Capture primary identifiers
Record the complete transaction hash, blockchain network, sending and receiving addresses, token contract where relevant, amount and block time.
Keep source files intact
Retain original exports, emails and screenshots. Work from copies and record when each item was collected and by whom.
Add context separately
Distinguish facts visible on-chain from descriptions provided by a person or service. Do not label an address owner without reliable supporting evidence.
Use a consistent case structure
Group evidence by event and date, use descriptive filenames and keep notes linked to the source item they explain.