How to take my money from the Yandex wallet. Part 2.1. Running

This habratopic continuation of the 1st part of the post How to take my money from the Yandex wallet. Part 1

Before I begin to tell what I managed to do today (I didn’t manage (because of work) I’ll do it tomorrow), I would like to thank absolutely everyone for the comments and advice, as well as people who tried their best to help me in this situations! I also don’t go round Yandex - thanks to him for the answers to my post and user comments!

Today was a day of running around the city with the hope of finding out how, where and what. I better recognized my hometown + I finally found where the “Department K” is located in Kazan.
')
In the afternoon I went to the precinct. He was not there. I think figs with him. I went to the district police department (in this case, the police department "Savinovo"). They waited about 5 minutes while the duty officer would take me, after which he told what had happened and said that I wanted to write a statement about the theft. The duty officer exchanged glances with his partner, who I suppose was playing computer solitaire, both “scratched the turnip” and said: “You need to go to the“ department K ”, which deals with high-tech crimes. This is on Dzherzhinsky 1 ". Thank. Went there.

I searched this department for about 30 minutes (there are no signs anywhere. It's good that one of the employees of the Ministry of Internal Affairs of the Republic of Tajikistan, who said exactly where to go, got caught). It turned out that the district police department made a very decent address. “Department K” is located in Kazan at Dzerzhinsky 19 (building of the Ministry of Internal Affairs of the Republic of Tajikistan). Then I waited about 15 minutes at the checkpoint. A man came down and started asking me about everything. His words, almost literally:
- “Department K” does not collect and review allegations of money theft on the Internet. You must contact the district police department at your place of residence and write a statement about the theft of money from your electronic account. Then they decide whether to initiate a criminal case on the application. They can contact us for the entire technical side of the case and we will definitely help them. Given that the amount you have is not small (9470.76 Ru, to be exact. Approx. Author), then they can not refuse to initiate proceedings.
- What documents do I need to bring with me?
- Well, of course, a passport and screenshots in which will be shown where the money went with the transaction codes + history of visits to your wallet.

At the same meeting, they gave me a phone number and advised me to find out everything that is not clear on the phone. I called and told me a list of what I needed to do:

1. It is necessary to write a statement about the theft to the district Office of Internal Affairs (ATC) (at your place of residence) addressed to the head of this district ATC.
2. Attach a “explanation” to the application in which you need to clearly state when the wallet was created, for what purposes it was used, when money arrived, when money left. Indicate who contacted for a refund. Have anyone given passwords from the wallet?
3. Attach a screenshot with the history of visits, as well as screenshots with details of all unauthorized transfers. As I was told, screenshots should not be certified by a notary .

With this bundle of documents (in my case it’s 7 sheets + copies), go to the district police department and hand them over. Must accept the application and all related papers and issue a KUSP ticket.

And then it remains to wait. Statements will go tomorrow. Tomorrow I will lay out all the papers that I will give them (if they still accept and do not send them back to the “Department K”).

And the information from Yandex (for those who missed) how can you find yourself in the history of entering Yandex. Wallet ip-address 127.0.0.1 using my case as an example:

In this case, the intruder’s ip call was incorrectly displayed in your call history. When logging in via an anonymous proxy server, the address shown in the haul history is taken from the Forwarded-for header. The script that determines the incoming ip address was redirected to itself and therefore determined its address. However, we keep information about all IP addresses from which payments are made (of course, in the case of a proxy, this will be the proxy address). Upon request from the police, we will provide this information. The proxy server itself also stores information about the addresses from which calls were made to it, and the police can also receive this information.

PS I was very surprised by the attitude of the employees of the “Department K” towards me and my case - they listened to everything, explained everything. Honestly, I did not expect. I thought that I would be sent for a long time and far away, just not to do my work. Thank you for this attitude to ordinary citizens. Everywhere would be so ...

And another tip from Yandex: use strong authorization. (then a similar situation will not happen to you. author’s comment)

The next part of the story is here: How to take my money from the Yandex wallet. Part 2.2. Statement