Many crypto scam victims in the Philippines feel the same shock: the platform looked legitimate, the “mentor” seemed helpful, the returns appeared real, and the withdrawals worked at first—until the account was frozen, the recruiter disappeared, or the victim was asked to pay one more “tax,” “gas fee,” “unlocking fee,” or “anti-money laundering clearance.” Philippine law gives victims several possible remedies, but the correct path depends on what happened: unregistered investment solicitation, estafa, cybercrime, money-muling, misuse of bank or e-wallet accounts, or a regulated financial-service complaint.

What Counts as a Crypto Investment Scam in the Philippines?

A crypto investment scam is not limited to someone stealing Bitcoin or hacking a wallet. In Philippine practice, many cases involve investment solicitation—someone convinces the public to put in money, pesos, USDT, Bitcoin, Ethereum, or other virtual assets with a promise of profit.

Common examples include:

“Guaranteed” daily, weekly, or monthly crypto returns
Fake trading platforms showing artificial profits on a dashboard
“Pig butchering” scams, where a scammer builds trust through romance, friendship, or mentoring before pushing crypto deposits
Ponzi or pyramiding systems where old investors are paid from new investors’ money
Fake mining, staking, liquidity pool, arbitrage, or AI trading programs
Unregistered crypto exchanges or trading apps targeting Philippine residents
Influencer or Telegram/Discord group promotions without proper authority
“Recovery scams,” where someone asks for more money to allegedly recover stolen crypto

The key point is this: crypto itself is not automatically illegal in the Philippines. But when crypto is used to solicit investments from the public, operate an exchange, provide custody, market crypto-assets, or process financial transactions, several Philippine laws and regulators may become involved.

The Bangko Sentral ng Pilipinas (BSP) treats virtual assets as digital units that can be traded, transferred, and used for payment or investment purposes, but they are not legal tender and are not issued or guaranteed by any jurisdiction. BSP Circular No. 1108 regulates Virtual Asset Service Providers (VASPs) involved in exchange, transfer, and safekeeping or administration of virtual assets.

Philippine Laws That May Apply to Crypto Investment Scams

Securities Regulation Code: When a Crypto Scheme Becomes an Investment Contract

Under the Securities Regulation Code, Republic Act No. 8799, securities cannot be sold or offered for sale or distribution in the Philippines unless a registration statement has been filed with and approved by the Securities and Exchange Commission (SEC). Section 28 also requires brokers, dealers, salesmen, and associated persons to be registered with the SEC before engaging in the business of buying or selling securities in the Philippines. (Supreme Court E-Library)

A crypto product may be treated as a security if it functions as an investment contract. The Supreme Court in Power Homes Unlimited Corp. v. SEC applied the investment contract concept to schemes where a person invests money in a common enterprise and expects profits mainly from the efforts of others. This matters because many crypto scams are marketed exactly that way: “Give us your capital, our traders or bots will earn for you.” (Supreme Court E-Library)

Financial Products and Services Consumer Protection Act: Investment Fraud

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, strengthens protection for consumers of financial products and services. It defines investment fraud as deceptive solicitation of investments from the public, including Ponzi schemes, schemes promising profits sourced from investors’ own contributions, boiler room operations, and public offering or selling of investment schemes without the required SEC license or permit. It makes investment fraud unlawful and subjects violators to penalties under the Securities Regulation Code and administrative sanctions. (Supreme Court E-Library)

This law is useful in crypto scam cases because it recognizes that modern financial products can be delivered through digital channels and that consumers have rights to fair treatment, disclosure, protection of assets against fraud and misuse, data privacy, and timely complaint handling. (Supreme Court E-Library)

SEC Crypto-Asset Service Provider Rules

In 2025, the SEC issued Memorandum Circular Nos. 4 and 5, Series of 2025, covering Crypto-Asset Service Providers (CASPs). These rules apply to entities offering crypto-asset services and third-party service providers marketing crypto-assets or crypto-asset services. A CASP generally includes an entity that, as a business, offers crypto-asset services, such as offering crypto-assets to the public, operating a crypto-asset trading venue, or performing crypto-asset intermediation activities.

