1) What “delivery rider scams” usually look like (Philippine setting)

“Delivery rider scams” are fraud schemes where a person poses as (or uses the identity of) a legitimate courier, rider, or delivery platform representative to obtain money, goods, personal data, or access to accounts. Common patterns include:

Fake COD / fake parcel delivery: Victim receives calls or messages that a parcel is due for delivery with a COD amount; victim pays, but no legitimate order exists.
“Wrong item / return” trick: A rider delivers an item and later claims it was wrong or must be returned; victim hands over money or a replacement item, or provides OTPs.
“Delivery fee top-up” or “additional fee” scam: Rider claims extra charges for toll, packaging, “system error,” or “warehouse fee,” often with a request to transfer to an e-wallet.
Phishing via delivery tracking links: Victim receives a text with a tracking link leading to a fake site that steals passwords, OTPs, or e-wallet access.
Identity hijack: Scammer uses a real rider’s name/number, or a cloned social account, to appear credible and collect payments.
Account takeover / OTP scam: Victim is pressured to share OTPs “to confirm delivery,” enabling e-wallet/bank takeover.
“Rider arrested / emergency” social engineering: Victim is told a rider had an accident or was detained and needs funds “to release parcel.”
Organized syndicate: Multiple actors: caller, fake rider, and a money mule receiving transfers.

These incidents often blur civil and criminal issues, but most cases are criminally actionable when deception is used to obtain money or property.

2) Key criminal laws potentially applicable

A. Revised Penal Code (RPC)

1) Estafa (Swindling) — Article 315 A frequent fit when a scammer uses deceit to obtain money or property. Typical elements:

Deceit or fraudulent means (false representations, misrepresentation of authority/identity, fake delivery claims)
Damage or prejudice to the victim (loss of money/property)
Causal link between deceit and the victim’s delivery of money/property

Common delivery-scam scenarios implicate estafa by false pretenses (e.g., claiming there’s a COD parcel, claiming to be from a courier, claiming extra fees are required).

2) Other deceits / Swindling — Article 318 (where appropriate) Used when conduct falls outside Article 315 but still involves deceit and resulting damage.

3) Theft / Qualified Theft — Articles 308–310 If property is taken without consent and without violence/intimidation.

If the suspect is an employee or has a special relationship of trust (rare in “fake rider” cases unless the offender is an actual employee entrusted with goods), qualified theft may apply.

4) Robbery / Robbery with intimidation — Articles 293–303 If the victim is forced to hand over property through violence or intimidation.

5) Grave Threats / Light Threats / Coercion If the scam involved threats (e.g., “pay or we’ll file a case,” “we’ll harm you,” “we’ll expose your info”).

B. Special Penal Laws commonly triggered

1) Cybercrime Prevention Act of 2012 (R.A. 10175) If estafa, threats, identity misuse, or other offenses are committed through ICT (texts, messaging apps, email, fake websites, social media), the offense may be treated as cyber-related (which generally affects procedure and may increase penalties depending on the underlying offense and how it was committed). Practical impact: you can report to cybercrime units and preserve digital evidence carefully.

2) Anti-Photo and Video Voyeurism Act (R.A. 9995) Occasionally relevant if scammers threaten to release intimate images as leverage (less common but possible).

3) Access Device / Payment-related laws If the scheme involves misuse of cards, e-wallets, or unauthorized electronic fund transfers, additional laws may apply depending on facts (often pursued alongside RPC and R.A. 10175).

4) Data Privacy Act of 2012 (R.A. 10173) If personal data is unlawfully collected/used/disclosed (e.g., doxxing, selling delivery address lists, public posting of victim information), administrative/criminal aspects may be implicated. In practice, a complaint may be lodged with the National Privacy Commission for data privacy violations, separate from criminal prosecution.

3) Choosing the right case theory: criminal vs. civil (and why it matters)

Criminal complaint aims to punish the offender (imprisonment/fine) and can include civil liability (restitution/damages) in the same case.
Civil action alone may be appropriate if the core issue is a contractual dispute with no deceit (rare in genuine “scam” setups).
In delivery rider scams, victims usually pursue criminal remedies because deception is central, identities are disguised, and recovery requires law enforcement.

