A Philippine Legal Article
I. Introduction
Online scams have become one of the most common problems affecting Filipinos in the Philippines and overseas. A victim may be working abroad, living abroad, or temporarily outside the Philippines when they discover that they have been deceived by a person, seller, investment promoter, recruiter, romance scammer, fake agent, fake lender, fake employer, or online account operating in the Philippines.
The fact that the victim is abroad does not automatically prevent the filing of a criminal complaint in the Philippines. A complaint may still be prepared, notarized or consularized, submitted through a representative, filed with law enforcement or the prosecutor, and supported by digital evidence. The difficulty is usually practical: how to execute affidavits, preserve electronic evidence, identify the scammer, communicate with Philippine authorities, and comply with procedural requirements from outside the country.
This article discusses how a person abroad may file an online scam case in the Philippines, the possible criminal offenses involved, where to file, what documents are needed, how affidavits may be executed abroad, what evidence should be preserved, and what practical issues should be anticipated.
II. What Is an Online Scam?
An online scam is a deceptive scheme carried out through the internet, mobile applications, social media, messaging platforms, email, e-commerce sites, digital wallets, online banking, cryptocurrency platforms, fake websites, or other electronic means.
Common examples include:
- fake online sellers;
- fake investment schemes;
- romance scams;
- fake job offers;
- fake recruitment agencies;
- fake travel agencies;
- online lending scams;
- fake government processing services;
- fake parcel or customs-fee scams;
- identity theft;
- hacked-account scams;
- phishing;
- fake crypto or forex platforms;
- task scams;
- fake loan approval scams;
- marketplace scams;
- fake ticket sales;
- fake rental listings;
- fraudulent remittance schemes;
- fake legal, visa, or immigration services.
The legal classification depends on the facts. Not every failed online transaction is automatically a crime. The central issue is whether the facts show deceit, fraud, identity theft, unauthorized access, misrepresentation, or another punishable act.
III. Can a Victim Abroad File a Case in the Philippines?
Yes. A victim who is abroad may file a criminal complaint in the Philippines if the offense has sufficient connection to the Philippines.
The connection may exist when:
- the scammer is in the Philippines;
- the money was sent to a Philippine bank account, e-wallet, remittance center, or payment channel;
- the fraudulent representation was made by a person in the Philippines;
- the fake business, seller, recruiter, or agent is based in the Philippines;
- the victim was induced to transact with a Philippine-based person or entity;
- the online account, phone number, or payment account is linked to the Philippines;
- the complainant is Filipino and the damage relates to Philippine persons or property;
- part of the criminal act occurred in the Philippines; or
- the law gives Philippine authorities jurisdiction over the offense.
The complainant’s physical absence from the Philippines is not necessarily fatal. However, the complainant must still submit sworn statements and evidence in a form acceptable to Philippine authorities.
IV. Possible Criminal Offenses in Online Scam Cases
Online scam facts may fall under several Philippine laws. The appropriate offense depends on the nature of the scam.
A. Estafa under the Revised Penal Code
Estafa is the most common charge in scam cases. It generally involves fraud, deceit, abuse of confidence, or misappropriation that causes damage to another.
Online estafa may arise when a scammer:
- falsely represents that goods exist and will be delivered;
- pretends to be an authorized seller, agent, broker, recruiter, or investment manager;
- promises a service they never intended to provide;
- receives money by deceit;
- misappropriates funds entrusted to them;
- uses fake identities or fake documents;
- induces the victim to pay based on false statements; or
- disappears after receiving payment.
A mere failure to pay a debt or fulfill a contract is not always estafa. The complaint must show fraudulent intent or deceit, usually at or before the time the money or property was given.
B. Cybercrime-related estafa
If the fraud is committed through a computer system, online platform, electronic communication, or similar technology, the conduct may involve cybercrime aggravating features or cybercrime-related liability.
Cybercrime elements may become relevant when the scam is carried out through:
- Facebook, Instagram, TikTok, X, Telegram, Viber, WhatsApp, or Messenger;
- email;
- fake websites;
- online marketplaces;
- mobile applications;
- online banking;
- e-wallets;
- cryptocurrency platforms;
- online job or investment portals; or
- other digital channels.
C. Identity theft
Identity theft may be involved if the scammer used another person’s name, photo, government ID, business name, account, or personal information to deceive the victim.
Examples include:
- using a stolen profile photo;
- pretending to be a real business owner;
- using another person’s valid ID;
- using a hacked account;
- impersonating a relative, friend, lawyer, doctor, government officer, recruiter, or company representative;
- creating a fake page similar to a legitimate page;
- using a mule account under another person’s name.
D. Computer-related fraud
Computer-related fraud may arise when the scam involves unauthorized manipulation of computer data or systems to cause financial or property damage.
Examples include:
- phishing;
- fake login pages;
- unauthorized transfers;
- account takeovers;
- malware-assisted theft;
- manipulation of electronic transactions;
- fraudulent changes to payment instructions.
E. Illegal recruitment
If the scam involves a fake job abroad, fake work visa processing, fake placement fee, or fake overseas employment opportunity, illegal recruitment laws may apply.
A complaint may involve illegal recruitment if the scammer:
- promises overseas employment;
- collects placement, processing, training, medical, documentation, or visa fees;
- has no valid recruitment authority;
- uses fake contracts or employer documents;
- refers the victim to fake agencies or fake employers; or
- recruits multiple victims.
Where multiple victims are involved, the case may be more serious.
F. Investment scam or securities-related violation
If the scam involves investment contracts, guaranteed returns, pooling of funds, crypto trading schemes, forex trading, lending pools, or passive income promises, securities or investment-related laws may be involved.
The complainant should preserve evidence of:
- investment solicitations;
- promised returns;
- proof of payment;
- account dashboards;
- group chat messages;
- referral commissions;
- withdrawal failures;
- names of promoters;
- business registration claims; and
- alleged licenses or permits.
G. Bouncing checks
If the scammer issued a check that was dishonored, the case may involve bouncing check liability, estafa, or both, depending on the facts.