Under the CASP framework, crypto-asset financial consumers have rights to equitable and fair treatment, disclosure and transparency, protection of consumer assets against fraud and misuse, data privacy, and timely complaint handling and redress. The rules also require public offerings of crypto-assets to comply with SEC rules and generally require a disclosure document to be filed with the SEC and published before marketing or offering.

The SEC CASP Guidelines require a CASP applicant to be an SEC-registered corporation, include CASP operations in its primary corporate purpose, maintain minimum paid-up capital of at least ₱100 million excluding crypto-assets, and have a physical office in the Philippines.

For victims, this means one practical thing: a website, app, Facebook page, or Telegram group claiming to be a crypto exchange or crypto investment platform is not automatically lawful just because it is popular or has a business name. It must have the correct authority for the activity it is doing.

Revised Penal Code: Estafa

Many crypto scam cases may be prosecuted as estafa under Article 315 of the Revised Penal Code. Estafa generally involves defrauding another person through deceit or abuse of confidence. In crypto investment scams, estafa may arise where the scammer used false promises, fake identities, fabricated profits, or fraudulent representations to make the victim part with money or crypto. Article 315 is the usual criminal provision cited in investment scam complaints, especially where the victim can show that the misrepresentation existed before or at the time the money was delivered. (Lawphil)

If the fraud was committed through information and communications technology, prosecutors may also consider the Cybercrime Prevention Act, which can increase penalties for certain crimes committed through computer systems.

Cybercrime Prevention Act: Online Fraud and Digital Evidence

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers cybercrime offenses and gives the NBI and PNP cybercrime units authority to handle cybercrime investigations. In crypto scams, RA 10175 becomes relevant when the fraud was carried out through websites, apps, social media accounts, messaging platforms, phishing links, email, or other computer systems. (Supreme Court E-Library)

This is why screenshots, URLs, chat logs, email headers, wallet addresses, transaction hashes, device information, and platform account details matter. They help investigators connect online identities, financial accounts, and crypto transactions.

Anti-Financial Account Scamming Act: Money Mules and Social Engineering

The Anti-Financial Account Scamming Act, Republic Act No. 12010, also known as AFASA, penalizes financial account scamming, including money-muling activities and social engineering schemes. A financial account includes bank accounts, e-wallets, investment accounts, credit card accounts, and other accounts used for financial products or services. (Lawphil)

This law is important in crypto scam cases because scammers often use “mule” accounts: bank accounts, GCash, Maya, or other payment accounts owned by people who are not the main mastermind but who receive, transfer, or withdraw scam proceeds. A person who sells, lends, rents, or allows use of a financial account may face serious legal exposure if the account is used to move criminal proceeds. (Lawphil)

Civil Code Remedies: Damages, Restitution, and Unjust Enrichment

Victims may also have civil remedies under the Civil Code, including:

Article 19 — every person must act with justice, give everyone his due, and observe honesty and good faith
Article 20 — a person who willfully or negligently causes damage contrary to law must indemnify the injured party
Article 21 — a person who causes loss or injury in a manner contrary to morals, good customs, or public policy may be liable for damages
Article 22 — no one should be unjustly enriched at another’s expense
Article 1170 — those guilty of fraud, negligence, delay, or breach of obligation may be liable for damages
Article 2176 — quasi-delict may apply when damage is caused by fault or negligence without a pre-existing contract

In practical terms, a victim may seek return of money, actual damages, interest, moral damages in proper cases, exemplary damages, attorney’s fees, and costs. Recovery, however, depends heavily on identifying the responsible persons and locating assets.

What Victims Should Do in the First 24 to 72 Hours

Crypto scams move fast. The first few days are often the best chance to preserve evidence and stop further loss.

