Online investment scams move fast: the recruiter disappears, the group chat is deleted, the e-wallet account is emptied, and victims are left with screenshots, transfer receipts, and a painful question: Can I file an estafa case in the Philippines? In many cases, yes. But a strong estafa complaint is not built on anger alone. It is built on evidence showing that you were deceived before or at the time you parted with your money, that you relied on the scammer’s false promises, and that you suffered actual loss.

What Estafa Means in an Online Investment Scam

Estafa is the Philippine crime commonly called swindling. For online investment scams, the usual legal theory is estafa by false pretenses or fraudulent acts under Article 315, paragraph 2(a) of the Revised Penal Code. This covers situations where a person uses a fictitious name, pretends to have qualifications, authority, property, credit, business, agency, or imaginary transactions, or uses similar deceit to defraud another person. The Supreme Court has repeatedly described the heart of estafa as fraud or deceit that causes damage to another. (Lawphil)

In plain English, the issue is usually this:

Did the scammer lie or misrepresent something important to make you invest, and did you lose money because you believed it?

Common examples include:

A person claims to run a “guaranteed” crypto, forex, casino financing, lending, or trading program.
A recruiter promises fixed returns such as 10%, 20%, or 30% per month with “no risk.”
A group presents fake SEC documents, fake trading dashboards, fake payout screenshots, or fake testimonials.
The scammer says your money will be invested but actually uses new investors’ money to pay old investors.
The platform lets you see “profits” online but blocks withdrawal unless you pay taxes, upgrade fees, verification fees, or unlocking fees.

A bad investment is not automatically estafa. A business can fail without a crime being committed. What turns a failed investment into a possible estafa case is deceit from the beginning or deceit used to obtain more money.

Legal Basis: Estafa, Cybercrime, Securities Violations, and Syndicated Estafa

Estafa under Article 315 of the Revised Penal Code

For estafa by false pretenses, the usual elements are:

There was a false pretense, fraudulent act, or fraudulent means.
The false pretense or deceit happened before or at the same time you gave the money.
You relied on the false representation.
You suffered damage or loss.

This timing matters. If someone honestly borrowed money or entered into a real business arrangement, then later became unable to pay, the case may be civil in nature. But if the person never intended to invest the money, used a fake identity, showed fake proof, concealed that the scheme was unauthorized, or used a fake platform to induce payment, estafa becomes much stronger.

Article 315 was amended by Republic Act No. 10951 of 2017, which adjusted the value thresholds used in determining penalties for estafa. For victims, the exact amount lost matters because it affects penalty exposure, court jurisdiction, settlement posture, and how prosecutors evaluate the seriousness of the case. (Lawphil)

Cybercrime angle under RA 10175

If the estafa was committed through Facebook, Messenger, Viber, Telegram, WhatsApp, email, websites, mobile apps, fake trading portals, online banking, e-wallets, cryptocurrency platforms, or other information and communications technology, the complaint may include estafa in relation to Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

Section 6 of RA 10175 provides that crimes under the Revised Penal Code and special laws, when committed through information and communications technologies, are covered by the Cybercrime Prevention Act, with the penalty generally imposed one degree higher. The law also gives Regional Trial Courts jurisdiction over violations of the Cybercrime Prevention Act. (Lawphil)

This is why many online scam complaints are worded as:

Estafa under Article 315, paragraph 2(a) of the Revised Penal Code, in relation to Section 6 of Republic Act No. 10175.

Securities law violations under RA 8799

Many online “investment” schemes also violate the Securities Regulation Code, Republic Act No. 8799 of 2000. Under Section 8, securities cannot be sold or offered for sale or distribution in the Philippines unless properly registered with the Securities and Exchange Commission. Investment contracts may be treated as securities when people invest money in a common enterprise expecting profits mainly from the efforts of others. (Lawphil)

This matters because an investment scam may involve both:

a criminal estafa complaint for fraud; and
a regulatory complaint with the SEC for unauthorized solicitation of investments.

An SEC complaint does not automatically replace an estafa complaint. It is often useful supporting evidence, especially if the SEC has already issued an advisory saying the entity is not registered or not authorized to solicit investments.

