I. Introduction

Cryptocurrency investment scams have become a major legal and financial problem in the Philippines. They often combine familiar fraud techniques with digital assets, online wallets, social media marketing, fake trading dashboards, false promises of guaranteed returns, and cross-border transfers that are difficult to reverse.

Victims are usually persuaded to transfer money through bank deposits, e-wallets, remittance centers, peer-to-peer crypto merchants, or cryptocurrency exchanges. After the victim deposits funds, the scammers may show artificial profits, demand additional “taxes” or “withdrawal fees,” freeze the account, threaten penalties, or disappear.

The legal problem is twofold:

How to file a complaint against the persons or entities behind the scam; and
How to preserve, trace, freeze, and recover funds before they are dissipated.

In the Philippine context, recovery is possible in some cases, but it is highly time-sensitive. The chances of recovery are usually highest when the victim acts quickly, preserves evidence, identifies receiving accounts or wallet addresses, reports to platforms and financial institutions, and files appropriate complaints.

II. What Is a Cryptocurrency Investment Scam?

A cryptocurrency investment scam is a fraudulent scheme where a person or entity induces another to part with money or digital assets through false representations involving cryptocurrency, blockchain, trading, mining, staking, arbitrage, tokens, coins, NFTs, or other digital investment products.

Common representations include:

guaranteed daily, weekly, or monthly returns;
risk-free crypto trading;
artificial intelligence trading bots;
forex or crypto arbitrage;
mining contracts;
staking rewards;
liquidity pool investments;
initial coin offerings or token presales;
fake crypto exchange accounts;
fake decentralized finance platforms;
fake investment dashboards showing profits;
referral commissions;
multi-level recruitment;
private trading groups;
celebrity or influencer endorsements;
romance-based investment persuasion;
fake account managers or brokers.

The scam may appear sophisticated because the victim is given a login portal, transaction records, profit charts, wallet addresses, customer support, and withdrawal instructions. These features do not prove legitimacy.

III. Common Types of Crypto Investment Scams

1. Fake Trading Platform Scam

The victim is invited to trade or invest through a website or app that looks like a legitimate exchange. The dashboard shows growing profits, but the numbers are fake. When the victim requests withdrawal, the platform demands more payments.

2. Pig Butchering Scam

The scammer develops emotional trust, often through dating apps, messaging platforms, or social media. After weeks or months of communication, the victim is introduced to a “profitable” crypto investment platform. The victim is gradually encouraged to deposit larger amounts.

3. Ponzi or Pyramid Crypto Scheme

The scheme pays early participants using money from new participants. It promises high returns and often rewards recruitment. Eventually, withdrawals stop.

4. Fake Mining or Staking Scheme

The victim is told that funds will be used for crypto mining, cloud mining, staking, or liquidity provision. The platform displays fake rewards but does not actually operate the claimed business.

5. Impersonation of Legitimate Exchange or Company

Scammers use the name, logo, website style, or documents of legitimate exchanges, public companies, or financial institutions. They may create fake customer support accounts or cloned websites.

6. Fake Token Presale or ICO

Victims are invited to buy a new token before public listing. The token may not exist, may be worthless, or may be controlled entirely by the scammers.

7. Recovery Scam

After the victim loses money, another person claims they can recover the funds for a fee. This is often a second scam. Legitimate law enforcement, courts, and regulated professionals do not guarantee recovery or demand suspicious “unlocking fees.”

8. Fake Tax or Anti-Money Laundering Fee

The victim is told that withdrawals require payment of taxes, AML clearance fees, blockchain validation fees, account upgrade fees, or liquidity fees. These are usually fraudulent demands.

IV. Legal Characterization Under Philippine Law

A crypto investment scam may give rise to several legal causes of action and offenses.

1. Estafa

The most common criminal theory is estafa under the Revised Penal Code. Estafa may arise when a person defrauds another through false pretenses, deceit, abuse of confidence, or fraudulent acts, causing damage.

In crypto investment scams, estafa may be based on representations such as:

the investment is legitimate;
the platform is real;
profits are guaranteed;
funds can be withdrawn;
the accused is a licensed trader or broker;
the funds will be invested in crypto trading;
additional fees are required for withdrawal.

