Victim-centered record
Victim Record Preservation
Victim records can be crucial evidence, but public pages must not turn harm into exposure. The archive standard is preserve privately, publish carefully and redact aggressively.
Publication rules
- remove phone numbers, identity numbers, addresses, private account details and raw KYC images;
- keep complaint, filing and acknowledgement references only when publication is safe;
- distinguish the victim's statement from an independent public record;
- record what authority or platform received notice and whether a response exists.
Why preservation matters
Digital arrest cases often involve fast-moving calls, payments and account trails. If records vanish, later accountability becomes harder. Preservation protects the inquiry while redaction protects the person.
The tension between preservation and protection
Victim record preservation in digital arrest cases involves a genuine and recurring tension. The same records that are most valuable for establishing accountability — call logs, video recordings, chat transcripts, payment screenshots, identity documents shown to fraudsters — are also the records most likely to contain sensitive private information that, if published, could harm the victim further. A recording of a digital arrest call may show the victim in a state of extreme distress, may contain their spoken Aadhaar number, bank details or address, and may reveal family circumstances that the victim has a legitimate interest in keeping private. The archive standard — preserve privately, publish carefully and redact aggressively — is not a compromise between evidence and privacy; it is a recognition that victim-centred research requires both.
What should be preserved privately
The victim or their legal representative should retain, in a secure private format, the complete unredacted record of all evidence items collected. This includes the original call recording or screenshot before any redaction, the complete bank statement showing the fraudulent transfer and surrounding transactions, the full identity documents that were exposed or demanded, and the unredacted complaint filings that identify the victim by name and identity number. These unredacted records may be required by law-enforcement investigators, banking fraud teams or courts, and should be available for production on demand without having been degraded by premature sharing or publication.
What can be shared and published
For public-interest research, journalism and archive purposes, a redacted and anonymised version of the record is generally sufficient and appropriate. The research value in a digital arrest case lies in the pattern of the fraud — the method, the timeline, the platform used, the payment route, the authority impersonated and the gap in official response — not in the victim's personal identity. An archive entry can record: date and approximate time of the incident; platform or communication method used; type of authority impersonated; approximate amount demanded or transferred; complaint portal used and complaint reference number; official response received and its date; and status of the matter as of the most recent update. This level of detail supports accountability research and public-interest publication without exposing the victim to secondary harm.
Institutional submissions and the preservation record
Every formal submission made on behalf of a victim — to the cyber crime portal, the bank, the telecom operator, the Reserve Bank ombudsman or any other authority — should itself be preserved as a time-stamped record with the acknowledgement reference. The sequence of submissions and responses is the accountability audit trail. It shows when the victim acted, which authorities were notified, how long each institution took to respond, and whether the response resolved the matter or left questions open. The DISHA archive treats this institutional submission trail as a critical evidence category: it is the primary record through which the research can ask whether public authorities discharged their responsibility to victims of digital-identity crime under the accountability standards that Article 12 and the Digital Constitutional Personhood framework require.