The victim must preserve:
- the check;
- bank return slip;
- demand letter;
- proof of receipt of demand;
- transaction records;
- communications about the check.
H. Falsification
Falsification may apply if the scam involved fake documents, forged signatures, altered receipts, fake IDs, fake government documents, fake business permits, fake certificates, or fabricated contracts.
I. Data privacy and unauthorized disclosure issues
Some scams involve misuse of personal information. While data privacy violations are distinct from estafa, they may become relevant if the scammer unlawfully collected, processed, disclosed, or used personal data.
V. Where Can a Victim Abroad File the Complaint?
A complainant abroad may consider several possible channels.
A. National Bureau of Investigation
The NBI is commonly approached for cybercrime, online scams, fraud, identity theft, phishing, and scams requiring digital investigation.
A complaint may be filed through:
- a personal appearance by the victim in the Philippines;
- a duly authorized representative;
- communication with the appropriate NBI office;
- submission of sworn complaint-affidavit and evidence;
- referral through counsel; or
- coordination with relatives or representatives in the Philippines.
For cyber-related scams, the NBI Cybercrime Division or relevant regional office may be involved.
B. Philippine National Police Anti-Cybercrime Group
The PNP Anti-Cybercrime Group may receive complaints involving online fraud, hacking, identity theft, phishing, online threats, and cyber-enabled offenses.
The complainant may submit documents through a representative, counsel, or direct coordination where allowed.
C. Office of the City or Provincial Prosecutor
A criminal complaint may be filed directly with the prosecutor’s office that has territorial jurisdiction. The prosecutor may conduct preliminary investigation if required.
This is often appropriate when the complainant already has sufficient evidence and does not need extensive law enforcement case build-up.
D. Department of Justice
For certain cases involving national scope, cybercrime, public interest, multiple victims, or complex facts, the DOJ may become involved. However, many ordinary scam complaints begin with the NBI, PNP, or local prosecutor.
E. Securities and Exchange Commission
For investment scams, pyramid schemes, unauthorized securities solicitation, or fake investment companies, a complaint or report may also be made to the SEC. This may be separate from, or supportive of, a criminal complaint.
F. Department of Migrant Workers or relevant labor agencies
If the scam involves overseas employment, recruitment, placement fees, or fake job deployment, the Department of Migrant Workers and related agencies may be relevant.
G. Bangko Sentral ng Pilipinas, banks, e-wallets, and financial institutions
For bank transfers, e-wallet payments, unauthorized transactions, and account fraud, the victim should immediately report to the bank, e-wallet provider, remittance center, or payment processor. This is not a substitute for a criminal complaint, but it may help freeze funds, preserve records, and trace accounts.
VI. Choosing the Proper Venue
Venue is important because criminal complaints are generally filed where the offense, or any of its essential elements, occurred.
For online scam cases, possible venues may include:
- where the victim was deceived;
- where the money was sent from;
- where the money was received;
- where the scammer is located;
- where the bank account or e-wallet is maintained;
- where the online communication was accessed;
- where the complainant resides in the Philippines, if relevant;
- where the respondent resides;
- where the fraudulent act produced damage; or
- where applicable cybercrime rules allow filing.
When the victim is abroad, venue may be more complicated. It is often practical to file where the respondent, bank account, e-wallet account, business, or transaction has a Philippine connection.
If uncertain, filing through the NBI or PNP cybercrime unit may help with initial assessment and referral.
VII. The Basic Documents Needed
A victim abroad should prepare a complete complaint packet. The exact requirements may vary, but the usual documents include the following.
A. Complaint-affidavit
This is the main sworn statement of the victim. It narrates what happened, identifies the scammer, explains the deceit, states the amount lost, and attaches evidence.
B. Evidence attachments
These may include screenshots, receipts, bank transfers, remittance records, chat logs, emails, contracts, fake IDs, fake permits, website links, profile links, and other supporting documents.
C. Witness affidavits
If other people saw the transaction, communicated with the scammer, referred the complainant, helped send money, or were also victimized, they may execute supporting affidavits.
D. Special Power of Attorney
If someone in the Philippines will file, follow up, receive notices, submit documents, or represent the complainant, a Special Power of Attorney may be needed.
E. Identification documents
The complainant should include a copy of valid government identification, passport, residence card abroad, or other proof of identity.
F. Proof of residence abroad
This may be useful to explain why the complainant cannot personally appear.
G. Proof of authority of representative
If a lawyer, relative, or trusted person is acting for the complainant, the complaint packet should show authority through an SPA or engagement letter, depending on the situation.
VIII. The Complaint-Affidavit
The complaint-affidavit is the core document. It should be clear, chronological, factual, and supported by attachments.
A strong complaint-affidavit should state:
- the complainant’s full name, age, nationality, civil status, address abroad, and Philippine address, if any;
- the respondent’s name, alias, username, phone number, email address, bank account, e-wallet number, address, or other identifying information;
- how the complainant encountered the respondent;
- what representations were made;
- why the complainant believed the representations;
- when the complainant sent money or property;
- the exact amount sent;
- the payment channel used;
- what happened after payment;
- how the respondent failed to deliver, disappeared, blocked the complainant, or gave excuses;
- why the transaction was fraudulent;
- what damage the complainant suffered;
- what evidence is attached;
- what efforts were made to contact or demand from the respondent;
- what offense is being complained of, if known; and
- a request for investigation and prosecution.
The affidavit should avoid mere conclusions like “I was scammed.” It should explain the acts showing deceit.
IX. Sample Structure of a Complaint-Affidavit for an Online Scam
A complaint-affidavit may follow this general structure:
Complaint-Affidavit
I, [Name], of legal age, Filipino, [civil status], presently residing at [foreign address], after being duly sworn, state:
I am the complainant in this case. I have personal knowledge of the facts stated in this affidavit.
I am currently abroad, which is why I am executing this affidavit before [Philippine Embassy/Consulate/notary public, as applicable].
On [date], I encountered an online account using the name [account name] on [platform].
The person behind the account represented that [state representation].
Relying on this representation, I agreed to [buy/invest/pay/apply/send money].
On [date], I sent the amount of [amount] through [bank/e-wallet/remittance channel] to [account name/account number].
