The characteristics of advanced electronic evidence, concealment and tampering, require the investigators to strictly observe the rules in the process of evidence collection. Currently, there is no unified provision for the collection of electronic evidence, but the collection of electronic evidence is related to the verification of crime scene based on the "field verification of computer crime and the inspection rule of electronic evidence" and should be strictly based on the provisions.