If the victim relied on these false representations and transferred money or digital assets, estafa may be present.

2. Cybercrime

If the fraud was committed through computer systems, websites, apps, online messaging, emails, digital wallets, or electronic platforms, the Cybercrime Prevention Act may apply. Estafa committed through information and communications technology may carry cybercrime implications.

Crypto scams almost always involve digital communication, making cybercrime laws highly relevant.

3. Securities Violations

If the scheme involves investment contracts, pooled funds, token offerings, profit-sharing arrangements, or public solicitation of investments, it may violate securities laws if conducted without proper registration or authority.

A crypto product may be treated as a security if people invest money in a common enterprise with the expectation of profits primarily from the efforts of others.

The use of the word “crypto,” “token,” “staking,” or “mining” does not automatically remove the scheme from securities regulation.

4. Unauthorized Financial Services

If the operators function as brokers, dealers, exchanges, remittance agents, payment service providers, or virtual asset service providers without proper authority, regulatory violations may arise.

5. Money Laundering

Fraud proceeds may constitute unlawful proceeds under anti-money laundering principles. Once funds are transferred through bank accounts, e-wallets, exchanges, or crypto wallets to conceal their origin, money laundering issues may arise.

This is important because anti-money laundering mechanisms may allow reporting, freezing, tracing, and preservation of assets.

6. Data Privacy Violations

If the scam collects IDs, selfies, contact lists, bank details, passwords, seed phrases, private keys, or other personal data, data privacy laws may be implicated.

7. Civil Fraud and Damages

Even apart from criminal prosecution, victims may have civil claims for recovery of money, damages, rescission, unjust enrichment, or other relief.

V. Is Cryptocurrency Recognized as Property?

For practical legal purposes, cryptocurrency may be treated as a valuable digital asset. It can be transferred, held, exchanged, traced on blockchain networks, and valued in fiat currency.

In complaints, the victim should describe the loss in both:

the cryptocurrency amount, such as BTC, ETH, USDT, USDC, BNB, SOL, XRP, or other token; and
the peso equivalent at the time of transfer.

This helps prosecutors, investigators, courts, and financial institutions understand the amount of damage.

VI. Agencies and Institutions That May Be Involved

A victim may need to coordinate with several institutions depending on the facts.

1. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group may receive complaints involving online fraud, cyber estafa, hacking, fake websites, online impersonation, and digital scams.

2. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division may investigate online scams, cyber fraud, identity misuse, digital evidence, and related offenses.

3. Securities and Exchange Commission

The SEC may be relevant where the scam involves investment solicitation, securities, investment contracts, crypto investment schemes, public offerings, or corporations using SEC registration to mislead the public.

4. Bangko Sentral ng Pilipinas

The BSP may be relevant if banks, e-wallets, remittance companies, payment service providers, or virtual asset service providers are involved.

5. Anti-Money Laundering Council

The AMLC may be relevant where fraud proceeds pass through covered persons such as banks, e-wallets, remittance channels, and regulated crypto service providers. Victims usually do not directly “recover” funds from AMLC by simple request, but AML reporting and freezing mechanisms may be important.

6. Department of Justice

The DOJ may become involved in preliminary investigation, cybercrime matters, extradition, mutual legal assistance, or prosecution of complex cases.

7. Local Prosecutor’s Office

Criminal complaints for estafa and related offenses may be filed before the appropriate prosecutor’s office, depending on venue and facts.

8. Financial Institutions and Crypto Platforms

Banks, e-wallet providers, remittance centers, and crypto exchanges are critical because they may be able to:

flag accounts;
freeze or hold suspicious transactions under their policies and legal obligations;
preserve records;
identify account holders;
respond to law enforcement requests;
assist with tracing.

VII. Immediate Steps After Discovering the Scam

The first few hours and days are crucial.

1. Stop Sending Money

Victims should stop paying additional “withdrawal fees,” “taxes,” “verification charges,” “anti-money laundering fees,” “gas fees,” or “account upgrades.” These demands are usually designed to extract more money.