Attached as Annex “A” is a screenshot of the respondent’s online profile. Attached as Annex “B” is our conversation. Attached as Annex “C” is proof of payment.
After receiving payment, the respondent [failed to deliver/blocked me/deleted the account/gave false excuses/refused refund].
I later discovered that [state facts showing fraud, such as fake identity, multiple victims, fake license, non-existent goods, or unauthorized use of name].
I suffered financial loss in the amount of [amount], plus other damages and expenses.
I am executing this affidavit to support the filing of a criminal complaint for estafa, cybercrime-related offenses, identity theft, and such other offenses as may be warranted by the evidence.
IN WITNESS WHEREOF, I have signed this affidavit on [date] at [place].
[Signature] [Name]
Subscribed and sworn to before me this [date] at [place], affiant exhibiting competent proof of identity.
X. Affidavit Execution While Abroad
One of the most important issues for a victim abroad is how to execute a valid sworn affidavit for use in the Philippines.
A. Execution before a Philippine Embassy or Consulate
The safest traditional method is to execute or acknowledge the affidavit before the Philippine Embassy or Consulate with jurisdiction over the complainant’s location.
The consular officer may administer the oath or perform the appropriate notarial or consular act. The resulting document is generally intended for use in the Philippines.
B. Execution before a foreign notary
In some cases, the affidavit may be notarized before a foreign notary public. However, for use in the Philippines, it may need authentication, apostille, or consular processing depending on the country and applicable rules.
C. Apostille
If the country where the affidavit is executed is part of the Apostille system, the notarized document may need an apostille from the competent authority of that country. The apostilled document may then be used in the Philippines without further consular authentication, subject to acceptance by the receiving office.
D. Consular authentication
If apostille is not applicable, consular authentication may be required. The complainant should check with the Philippine Embassy or Consulate and the intended receiving office in the Philippines.
E. Electronic notarization or remote notarization
Some jurisdictions allow remote notarization, but acceptance in Philippine criminal proceedings may depend on Philippine rules, the receiving office, and the form of authentication. For criminal complaints, it is safer to use a method clearly acceptable to Philippine authorities.
XI. Special Power of Attorney for a Representative
A victim abroad often authorizes a trusted person in the Philippines to file the complaint and coordinate with authorities.
A Special Power of Attorney may authorize the representative to:
- file the complaint;
- submit affidavits and evidence;
- coordinate with the NBI, PNP, prosecutor, banks, e-wallet providers, or other agencies;
- receive notices;
- sign non-substantive forms;
- request certified copies;
- follow up the case;
- attend conferences where personal testimony is not required;
- engage counsel;
- execute necessary procedural documents, where allowed.
However, an SPA does not replace the complainant’s own affidavit when the facts are personally known to the complainant. The representative cannot truthfully testify to facts they did not personally experience unless they are merely authenticating submissions or explaining their limited role.
The SPA itself should also be notarized, consularized, or apostilled as needed.
XII. Filing Through a Lawyer
A complainant abroad may retain a Philippine lawyer to prepare the complaint, organize evidence, coordinate with a representative, and file the case.
A lawyer may assist in:
- identifying the proper offense;
- determining where to file;
- drafting the complaint-affidavit;
- preparing an SPA;
- advising on notarization abroad;
- organizing digital evidence;
- communicating with NBI, PNP, banks, or prosecutors;
- preparing witness affidavits;
- responding to requests for clarification;
- monitoring case progress.
A lawyer is especially useful when the scam involves large amounts, multiple victims, complex digital evidence, investment schemes, fake recruitment, cryptocurrency, or unknown respondents.
XIII. Evidence to Preserve Immediately
Online scam evidence can disappear quickly. Accounts can be deleted, messages unsent, websites taken down, and phone numbers abandoned. The victim should preserve evidence immediately.
Important evidence includes:
- full chat history;
- screenshots showing date, time, account name, and profile link;
- URLs of profiles, posts, listings, websites, or advertisements;
- email headers and full emails;
- call logs;
- SMS messages;
- Viber, WhatsApp, Telegram, Messenger, or other app messages;
- receipts;
- bank transfer confirmations;
- remittance slips;
- e-wallet transaction records;
- cryptocurrency wallet addresses and transaction hashes;
- photos or videos sent by the scammer;
- fake IDs or documents;
- business permits or certificates shown by the scammer;
- delivery tracking information;
- proof of non-delivery;
- proof that the account blocked the victim;
- group chat messages;
- names of other victims;
- demand letters and responses;
- platform reports;
- bank or e-wallet reports;
- police or cybercrime reports abroad, if any.
Screenshots should be backed up. Original digital files should be preserved. Avoid editing images, cropping important details, or deleting conversations.
XIV. How to Organize Digital Evidence
Evidence should be organized so that investigators can easily understand the case.
A recommended organization is:
- Timeline of events;
- Identity evidence showing who the scammer claimed to be;
- Representation evidence showing the false promises;
- Payment evidence showing money transfer;
- Non-performance evidence showing failure to deliver or refund;
- Fraud indicators showing blocking, fake identity, fake documents, other victims, or inconsistent stories;
- Damage evidence showing amount lost and related expenses.
Each document should be marked as an annex.
Example:
- Annex “A” – Screenshot of Facebook profile;
- Annex “B” – Screenshot of product listing;
- Annex “C” – Messenger conversation dated [date];
- Annex “D” – Bank transfer receipt;
- Annex “E” – Demand message;
- Annex “F” – Screenshot showing account blocked complainant;
- Annex “G” – Certification from bank or e-wallet, if available.
XV. Screenshots as Evidence
Screenshots are commonly used in online scam complaints, but they should be reliable and complete.
Good screenshots should show:
- the full account name;
- profile photo, if relevant;
- username or handle;
- URL or link;
- message date and time;
- full context of the conversation;
- payment instructions;
- promises or representations;
- confirmation of receipt of payment;
- excuses, refusal, blocking, or disappearance.
Avoid submitting only isolated screenshots without context. A single cropped screenshot may be challenged as incomplete or misleading.
