I. Introduction

Crypto investment scams have become one of the most common forms of online financial fraud in the Philippines. These schemes often use cryptocurrency, trading platforms, digital wallets, fake exchanges, mining packages, staking programs, “AI trading bots,” forex-crypto hybrids, NFT investments, DeFi liquidity pools, copy-trading groups, signal groups, and private “investment communities” to solicit money from the public.

The use of cryptocurrency does not make a scheme automatically lawful. In the Philippines, a crypto-related arrangement may still violate securities laws, cybercrime laws, anti-money laundering rules, consumer protection principles, data privacy laws, and provisions of the Revised Penal Code. A scammer cannot avoid liability merely by saying that the investment is “decentralized,” “blockchain-based,” “foreign registered,” “peer-to-peer,” “not a security,” or “not regulated.”

The central legal question is usually this:

Was the public asked to give money, crypto, or other assets with the expectation of profit mainly from the efforts, trading, management, or promises of another person or group?

If yes, the scheme may be treated as an investment contract or other regulated security, even if it uses cryptocurrency. If false promises, fake dashboards, manipulated withdrawals, phishing, identity theft, or blackmail are involved, cybercrime and fraud issues may also arise.

This article explains how crypto investment scams work, which Philippine laws may apply, where to report them, what evidence to preserve, how to prepare a complaint, what victims should do immediately, and what legal remedies may be available.

II. What Is a Crypto Investment Scam?

A crypto investment scam is a scheme where a person or group uses cryptocurrency or blockchain-related language to deceive victims into giving money, digital assets, account access, or personal information.

The scam may involve:

Bitcoin, Ethereum, USDT, USDC, BNB, Solana, XRP, or other tokens.
Fake trading platforms.
Fake crypto exchanges.
Fake mining contracts.
Fake staking pools.
Fake liquidity pools.
Fake arbitrage programs.
Fake forex or crypto trading.
Fake “AI bot” investment packages.
Fake NFT projects.
Fake presales or token launches.
Fake airdrops.
Fake wallet verification.
Fake celebrity endorsements.
Fake SEC, BSP, or foreign-regulator approval.
Fake screenshots of profits.
Fake withdrawal dashboards.
Fake customer support.
Fake recovery agents.

The scammer may promise daily, weekly, or monthly profits. Victims may be shown a dashboard where their “investment” appears to grow. But when they try to withdraw, the platform demands additional payments for “tax,” “gas fee,” “unlocking fee,” “anti-money laundering clearance,” “upgrade fee,” “signal fee,” “wallet validation,” or “security deposit.”

These extra payment demands are major red flags.

III. Common Types of Crypto Investment Scams

A. Guaranteed-return crypto investment schemes

These schemes promise fixed returns, such as:

3% daily.
10% weekly.
30% monthly.
Double your money in 15 days.
Guaranteed passive income.
Capital protection.
No-loss trading.

Legitimate crypto markets are volatile. Guaranteed high returns are suspicious, especially when the investor does not control the trading activity.

B. Ponzi crypto schemes

A Ponzi scheme pays old investors using money from new investors. Crypto Ponzi schemes often use referral bonuses, leaderboards, VIP levels, locked staking plans, and “proof of payout” posts.

The scheme may operate smoothly at first to build confidence. Later, withdrawals become delayed, limited, or blocked.

C. Pyramid or referral-based crypto schemes

These focus heavily on recruitment. Participants earn more from inviting others than from actual investment performance.

Common signs include:

Referral commissions.
Binary pairing.
Upline/downline structure.
Rank rewards.
Team volume requirements.
Leadership bonuses.
Required reinvestment.
Pressure to recruit family and friends.

A crypto label does not legalize a pyramid structure.

D. Fake crypto trading platforms

Victims are invited to deposit funds into a website or app that looks like a real trading exchange. The dashboard shows fake trades and fake profits. The platform may allow small withdrawals at first, then block larger withdrawals.

Common excuses include:

“Pay tax first.”
“Your account is under AML review.”
“Upgrade to VIP.”
“Deposit more to unlock withdrawal.”
“System maintenance.”
“Smart contract error.”
“Wallet verification fee.”
“Trading volume requirement not met.”

E. Pig-butchering crypto scams

This is a long-con romance, friendship, or mentorship scam. The scammer builds trust over weeks or months, often through dating apps, social media, wrong-number messages, Telegram, WhatsApp, or Facebook. The scammer later introduces a crypto investment opportunity and guides the victim to a fake platform.

