I. Introduction

Online “prize withdrawal” and “deposit” scams generally follow a pattern: a victim is told they have won a prize, are entitled to a payout, or can unlock a larger amount of money—but must first pay “processing,” “tax,” “release,” “verification,” “membership,” “insurance,” “delivery,” “activation,” “anti-money laundering,” or similar fees. The victim pays one or more deposits and is then pressured to pay again, threatened, blocked, or endlessly delayed. In Philippine law, these acts commonly fall under Estafa (Swindling) under the Revised Penal Code (RPC), often alongside other offenses such as cybercrime-related violations, and may also implicate laws on e-commerce, identity misuse, and financial fraud depending on the facts.

This article explains what you need to know to evaluate your case, preserve evidence, choose where to file, and move the matter through investigation and prosecution in the Philippine setting.

II. What These Scams Look Like (Common Fact Patterns)

A. “Prize Withdrawal” scam (release-fee scheme)

Typical indicators:

You are told you won a raffle/lottery/giveaway, or a “remittance” is waiting.
You must pay a “release fee,” “tax,” “customs fee,” “processing fee,” “courier fee,” or “notarization fee.”
After paying, you are asked for another payment to “complete the withdrawal.”
The scammer may impersonate a bank, courier, government office, celebrity, influencer, or a legitimate company.

B. “Deposit” scam (advance payment / top-up scheme)

Variants include:

“Send a deposit so I can send you the bigger amount.”
“You must maintain a minimum balance first.”
“You must pay the account upgrade fee.”
“Pay to unlock your earnings/commission.”
“Pay for verification to receive funds.”

C. Where it happens

Common channels:

Facebook/Instagram/TikTok pages and Messenger/DMs
WhatsApp/Telegram/Viber
SMS “congratulations” messages
Email phishing or fake customer support
Fake trading/crypto apps or “earn” sites
Online marketplaces with off-platform payment demands

III. Legal Bases You Will Commonly Use

A. Estafa under the Revised Penal Code

Estafa is generally committed when a person defrauds another by deceit and causes damage. For prize withdrawal/deposit scams, the most common theory is Estafa by means of false pretenses or fraudulent acts—the scammer makes false representations (e.g., a prize exists; funds are ready; a fee is required; identity or authority is genuine), inducing the victim to pay money, resulting in loss.

Key elements you must be able to show:

False pretense or fraudulent representation (e.g., “You won,” “Pay fee to claim,” “I’m from X agency”)
Made prior to or at the time of the transaction
Reliance by the victim (you believed it and paid)
Damage or prejudice (loss of money, charges, or property)

Estafa can be charged even if the scammer never intended to deliver anything and the “prize” never existed—what matters is the deceitful inducement and resulting damage.

B. Cyber-related angle (when online means were used)

When the scam is executed through computers, phones, internet platforms, electronic messages, or online payment channels, prosecutors often treat the conduct as cyber-related, affecting procedure (e.g., evidence, warrants, digital forensics) and potentially the penalty framework depending on how it is charged.

C. Other possible related offenses (case-dependent)

Depending on facts, the case can also involve:

Falsification / use of fictitious identity (fake IDs, fake documents, impersonation)
Violations involving access devices or electronic payment instruments (if cards/e-wallet accounts are misused)
Money laundering concerns (often used as a scam pretext; actual AMLA implications depend on broader financial investigation)
Threats / coercion / harassment (if intimidation is used to extract more payments)
Defamation-related issues (be careful with public accusations while case is pending)

You do not need to perfectly label every statute at the start; the complaint can be filed on core facts and loss, and the investigator/prosecutor will determine proper charges.

IV. Threshold Questions: Do You Have an Estafa Case?

A. Strong signs you have a criminal case

You paid because you were induced by a specific claim (prize, release requirement, authority)
The claim was false and the scammer disappeared or kept demanding more fees
The scammer used multiple accounts, aliases, money mules, or scripted messages
There is clear documentation of payments and communications

B. Issues that commonly weaken a case (not necessarily fatal)

You have no proof of payment (cash transfer without receipts)
You deleted the chat or lost the number/account
Payment was made through intermediaries with unclear identifiers
You only have verbal calls with no recordings and little documentation

Weaknesses can often be addressed by gathering records from banks/e-wallets and retrieving platform data.

V. Preserve and Organize Evidence (This Determines Success)

Time matters. Scammers delete accounts and rotate “mule” wallets. Start preserving immediately.