XVI. Chat Logs and Messaging Apps
For messaging apps, preserve the entire thread if possible. Export the chat where the app allows it. Keep both screenshots and original app data.
The affidavit should identify:
- the app used;
- the account or phone number of the scammer;
- the dates of communication;
- the statements that induced payment;
- the payment instructions;
- the scammer’s acknowledgment of payment;
- the failure to deliver or refund.
If voice calls occurred, note the date, time, duration, and what was said. If recordings exist, consult counsel before use because recording laws and admissibility issues may arise.
XVII. Bank and E-Wallet Evidence
Payment evidence is crucial. The victim should obtain or preserve:
- transfer confirmation;
- transaction reference number;
- account name;
- account number or masked account number;
- bank or e-wallet name;
- date and time of transfer;
- amount;
- currency;
- exchange rate, if relevant;
- sender account;
- remittance receipt;
- complaint ticket number from the bank or e-wallet;
- any response from the bank or e-wallet.
The victim should immediately report the fraudulent transaction to the bank or e-wallet provider and request preservation or investigation. If funds remain available, quick reporting may increase the chance of freezing or recovery, though recovery is not guaranteed.
XVIII. Cryptocurrency Scam Evidence
Crypto scams require special documentation because transactions may involve wallets, exchanges, and blockchain records.
Preserve:
- wallet addresses;
- transaction hashes;
- exchange account records;
- screenshots of deposit and withdrawal instructions;
- fake trading dashboard screenshots;
- communications with the scammer;
- promised returns;
- withdrawal denial messages;
- KYC information, if any;
- blockchain explorer records;
- names of exchanges used;
- fiat-to-crypto purchase receipts.
Crypto cases may require technical tracing and coordination with exchanges. If the scammer is abroad, Philippine authorities may face jurisdictional and enforcement limitations, but a complaint may still be useful if Philippine persons or accounts are involved.
XIX. Demand Letter or Demand Message
A demand letter is not always required for every online scam complaint, but it can help show that the complainant demanded delivery, refund, or explanation and that the scammer failed or refused.
A demand may be sent through:
- email;
- messaging app;
- registered mail;
- courier;
- lawyer’s letter;
- platform message;
- text message.
The complainant should preserve proof that the demand was sent and received or seen.
A demand should be clear and professional. It should state:
- the transaction;
- the amount paid;
- what was promised;
- the failure to comply;
- request for refund or delivery;
- deadline to comply;
- warning that legal action may follow.
Threatening, defamatory, or abusive demands should be avoided.
XX. Reporting to Banks, E-Wallets, and Platforms
Filing a criminal case is important, but immediate reporting to private institutions may be equally urgent.
The victim should report to:
- bank used by the victim;
- receiving bank, if known;
- e-wallet provider;
- remittance center;
- online marketplace;
- social media platform;
- messaging app;
- website host or domain registrar, where appropriate;
- cryptocurrency exchange;
- payment processor.
Ask for:
- transaction investigation;
- account preservation;
- ticket or reference number;
- fraud report acknowledgment;
- possible freezing, if allowed;
- copy of transaction details;
- advice on next steps.
Some institutions may require a police report, NBI report, prosecutor subpoena, court order, or formal law enforcement request before releasing information.
XXI. Filing While the Respondent Is Unknown
Many online scam victims do not know the scammer’s real name. A complaint may still be initiated against unidentified persons if there is enough information to investigate.
The complaint should provide all available identifiers:
- username;
- account link;
- phone number;
- email address;
- bank account name;
- account number;
- e-wallet number;
- remittance recipient name;
- delivery address;
- IP information, if available;
- photos;
- voice recordings, if lawful and relevant;
- fake IDs used;
- business name;
- group chat admins;
- referral codes;
- website domain;
- crypto wallet address.
Law enforcement may use subpoenas, preservation requests, coordination with platforms, or financial tracing to identify the real person.
XXII. Filing Against Mule Account Holders
Online scams often use bank or e-wallet accounts belonging to “mules.” A mule may be a person who allowed their account to be used, sold access to their account, was tricked into receiving funds, or is part of the fraud.
A victim may identify the receiving account holder as a respondent if evidence supports involvement. However, the complaint should be careful not to assume guilt solely from account ownership. The affidavit should state the facts:
- the scammer instructed payment to the account;
- the account received the funds;
- the account name and number were provided by the scammer;
- the account holder may have benefited or participated;
- further investigation is requested.
The prosecutor or investigator will evaluate whether the account holder knowingly participated.
XXIII. Multiple Victims and Group Complaints
If there are multiple victims, they may coordinate and file individual affidavits. A group complaint can be stronger because it may show a pattern of fraud.
Each victim should still execute their own affidavit stating:
- how they encountered the scammer;
- what was represented to them;
- how much they paid;
- where they sent the money;
- what damage they suffered;
- what evidence they have.
A group representative may help organize documents, but personal affidavits remain important.
XXIV. Filing from Abroad Through a Philippine Representative
A practical filing arrangement often works like this:
- the complainant prepares a detailed timeline and evidence folder;
- a Philippine lawyer drafts the complaint-affidavit and SPA;
- the complainant signs the affidavit and SPA abroad before a Philippine consular officer or foreign notary with apostille/authentication;
- the complainant sends original documents or authenticated copies to the Philippines;
- the representative or lawyer files the complaint with the NBI, PNP, or prosecutor;
- the representative receives notices and coordinates follow-up;
- the complainant remains available by email, phone, video call, or later personal appearance if required.
This approach is common when the victim cannot travel to the Philippines.
XXV. May the Complainant Testify Remotely?
At the investigation stage, some communication may occur by email, phone, or video conference depending on the office and officer handling the matter. However, formal affidavits must usually be properly sworn.
At later court stages, testimony may require compliance with court rules. Remote testimony may be possible in certain circumstances, but it is not automatic. The court’s permission, procedural rules, and technical requirements matter.
A complainant abroad should be prepared for the possibility that personal appearance may eventually be required, especially if the case goes to trial.
XXVI. Filing With the Prosecutor Versus Filing With Law Enforcement
A complainant may wonder whether to file directly with the prosecutor or first go to the NBI or PNP.