The victim may initially make small profits. The scammer encourages larger deposits. When the victim tries to withdraw, the platform blocks the funds and demands more money.

F. Fake mining or cloud mining

The scam claims to mine Bitcoin, Ethereum, or other cryptocurrencies. Investors buy “hash power,” “mining machines,” “mining slots,” or “cloud mining contracts.” Profits are promised without proof of actual mining infrastructure.

Warning signs include guaranteed returns, no verifiable mining facility, fake photos of equipment, and referral rewards.

G. Fake staking or DeFi liquidity pool scams

Victims are told to connect a wallet to a DeFi platform, provide liquidity, or stake tokens. The website may be fake, or the smart contract may be malicious. Funds may be drained once wallet permissions are granted.

Victims may also be tricked into approving unlimited token spending through a malicious contract.

H. Fake token presales and ICO-style scams

Scammers sell a new token before launch, promising huge listing gains. They may show a whitepaper, roadmap, influencer posts, fake partnerships, and fake exchange listings. After collecting funds, they disappear or “rug pull.”

I. Pump-and-dump groups

A group promotes a coin heavily, telling members that it will “moon.” Organizers secretly sell their holdings while late buyers suffer losses. If deception, manipulation, or public solicitation is involved, legal issues may arise.

J. Fake recovery scams

After a victim loses money, a second scammer claims they can recover the stolen crypto for a fee. They may pretend to be hackers, lawyers, blockchain investigators, exchange officers, or government agents.

Common red flags:

Guaranteed recovery.
Upfront fee.
Demand for wallet seed phrase.
Claim of “frozen crypto” needing release fee.
Fake court order.
Fake law enforcement badge.
Asking the victim to install remote access software.

A real recovery effort will not require seed phrases or secret recovery keys.

IV. Philippine Legal Framework

A. Securities Regulation Code

Crypto investment scams often involve the public offer or sale of securities. The most relevant category is usually an investment contract.

An investment contract generally exists where:

A person invests money or assets;
In a common enterprise;
With expectation of profits;
Primarily from the efforts of others.

A crypto scheme may be an investment contract if investors contribute pesos, crypto, or stablecoins and expect profits from the trading, mining, staking, management, or operation of the promoter.

The label does not control. A scheme may call itself:

Crypto staking.
AI trading.
Digital mining.
Arbitrage.
Franchise.
Membership.
Community rewards.
Token presale.
Decentralized investment.
Profit-sharing.
Copy trading.
Bot subscription.

If the substance is investment solicitation, securities law may apply.

Key legal consequence

If the crypto product is a security, public offering generally requires SEC registration or a valid exemption. Persons selling, promoting, brokering, or soliciting investments may also need authority.

A company being “SEC registered” as a corporation is not enough. Corporate registration is different from authority to sell securities or solicit investments from the public.

B. Revised Penal Code

Crypto scams may involve traditional criminal offenses, including:

Estafa.
Other forms of swindling.
Falsification.
Use of false documents.
Threats.
Coercion.
Deceit-based fraud.
Offenses involving false representations.

Estafa may be relevant when the scammer deceives the victim into parting with money or crypto through false promises, fake platforms, fake identities, fake licenses, or fraudulent investment claims.

The exact charge depends on the facts.

C. Cybercrime Prevention Act

Crypto scams are often committed online. Cybercrime issues may arise where the fraud involves:

Fake websites.
Fake apps.
Phishing links.
Account takeover.
Hacked wallets.
Identity theft.
Computer-related fraud.
Cyber libel in related public shaming or accusations.
Misuse of devices.
Unauthorized access.
Malicious software.
Fake social media accounts.
Fraudulent online communications.

If the scam was conducted through digital platforms, cybercrime authorities may be involved.

D. Anti-Money Laundering Act

Crypto scams generate proceeds of crime. Funds may be laundered through:

E-wallets.
Bank accounts.
Remittance centers.
Crypto exchanges.
Peer-to-peer traders.
Money mules.
Shell companies.
Stablecoins.
Mixers.
Cross-chain bridges.
Foreign wallets.

Where proceeds of fraud or illegal investment solicitation are moved, concealed, converted, or layered, anti-money laundering issues may arise.

Victims should preserve transaction details because tracing money flows is crucial.