Stop sending money or crypto. Scammers often ask for “tax,” “wallet unlocking fee,” “security deposit,” “gas fee,” “verification fee,” or “AML clearance.” These are usually part of the scam.
Preserve evidence before accounts disappear. Take screenshots and screen recordings of:
- Website or app dashboard
- Profile pages of recruiters, agents, admins, or “mentors”
- Telegram, WhatsApp, Messenger, Viber, Discord, or email conversations
- Deposit instructions
- Wallet addresses
- Transaction hashes
- Bank or e-wallet transfer receipts
- Promised returns, marketing materials, and referral links
Export or download data where possible. Screenshots help, but downloadable CSV files, email headers, PDF receipts, blockchain explorer pages, and platform transaction history are stronger.
Secure your accounts. Change passwords, revoke suspicious app permissions, enable multi-factor authentication, and report compromised IDs or SIM cards.
Immediately report bank or e-wallet transfers. Contact the bank, e-wallet provider, or payment service used. Ask if the receiving account can be flagged, frozen, or escalated to fraud investigation. Give the exact transaction reference number, date, time, amount, recipient name, and account number.
Report centralized exchange accounts. If the scammer used a known exchange, submit the wallet address, transaction hash, and suspected user details through that exchange’s fraud or law enforcement channel. Centralized exchanges may preserve records or freeze assets if the funds are still within their system.
Prepare a short incident timeline. Write a clear chronology: when you met the scammer, what was promised, how much you transferred, where you sent it, when withdrawals failed, and what excuses were given.
File with the proper Philippine office. A serious crypto scam often requires parallel reports: SEC for investment solicitation or CASP violations, NBI or PNP for cybercrime, and bank/e-wallet complaints for financial account tracing.

Where to Report a Crypto Investment Scam in the Philippines

Office or Agency	Best for	What to Prepare	Practical Output
SEC Enforcement and Investor Protection Department (EIPD)	Unregistered investment solicitation, Ponzi schemes, crypto-asset offerings, CASP or securities issues	Complaint narrative, screenshots, receipts, names, links, wallet addresses, company name, recruiter details	SEC evaluation, advisories, cease-and-desist action, administrative case, possible DOJ referral
NBI Cybercrime Division (CCD)	Online fraud, fake platforms, hacked accounts, cyber-enabled estafa	Complaint affidavit, IDs, screenshots, device, transaction records, URLs, wallet data	Investigation, sworn statements, digital evidence handling, possible criminal referral
PNP Anti-Cybercrime Group (ACG)	Cybercrime complaints, online scam reports, tracing online perpetrators	Similar evidence packet, IDs, transaction records	Cybercrime investigation and referral for prosecution
Bank, e-wallet, or VASP	Freezing or tracing fiat transfers and platform accounts	Transaction reference numbers, account details, proof of fraud	Fraud ticket, account flagging, possible freezing or reversal depending on rules and timing
Office of the City or Provincial Prosecutor	Criminal complaint for estafa, cybercrime, or related offenses	Complaint-affidavit, affidavits of witnesses, documentary evidence	Preliminary investigation and possible filing of information in court
Regular courts	Civil recovery, damages, attachment, criminal trial	Pleadings, affidavits, evidence, filing fees	Judgment, damages, provisional remedies, enforcement

The SEC’s iMessage platform is the SEC’s official web-based system for public inquiries, complaints, incidents, and requests, and its services include “eComplaints on Investment Scams” under the Enforcement and Investor Protection Department. (Securities and Exchange Commission)

The NBI Citizen’s Charter for investigative assistance to victims of computer crimes shows that complainants proceed to the Cybercrime Division to file a complaint or request investigation, undergo preliminary interview, execute sworn statements or submit affidavits, and provide supporting documents or devices relevant to the probe. The listed government processing time for the initial process is about 1 hour and 10 minutes, with no fee stated for that service. (National Bureau of Investigation)