Syndicated estafa under PD 1689

Some large online investment scams may qualify as syndicated estafa under Presidential Decree No. 1689. This is much more serious than ordinary estafa. It generally applies when estafa is committed by a syndicate of five or more persons formed with the intention of carrying out the unlawful scheme, and the defrauded money came from funds solicited from the general public or from members, stockholders, depositors, or similar contributors. (Lawphil)

A practical warning: not every scam involving five people is automatically syndicated estafa. The prosecution must still show the elements required by PD 1689 and jurisprudence. The Supreme Court has clarified that syndicated estafa requires more than simply counting five accused persons; the structure and use of the association or corporation matter. (Lawphil)

PD 1689 still uses language referring to the death penalty in older text, but the death penalty is no longer imposed in the Philippines because Republic Act No. 9346 of 2006 prohibits its imposition. (Lawphil)

Where to File an Estafa Complaint for an Online Investment Scam

You usually have three practical entry points:

Office	Best for	What it can do
City or Provincial Prosecutor’s Office	When you already have enough evidence and know the respondent’s identity or account details	Conduct preliminary investigation and decide whether to file the case in court
NBI Cybercrime Division or Regional Cybercrime Center	When the scam involves fake accounts, websites, apps, hacking, digital trails, or multiple victims	Assist with cybercrime investigation, sworn statements, and evidence gathering
PNP Anti-Cybercrime Group or local police cybercrime unit	When immediate police documentation, tracing, or coordinated investigation is needed	Receive reports, prepare blotter or investigation records, and refer for prosecution
SEC Enforcement and Investor Protection Department	When the scheme involves unauthorized investment solicitation	Receive investment scam complaints and issue regulatory findings, advisories, or enforcement actions

The NBI Cybercrime Division’s Citizen’s Charter lists investigative assistance for victims of computer crimes as available to the general public, with no fee stated for that service; it includes filing a complaint sheet, undergoing preliminary interview, executing sworn statements, and submitting supporting documents. (National Bureau of Investigation)

The SEC also maintains its iMessage ticketing system, which includes eComplaints on Investment Scams under the Enforcement and Investor Protection Department. (imessage.sec.gov.ph)

Step-by-Step Guide to Filing an Estafa Case

1. Preserve your evidence before confronting the scammer

Do this immediately, even before drafting the complaint:

Take screenshots of the full conversation, not just selected messages.
Export chat histories if the app allows it.
Save profile links, usernames, phone numbers, email addresses, referral codes, wallet addresses, bank account names, and account numbers.
Record URLs of websites, dashboards, landing pages, app download pages, and social media pages.
Download receipts from banks, GCash, Maya, PayPal, crypto exchanges, remittance centers, or wire transfer platforms.
Save videos, voice notes, Zoom recordings, webinars, and promotional materials.
Preserve the phone or device where the original messages are stored.

Do not rely only on cropped screenshots. Screenshots are useful, but investigators and prosecutors prefer evidence that shows context: who said what, when it was said, what was promised, how you were instructed to pay, and what happened after you demanded withdrawal.

Under the Rules on Electronic Evidence, electronic documents and electronic data messages may be used in evidence, but authenticity and reliability still matter. Republic Act No. 8792, the E-Commerce Act of 2000, also recognizes electronic documents and data messages in legal proceedings, subject to proof of authenticity and evidentiary weight. (Lawphil)

2. Build a clear timeline

Your complaint-affidavit should tell the story in chronological order. A simple structure works best:

When and how you first encountered the investment offer.
Who introduced it to you.
What exact promises were made.
What documents, screenshots, links, or testimonials were shown.
Why you believed the offer.
How much you sent, when, and to whom.
What happened when you tried to withdraw or recover your money.
What excuses, threats, or additional payment demands were made.
How much remains unpaid.

For online scams, prosecutors often need to see the connection between the deceit and the payment. A timeline helps prove that the false promise happened before you sent the money.

3. Identify the respondent as much as possible

You can file even if you do not know the scammer’s full legal name, but your complaint becomes stronger if you can provide identifiers such as:

full name or alias used;
Facebook, Telegram, Viber, WhatsApp, TikTok, Instagram, or LinkedIn profile;
phone number or SIM details;
email address;
bank account name and number;
e-wallet account name and mobile number;
crypto wallet address and exchange transaction ID;
company name, SEC registration number, business permit, or website domain;
names of recruiters, uplines, admins, agents, and group moderators.

If the only known identity is an online alias, the NBI or PNP cybercrime unit may be a better first stop because investigators may need to preserve digital traces and coordinate with platforms or financial institutions.

4. Prepare a complaint-affidavit

A complaint-affidavit is your sworn written statement. It should be factual, specific, and supported by attachments.

It should include:

your full name, address, contact details, and ID information;
the respondent’s known details;
a clear narration of facts;
the amount lost;
the exact representations made to you;
the list of attached evidence;
a statement that you are filing for estafa and other appropriate offenses;
your signature before a prosecutor, notary public, or authorized officer.

Under Rule 112 on preliminary investigation, the complaint should state the respondent’s address and be accompanied by affidavits of the complainant and witnesses, plus supporting documents. Affidavits must be subscribed and sworn to before the proper officer. (Lawphil)

5. Attach organized evidence

A messy pile of screenshots can slow down a case. Label your evidence.