E. Bangko Sentral ng Pilipinas and Virtual Asset Service Providers

Virtual asset service providers, exchanges, and payment channels may be subject to financial regulation. A crypto platform that operates as an exchange, conversion service, transfer service, or custodial wallet may need appropriate registration or licensing, depending on its activities.

However, a crypto exchange registration is not the same as SEC authority to offer investments. A platform may be involved in virtual asset services but still not be authorized to sell securities or investment contracts.

Victims should distinguish between:

A crypto exchange used as a payment channel; and
A crypto investment scheme being promoted by scammers.

A legitimate exchange may be used by a scammer without the exchange itself being the scam operator.

F. Data Privacy Act

Crypto scams often collect personal data, such as:

Government IDs.
Selfies.
Phone numbers.
Email addresses.
Home addresses.
Wallet addresses.
Bank details.
Social media profiles.
Contact lists.
Screenshots of accounts.
Video verification.
Employment information.

If personal data is collected, disclosed, sold, misused, or used for harassment, the Data Privacy Act may be relevant. This is especially important where victims submitted KYC documents to fake platforms.

G. Consumer Protection and Financial Fraud Principles

Crypto investment scams may involve deceptive marketing, unfair practices, misleading claims, undisclosed risks, and fraudulent investment solicitations. Even where crypto assets are involved, the public is still protected from fraud, deception, identity theft, and unauthorized financial activity.

V. Is a Crypto Investment Automatically Illegal?

No. Crypto itself is not automatically illegal. People may buy, sell, hold, or transfer virtual assets subject to applicable laws and platform rules.

The legal issue arises when a person or entity:

Solicits public investments without authority.
Promises profits from their efforts.
Offers unregistered securities.
Operates a fake exchange or fake wallet.
Misrepresents licensing.
Uses deceptive marketing.
Runs a Ponzi or pyramid scheme.
Steals crypto through phishing or hacking.
Blocks withdrawals fraudulently.
Demands extra fees to release funds.
Uses investor funds for unauthorized purposes.
Launders scam proceeds.

The focus is not only the asset used, but the conduct surrounding it.

VI. “SEC Registered” Is Not Enough

Many crypto scammers claim:

“We are SEC registered.”
“We have business permits.”
“We are DTI registered.”
“We have BIR registration.”
“We have a foreign company license.”
“We are registered in Singapore, Dubai, Hong Kong, or the United States.”
“Our token is decentralized.”
“We are not an investment company.”
“This is only a membership.”

These claims may mislead victims.

A company’s SEC incorporation only means it legally exists as a corporation. It does not automatically authorize it to solicit investments, sell securities, manage pooled funds, offer investment contracts, or run a crypto investment platform.

The correct verification question is:

Is the exact entity authorized to offer the exact crypto investment product to the Philippine public?

If the answer is unclear, the scheme is risky.

VII. Red Flags of a Crypto Investment Scam

Common warning signs include:

Guaranteed high returns.
Daily or weekly profit promises.
No clear explanation of risk.
Pressure to invest immediately.
Returns too consistent despite market volatility.
Fake dashboards showing profits.
Withdrawal problems.
Additional fees required before withdrawal.
Payments to personal accounts.
Use of Telegram, Messenger, WhatsApp, or Viber as main office.
Anonymous founders.
Fake CEO or stolen profile photos.
Fake SEC or foreign-regulator certificates.
No verifiable office.
Heavy recruitment bonuses.
No audited financial statements.
No licensed brokers or authorized salespersons.
“Proof of payout” social media posts.
Encouragement to reinvest instead of withdraw.
Threats against critics.
Claims that government cannot regulate crypto.
Claim that “no license is needed because it is blockchain.”
Fake celebrity endorsements.
Fake news articles.
Demand for wallet seed phrase or private key.
Remote access request.
“Tax” or “unlocking fee” before withdrawal.
Sudden platform maintenance.
Change of domain or app name.
Leaders disappear when withdrawals increase.

VIII. What Victims Should Do Immediately

A. Stop sending money or crypto

Do not pay additional “tax,” “clearance,” “unlocking,” “gas,” “AML,” “validation,” or “upgrade” fees. These are often part of the scam.

If a platform refuses withdrawal unless you deposit more, treat that as a serious warning sign.

B. Do not share seed phrases or private keys

Never share:

Seed phrase.
Private key.
Recovery phrase.
Wallet password.
One-time password.
Exchange login.
Authenticator code.
Remote access permission.