Documents and Evidence Victims Should Prepare

Evidence	Why It Matters
Government ID of the victim	Establishes identity of complainant
Complaint-affidavit or sworn statement	Formal narrative required by investigators and prosecutors
Screenshots with dates, usernames, links, and timestamps	Shows representations, promises, identities, and communications
Bank deposit slips, InstaPay/PESONet records, GCash/Maya receipts	Connects victim’s funds to recipient accounts
Crypto wallet addresses and transaction hashes	Allows blockchain tracing and exchange reporting
Blockchain explorer printouts	Shows movement of crypto assets
Website URLs, domain names, app links, APK files, or QR codes	Helps identify infrastructure used in the scam
SEC registration documents or screenshots of claimed registration	Helps prove misrepresentation if scammers claimed authority
Names, phone numbers, email addresses, social media profiles of recruiters	Identifies possible respondents
Marketing materials, referral codes, group chats, webinars	Shows public solicitation and investment promises
Proof of failed withdrawal and demands for more fees	Shows scam pattern and continuing deceit

For affidavits, Philippine investigators and prosecutors usually prefer a notarized complaint-affidavit. If the victim is abroad, documents may need notarization before a Philippine embassy or consulate, or notarization abroad followed by apostille if executed in a country that is part of the Apostille Convention. Foreign-language documents should be translated into English or Filipino by a competent translator when used in Philippine proceedings.

Step-by-Step Legal Process for Victims

1. Identify the Nature of the Case

Ask these questions:

Was there a promise of profit or passive income?
Was the offer made to the public or to many people?
Did someone claim SEC, BSP, or government approval?
Was the platform operating as an exchange, trading venue, broker, or custodian?
Were bank or e-wallet accounts used to receive funds?
Was the fraud done through websites, apps, social media, or messaging platforms?
Do you know the local recruiter, company, or account holder?

The answers determine whether the case is mainly SEC-related, cybercrime-related, bank/e-wallet-related, or a combination.

2. File a Complaint with the SEC for Investment Solicitation

If the scheme involved public solicitation, guaranteed returns, referral commissions, staking pools, trading bots, token offerings, or a crypto platform targeting Philippine users, file with the SEC EIPD through the SEC’s official complaint system.

Include:

Name of the entity or platform
Names of officers, admins, recruiters, influencers, or group leaders
Links to websites and social media pages
Screenshots of promised returns
Proof of payment
SEC registration claims, if any
Wallet addresses and transaction hashes
List of other victims, if available

A common mistake is thinking that “SEC registered” means “allowed to solicit investments.” A corporation may be registered with the SEC as a juridical entity but still have no authority to sell securities, investment contracts, or crypto-asset services to the public.

3. File a Cybercrime or Estafa Complaint

For online crypto scams, victims usually file with the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or the prosecutor’s office.

A strong complaint-affidavit should include:

How the victim met the scammer
Exact promises made
Screenshots or quotes of misrepresentations
Amounts transferred and dates
Wallet addresses, bank accounts, or e-wallet accounts used
Failed withdrawals or excuses given
Attempts to recover the money
Names and contact details of suspects, if known
Explanation of why the victim relied on the representations

The prosecutor will evaluate whether probable cause exists. If probable cause is found, an information may be filed in court. Criminal cases can also include civil liability unless the victim reserves the right to file a separate civil action.

4. Escalate to Banks, E-Wallets, and Exchanges

When pesos passed through a bank or e-wallet, report immediately to the provider’s fraud unit. Under AFASA, financial institutions have responsibilities to protect access to financial accounts using systems such as multi-factor authentication and fraud management systems, and BSP has authority in relation to covered institutions. (Lawphil)

Give the provider:

Sender and recipient account details
Exact amount
Date and time
Reference number
Police/NBI/SEC complaint reference, if already available
Short fraud narrative

If crypto went to a centralized exchange wallet, submit the transaction hash and wallet address to the exchange. Blockchain transfers are generally irreversible, but centralized exchanges may preserve account records or freeze assets if the scammer has not yet withdrawn them.

5. Consider Civil Recovery and Provisional Remedies

A victim may file a civil action to recover money and damages. In proper cases, a plaintiff may seek provisional remedies such as preliminary attachment under the Rules of Court, especially where there is fraud and a risk that the defendant will dispose of assets.