Filing with law enforcement may be better when:
- the scammer’s identity is unknown;
- digital tracing is needed;
- bank or platform subpoenas may be needed;
- multiple victims are involved;
- cybercrime expertise is needed;
- evidence must be preserved quickly;
- the complaint needs case build-up.
Filing directly with the prosecutor may be better when:
- the respondent is known;
- the evidence is already complete;
- the venue is clear;
- the complaint is straightforward;
- the complainant has affidavits and annexes ready;
- immediate preliminary investigation is desired.
In many cases, victims first approach law enforcement because online scam cases often require tracing.
XXVII. What Happens After Filing?
After the complaint is filed, several things may happen.
A. Initial evaluation
The receiving office checks whether the complaint is complete, whether documents are sworn, whether evidence is sufficient, and whether the office has jurisdiction.
B. Case build-up
Law enforcement may require additional documents, interview the complainant or representative, contact banks or platforms, subpoena records, or identify suspects.
C. Subpoena to respondent or third parties
The respondent, bank, e-wallet provider, telecom company, platform, or witnesses may be summoned or asked to submit information.
D. Referral to prosecutor
If law enforcement finds sufficient basis, the case may be endorsed to the prosecutor for preliminary investigation.
E. Preliminary investigation
The prosecutor may issue subpoenas requiring the respondent to submit a counter-affidavit. The complainant may be allowed to submit a reply-affidavit.
F. Prosecutor resolution
The prosecutor may dismiss the complaint or find probable cause and file an information in court.
G. Court proceedings
If filed in court, the case proceeds to arraignment, pre-trial, trial, and judgment.
XXVIII. Probable Cause
At the preliminary investigation stage, the question is not whether the respondent is guilty beyond reasonable doubt. The question is whether there is probable cause.
Probable cause generally means there is reasonable ground to believe that:
- a crime was committed; and
- the respondent is probably guilty.
The complaint-affidavit and evidence must therefore show both the fraudulent act and the respondent’s connection to it.
XXIX. Recovery of Money
Many victims assume that filing a criminal case will automatically recover their money. This is not always true.
A criminal complaint may lead to prosecution and possible restitution, but actual recovery depends on:
- whether the scammer is identified;
- whether funds are still traceable;
- whether accounts can be frozen;
- whether assets exist;
- whether restitution is ordered;
- whether settlement occurs;
- whether a civil action is filed or impliedly instituted;
- whether the accused is convicted;
- whether enforcement is possible.
Immediate reporting to banks and e-wallets is important because criminal proceedings can take time.
XXX. Freezing of Accounts
Victims often ask whether they can immediately freeze the scammer’s bank or e-wallet account. In practice, banks and e-wallets may temporarily restrict or investigate accounts after fraud reports, depending on internal policies and legal requirements. However, formal freezing, disclosure, or release of account information may require proper legal authority.
The complainant should:
- report immediately to their own bank or e-wallet;
- report to the receiving institution;
- obtain ticket numbers;
- request preservation of records;
- file a law enforcement complaint;
- ask the investigator or prosecutor about legal steps for subpoenas or freezing.
Recovery is more likely when reporting is immediate, but it is never guaranteed.
XXXI. Time Is Critical
Online scam cases are time-sensitive because:
- accounts may be deleted;
- phones may be discarded;
- funds may be withdrawn quickly;
- crypto may be transferred across wallets;
- platforms may retain logs only for limited periods;
- CCTV from cash-out locations may be overwritten;
- witnesses may forget details;
- scammers may change names or pages.
A victim abroad should preserve evidence and report as soon as possible.
XXXII. Prescription
Criminal offenses have prescriptive periods. If the complaint is filed too late, the respondent may raise prescription as a defense.
The applicable prescriptive period depends on the offense and penalty. Online scam cases may involve different offenses with different prescriptive periods. The victim should act promptly and consult counsel if significant time has passed.
Important dates include:
- date of first communication;
- date of false representation;
- date payment was made;
- date scam was discovered;
- date demand was made;
- date respondent blocked or disappeared;
- date complaint was filed.
The complaint-affidavit should state these dates clearly.
XXXIII. Difference Between Civil Case and Criminal Case
A scam may give rise to both civil and criminal remedies. However, not every unpaid obligation is a crime.
A. Civil case
A civil case seeks payment, damages, rescission, return of money, or enforcement of obligation.
B. Criminal case
A criminal case seeks punishment for an offense against the State, such as estafa or cybercrime-related fraud.
The same facts may support both civil and criminal liability if deceit or fraud is present. But if the issue is purely breach of contract, the complaint may be treated as civil rather than criminal.
The affidavit must therefore explain the fraudulent representations and intent, not merely non-payment or non-delivery.
XXXIV. Red Flags That Support Fraud
Fraud may be inferred from circumstances such as:
- fake identity;
- fake business registration;
- fake government permit;
- fake tracking number;
- false claim of authority;
- use of multiple aliases;
- use of mule accounts;
- immediate blocking after payment;
- refusal to provide verifiable details;
- repeated excuses;
- deletion of account after payment;
- multiple victims with similar stories;
- unrealistic promised returns;
- pressure tactics;
- altered receipts;
- fake screenshots;
- refusal to meet or video call;
- false claim of shipment;
- unauthorized use of another person’s photos;
- no real inventory or service.
These facts should be included and supported by evidence where available.
XXXV. Demand, Settlement, and Desistance
A respondent may offer settlement after a complaint is filed. Settlement may help the victim recover money, but it should be handled carefully.
Considerations include:
- whether the payment is full or partial;
- whether settlement is documented;
- whether the complainant is being pressured;
- whether there are other victims;
- whether the offense is public in nature;
- whether an affidavit of desistance is being requested;
- whether the prosecutor may still proceed despite desistance;
- whether the respondent admits liability;
- whether payment terms are secured.
An affidavit of desistance does not always automatically dismiss a criminal case. Crimes are generally considered offenses against the State. The effect of desistance depends on the offense, evidence, and stage of proceedings.