A. Digital communications

Collect:

Full chat threads (Messenger/Telegram/WhatsApp, including date/time stamps)
Screenshots and screen recordings that show:
- Account/profile URL/handle
- Visible name, username, phone number, email
- Messages showing the inducement and payment demands
- Threats, urgency tactics, or “final payment” scripts
Copies of emails (with headers if possible)
SMS messages with sender details
Call logs

Best practice:

Export chat data when the app supports it.
Keep originals on your phone and back up copies to a separate storage device/cloud.
Do not “edit” screenshots; keep raw versions to avoid authenticity issues.

B. Payment records

Collect:

Bank transfer receipts, deposit slips, remittance records
E-wallet transaction details (reference numbers, merchant IDs, receiver name/number)
Screenshots of “confirmed” payments
Statements showing debits
If crypto was used: transaction hashes, wallet addresses, exchange records, screenshots of the app.

C. Identity and account data of the suspect

Collect:

Profile links, IDs, pages, groups
Names/aliases used
Photos, posted content, “about” sections, admin info
Any “verification” documents they sent (IDs, permits, letters)

D. Your narrative timeline

Write a timeline:

First contact (date/time/platform)
Exact representations made (“you won,” “fee required,” “release after payment”)
Each payment (amount, channel, reference number)
Follow-ups and additional demands
When you realized it was a scam
Total loss

This timeline becomes the backbone of your affidavit.

VI. Where to File: Choosing the Correct Venue

A. Primary filing route: Law enforcement cyber units or local police

You can file a complaint at:

PNP Anti-Cybercrime Group (ACG) (commonly used for online scams)
NBI Cybercrime Division / regional NBI offices (also common)
Your local police station (they may refer you to cyber units, but you can start here)

If you can access a cyber unit, it is usually more efficient because they are better equipped for digital evidence preservation and coordination with platforms and financial institutions.

B. Prosecutor’s Office (Office of the City/Provincial Prosecutor)

Ultimately, the criminal case proceeds through the prosecutor’s office for inquest or preliminary investigation (online scams typically go through preliminary investigation unless there is an arrest in flagrante).

You may:

File first with law enforcement (they assist with evidence and respondent identification), then the case is endorsed to the prosecutor; or
File directly with the prosecutor with your affidavit and attachments, especially if you already have strong evidence and respondent identifiers.

C. Venue considerations (where the complaint is filed)

Venue in cyber-enabled offenses can be flexible, commonly including where:

You were located when you received messages or sent payments
The account holder or suspect resides
The bank/e-wallet transaction occurred or was received
Any essential element of the offense took place

Practically, file where it is most convenient for you and where investigators can work with local financial institutions and courts.

VII. What to Prepare: The Complaint-Affidavit Package

A typical estafa complaint filing includes:

Complaint-Affidavit
- Your personal circumstances (name, address, contact, valid IDs)
- The facts in chronological order
- How you were deceived and why you believed it
- The damage (total loss)
- Identification of suspect(s), if known
- A clear request that charges be filed
Annexes (Evidence)
- Screenshots/exports of chats and posts
- Payment records and bank/e-wallet documentation
- IDs/documents the scammer used
- Links, handles, phone numbers
- Your timeline
Affidavit of witnesses (if any)
- If someone was with you during calls/transactions or helped verify payments
Proof of identity
- Government-issued IDs
- Proof of address may be helpful

Keep both printed and digital copies, with a consistent labeling system (e.g., Annex “A” chat screenshots; Annex “B” payment receipts; etc.).

VIII. How the Process Works (From Complaint to Case)

Step 1: Intake and evaluation

Investigators/prosecutors assess whether facts allege a crime and whether evidence supports identification and probable cause.

Step 2: Case build-up and suspect identification

Law enforcement may:

Conduct account tracing through banks/e-wallet providers
Issue requests for subscriber/account information (subject to lawful process)
Coordinate with platforms for preservation of data
Identify “money mules” who received funds, which can lead to the organizers

Step 3: Preliminary investigation (PI)

For most cases, the prosecutor conducts PI:

You submit complaint-affidavit and evidence
The respondent is required to submit a counter-affidavit
You may submit a reply
The prosecutor determines probable cause and files an Information in court if warranted

Step 4: Filing in court and trial

If the prosecutor files the case:

The court issues processes (summons or warrant depending on circumstances)
Arraignment, pre-trial, trial, judgment
Restitution/indemnity can be part of criminal judgment, but collection depends on enforceability and identification of assets.