2. Preserve Evidence

Do not delete chats, emails, transaction records, app screenshots, wallet addresses, account dashboards, or social media profiles.

Important evidence includes:

screenshots of conversations;
profile links and usernames;
phone numbers;
email addresses;
wallet addresses;
bank account numbers;
e-wallet numbers;
QR codes;
transaction hashes;
receipts;
deposit slips;
remittance records;
exchange withdrawal records;
platform account screenshots;
advertisements;
websites and URLs;
terms and conditions;
fake certificates;
IDs or documents sent by the scammer;
names of recruiters or agents;
group chat records;
voice notes;
call logs.

3. Write a Chronology

Prepare a timeline showing:

when contact started;
who initiated contact;
what representations were made;
when deposits were made;
where funds were sent;
how much was sent;
what wallet addresses were used;
when withdrawal was refused;
what additional demands were made;
when communication stopped.

A clear chronology helps law enforcement and counsel act faster.

4. Notify the Bank, E-Wallet, or Exchange Immediately

If fiat money was sent through a bank, e-wallet, or remittance provider, report the transaction immediately and request assistance.

If cryptocurrency was sent through an exchange, report the receiving wallet address and transaction hash. Exchanges may be able to flag, freeze, or monitor funds if they move into a regulated platform.

5. File a Police or Cybercrime Report

A formal report helps support requests for preservation of records, account freezing, subpoenas, and platform cooperation.

6. Do Not Negotiate Blindly With Scammers

Scammers may pretend to negotiate refunds to buy time, extract more money, or make the victim delete evidence. Communications should be preserved.

7. Beware of Recovery Agents

Anyone guaranteeing crypto recovery in exchange for upfront fees should be treated with extreme caution. Many are scammers targeting victims a second time.

VIII. Evidence Needed for a Strong Complaint

A strong complaint should include organized evidence.

1. Identity Evidence

This includes the names, aliases, usernames, phone numbers, email addresses, social media accounts, websites, companies, group admins, recruiters, agents, or account managers involved.

If the real identity is unknown, aliases and digital identifiers should still be documented.

2. Misrepresentation Evidence

Show what was promised or represented, such as:

guaranteed returns;
withdrawal anytime;
licensed operation;
SEC registration;
trading expertise;
fake profits;
official partnership;
risk-free investment;
insurance coverage;
tax clearance requirements.

3. Reliance Evidence

Show that the victim relied on these representations before transferring funds.

This can be shown through chats, emails, voice notes, screenshots, and the timing of payments.

4. Payment Evidence

For bank or e-wallet transfers:

receipts;
transaction reference numbers;
account names;
account numbers;
branch details;
date and time;
amount;
confirmation messages.

For crypto transfers:

sending wallet address;
receiving wallet address;
transaction hash;
blockchain network;
token type;
date and time;
amount;
exchange withdrawal record;
screenshots of wallet activity.

5. Damage Evidence

Show total loss in pesos and in cryptocurrency amount. Include all payments, fees, and additional transfers.

6. Withdrawal Refusal Evidence

Important proof includes:

blocked withdrawal requests;
demands for additional fees;
frozen account notices;
fake tax notices;
fake AML warnings;
screenshots showing inability to withdraw;
messages threatening penalties if fees are not paid.

7. Linkage Evidence

Try to connect the scammer to the receiving account or wallet. This may include:

same username providing payment instructions;
QR code sent in chat;
deposit account given by the recruiter;
exchange wallet address tied to platform;
repeated use of same address among victims;
group chat instructions.

IX. Complaint Theories

A complaint may include multiple legal theories depending on the evidence.

1. Estafa by False Pretenses

This applies where the accused induced the victim to invest through false statements and deceit.

2. Cyber Estafa

If the fraudulent acts were carried out through online platforms, cybercrime provisions may be invoked.

3. Securities Law Violations

If the scheme involved public investment solicitation or investment contracts without authority, securities violations may be raised.

4. Illegal Recruitment or Business Misrepresentation

If the crypto scheme was connected to job offers, tasks, fake employment, or business opportunity claims, other laws may be relevant.