XXXVI. Online Scam Involving Overseas Filipino Workers
OFWs are frequent targets of scams because they transact remotely, send remittances, support family members, and may need services in the Philippines.
Common OFW-related scams include:
- fake land or house sale;
- fake vehicle sale;
- fake business investment;
- fake lending or paluwagan;
- fake family emergency;
- hacked relative account;
- fake school or tuition request;
- fake government processing fee;
- fake courier or customs fee;
- fake romance or marriage-related scam;
- fake recruitment for relatives;
- fake document processing service.
OFWs should be especially careful to document remittances, instructions, and the identity of the recipient.
XXXVII. Online Scam Involving Property Purchases
A victim abroad may be scammed in connection with real property, vehicles, rentals, or other high-value purchases.
The complaint should preserve:
- listing screenshots;
- seller identity;
- title or registration documents shown;
- authority to sell;
- reservation agreement;
- payment receipts;
- bank transfers;
- communications;
- proof that property does not exist or seller lacks authority;
- verification from registry, developer, owner, or government office.
High-value transactions should also be evaluated for possible civil, criminal, and administrative remedies.
XXXVIII. Online Scam Involving Fake Recruitment
For fake recruitment, the complaint should include:
- job advertisement;
- name of recruiter;
- agency name;
- license claims;
- employment contract;
- visa or work permit documents;
- amount paid;
- receipt or proof of payment;
- promised employer;
- deployment date;
- communications;
- proof that recruiter or agency is unauthorized;
- names of other victims.
This type of complaint may involve both criminal prosecution and administrative reporting.
XXXIX. Online Scam Involving Investment Schemes
Investment scams often use attractive words like guaranteed income, passive earnings, trading bots, crypto arbitrage, forex signals, locked-in returns, franchise packages, cooperative profits, or double-your-money offers.
The complaint should include:
- investment pitch;
- promised return;
- names of promoters;
- group chat records;
- payment instructions;
- proof of investment;
- dashboards or account access;
- withdrawal requests;
- denial of withdrawals;
- excuses given;
- referral scheme details;
- claimed registrations or licenses;
- evidence of other victims.
Victims should also check whether the entity had authority to solicit investments. Lack of authority may support separate reporting.
XL. Online Scam Involving Hacked Accounts
If a scammer used a hacked account of a friend or relative, the complaint should distinguish between the apparent account owner and the actual scammer.
Evidence should include:
- hacked account messages;
- confirmation from real account owner that the account was compromised;
- payment instructions;
- receiving account details;
- date and time of hacking;
- platform recovery notices;
- warnings posted by the real owner;
- other victims contacted through the hacked account.
The real account owner may be a witness rather than a respondent, unless evidence shows participation.
XLI. Role of Philippine Embassy or Consulate
The Philippine Embassy or Consulate abroad may help with consular notarization, acknowledgment, or administration of oath for affidavits and SPAs. It may also provide general information on consular services.
However, the embassy or consulate usually does not prosecute the case for the complainant. The criminal complaint still needs to be filed with the appropriate Philippine authority.
The complainant should check:
- appointment requirements;
- document format;
- ID requirements;
- number of copies;
- fees;
- whether witnesses must appear;
- whether the document must be signed in front of the consular officer;
- mailing options.
XLII. Practical Step-by-Step Guide
A victim abroad may proceed as follows.
Step 1: Preserve all evidence
Save screenshots, chats, receipts, URLs, emails, transfer records, and account details. Do not delete conversations.
Step 2: Report immediately to banks, e-wallets, platforms, or exchanges
Ask for a fraud report, ticket number, preservation, and possible restriction of accounts.
Step 3: Prepare a detailed timeline
List dates, times, amounts, platforms, names, account numbers, and important events.
Step 4: Identify the legal theory
Determine whether the case may involve estafa, cybercrime, identity theft, illegal recruitment, investment scam, falsification, or other offenses.
Step 5: Draft the complaint-affidavit
The affidavit should be based on personal knowledge and supported by annexes.
Step 6: Prepare annexes
Mark each item clearly. Use organized folders and filenames.
Step 7: Execute the affidavit abroad
Use a Philippine Embassy or Consulate, apostille process, or other acceptable notarization/authentication method.
Step 8: Execute an SPA, if needed
Authorize a trusted representative or lawyer in the Philippines.
Step 9: File with the appropriate office
File with the NBI, PNP Anti-Cybercrime Group, prosecutor, or other agency depending on the case.
Step 10: Follow up and respond to requests
Be ready to submit additional documents, clarify facts, or execute supplemental affidavits.
XLIII. Practical Checklist for Victims Abroad
Prepare the following:
- complaint-affidavit;
- consularized, apostilled, or properly notarized affidavit;
- valid ID or passport copy;
- proof of residence abroad;
- SPA for Philippine representative;
- representative’s ID;
- timeline;
- screenshots;
- full chat logs;
- profile links and URLs;
- proof of payment;
- bank or e-wallet complaint tickets;
- demand letter or demand messages;
- proof of non-delivery or non-performance;
- fake documents used by scammer;
- witness affidavits;
- list of other victims, if any;
- platform reports;
- bank or e-wallet responses;
- digital backups.
XLIV. Common Mistakes to Avoid
Victims abroad should avoid the following:
- waiting too long before reporting;
- deleting conversations;
- submitting only cropped screenshots;
- failing to preserve URLs;
- relying only on emotional narration;
- failing to execute a sworn affidavit;
- using an SPA without a personal complaint-affidavit;
- naming people as respondents without factual basis;
- assuming account ownership automatically proves guilt;
- failing to report to banks or e-wallets immediately;
- failing to identify venue;
- failing to attach proof of payment;
- confusing civil breach with criminal fraud;
- submitting documents without translation if needed;
- publicly posting accusations that may create defamation risks;
- settling without documentation;
- signing an affidavit with inaccurate facts.
XLV. Respondent Located Abroad
Sometimes the scammer is also abroad. A Philippine case may still be possible if part of the offense occurred in the Philippines or Philippine accounts, entities, or victims are involved. However, enforcement may be more difficult.
