidence usable in proceedings?
Yes, it is designed for that: source reference, timestamp, method, and integrity check per item, in a report for your lawyer, insurer, or police complaint. Whether and how to submit it remains a procedural decision.
Your point of contact
Rik V.
Founder & Lead Investigator · Licensed investigation agency, POB 1737
Need Evidence Preserved?
Online evidence can disappear within hours. Contact us early and we will assess what can still be captured and documented.