5. Falsification

If the scammers used fake SEC certificates, fake licenses, fake IDs, fake tax documents, fake court notices, or fake exchange records, falsification may be involved.

6. Identity Theft

If the scammers used stolen identities, fake profiles, or impersonated real persons or companies, identity-related offenses may apply.

7. Money Laundering

If proceeds were moved through accounts, wallets, or nominees to conceal ownership, money laundering reporting and investigation may be relevant.

X. Where to File the Complaint

Venue depends on facts, but complaints may be filed where:

the victim resides;
the victim sent the money;
the bank or e-wallet transaction occurred;
the deceit was received or relied upon;
the accused resides or operates;
the harmful effect occurred;
cybercrime venue rules apply.

For online scams, venue can be complex because acts may occur across locations. Victims often begin with the nearest cybercrime unit, police station, NBI office, or prosecutor’s office and then coordinate as directed.

XI. Drafting the Complaint-Affidavit

A complaint-affidavit should be clear, chronological, and evidence-based.

It should usually contain:

complainant’s identity;
respondent’s identity, if known;
aliases and contact details;
description of the scheme;
specific false representations;
dates and amounts of payments;
wallet addresses and transaction hashes;
proof of reliance;
refusal or failure to return funds;
total damage;
legal offenses believed committed;
request for investigation and prosecution;
list of attachments.

Avoid exaggeration. The affidavit should state facts the complainant can prove.

XII. Fund Recovery: What Is Realistic?

Recovery is possible but not guaranteed. Crypto transactions are difficult to reverse, especially when funds move quickly to private wallets, mixers, cross-chain bridges, foreign exchanges, or cash-out accounts.

The chances of recovery are higher when:

the receiving account is a Philippine bank or e-wallet account;
the transfer was recent;
the funds remain in the account;
the recipient used a regulated crypto exchange;
the exchange is cooperative;
the wallet can be linked to a known account holder;
multiple victims identify the same accounts;
law enforcement acts quickly;
there is a court order or formal investigative request;
the scammer is locally based.

The chances are lower when:

funds were sent directly to a private wallet;
funds were mixed or bridged across chains;
funds were transferred to foreign exchanges;
the scammer used stolen or mule accounts;
much time has passed;
the victim paid repeated “fees” after warning signs;
evidence is incomplete.

XIII. Methods of Fund Recovery

1. Bank or E-Wallet Recall

If funds were sent through bank transfer or e-wallet, the victim should immediately request the institution to investigate and attempt recall or hold. Success depends on timing, internal policies, and whether funds remain available.

2. Exchange Freeze

If cryptocurrency was sent to an address associated with a regulated exchange, the exchange may freeze funds if promptly notified and supported by law enforcement documentation.

3. Blockchain Tracing

Public blockchains allow tracing of wallet movements. A transaction hash can show where funds moved next. However, tracing does not itself recover funds. It must be paired with exchange identification, legal process, or enforcement action.

4. Criminal Restitution

If suspects are identified and prosecuted, restitution may be pursued in the criminal case.

5. Civil Case

A victim may file a civil action to recover money or damages. This may be useful where respondents are known and have assets.

6. Provisional Remedies

Depending on the case, remedies such as attachment, injunction, or asset preservation may be considered through court proceedings.

7. AML-Related Freezing

Where fraud proceeds pass through covered institutions, anti-money laundering mechanisms may support freezing and investigation, subject to legal requirements.

8. Settlement

In some cases, identified respondents or mule account holders may settle. Any settlement should be documented properly and should not compromise criminal remedies without legal advice.

XIV. The Role of Mule Accounts

Many crypto scams use “mule accounts.” These are bank, e-wallet, or exchange accounts used to receive and transfer scam proceeds. The account holder may be:

a participant in the scam;
a paid nominee;
someone who sold or rented their account;
a victim of identity theft;
a person deceived into receiving funds;
a recruiter or local handler.

Mule accounts are important because they may provide the first traceable identity. Even if the main scammer is abroad, local receiving accounts may create investigative leads.

Account holders who knowingly receive and transfer scam proceeds may face criminal and civil liability.