Challenges include:
- identifying the respondent;
- serving subpoenas;
- obtaining foreign records;
- coordinating with foreign law enforcement;
- extradition issues;
- cross-border evidence;
- enforcement of judgments;
- recovery of funds.
If the respondent is abroad but used Philippine bank accounts, e-wallets, associates, or businesses, those Philippine links may still be investigated.
XLVI. If the Victim Is Not Filipino
A foreign national abroad may also file a complaint in the Philippines if the scam has sufficient Philippine connection, such as a Philippine-based respondent, bank account, company, or transaction.
The foreign complainant may need to execute an affidavit abroad, authenticate documents, and appoint a Philippine representative or lawyer. Translation may be needed if documents are not in English or Filipino.
XLVII. If the Victim Cannot Identify the Proper Name of the Scammer
It is common for online scammers to use aliases. The complaint may refer to the respondent by alias or account name and request investigation to identify the person.
Example:
“Respondent John Doe, using the Facebook account ‘ABC Gadgets PH’ and GCash number [number], whose true name and address are presently unknown.”
The complaint should provide all available identifiers.
XLVIII. Privacy and Public Accusations
Victims often want to warn others online. While this is understandable, public accusations may create legal risks if statements are inaccurate, excessive, or unsupported.
Before posting names, photos, IDs, or accusations, consider:
- whether the information is verified;
- whether innocent account holders may be involved;
- whether the account was hacked;
- whether the post may be defamatory;
- whether personal data is being exposed;
- whether it may prejudice the investigation;
- whether it may alert the scammer to destroy evidence.
A safer approach is to report to platforms and authorities while preserving evidence.
XLIX. Translation of Foreign Documents
If receipts, bank records, messages, or notarizations are in a foreign language, translation may be required. The receiving office may require an English or Filipino translation, preferably certified or properly attested.
The complainant should keep both the original foreign-language document and the translation.
L. Costs and Practical Considerations
Costs may include:
- consular notarization or acknowledgment fees;
- apostille or foreign notarial fees;
- courier fees;
- lawyer’s fees;
- printing and certification costs;
- bank certification fees;
- travel costs if personal appearance becomes necessary.
The complainant should also consider the amount lost, strength of evidence, ability to identify the scammer, and likelihood of recovery. Even small cases may be worth reporting if there are multiple victims or a continuing scam operation.
LI. What Authorities Usually Need to Act Effectively
Authorities are more likely to act efficiently when the complaint provides:
- real names or useful identifiers;
- proof of payment;
- clear deception;
- complete conversation records;
- account links;
- phone numbers;
- receiving bank or e-wallet details;
- evidence of multiple victims;
- organized annexes;
- sworn complaint-affidavit;
- authority of representative;
- prompt reporting.
A vague complaint with only “I was scammed online” and no documents will be difficult to investigate.
LII. Example Timeline Format
The complainant may attach a simple timeline:
| Date | Event | Evidence |
|---|---|---|
| 1 March 2026 | Saw online listing for item/service | Annex A |
| 2 March 2026 | Respondent promised delivery after payment | Annex B |
| 3 March 2026 | Sent ₱50,000 to respondent’s e-wallet | Annex C |
| 5 March 2026 | Respondent claimed item was shipped | Annex D |
| 7 March 2026 | Tracking number found to be fake | Annex E |
| 8 March 2026 | Respondent blocked complainant | Annex F |
| 10 March 2026 | Demand for refund sent | Annex G |
A timeline helps investigators quickly understand the case.
LIII. Sample Evidence Index
An evidence index may look like this:
- Annex “A” – Screenshot of respondent’s profile;
- Annex “B” – Screenshot of online advertisement;
- Annex “C” – Messenger conversation from [date] to [date];
- Annex “D” – Payment instruction from respondent;
- Annex “E” – Bank transfer confirmation;
- Annex “F” – Respondent’s acknowledgment of receipt;
- Annex “G” – Screenshot of blocked account;
- Annex “H” – Demand message;
- Annex “I” – Bank fraud report ticket;
- Annex “J” – Affidavit of witness or other victim.
LIV. Sample Special Power of Attorney Clauses
An SPA may authorize a representative to:
- file, sign, submit, and receive documents related to the complaint;
- appear before NBI, PNP, prosecutor, banks, e-wallet providers, and other offices;
- submit the complainant’s affidavit and annexes;
- receive subpoenas, notices, orders, and communications;
- request certified copies and case updates;
- engage counsel if necessary;
- perform acts necessary to pursue the complaint.
However, the SPA should not falsely authorize the representative to testify to facts known only to the complainant. The complainant’s own affidavit remains necessary.
LV. Filing Against a Business Entity
If the scammer used a business name, determine whether the business is a sole proprietorship, partnership, corporation, or unregistered name.
The complaint should identify:
- registered business name;
- owners, officers, agents, or representatives;
- registration documents shown;
- actual person who communicated with the victim;
- payment recipient;
- account used;
- address or branch;
- platform page or website;
- specific acts of each person.
Do not assume every director or officer is criminally liable. The complaint should state each person’s participation.
LVI. Interaction With Civil Recovery
A criminal complaint may include civil liability, but victims may also consider civil remedies. Civil action may be relevant when:
- the respondent is known and has assets;
- the transaction is documented;
- recovery is the main objective;
- criminal intent is difficult to prove;
- there is a contract;
- a provisional remedy may be available;
- the amount is significant.
A lawyer can assess whether to pursue criminal, civil, administrative, or combined remedies.
LVII. If the Amount Is Small
Even small online scams may be reported. Small amounts can indicate a larger pattern if many victims are involved. However, practical enforcement may be more difficult when the amount is low and the scammer is unidentified.
For small claims, the victim may consider:
- reporting to the platform;
- reporting to the bank or e-wallet;
- filing with cybercrime authorities;
- coordinating with other victims;
- pursuing small claims or civil remedies if the respondent is known;
- preserving evidence in case more victims emerge.
LVIII. If the Scam Involves Family or Friends
Scams involving relatives, friends, partners, or acquaintances can be legally and emotionally complicated. The complaint must still establish criminal elements.