Attachment	What to include	Why it matters
A	Screenshots of investment offer and promises	Shows deceit or false representation
B	Proof of identity of recruiter or account	Links the respondent to the scheme
C	Payment receipts and bank/e-wallet confirmations	Proves loss and where money went
D	Withdrawal requests and excuses	Shows non-payment, stalling, or additional demands
E	SEC advisory or SEC verification results	Supports unauthorized solicitation theory
F	Group chat membership, webinars, promotional materials	Shows public solicitation and possible syndicate
G	Demand messages or written demand letter	Shows you asked for return and respondent refused or disappeared

Printouts should be readable. For screenshots, include the date, time, profile name, URL, and phone number whenever visible. Keep the original digital files because investigators may later ask for them.

6. File with the prosecutor or investigative agency

If filing directly with the City or Provincial Prosecutor’s Office, bring:

signed complaint-affidavit;
affidavits of witnesses, if any;
copies of all evidence;
valid IDs;
proof of address;
copies for the prosecutor, respondents, and your receiving copy;
filing fee, if required.

The DOJ schedule of fees lists criminal complaint fees for estafa, violation of trust receipt law, business scam, or financial fraud based on the amount of damage, starting at ₱150 for damage up to ₱50,000 and increasing by bracket. (Department of Justice)

If filing with NBI or PNP first, you may be asked to:

fill out a complaint sheet;
submit your evidence;
undergo an interview;
execute a sworn statement;
provide your device for examination or screenshot verification;
return for supplemental statements or coordination.

7. Go through preliminary investigation

For estafa cases that require preliminary investigation, the prosecutor usually gives the respondent a chance to submit a counter-affidavit. The complainant may then be asked to submit a reply-affidavit. The prosecutor evaluates whether there is probable cause, meaning enough reason to believe that a crime was committed and that the respondent is probably guilty.

In practice, this stage may take a few months, sometimes longer, depending on the prosecutor’s docket, number of respondents, whether addresses are complete, whether subpoenas are served, and whether supplemental evidence is needed.

If probable cause is found, the prosecutor files an Information in court. If dismissed, the complainant may have remedies such as a motion for reconsideration or petition for review under DOJ rules, subject to strict periods.

8. Understand the civil recovery aspect

A criminal estafa case is meant to punish the offender, but it can also help recover money. Under Article 100 of the Revised Penal Code, every person criminally liable for a felony is also civilly liable. Under Rule 111, when a criminal action is instituted, the civil action for recovery of civil liability arising from the offense is generally deemed instituted with it unless waived, reserved, or filed separately. (Lawphil)

This means you may ask for restitution or actual damages in the criminal case. However, actual recovery still depends on whether the accused has traceable assets, whether funds remain in bank or e-wallet accounts, and whether provisional remedies or asset preservation steps are available in the specific case.

Common Problems That Weaken Estafa Complaints

“I only have proof that I sent money.”

Proof of payment is important, but it is not enough by itself. You also need proof of deceit. Show what the scammer promised before you paid: guaranteed returns, fake registration, fake business activity, fake trading results, fake names, fake authority, or false claims that your money was safe.

“The person paid me at first, then stopped.”

Early payouts do not automatically defeat estafa. In Ponzi-style schemes, early payouts may be used to gain trust and attract more money. The Supreme Court has recognized Ponzi schemes as unsustainable investment fraud structures in investment scam cases. (Lawphil)

“The company is SEC-registered, so I thought it was legal.”

SEC registration as a corporation is not the same as authority to solicit investments from the public. A corporation may be registered for ordinary business purposes but still lack a permit to sell securities or investment contracts. This is a common trap in online investment scams.

“The scammer is abroad.”

You can still document and file the complaint in the Philippines if part of the offense occurred here, the victim sent money from the Philippines, the bank or e-wallet account is in the Philippines, the platform targeted people in the Philippines, or Filipino nationals are involved. If the complainant or key witness is abroad, affidavits may need to be notarized before a Philippine Embassy or Consulate or notarized locally and apostilled, depending on the country and document type. The Philippines became a party to the Apostille Convention on May 14, 2019, and DFA materials distinguish apostille use from authentication for non-member countries. (Apostille Philippines)

“Should we go to the barangay first?”

Most online investment scam estafa cases do not realistically belong in barangay conciliation, especially where the amount is substantial, the penalty exceeds the barangay threshold, parties live in different cities or countries, or urgent action is needed. The Katarungang Pambarangay rules exclude offenses punishable by imprisonment exceeding one year or a fine over ₱5,000. (Lawphil)

“The group wants to file one case together.”