XV. Special Issues in Peer-to-Peer Crypto Transactions

Some victims buy crypto through peer-to-peer merchants and then send the crypto to scammers. This creates two separate transactions:

the legitimate purchase of crypto from a P2P seller; and
the transfer of crypto to the scammer.

The P2P seller may not be part of the scam if they merely sold crypto and received payment. However, if the seller was connected to the scheme, used fake accounts, or knowingly facilitated fraud, they may be investigated.

Victims should preserve both the fiat transaction and the crypto transfer records.

XVI. If the Scam Used a Fake Exchange

Fake exchanges often show a wallet balance and profits but do not actually hold assets for the victim. Sometimes the victim’s deposits go directly to scammer-controlled wallets.

Signs of a fake exchange include:

withdrawal requires payment of tax or clearance fees;
customer support communicates only through messaging apps;
no verifiable corporate entity;
no regulatory license;
newly registered website;
fake trading volume;
identical user dashboards;
no public order book;
no legitimate app store presence;
deposits go to changing personal wallet addresses;
copied legal documents;
no independent reviews except suspicious promotions.

A complaint should include website screenshots, domain details if available, account dashboard screenshots, and payment instructions.

XVII. If the Scam Involved a Philippine Corporation

Some scammers use a Philippine corporation to gain trust. They may show SEC registration documents and claim legitimacy.

Important point: SEC registration of a corporation does not automatically authorize investment solicitation or crypto trading services.

If a corporation is involved, verify:

SEC registration;
primary purpose;
directors and officers;
General Information Sheet;
business permits;
BIR registration;
authority to solicit investments;
authority to offer securities;
authority to operate as a financial service provider, if applicable;
actual connection between the corporation and the platform.

If the corporation solicited investments without authority, SEC complaints may be appropriate.

XVIII. If the Scam Was Promoted by Influencers or Agents

Promoters, influencers, uplines, agents, or recruiters may face liability if they knowingly or negligently induced people to invest through false claims.

Evidence against promoters may include:

promotional videos;
social media posts;
referral codes;
group chat messages;
webinars;
screenshots of guaranteed returns;
instructions to deposit funds;
testimonials;
commission structures;
statements that the investment is licensed;
proof that the promoter received commissions.

Even if the promoter claims to be only a participant, liability may arise if they actively recruited others.

XIX. If the Victim Signed an Online Agreement

Scammers may rely on online terms saying that all investments are risky or that withdrawals are subject to approval. Such terms do not automatically excuse fraud.

A contract obtained through deceit may be challenged. Disclaimers do not protect scammers who made false representations, operated fake platforms, or never intended to allow withdrawals.

However, the exact terms should be preserved because they may show the structure of the scheme and the parties involved.

XX. If the Victim Was Also Paid Earlier Profits

Some victims receive small early withdrawals. Scammers use this to build trust and encourage larger deposits.

Receiving earlier payouts does not necessarily mean the scheme was legitimate. In Ponzi-type schemes, early payouts may be funded by later victims.

The complaint should disclose early withdrawals honestly and compute net loss accurately:

Total deposits minus total withdrawals equals net financial loss.

XXI. If Multiple Victims Are Involved

Crypto scams often affect many victims. A group complaint can strengthen the case because it shows a pattern of fraud.

Useful group evidence includes:

same wallet addresses;
same bank accounts;
same recruiters;
same website;
same fake certificates;
same withdrawal excuses;
same group chat;
same promise of returns;
same company documents.

However, each victim should still prepare individual proof of payment and reliance.

XXII. Preservation Requests

Victims should act quickly to preserve digital evidence because scammers may delete accounts, websites, chats, and posts.

Preservation may be requested from:

banks;
e-wallet providers;
exchanges;
social media platforms;
messaging platforms;
web hosts;
domain registrars;
email providers.

Formal law enforcement requests are usually stronger than private requests. Still, victims should send immediate reports to platforms when possible.

XXIII. Demand Letters

A demand letter may be useful if respondents are identifiable. It may demand:

return of funds;
accounting;
disclosure of wallet addresses;
preservation of records;
cessation of investment solicitation;
confirmation of corporate authority;
response within a fixed period.

