When something has already happened.

Slow down. Preserve evidence before deleting, blocking or changing anything that could matter later.

Immediate safety — first 15 minutes

If there is immediate physical danger, call 911 or contact a trusted person.
Move to a safer device/network if you believe the device or account is compromised.
Do not confront an unknown attacker.
Preserve URLs, screenshots, usernames, timestamps and platform notifications.
Secure the primary email account.
Change reused passwords.
Sign out unknown sessions and enable 2FA/passkeys.

Content removal escalation

Capture the original URL and a screenshot.
Identify the host, platform and account owner.
Send a platform report and a direct removal demand.
Ask for confirmation and retain the ticket/reference number.
Search for mirrors and reposts.
Escalate to the platform's legal/privacy/safety route where appropriate.
For copyright, privacy, threats, stalking or non-consensual intimate imagery, consider qualified legal or specialist support.

Potentially criminal / urgent

Do not put unnecessary sensitive details into a public form. Preserve evidence privately and use the appropriate emergency, law-enforcement, child-safety, domestic-violence, stalking, fraud or specialist reporting channel for the situation. See Local & Victim Services.

GhostKit does not determine whether conduct is criminal. The generator can help organize a factual report, but users should not invent offences, statutes, police references or legal conclusions.

Evidence package

Original URL
Screenshot(s)
Exact timestamp + time zone
Account/username
Message headers where applicable
Platform ticket number
Copies of communications
Timeline of events
Names/contact information of relevant witnesses

Do not accidentally destroy evidence

Do not edit the only copy of a screenshot.
Do not overwrite original files with metadata-stripped versions.
Do not delete the only copy of threatening messages before preserving them.
Do not repeatedly open suspicious links just to investigate them.
Do not publish private evidence publicly merely to prove it exists.

Safe communication plan

Use a safe email address if the normal account is compromised.
Tell trusted contacts not to disclose your location.
Use a neutral subject line for sensitive communications.
Consider whether document metadata reveals identifying information.
When working with an advocate, share only what they need.