Multiple victims can coordinate, but each victim should still prepare a clear affidavit showing personal loss and personal reliance on the fraudulent representations. Group evidence helps show pattern, public solicitation, and possible syndication, but prosecutors still need individual proof of payment and damage.

Evidence Checklist for Online Investment Scam Victims

Prepare these before filing:

Valid government ID of the complainant
Complaint-affidavit
Witness affidavits, if any
Screenshots of chats, posts, comments, and private messages
Group chat records showing admins, recruiters, and promises
URLs and profile links
Website screenshots and domain details
Proof of bank deposits, e-wallet transfers, remittances, or crypto transactions
Wallet addresses, transaction hashes, and exchange receipts
SEC advisory, SEC verification, or proof that no authority to solicit investments exists
Demand messages or demand letter
Spreadsheet summarizing payments, dates, channels, recipients, and unpaid balance
Copy of passport, apostille, consular notarization, or translated documents if the complainant or evidence is from abroad

Practical Timeline

Stage	Typical practical range	Common bottlenecks
Evidence gathering	A few days to several weeks	Deleted chats, missing URLs, unclear account names
NBI/PNP initial complaint	Same day to several weeks	Need for device review, tracing, or supplemental documents
Prosecutor preliminary investigation	Several months or longer	Subpoena service, multiple respondents, overloaded docket
Filing in court after probable cause	Weeks to months after resolution	Preparation and raffling of Information
Court proceedings	Often years, depending on complexity	Arrest, bail, arraignment, postponements, witness availability

The fastest useful step is not always “file immediately with whatever screenshots you have.” The better approach is to preserve evidence immediately, organize it, and file a complaint that clearly proves deceit, payment, and loss.

Frequently Asked Questions

Can I file estafa for an online investment scam in the Philippines?

Yes, if the facts show that you were deceived before or when you invested, and you lost money because of that deceit. The strongest cases show false promises, fake identity, fake authority, fake investment activity, or unauthorized solicitation.

Is failure to return my investment automatically estafa?

No. Mere failure to pay is not always estafa. You must show fraud or deceit, especially at the time you were convinced to part with your money. If the issue is only non-payment of a genuine debt or failed business, the remedy may be civil rather than criminal.

What if I received payouts at first?

You may still file if the early payouts were part of a fraudulent scheme. Many Ponzi-style scams pay early investors to make the scheme look legitimate, then collapse when new money stops coming in.

Should I file with NBI, PNP, SEC, or the prosecutor?

If you already know the respondent and have organized evidence, filing with the prosecutor may be appropriate. If digital tracing is needed, start with NBI Cybercrime Division or PNP Anti-Cybercrime Group. If the scheme involves unauthorized investment solicitation, also report to the SEC.

Can OFWs or foreigners file an estafa complaint in the Philippines?

Yes. OFWs, Filipinos abroad, and foreigners may file if Philippine authorities have a factual and legal basis to act. Documents executed abroad may need consular notarization or apostille, and foreign-language documents should usually be translated.

Can I recover my money through an estafa case?

Possible, but not guaranteed. The criminal case may include civil liability, restitution, or damages, but actual recovery depends on traceable assets, available funds, and enforcement. Reporting quickly improves the chance of preserving accounts or identifying recipients.

What if the scammer used a fake Facebook or Telegram account?

You can still file. Provide all profile links, usernames, phone numbers, invite links, payment accounts, wallet addresses, and screenshots. Cybercrime investigators may use these details to trace the person or connect the alias to bank, e-wallet, SIM, or platform records.

Do I need a demand letter before filing estafa?

A demand letter is not always legally required for estafa by false pretenses, but it can be useful evidence. It shows that you asked for your money back and records the respondent’s excuses, refusal, silence, or additional payment demands.

Can multiple victims file one complaint?

Yes, victims can coordinate and file related complaints, especially if the same group, platform, or recruiter is involved. Still, each victim should provide an individual affidavit and proof of personal payments and loss.

Key Takeaways

Estafa for an online investment scam depends on proof of deceit, not just proof that money was lost.
The usual charge is Article 315(2)(a) of the Revised Penal Code, often in relation to Section 6 of RA 10175 when the scam used online platforms or digital communications.
SEC registration as a corporation is not the same as authority to solicit investments from the public.
Preserve original digital evidence, not just cropped screenshots.
A strong complaint-affidavit should show the timeline: promise, reliance, payment, loss, and refusal or disappearance.
NBI, PNP, SEC, and the prosecutor have different roles; the right path depends on whether you need investigation, regulatory action, or immediate preliminary investigation.
Foreign complainants and OFWs can file, but affidavits and foreign documents may need apostille, consular notarization, translation, or authentication.
Filing quickly matters because scam pages, chats, bank accounts, e-wallets, and crypto trails can disappear.