Do you offer digital forensics and incident response for individuals?
Key takeaways
- Digital forensics for individuals in India typically takes 2 to 6 working days and produces a written findings report suitable for police or a court.
- AAVETech's individual forensics fees run from Rs 25,000 to Rs 3,00,000 depending on the number of devices and the depth of examination.
- Evidence is preserved first, because a factory reset or a wiped device destroys the only copy of the intrusion indicators.
- For financial fraud, the first call is to the bank's fraud helpline, then cybercrime.gov.in or 1930, and the forensic examination supports the claim.
- We do not assist with accessing accounts, devices or data that a person does not own or control, or with surveillance of another person.
As of 24 October 2026: the service descriptions, prices and turnaround figures on this page are current.
What does a digital forensics examination involve for an individual?
Three phases, in a strict order. Acquisition: the device or account is captured without being altered, using a hardware write-blocker for a physical handset or an authenticated export for a cloud account, and a hash of the evidence is recorded so that any later challenge to its integrity can be answered. Examination: the examiner looks for indicators of compromise, which for a phone means installed remote-access tools, unknown linked devices, rogue configuration profiles and unauthorised app permissions, and for an account means login history from unfamiliar addresses, new recovery contacts, forwarding rules and third-party app consents. Reporting: a written report stating findings, timeline, attribution limits and what is admissible. For a police complaint, the report is what turns suspicion into something an officer can act on.
What should I do before I contact anyone?
Stop using the device, but do not switch it off, because volatile evidence in memory disappears. If a financial account is involved, call your bank's fraud helpline before anything else and ask for the beneficiary to be frozen and the transaction reversed, because reversals are time-bound. If money has moved, remember the deadline: under RBI's June 2026 instructions, effective 1 January 2027, a genuine individual victim with a gross loss up to Rs 50,000 may receive compensation of 85% of net loss or Rs 25,000, whichever is less, provided the fraud is reported to the bank and the NCRP or 1930 within five calendar days. Write down every time you noticed something, and keep the original messages and the numbers, because that timeline is the most valuable thing you own at this point.
Can you recover my WhatsApp or social account without a factory reset?
Often, yes, and it is worth attempting before anything destructive. The correct sequence is a linked-device and active-session review, which for WhatsApp is Settings, then Linked Devices, and for the major social platforms is a sessions or security tab, and then recovery through the original channel while it still works. A factory reset should be the last option, because it destroys the indicators of how the account was taken, and those indicators are what prevent it happening again and what support a police complaint. Where the account has been used to contact your contacts, the priority is to stop propagation first, which means revoking sessions and messaging contacts from a clean device before touching anything else.
What will a forensic examination cost, and what does it not include?
For an individual, a single-device examination with a written report typically runs Rs 25,000 to Rs 1,00,000, and multi-device or multi-account matters involving financial fraud run Rs 1,00,000 to Rs 3,00,000. The deliverable is a findings report, a timeline, an assessment of what was accessed and whether data was exfiltrated, and evidence packaged in a form a police station or a court will accept. It does not include recovery of money, which sits with the bank and the Money Restoration Portal, or legal representation, or an undertaking that a particular platform will act. It also does not include accessing anyone else's account or device. Where the person is a victim of domestic or workplace monitoring, we will not examine a device that is not theirs.
| Service | Indicative fee (ex-GST) | Typical duration | Deliverable |
|---|---|---|---|
| Single phone examination | Rs 25,000 - 60,000 | 2-4 working days | Findings report and timeline |
| Single account takeover review | Rs 25,000 - 50,000 | 1-3 working days | Session and consent audit |
| Multi-device examination | Rs 60,000 - 1,50,000 | 4-8 working days | Correlated cross-device timeline |
| Financial fraud support case | Rs 1,00,000 - 3,00,000 | 3-6 working days | Evidence pack for bank and police |
| Evidence preservation only, no examination | Rs 10,000 - 25,000 | 1 working day | Hashed image and custody record |
| Court or police evidence presentation | Rs 20,000 - 50,000 | 1-3 working days | Examination statement and exhibit list |
What are the frequently asked questions?
Get a straight answer on this
Call +91 98473 40580 and describe what happened and when, and we will tell you whether to preserve the device, how to secure the account, and what a fixed-fee examination would cover.
Send us the details See pricing