IX. Practical Tips That Improve Outcomes

A. Act fast on financial channels

If you used a bank/e-wallet:

Report to the bank/e-wallet support immediately and request:
- Blocking/freezing if possible
- Retrieval of transaction details
- Documentation for law enforcement/prosecutor
File a formal dispute/report if the channel allows it.

While success varies, early reporting increases the chance of holding funds or identifying the receiving account.

B. Avoid compromising evidence

Do not threaten or extort the scammer back.
Do not publicly post accusations with personal data that could expose you to counterclaims or complicate the case.
Keep communications factual and preserve messages.

C. Identify “mule” accounts carefully

The receiving account name may not be the mastermind. Still, it is crucial evidence and can be a respondent if it appears complicit or if it received and moved proceeds. Investigators can build upward from mule accounts.

D. Consolidate multiple victims

If you know others scammed by the same network, consolidating complaints can:

Establish pattern, scheme, and intent
Strengthen probable cause
Help investigators map the network Do not share each other’s private data casually; coordinate through lawful reporting channels.

X. Drafting Guidance: What Your Complaint-Affidavit Should Say

A strong affidavit is clear, chronological, and documentary-backed. It should contain:

How contact started
- Platform/account identity
- The exact “prize” or “withdrawal” representation
The deceitful representations
- Quote key lines (or paraphrase with exact screenshots annexed)
- Claims of authority (bank, courier, government, celebrity, company)
Your reliance
- Why you believed it (e.g., official-looking page, fake documents, repeated assurances)
The transfers
- Each payment with date/time, amount, channel, receiver identifiers, reference numbers
- Total amount lost
Subsequent conduct showing fraudulent intent
- Additional demands, excuses, blocking, threats, refusal to refund
Your request
- That respondent(s) be charged for estafa and related offenses
- That appropriate legal processes be undertaken to identify responsible persons

Attach annexes and reference them consistently in your narrative.

XI. Common Defenses You Should Expect

In online scam cases, respondents often claim:

“It was a legitimate transaction / service fee”
“I was only paid to receive funds” (mule defense)
“The complainant voluntarily sent money”
“Someone else used my account”
“No misrepresentation was made”

Your best counters are:

Clear evidence of the false promise or false authority
Proof the “prize” or “release” was fabricated
Pattern of repeated fee demands and failure to deliver
Evidence of control and benefit (account activity, communications tied to the receiver)

XII. Remedies Beyond the Criminal Case

A. Civil action for recovery

A criminal estafa case can include civil liability, but separate civil remedies may also exist. Practical recovery depends on identifying the real parties and assets.

B. Administrative or platform reporting

Reporting the scam account to the platform can help take it down and preserve data, but you should preserve evidence first.

C. Consumer/financial complaints

Depending on the channel used, filing complaints with financial service providers can support tracing and documentation.

XIII. Special Situations

A. If you only have a phone number or username

You can still file. Investigators can work from:

E-wallet receiver number
Bank account details
Platform profile URL
Transaction reference numbers

B. If the scammer is abroad

Cases can proceed, but enforcement and identification may be harder. Still, mule accounts and local facilitators can be pursued, and the existence of cross-border activity can be documented.

C. If the scam involves “investment,” “crypto,” or “task” schemes

Often these are also fraud schemes that use the same “deposit to withdraw” tactic. The core estafa theory remains: deceit + reliance + loss.

XIV. Checklist: What to Bring When You File

Government ID(s)
Printed timeline of events
Printed screenshots and chat exports (labeled annexes)
Payment proofs and transaction references
Names/aliases, profile links, phone numbers, emails
List of suspected accounts used (including backup accounts)
A USB drive or folder containing digital copies, if accepted by the office

XV. Conclusion

Online “prize withdrawal” and deposit scams are classic deception-and-payment schemes adapted to digital platforms. In the Philippines, the primary criminal pathway is an Estafa complaint supported by well-preserved communications and payment records, filed through cyber-capable law enforcement and pursued through preliminary investigation in the prosecutor’s office. The strength of the case usually turns on two things: (1) the clarity of the misrepresentations that induced payment, and (2) the traceability of the money trail through transaction references, receiving accounts, and platform identifiers.