A real exchange, wallet, lawyer, investigator, or government agency will not ask for your seed phrase.

C. Preserve evidence

Before blocking or deleting anything, save evidence.

Important evidence includes:

Website URLs.
App name.
Screenshots of dashboard.
Screenshots of promised returns.
Chat messages.
Group chat announcements.
Names of recruiters.
Referral links.
Wallet addresses.
Transaction hashes.
QR codes.
Bank or e-wallet recipient details.
Payment receipts.
Videos or webinars.
Whitepapers.
Contracts.
Certificates shown.
Fake regulator documents.
Withdrawal requests.
Withdrawal denial messages.
Demands for additional fees.
Social media posts.
Names of group admins.
Profile links.
Phone numbers.
Emails.

D. Secure accounts and wallets

Immediately:

Change passwords.
Enable two-factor authentication.
Revoke suspicious wallet permissions.
Move remaining funds to a secure wallet if safe.
Log out unknown devices.
Check email recovery settings.
Remove suspicious connected apps.
Scan device if malware is suspected.
Stop using compromised wallets.
Contact the exchange if funds passed through an exchange.

E. Report the scam

Report promptly to the relevant Philippine authorities and financial or crypto platforms.

F. Warn others carefully

If friends or family are being recruited, warn them factually. Avoid defamatory public posts if facts are still being verified. Preserve evidence and report instead.

IX. Where to Report a Crypto Investment Scam in the Philippines

A. Securities and Exchange Commission

The SEC is a primary reporting channel where the crypto scheme involves investment solicitation, securities, investment contracts, Ponzi structures, pyramid-like recruitment, or claims of SEC registration.

Report to the SEC if the scheme:

Solicits investments from the public.
Promises profits.
Claims to trade or mine crypto for investors.
Offers staking or passive-income packages.
Uses referral commissions.
Claims SEC registration or approval.
Uses a corporation or partnership.
Operates as a public investment program.
Sells tokens as an investment.
Has agents, promoters, or recruiters.

The SEC may check whether the entity is registered, whether it has authority to solicit investments, whether the product is a security, and whether advisories, enforcement action, or referral for prosecution are warranted.

B. PNP Anti-Cybercrime Group

Report to the PNP Anti-Cybercrime Group if the scam involves:

Online fraud.
Fake websites.
Fake social media accounts.
Phishing.
Hacking.
Identity theft.
Computer-related fraud.
Fake apps.
Threats or harassment.
Unauthorized access to wallets or accounts.

Cybercrime reporting is especially important where the scammer stole account credentials, used malware, or operated entirely through online communications.

C. NBI Cybercrime Division

The NBI Cybercrime Division may investigate serious online fraud, organized crypto scams, identity theft, large losses, phishing networks, or cross-border digital crimes.

D. Bangko Sentral ng Pilipinas

The BSP may be relevant where regulated financial institutions, payment systems, banks, e-money issuers, remittance channels, or virtual asset service providers are involved.

A victim should also report directly to the bank, e-wallet, remittance company, or exchange used to send funds.

E. Anti-Money Laundering Council

The AMLC may become relevant where funds are being laundered through accounts, e-wallets, crypto exchanges, nominee accounts, shell companies, or suspicious transaction flows.

Ordinary victims usually report first to law enforcement, SEC, and financial platforms, but AML concerns may arise from the evidence.

F. National Privacy Commission

Report to the NPC if:

The scam collected IDs, selfies, or personal data.
Personal data was misused.
The scammer posted or threatened to post private information.
The fake platform leaked personal data.
The scam involved identity theft.
Contact lists or family information were used for harassment.

G. Crypto exchanges and wallet providers

Report the scam to any exchange or wallet service involved. Provide:

Transaction hash.
Wallet address.
Date and amount.
Screenshots of scam messages.
Recipient account details.
Police or complaint reference, if available.

The platform may be able to flag addresses, preserve records, freeze accounts if custodial, or assist authorities.

H. Banks and e-wallet providers

If pesos were transferred through bank accounts or e-wallets, report immediately to the financial institution. Provide transaction references, recipient names, account numbers, phone numbers, and screenshots of the scam.

I. Social media platforms and messaging apps

Report fake accounts, groups, ads, and pages used for recruitment or fraud. This may help remove content and prevent more victims.

Platforms include:

Facebook.
Messenger.
Instagram.
TikTok.
YouTube.
Telegram.
WhatsApp.
Viber.
X.
Dating apps.
Discord.
Reddit groups.
Crypto forums.