Civil recovery is most realistic when:

The scammer or recruiter is identified
A Philippine bank or e-wallet account holder is known
The respondent owns attachable property
There are multiple victims with consistent evidence
The scam operated through a Philippine corporation or local office

Civil cases require filing fees based on the amount claimed. They can take years, but they may be useful where there are identifiable defendants and recoverable assets.

Common Pitfalls That Hurt Crypto Scam Cases

Paying “Recovery Agents”

After a crypto scam, victims are often targeted again by people claiming they can recover funds from the blockchain for an upfront fee. Many are also scammers. Be especially careful with anyone who guarantees recovery, asks for seed phrases, requests remote access to your device, or demands “tax” or “unlocking” payments.

Deleting Chats Out of Shame or Anger

Do not delete conversations. Even embarrassing chats may prove grooming, misrepresentation, or identity. Export the conversation if the app allows it.

Relying Only on Screenshots

Screenshots are useful, but investigators prefer corroborating records: transaction receipts, email headers, device logs, wallet hashes, URLs, and platform data.

Waiting Too Long to Report

Crypto moves quickly through wallets, mixers, bridges, exchanges, and cross-border accounts. Delay makes tracing harder and may reduce the chance that a bank, e-wallet, or exchange can freeze anything.

Confusing Corporate Registration with Investment Authority

Many scammers show a certificate of incorporation to appear legitimate. Incorporation only proves that a company exists as a registered entity. It does not automatically authorize the company to sell securities, solicit investments, operate as a broker, or provide crypto-asset services.

Using a Friend’s or Relative’s Account

If someone allowed their bank or e-wallet account to receive scam proceeds, they may be investigated as an account holder, mule, accomplice, or respondent. AFASA specifically targets money-muling activities such as using, borrowing, lending, selling, or renting financial accounts for criminal proceeds. (Lawphil)

Special Issues for OFWs, Foreigners, and Victims Abroad

Filipino Victims Abroad

OFWs and Filipinos abroad can still pursue remedies in the Philippines if the scam involved Philippine-based respondents, Philippine bank accounts, Philippine e-wallets, Philippine victims, or platforms targeting the Philippines.

Practical options include:

Executing a complaint-affidavit at a Philippine embassy or consulate
Issuing a Special Power of Attorney to a trusted representative in the Philippines
Using apostilled documents if executed before a foreign notary in an Apostille Convention country
Joining other victims in a coordinated complaint
Preserving all digital evidence before changing phones or SIM cards

Foreign Victims

Foreigners may file complaints in the Philippines when the scam has a Philippine connection, such as a Filipino recruiter, Philippine company, Philippine bank account, local office, or victims in the Philippines. Foreign documents may need apostille or consular authentication, and foreign-language documents should be translated.

A foreigner does not need to be physically present for every step, but personal appearance may be required for certain affidavits, clarificatory questioning, preliminary investigation settings, or trial testimony unless remote arrangements are allowed by the handling office or court.

Cross-Border Platforms

When the scam platform is abroad, Philippine remedies can be harder. The SEC, NBI, PNP, DOJ, BSP, and AMLC may coordinate within their mandates, but enforcement against foreign operators depends on available records, cooperation of exchanges, mutual legal assistance, and whether local actors or assets exist in the Philippines.

Practical Timelines

Stage	Typical Timeframe	Notes
Evidence preservation	Same day to 3 days	Do this immediately before accounts, groups, or websites disappear
Bank/e-wallet fraud report	Same day	Faster reporting improves chances of account flagging
NBI or PNP initial complaint intake	Same day to several days	NBI’s listed initial CCD process is about 1 hour and 10 minutes, but investigation continues after intake
SEC complaint ticket	Same day online filing possible	Evaluation time depends on complexity and volume
Preliminary investigation	Several months or longer	Respondents may file counter-affidavits
Criminal case in court	Often years	Timelines depend on court docket, evidence, arrests, and respondent participation
Civil recovery case	Often years	Asset tracing and enforcement are usually the hard part

Frequently Asked Questions

Can I still recover my crypto after sending it to a scammer?