However, in active scams, a demand letter may alert suspects and cause them to move assets. Strategy should be considered carefully before sending one.

XXIV. Civil Recovery Options

1. Action for Sum of Money

If the scammer or receiving account holder is identified, the victim may sue for recovery of money.

2. Damages

Victims may seek actual damages, moral damages, exemplary damages, attorney’s fees, and costs where legally justified.

3. Rescission or Annulment

If money was transferred under a fraudulent agreement, rescission or annulment may be considered.

4. Unjust Enrichment

A person who received benefits without legal basis may be required to return them.

5. Provisional Attachment

In appropriate cases, a court may allow attachment of property to secure satisfaction of judgment, especially where fraud is alleged.

6. Injunction

An injunction may be considered to stop ongoing fraudulent solicitation or preserve assets.

XXV. Criminal Case vs. Civil Case

A criminal complaint seeks prosecution and punishment. It may also include civil liability arising from the offense.

A civil case focuses on recovery, damages, and enforcement against assets.

In practice, victims often begin with a criminal complaint because it may help trigger investigation, subpoenas, platform cooperation, and possible restitution. But a separate civil strategy may be needed where recoverable assets are known.

XXVI. Why Time Matters in Crypto Recovery

Crypto funds can move across wallets within minutes. They can be:

sent to exchanges;
swapped into stablecoins;
bridged to other blockchains;
sent through mixers;
split into multiple wallets;
converted to cash;
withdrawn through mule accounts;
sent abroad.

Delay reduces the chance of freezing or identifying assets. Victims should report immediately, even if the total evidence file is not yet perfect. Additional evidence can be submitted later.

XXVII. Practical Blockchain Evidence Guide

For each crypto transfer, record:

token sent;
blockchain network;
amount;
sending address;
receiving address;
transaction hash;
date and time;
exchange or wallet used;
screenshot from wallet app;
screenshot from blockchain explorer;
peso value at transfer time;
person who gave the wallet address;
chat message containing the address.

Do not rely only on screenshots. Copy the actual transaction hash and wallet address in text format to avoid errors.

XXVIII. Common Defenses Raised by Respondents

Respondents may claim:

the victim voluntarily invested;
losses were due to market risk;
the respondent was only an agent;
the platform was hacked;
the investment was legitimate but failed;
the victim agreed to terms and conditions;
the respondent did not receive the money;
the account was used without authorization;
the funds were sent to third parties;
crypto transactions are irreversible;
the victim was greedy or negligent.

Evidence of false promises, fake dashboards, guaranteed returns, unauthorized solicitation, refusal to withdraw, and use of mule accounts can help counter these defenses.

XXIX. Tax Issues After a Crypto Scam Loss

Victims sometimes ask whether they can deduct scam losses for tax purposes. For ordinary individuals, personal investment losses may not always be deductible. For businesses or traders, treatment may depend on records, nature of activity, and tax classification.

If recovered funds are later received, tax consequences may also arise depending on prior treatment.

The tax treatment of crypto losses should be separately reviewed.

XXX. Data Privacy and Identity Protection

Crypto scams often require victims to submit IDs, selfies, proof of address, bank details, and other sensitive information.

After discovering the scam, victims should consider:

monitoring bank and e-wallet accounts;
changing passwords;
enabling two-factor authentication;
revoking app permissions;
reporting identity misuse;
watching for loan applications or accounts opened in their name;
informing financial institutions if IDs were compromised;
avoiding reuse of passwords;
preserving evidence of identity collection.

If personal data is misused, a separate privacy complaint may be appropriate.

XXXI. Avoiding Recovery Scams

Recovery scams are common after crypto fraud. Warning signs include:

guaranteed recovery;
upfront fees;
claims of special access to blockchain;
fake law enforcement documents;
fake court orders;
request for wallet seed phrase or private key;
demand for “gas fee” to unlock funds;
pressure to act immediately;
refusal to identify licensed professionals;
use of anonymous messaging accounts;
claim that funds are frozen but require tax payment.

Never give seed phrases, private keys, or remote access to a device.