X. What to Include in a Report

A good report should be clear, chronological, and evidence-based.

A. Victim information

Include:

Full name.
Contact number.
Email.
City or province.
Whether you are reporting as victim, relative, or concerned person.
Total amount lost.
Date of first contact.

B. Entity or scam details

Include:

Name of crypto platform.
Website URL.
App name.
Social media page.
Telegram or WhatsApp group.
Name of recruiter.
Name of group admin.
Claimed company name.
Claimed SEC registration number.
Claimed foreign license.
Office address, if any.
Customer support details.

C. How the scam was presented

Explain:

Who invited you.
What returns were promised.
What the investment package was.
Whether recruitment was required.
Whether the scheme claimed SEC or foreign approval.
Whether profits were shown on a dashboard.
Whether withdrawals were allowed at first.
What happened when you tried to withdraw.

D. Payment and crypto trail

Include:

Amount invested.
Date and time of each transaction.
Bank or e-wallet details.
Crypto wallet addresses.
Transaction hashes.
Exchange used.
Token used.
Network used.
QR codes.
Screenshots of payment instructions.
Proof of successful transfer.

E. Harm suffered

State:

Amount lost.
Additional fees demanded.
Personal data submitted.
Whether threats or harassment occurred.
Whether family or contacts were approached.
Whether identity documents were misused.
Whether account access was compromised.

F. Evidence attached

Attach:

Screenshots.
Chat exports.
Receipts.
Wallet transactions.
Platform dashboard screenshots.
Withdrawal denial screenshots.
Whitepaper or investment proposal.
Contract.
Certificate or registration claim.
Social media posts.
Group chat announcements.
Recruiter profile.
Videos or webinar links.
Names of other victims, if they consent.

XI. Evidence Checklist

Prepare a folder containing:

Platform name and URL.
App screenshots.
App store or APK link.
Recruiter name and profile link.
Group chat screenshots.
Investment package details.
Promised return screenshots.
SEC or licensing claims.
Payment instructions.
Bank transfer receipts.
E-wallet receipts.
Crypto transaction hashes.
Wallet addresses.
QR codes.
Exchange account transaction history.
Withdrawal request screenshots.
Withdrawal denial screenshots.
Demands for tax or fees.
Emails and support tickets.
Fake certificates or contracts.
Timeline of events.
List of persons involved.
Proof of identity documents submitted.
Reports filed with platforms or banks.

XII. Sample Report to the SEC

Subject: Report of Suspected Crypto Investment Scam and Unauthorized Investment Solicitation

Complainant: Name: Address or city/province: Contact number: Email address:

Entity / Platform Reported: Platform name: Website or app: Social media page or group: Telegram / WhatsApp / Messenger group: Claimed company name: Claimed SEC registration number, if any: Names of promoters, recruiters, or admins:

Nature of the Scheme: The platform solicits money or cryptocurrency from the public and promises profits from crypto trading, mining, staking, arbitrage, or related activity. Investors are told that they will earn fixed or high returns. The platform also uses referral or recruitment incentives.

Facts: On __________, I was invited by __________ to invest in __________. I was promised __________ return within . I transferred ₱ / __________ crypto on __________ through __________. The platform showed profits on a dashboard, but when I attempted to withdraw, I was asked to pay additional fees such as __________.

Reason for Suspicion: The entity appears to be soliciting investments from the public without showing any authority to offer securities or investment contracts. The scheme promises high or guaranteed returns, uses online recruitment, and refuses withdrawals unless additional money is paid.

Evidence Attached: Screenshots of investment offers, chat messages, platform dashboard, payment receipts, wallet addresses, transaction hashes, withdrawal requests, and fee demands are attached.

Request: I respectfully request verification of the entity’s authority to solicit investments from the public and appropriate investigation or enforcement action if the entity is operating without the required authority.

XIII. Sample Report to Cybercrime Authorities

Subject: Complaint for Online Crypto Investment Scam

I am filing this complaint regarding an online crypto investment scam.

On or about __________, I was contacted by __________ through __________. I was encouraged to invest in a crypto platform called __________ located at __________. I was promised profits from crypto trading/mining/staking/arbitrage. I transferred funds or crypto to the account or wallet provided by the scammer.