4) Where to file: venues and agencies

A. Police and cybercrime channels

PNP (local police station) for immediate blotter entry, incident report, coordination with investigators.
PNP Anti-Cybercrime Group (ACG) or relevant cybercrime desk if the scam used online platforms, e-wallet transfers, phishing links, or messaging apps.
NBI Cybercrime Division for more complex digital evidence, syndicates, or larger losses.

B. Prosecutor’s Office (Office of the City/Provincial Prosecutor)

A criminal case typically begins with a complaint-affidavit filed with the Prosecutor’s Office for inquest (if arrested) or regular preliminary investigation (most scam cases).

C. Barangay (Katarungang Pambarangay) — usually not the main route

Many criminal cases are not subject to barangay conciliation; plus, scam suspects are often unknown, not neighbors, or outside jurisdiction. Still, some minor disputes between known parties may pass through barangay processes, but estafa and cyber-related crimes are ordinarily pursued through proper criminal complaint channels.

D. Courts

Courts become involved after the Prosecutor files an Information and the case is raffled to the appropriate court.

5) Timeline: what happens after you report

Immediate incident documentation (screenshots, receipts, IDs, CCTV requests)
Police report / blotter and referral to investigative unit
Complaint-affidavit preparation with supporting evidence
Filing with Prosecutor’s Office (preliminary investigation)
Subpoena and counter-affidavit from respondent (if identified)
Resolution (probable cause or dismissal)
If probable cause: Information filed in court, issuance of warrants (if appropriate)
Arraignment, trial, judgment, and enforcement of restitution/damages

For unknown suspects, early effort is focused on identification (tracing numbers, bank/e-wallet recipient, CCTV, platform logs).

6) Evidence Checklist (the practical core)

A. Identity and contact evidence (suspect and intermediaries)

Phone number(s) used; save with date/time, and do not delete messages.
Screenshots of texts, chats (Messenger/Viber/WhatsApp/Telegram), including:
- The full thread
- Profile details (name, handle, profile link)
- Any threats, demands, instructions, tracking links
Call logs showing incoming/outgoing calls and durations.
Names used by the rider/scammer; aliases and spelling variations.
Photos/videos of the rider, vehicle, plate number, delivery bag, uniform, waybill.
Any ID presented (company ID, government ID screenshot—store safely, do not post publicly).

B. Transaction evidence (money trail)

E-wallet/bank transfer records: transaction IDs, reference numbers, timestamps, recipient number/name, amount.
Screenshots + exported PDFs (where available) from e-wallet/banking apps showing transaction details.
Proof of COD payment (receipt, photo of money exchange if available).
Remittance center receipt (MLhuillier/Palawan/others) if used.
Chargeback/complaint reference if you reported to the payment provider.

C. Parcel/order evidence (to prove falsity or manipulation)

Order confirmation (or proof you had no order): platform order history screenshots.
Waybill / tracking details (photo of airway bill, QR, barcode).
Delivery platform messages or emails, including legitimate tracking links.
Packaging photos showing labels, addresses, sender info.
Unboxing video (if you have it), showing the condition and contents upon receipt.

D. Location and scene evidence

CCTV footage from:
- Your home/building
- Neighboring establishments
- Street cameras, guardhouse cameras Request promptly because retention windows can be short.
Barangay incident report or subdivision guard logbook entry (if rider entered).
Witness statements from guards, neighbors, household members.
Photos of the area where exchange occurred.

E. Device and digital integrity evidence (for cyber-related complaints)

Preserve original files: avoid editing screenshots; keep originals.
Metadata: keep files as saved by your phone; if possible, back up to a secure drive.
Phishing links: copy the exact URL (do not repeatedly open it); screenshot the page and source messages.
If you clicked: record what data you entered, when, and what happened after (account takeover, unauthorized transfers).

F. Damages evidence (for restitution/damages)

Total loss computation: amounts paid, items lost, replacement costs.
Receipts for replacements, repairs, transportation, time off work (if claimed).
Medical records if intimidation led to injury (rare, but include if applicable).

