The client filed the police report three months ago. The investigation has not moved, nobody requested the retention of the records, and the provider's retention period is about to run out.
Technical classification, criminal complaint with a technical annex, retention of records and following the police investigation.
Digital crime usually reaches the police station as a narrative: "they hacked my account", "I fell for a scam". A narrative without traces becomes a police report that waits. While it waits, the records that would identify the perpetrator expire: as a rule, six months at the application provider and one year at the connection provider.
The victim's lawyer has more tools than they use. The CPP (Brazilian Code of Criminal Procedure) lets the victim request investigative steps and bring to the Public Prosecutor's Office the facts, authorship, time, place and supporting evidence. The Marco Civil da Internet (Brazilian Internet Framework) allows the police authority to ask the provider to keep the records for longer.
The course shows how to turn the narrative into a criminal complaint with a technical annex, what to request in the first days, how to follow the investigation and what not to do: investigate on your own, let IT touch the equipment, expose the company's vulnerability in the police report.
Pick as many courses as you like: they are kept and arrive ticked on the registration form.
An investigation of about two months into a network of fake profiles that used a journalist's images to run scams. Technical flaws in the criminals' anonymisation tool made it possible to identify the real connection address and locate the person responsible abroad. The material was forwarded to the authorities.
A financial institution was hacked, and the attackers created virtual cards in customers' names. The purchases made with the cards became a source of authorship: the shops' cameras recorded the perpetrators' faces and vehicles. The police identified those involved and recorded their personal details.
A company found on its internal network a mini computer with its own 4G modem, which had scanned the machines. The remote access keys, the configured Wi-Fi networks and the examination of the SIM card were used to point to the perpetrator. IT had handled the device, and the fingerprints were lost.
In groups, the class receives an illustrative example: a shop's social media account is hacked, and the intruder posts fake offers and receives payments from customers by Pix (Brazil's instant payment system). In 15 minutes, each group builds the index of the technical annex: timeline, traces to preserve, records for precautionary retention and what stays out so as not to expose the shop.
Laws and rulings discussed
Brazilian Penal Code (CP), arts. 154-A, 154-B, 155, §§ 4º-B and 4º-C, and 171, §§ 2º-A and 2º-B · Law 15,397/2026, art. 3º · CP, arts. 141, § 2º, 145, 147-A, 158 and 307 · Brazilian Code of Criminal Procedure (CPP), arts. 5º, 14, 27, 38, 39, 70, § 4º, and 159, §§ 3º and 4º · Marco Civil da Internet (Brazilian Internet Framework), arts. 13, §§ 2º to 4º, and 15, § 2º · Law 12,735/2012, art. 4º · Decree 11,491/2023 · Binding Súmula 14 (STF, Brazilian Supreme Federal Court)
See also
Digital Authorship and Subscriber Data Disclosure → Representative Cases → Digital Counter-Espionage → For Lawyers → See all courses →