The relevant transaction details are:

Date:
Amount:
Payment method:
Recipient bank/e-wallet:
Crypto wallet address:
Transaction hash:
Platform account:
Recruiter account:

After the transfer, the platform showed alleged profits. However, when I tried to withdraw, the platform refused and demanded additional payments for tax, AML clearance, unlocking, gas fees, or account upgrade. I believe the platform is fraudulent.

Attached are screenshots of the chats, platform, transaction receipts, wallet addresses, payment instructions, withdrawal denial, and the scammer’s profile.

I respectfully request investigation and assistance in identifying the persons involved, preserving digital evidence, and coordinating with relevant financial institutions or platforms.

XIV. Sample Message to a Bank, E-Wallet, or Exchange

Subject: Urgent Report of Crypto Investment Scam Transaction

I am reporting a transaction connected to a suspected crypto investment scam.

Transaction details:

Date and time:
Amount:
Sender account:
Recipient account / wallet:
Reference number / transaction hash:
Platform or person involved:
Screenshot of scam demand attached:

The recipient account or wallet was used to receive funds as part of an online investment scam. I request that your institution preserve records, flag the account or wallet where possible, and advise on the process for filing a formal dispute or law-enforcement request.

Please provide confirmation that this report has been received.

XV. Sample Timeline Format

Date	Event	Evidence
Date first contacted	Recruiter introduced investment	Chat screenshot
Date joined group	Added to Telegram or Messenger group	Group screenshot
Date first deposit	Sent funds or crypto	Receipt, transaction hash
Date profit shown	Dashboard displayed gains	Platform screenshot
Date withdrawal requested	Requested withdrawal	Screenshot
Date fee demanded	Asked to pay tax or unlock fee	Chat or support screenshot
Date report filed	Reported to agency/platform	Complaint receipt

A timeline helps authorities understand the case quickly.

XVI. What If the Scam Uses a Foreign Platform?

Many crypto scams claim to be foreign-based. This does not prevent reporting in the Philippines.

Philippine authorities may still have interest where:

The victim is in the Philippines.
The solicitation targeted Filipinos.
Filipino recruiters were involved.
Philippine bank or e-wallet accounts were used.
Philippine social media groups were used.
The scheme claimed Philippine registration.
Harm occurred in the Philippines.

Foreign registration does not automatically authorize public investment solicitation in the Philippines.

XVII. What If the Crypto Was Sent to a Wallet?

Crypto transactions are often irreversible, but they are usually traceable on a blockchain.

Victims should preserve:

Wallet address.
Transaction hash.
Token name.
Blockchain network.
Time and date.
Exchange used.
Screenshots of wallet transfer.
QR code used.
Chat showing the wallet was provided by the scammer.

Do not assume recovery is impossible, but also be realistic. Tracing may help identify exchange deposit addresses, money mules, or linked wallets. Recovery depends on speed, platform cooperation, custody status, and law-enforcement action.

XVIII. What If the Victim Used Binance, Coins.ph, Maya, GCash, or Other Platforms?

If a legitimate platform was used to buy or send crypto, report to that platform immediately.

The platform may not be the scammer, but it may help by:

Preserving account records.
Flagging suspicious addresses.
Blocking accounts where possible.
Responding to lawful requests.
Providing transaction history.
Advising on security steps.

Victims should download transaction history and preserve proof of transfers.

XIX. What If the Scam Demands “Tax” Before Withdrawal?

This is one of the most common scam patterns. A fake platform tells the victim that profits are ready, but withdrawal requires payment of:

Tax.
AML fee.
Gas fee.
Verification fee.
Upgrade fee.
Security deposit.
Wallet validation.
Court clearance.
International transfer fee.
Clearance certificate.
Penalty for suspicious activity.

Legitimate taxes are not usually paid by sending crypto or e-wallet transfers to a random wallet or account controlled by the platform. A demand for additional payment before releasing alleged profits is a major scam indicator.

XX. What If the Scam Uses a Real Person You Know?

Some victims are recruited by friends, relatives, co-workers, churchmates, classmates, or online acquaintances. The recruiter may be:

A knowing promoter.
A paid agent.
An upline.
A victim who unknowingly recruited others.
A money mule.
A group admin.
A person pretending to help.

The victim should preserve evidence of the recruiter’s representations. If the recruiter earned commissions, hosted orientations, collected funds, or made false claims, they may have legal exposure.

However, avoid threats or public accusations without legal advice. Report facts and evidence to authorities.