7) Immediate steps after the incident (damage control)

Stop communication with the scammer except to preserve evidence.
Secure accounts:
- Change passwords for email, delivery apps, e-wallets, banking apps
- Enable MFA/biometrics
- Revoke suspicious sessions/devices where possible
Notify financial providers immediately:
- E-wallet/bank fraud hotlines
- Request temporary account freeze if there’s ongoing compromise
Preserve evidence:
- Screenshots + screen recordings scrolling through the entire chat
- Export statements/transactions
Identify the money trail:
- Recipient details are often the fastest lead (mule accounts)
Report to platform support:
- Delivery platform and marketplace (if any)
- Request preservation of logs (chat history, rider assignment, delivery confirmation, IP logs if applicable)

8) Drafting the Complaint-Affidavit (structure and content)

A clear complaint-affidavit improves the chance of a finding of probable cause. Typical structure:

Caption and parties
- Your name, address, contact
- Respondent: name(s) and aliases, phone numbers, e-wallet/bank accounts, “John Doe” if unknown
Narrative of facts (chronological)
- When and how you were contacted
- Exact representations made (COD amount, “extra fees,” fake parcel)
- Your reliance and payment/hand-over
- What happened next (non-delivery, blocked contact, refusal to refund)
Evidence list and attachments
- Mark as Annex “A,” “B,” etc.
Legal allegations
- Identify suspected offenses (e.g., Estafa under Art. 315; if online, cyber-related under R.A. 10175)
Prayer
- Request investigation and filing of appropriate charges
- Request restitution and damages (as applicable)
Verification and certification
- Proper jurat/acknowledgment before an authorized officer (notary, prosecutor’s office if allowed under their procedures)

Tip: Use exact dates and times; quote the scammer’s key lines; identify reference numbers.

9) Identifying unknown suspects: practical investigative leads

Even when the rider is “unknown,” you can build a case by focusing on identifiers:

Recipient account tracing: e-wallet/bank accounts have KYC; subpoenas/court orders may be required, but investigators can start with your transaction records.
SIM/number tracing: registration and telco records may be obtainable via lawful process.
CCTV + plate number: can link to LTO records through proper channels.
Platform verification: confirm if there was an actual rider assignment; fake riders often have no matching platform record.
Link analysis: multiple victims sending to the same recipient account suggests syndicate/mule.

10) Common pitfalls that weaken cases (and how to avoid them)

Deleting messages: keep everything, including missed calls and deleted chat notices.
Only partial screenshots: capture the whole thread and profile details.
No proof of payment: always obtain transaction IDs/reference numbers.
Delay in CCTV requests: request immediately; ask for certified copies when possible.
Public posting of suspect details: can complicate privacy and defamation issues; prioritize lawful reporting.
Mixing legitimate disputes with scams: focus narrative on deceit, not mere dissatisfaction.
Using edited images: preserve originals; provide copies for filing.

11) Remedies while the criminal case is pending

Fraud dispute processes with banks/e-wallets (possible recovery depending on circumstances).
Platform claims/refunds if a legitimate platform transaction existed.
Civil claims for damages can proceed as part of criminal action (civil liability) or separately, depending on strategy and procedural posture.

12) Quick reference: Evidence “must-haves” for most delivery rider scam complaints

Minimum pack (ideal for filing):

Your sworn complaint-affidavit
Screenshots of scam communications + profile info
Call logs
Transaction records (IDs, recipient info, time/date)
Proof of non-order / fake order (platform history, emails)
Any CCTV or witness statements if available
A loss summary (amounts and dates)

13) Sample evidence index (for Annexes)

Annex A: Screenshot of initial message/call log
Annex B: Full chat thread screenshots + profile page
Annex C: E-wallet/bank transaction screenshot with reference number
Annex D: Platform order history showing no such order / mismatch
Annex E: Photos of waybill/parcel/packaging
Annex F: CCTV stills and certification (if obtained)
Annex G: Affidavits of witnesses/guardhouse log excerpt
Annex H: Computation of damages + receipts

14) Summary: how to build a strong case

A strong Philippine criminal complaint for a delivery rider scam is built on (1) deceit (what was falsely claimed), (2) reliance (why you believed it), (3) transfer of money/property, (4) loss, and (5) identity/money trail identifiers (numbers, accounts, CCTV, platform records). Most cases are framed as Estafa under the Revised Penal Code, often cyber-related when committed through phones, messaging apps, links, or online payments, supported by a disciplined evidence package and a clear sworn narrative.