Skip to content

Guides

Every section we cover, with the explainers that go with it.

After exposure

Model

Model What if a scammer threatens to expose me? Do not pay an extortion demand from a darknet impersonator; preserve all messages and account details, then report to IC3 or Action Fraud for pattern analysis.
Model What if I downloaded a suspicious file? Disconnect your device from networks immediately after downloading a suspicious file to stop info-stealers from exfiltrating session tokens and credentials.
Model What if I entered a password on a fake site? Change your email password first after entering credentials on a phishing mirror, then revoke active session tokens to block credential stuffing and token theft.
Model What if I sent cryptocurrency to a scammer? Preserve the transaction hash, scam wallet address, and all communication logs immediately after sending cryptocurrency to a fraud address before evidence decays.
Model What should I do after clicking a suspicious link? Disconnect your device from networks immediately after clicking a suspicious link to interrupt potential malware loader execution and info-stealer data exfiltration.

Payments and evidence

Model

Recognise the scam

Model

Report and recover

Model

Secure accounts and devices

Model

Guides not tied to one category

13 October 2026 Darknet Scam Safety Guide for Victims, Investigators and Trainers A defensive guide for people exposed to darknet scams, phishing, malware, credential theft or fraudulent payment demands, covering recognition, evidence preservation and official reporting.