Records
Evidence schedule
List the records you already hold. This page does not tell you how to obtain records from anyone else.
What to list
A schedule item should identify the record, where it came from, and what is known about it. Use these fields when you have them:
- An item name or number, so later correspondence can refer to the same record.
- The original source, such as a wallet, an exchange export, an email, or a screenshot you already hold.
- The collection date and time, and the timezone, when you know them.
- A SHA-256 hash of a file you already hold, where you have calculated one. A hash shows whether that file later changes. It does not by itself prove the file was authentic when you hashed it.
- Any known limitation, such as a missing export or an approximate date.
After a file is received through a channel the company confirms, the company records who accessed it and what processing or transformation was applied. That custody and processing history is kept with the case file. This form does not transfer the files, and it does not create that history.
List a transaction hash, a public address, a date, a network, and a platform name when you have them. These are records of a transfer you already know about.
Files
This form records the names of PDF, PNG, or JPEG files you already hold. It does not transfer those files. Send the files when the company confirms a channel. Do not send a seed phrase, a private key, a password, or an identity document that is not needed for the inquiry.