A failed loan to a friend is not automatically estafa. But fraud may exist if the person lied about a material fact to obtain money or misappropriated funds entrusted for a specific purpose.
The affidavit should focus on facts, not personal betrayal.
LIX. If the Scam Involves Romance or Relationship Fraud
Romance scams may involve emotional manipulation, false identity, promises of marriage, fake emergencies, fake investment opportunities, or requests for money.
The complaint should document:
- identity used by the scammer;
- relationship representations;
- requests for money;
- reasons given;
- proof of transfers;
- discovery of false identity;
- fake photos or documents;
- other victims;
- continuing deception.
These cases may involve estafa, identity theft, cybercrime-related fraud, or other offenses depending on the facts.
LX. If the Scam Involves Fake Government Processing
Some victims abroad pay for fake services involving passports, visas, birth certificates, land titles, licenses, clearances, court documents, or government benefits.
The complaint should include:
- service promised;
- fake officer or agent identity;
- documents presented;
- payment records;
- proof that the service was unauthorized or fake;
- communications;
- agency verification, if available.
Falsification, usurpation, estafa, or other offenses may be involved.
LXI. Importance of Accurate Respondent Identification
A criminal complaint can be weakened if the wrong person is named. Online scams often involve stolen identities, hacked accounts, or mule accounts.
Before accusing someone by real name, distinguish:
- the account owner;
- the person controlling the account;
- the bank or e-wallet account holder;
- the person who withdrew funds;
- the person who communicated with the victim;
- the person whose ID was used;
- the person who may be impersonated.
The complaint may request investigation of all persons involved while clearly stating the basis for each name.
LXII. What to Do if the Scammer Threatens the Victim
If the scammer threatens the victim after being confronted, preserve the threats. Threats may support separate charges.
Evidence should show:
- exact threatening words;
- date and time;
- account or phone number used;
- context;
- screenshots or recordings;
- witnesses;
- effect on the victim;
- whether personal information was exposed.
Do not respond with threats. Preserve and report.
LXIII. What to Do if the Scammer Uses the Victim’s Identity
If the scammer uses the victim’s name, photos, passport, ID, address, or other personal information, the victim should:
- report the fake account to the platform;
- warn banks or relevant institutions;
- preserve fake profiles and posts;
- file an identity theft or cybercrime complaint;
- consider data privacy remedies;
- monitor accounts for unauthorized transactions;
- change passwords;
- enable two-factor authentication.
The affidavit should explain how the victim discovered the misuse and attach screenshots.
LXIV. Coordination With Foreign Police
If the victim is abroad, they may also report to local police in the country where they reside, especially if the money was sent from that country, the platform operates there, or the scammer has international links.
A foreign police report may support the Philippine complaint, but it does not replace filing in the Philippines when the suspect, account, or transaction is Philippine-based.
LXV. Personal Appearance Issues
Although filing may be done through representatives in many situations, personal appearance may still be required at certain stages.
Possible personal appearance points include:
- consular execution of affidavit;
- clarificatory questioning;
- preliminary investigation, if required;
- mediation or settlement conferences, if any;
- court testimony;
- trial.
The complainant should tell authorities early that they are abroad and provide contact details. Remote arrangements may be requested but are subject to approval.
LXVI. Do Not Fabricate or Exaggerate
A complainant must be truthful. False statements in a sworn affidavit may create liability and damage the case.
Avoid:
- exaggerating the amount lost;
- inventing conversations;
- editing screenshots misleadingly;
- falsely claiming personal knowledge;
- naming people without basis;
- hiding settlement payments;
- concealing facts unfavorable to the complaint;
- submitting fake documents.
A truthful, well-documented complaint is stronger than an exaggerated one.
LXVII. Frequently Asked Questions
1. Can I file an online scam case in the Philippines even if I am abroad?
Yes, if the scam has a Philippine connection and you can submit a proper complaint-affidavit and evidence.
2. Do I need to travel to the Philippines to file?
Not always. You may be able to file through a lawyer or authorized representative using a properly executed affidavit and SPA. However, personal appearance may later be required.
3. Can my relative file for me?
A relative may assist or act as representative if properly authorized. But your own affidavit is usually necessary if you personally experienced the scam.
4. Where should I file?
Possible venues include the NBI, PNP Anti-Cybercrime Group, city or provincial prosecutor, or specialized agencies depending on the type of scam.
5. What if I only know the scammer’s username?
You can still initiate a complaint using usernames, links, phone numbers, e-wallet numbers, bank accounts, and other identifiers. Investigation may be needed to identify the real person.
6. Is a screenshot enough?
Screenshots help, but a stronger complaint includes full chat logs, payment records, URLs, account details, and proof of damage.
7. Can the bank return my money?
Possibly, but not always. Immediate reporting improves the chance of restriction or recovery, but funds are often withdrawn quickly.
8. Is non-delivery automatically estafa?
No. Non-delivery may be civil or criminal depending on whether deceit or fraudulent intent can be shown.
9. Can I file against the bank account holder?
You may include the receiving account holder if facts show involvement or if investigation is needed. But account ownership alone may not automatically prove guilt.
10. Can I settle and still pursue the case?
Settlement may affect the case, but it does not always automatically extinguish criminal liability. The effect depends on the offense and stage of proceedings.
LXVIII. Conclusion
A victim abroad can file an online scam case in the Philippines, but success depends on careful preparation. The most important steps are preserving digital evidence, reporting quickly to banks and platforms, executing a proper complaint-affidavit, appointing a trustworthy representative if necessary, and filing with the correct Philippine authority.
The strongest complaints are factual, organized, sworn, and supported by complete evidence. They show not only that money was lost, but that the respondent used deceit, false identity, fraudulent representation, or cyber-enabled conduct to cause that loss.
Because online scam cases often involve disappearing accounts, fast-moving funds, and hidden identities, speed and documentation are critical. A complainant abroad should act promptly, preserve everything, and obtain legal assistance when the amount is significant, the facts are complex, or the respondent’s identity is uncertain.
This article is for general legal information in the Philippine context and is not a substitute for advice from a lawyer who can evaluate the specific facts, documents, venue, and procedural requirements of a particular case.