Scam website evidence for banks and fraud teams: Capture the scam before it disappears.
The scam site could be gone within the hour. Your record of what it served won’t be. Most payment scams now start online, with a fake shop, a cloned investment site or a social advert; Shorenet preserves the pages your analyst sees, with a witness to what the site delivered, for reimbursement decisions, disputes and referrals.
Exhibit 11 · sealed
Sponsored advert on social media
savings.example/offer
Double your savings in 30 days. Limited places.
- Captured 6 March 2026, 18:47 UTC
- SHA-256
ab77e30e…5c849c16 - Timestamped by DigiCert (RFC 3161)
- Witnessed by the Shorenet relay
Verified · independently witnessed
The scale of the problem
£576m
Lost to authorised push payment scams in the UK in 2025, with around two-thirds of cases starting online.
Source: UK Finance, 202688%
Of in-scope losses claimed back and returned to victims in the first year of mandatory reimbursement.
Source: Payment Systems RegulatorWithin an hour
More than half of the phishing URLs Netcraft reports are taken down within an hour. Good for victims, and the end of the evidence.
Source: Netcraft and NCSCScreenshots of scam sites are easy to dispute
When a reimbursement decision, a dispute or a prosecution turns on what a scam site said, the evidence is usually a screenshot, from the victim or from an analyst. It can be challenged as edited or incomplete, and once the site is gone there is nothing to check it against.
A Shorenet capture preserves the site as it was served. It is witnessed in transit by our relay, which is independent of whoever captured it, and then sealed, so it can be checked long after the site has disappeared.
Where it fits
- Purchase and investment scams. Fake shops, cloned brokers and investment platforms, captured while they are live.
- Social media adverts. The advert or post that drew the victim in.
- Impersonation. Sites and profiles pretending to be your bank or your customers’ payees.
- Referrals to law enforcement. Evidence handed over in a form the police and the defence can both check.
Preserving social media evidence of an advert before it is pulled.
What it does not do
- It does not detect scams. It preserves evidence of a site your team has already identified.
- It does not identify the fraudster. It proves what the site sent, not who is behind it.
- It shows what the site served to your analyst. Scam sites can show different visitors different content, so a capture shows what was served at the time it was made, not necessarily what the victim saw.
- It cannot capture a site that is already gone. The value is in capturing early.
- We operate the relay. It is independent of your analysts, not of us. What trusting our relay means.
Keep the evidence after the site is gone.
Shorenet is not yet on general release. Fraud teams who want to evaluate it against live scam cases can join our evaluation programme.