Possibly, but recovery is difficult. Blockchain transactions are generally irreversible. The best chance is when the funds reach a centralized exchange, a bank-linked off-ramp, or an identifiable person before being withdrawn. Report immediately to the exchange, bank, e-wallet provider, SEC, NBI, or PNP.

Is cryptocurrency illegal in the Philippines?

No. Cryptocurrency or virtual assets are not automatically illegal. However, virtual assets are not legal tender, and businesses that exchange, transfer, safekeep, market, offer, or operate crypto-asset services may need BSP or SEC authority depending on the activity.

Is SEC registration enough to prove a crypto investment is legitimate?

No. A certificate of incorporation only means the entity is registered as a corporation or juridical entity. It does not automatically authorize public investment solicitation, securities selling, broker activity, or crypto-asset services.

Where should I report a crypto scam: SEC, NBI, PNP, or BSP?

Report to the SEC if there was investment solicitation, crypto-asset offering, securities, or CASP activity. Report to NBI or PNP if the scam was committed online or involved cybercrime or estafa. Report to the bank, e-wallet, BSP-supervised entity, or VASP if your financial account or transfer was involved. Many serious cases require more than one report.

Do I need barangay conciliation before filing a crypto scam complaint?

Usually, barangay conciliation is not the main remedy for crypto investment scams, especially where the offense is serious, the parties live in different cities or municipalities, the respondent is unknown, or cybercrime and investment fraud are involved. Going to the barangay may help in minor disputes with a known local person, but it should not delay urgent reporting to banks, exchanges, SEC, NBI, or PNP.

Can a recruiter be liable even if they say they were also a victim?

Yes, depending on the facts. A recruiter, influencer, group admin, or local leader may be liable if they knowingly solicited investments, made false claims, received commissions, handled funds, or continued recruiting despite warning signs. If they genuinely lacked knowledge and did not profit, that becomes a factual defense for investigation.

What if the scammer used only a wallet address and fake name?

You can still report. A wallet address and transaction hash can help trace movement of funds. Investigators may look for links to exchanges, IP data, phone numbers, email addresses, social media accounts, bank deposits, e-wallet cash-ins, or other identity clues.

Can victims file one group complaint?

Yes. Group complaints are common in investment scam cases because they show public solicitation, repeated misrepresentations, and a pattern of fraud. Each victim should still prepare individual proof of payment and a personal statement showing how they were induced to invest.

Will a refund settlement stop the criminal case?

Not automatically. In criminal cases, payment or settlement may affect civil liability and may be considered by prosecutors or courts, but it does not automatically extinguish criminal liability for public offenses such as estafa, cybercrime, or violations of special laws.

What should I do if someone used my bank or e-wallet account for crypto scam proceeds?

Report immediately and preserve all records. Do not delete messages with the person who asked to use the account. Under AFASA, lending, selling, renting, or allowing use of a financial account for criminal proceeds may create serious liability. (Lawphil)

Key Takeaways

Crypto is not automatically illegal in the Philippines, but crypto investment solicitation, trading venues, custody, marketing, and financial services may require SEC or BSP authority.
A crypto scheme promising passive profit may be treated as an investment contract or investment fraud under Philippine law.
Possible legal remedies include SEC complaints, NBI or PNP cybercrime complaints, prosecutor complaints for estafa or cybercrime, bank/e-wallet fraud reports, and civil actions for recovery and damages.
Evidence preservation is urgent: save chats, receipts, URLs, wallet addresses, transaction hashes, dashboards, and marketing materials before they disappear.
SEC registration as a corporation is not the same as authority to solicit investments or operate as a crypto-asset service provider.
Victims abroad can still pursue Philippine remedies when there is a Philippine connection, but affidavits and documents may need consular notarization or apostille.
Recovery is hardest when funds move through anonymous wallets, mixers, or foreign platforms, but fast reporting can sometimes help freeze bank, e-wallet, or centralized exchange accounts.