Legitimate recovery usually involves legal process, platform cooperation, blockchain tracing, and enforcement—not magic reversal.

XXXII. Prevention and Due Diligence

Before investing in any crypto opportunity, check:

exact legal entity behind the platform;
registration and authority to offer investments;
regulator advisories;
audited financial statements;
physical address;
official website and domain age;
terms and risk disclosures;
withdrawal policy;
identity of founders and officers;
whether returns are guaranteed;
whether recruitment is required;
whether funds go to personal accounts;
whether the business model is understandable;
whether the product is a security;
whether the platform is a regulated exchange;
whether independent sources confirm legitimacy.

The strongest red flag is a promise of high, guaranteed returns with little or no risk.

XXXIII. Sample Structure of a Crypto Scam Complaint

A complaint package may be organized as follows:

Complaint-affidavit;
copy of complainant’s valid ID;
chronology of events;
table of transfers;
screenshots of conversations;
screenshots of platform dashboard;
bank or e-wallet receipts;
crypto transaction records;
wallet addresses and transaction hashes;
screenshots of withdrawal refusal;
screenshots of additional fee demands;
screenshots of advertisements or posts;
identity information of respondents;
company registration or promotional materials;
list of witnesses;
summary of total loss.

The transfer table is especially helpful. It should include date, amount, method, recipient, reference number or transaction hash, and supporting attachment.

XXXIV. Practical Transfer Table

A useful complaint table may look like this:

Date	Amount	Method	Recipient / Wallet	Reference / Tx Hash	Purpose Claimed	Evidence
Jan. 5	₱50,000	Bank transfer	ABC / Account No. ___	Ref. No. ___	Initial investment	Annex A
Jan. 8	₱100,000	E-wallet	09XX-XXX-XXXX	Ref. No. ___	Account upgrade	Annex B
Jan. 12	1,000 USDT	TRC20 transfer	T___	Tx hash ___	Trading capital	Annex C
Jan. 18	₱30,000	Bank transfer	XYZ / Account No. ___	Ref. No. ___	Withdrawal tax	Annex D

This format helps investigators follow the money.

XXXV. Special Considerations for Overseas Scammers

Many crypto scams are cross-border. The scammer may be outside the Philippines, while victims and mule accounts are local.

Cross-border cases may require:

platform reports;
preservation requests;
international cooperation;
mutual legal assistance;
foreign exchange cooperation;
identification of local accomplices;
tracing through regulated exchanges;
civil action where assets are located.

Even when the main operators are abroad, local recipients, recruiters, promoters, and mule accounts may still be actionable.

XXXVI. Practical Expectations for Victims

Victims should understand the following:

Reporting is still important even if recovery is uncertain.
Fast reporting improves recovery chances.
Crypto transfers are not automatically reversible.
Screenshots alone may be insufficient; transaction hashes and records matter.
Banks and exchanges usually need formal legal process to disclose account holder information.
Multiple victims can strengthen the case.
Recovery may take time and may require coordinated legal action.
Guaranteed recovery promises are usually suspicious.
The existence of a website or app does not prove legitimacy.
A registered corporation is not necessarily authorized to solicit crypto investments.

XXXVII. Conclusion

Cryptocurrency investment scam complaints in the Philippines require a combined criminal, regulatory, civil, and technical approach. The legal issues may involve estafa, cybercrime, securities violations, unauthorized financial services, money laundering, falsification, data privacy breaches, and civil recovery.

For victims, the most important steps are to stop sending money, preserve evidence, document all transfers, notify banks, e-wallets and exchanges, file a cybercrime or law enforcement report, and pursue regulatory complaints where investment solicitation or unauthorized financial activity is involved.

Fund recovery is possible in some cases, especially when funds are still within regulated bank, e-wallet, or exchange channels. However, recovery becomes more difficult once funds are moved through private wallets, mixers, bridges, foreign exchanges, or cash-out networks.

The best legal strategy is speed, documentation, and proper forum selection. The best preventive strategy is skepticism toward guaranteed returns, verification of authority, avoidance of personal-account payments, and refusal to invest in platforms that cannot clearly identify their legal operator, regulatory status, and source of profits.