XXI. Liability of Promoters, Recruiters, Influencers, and Group Admins

A crypto scam may involve more than the anonymous platform. Persons may be liable if they:

Solicit investments.
Claim guaranteed returns.
Use fake licensing claims.
Collect funds.
Receive commissions.
Manage investor groups.
Conduct webinars.
Post proof of payout.
Recruit downlines.
Dismiss warnings.
Continue recruiting after complaints.
Pressure victims to reinvest.
Tell investors not to report.

Influencers and content creators may also face legal risk if they actively promote unauthorized investment schemes, especially if they receive referral fees or make false claims.

A disclaimer such as “not financial advice” may not protect someone who is effectively soliciting investments.

XXII. What If the Platform Has an SEC Advisory or Warning?

If an entity has been the subject of a regulatory warning, victims should preserve a copy of the advisory or notice and include it in their complaint.

An advisory may support the claim that the entity lacks authority to solicit investments. It may also warn that agents, promoters, recruiters, influencers, and enablers can face liability.

Even if there is no advisory, the scheme may still be unlawful. Absence of a warning is not proof of legitimacy.

XXIII. What If There Is No Written Contract?

Many crypto scams operate without formal contracts. Lack of contract does not prevent reporting.

Evidence may include:

Chats.
Voice notes.
Screenshots.
Payment receipts.
Wallet transactions.
Social media posts.
Webinar recordings.
Group announcements.
Dashboard screenshots.
Referral codes.
Emails.
Testimony of victims.

Digital communications can be powerful evidence.

XXIV. What If the Scammer Deleted the Account or Website?

Preserve what remains:

Browser history.
Cached links.
Screenshots from other victims.
Payment records.
Wallet addresses.
Domain names.
Emails.
Group chat exports.
Transaction hashes.
App files.
APK source.
Names and numbers used.
Social media links.
Device notifications.

Even if a website disappears, blockchain transactions and payment records may remain.

XXV. What If the Victim Joined a Group Chat With Other Victims?

Group coordination may help, but it should be handled carefully.

Helpful steps:

Create a shared evidence index.
Avoid spreading unverified rumors.
Avoid harassment or doxxing.
Do not post private IDs publicly.
Do not alter evidence.
Encourage each victim to file an individual complaint.
Prepare a list of common wallet addresses and payment accounts.
Preserve group announcements.
Identify recruiters and admins.
Consult counsel for coordinated action if losses are large.

Multiple complaints may help authorities see the scale of the scheme.

XXVI. Recovery of Funds

Recovery is possible in some cases but not guaranteed.

Factors affecting recovery include:

How quickly the victim reports.
Whether funds went to a custodial exchange.
Whether bank or e-wallet accounts can be frozen.
Whether money mules are identified.
Whether the scammer is local.
Whether crypto was moved through mixers or bridges.
Whether law enforcement can obtain records.
Whether the scammer still holds assets.
Whether there are court or regulatory proceedings.

Victims should be wary of anyone promising guaranteed recovery. Recovery scams are common.

XXVII. Avoiding Recovery Scams

After reporting a crypto scam, victims may be targeted again by people claiming:

“I can hack the wallet.”
“I know someone at the exchange.”
“Your crypto is frozen and needs release fee.”
“Pay me and I will recover everything.”
“I am from the police, send processing fee.”
“Send your seed phrase so I can trace it.”
“Install this app so I can help.”

Do not share seed phrases, private keys, OTPs, or remote access. Do not pay upfront recovery fees to strangers.

A legitimate lawyer, investigator, exchange, or authority will use formal procedures and will not ask for wallet secrets.

XXVIII. Civil, Criminal, and Regulatory Remedies

A. Regulatory complaint

A complaint to the SEC may address unauthorized investment solicitation, unregistered securities, Ponzi schemes, pyramid schemes, or misleading crypto investment offers.

B. Criminal complaint

A complaint to law enforcement may address estafa, cybercrime, identity theft, hacking, phishing, threats, or related offenses.

C. Civil action

Victims may seek recovery of money, damages, injunctions, or other civil remedies against identifiable persons or entities.

D. Asset freezing and tracing

In serious cases, authorities may seek preservation, tracing, or freezing of accounts or assets, especially where money laundering or organized fraud is involved.

E. Platform takedown

Victims may seek removal of fake websites, app listings, social media pages, advertisements, and impersonation accounts.

XXIX. How to Strengthen a Complaint

A complaint is stronger when it shows:

The exact promise made.
The exact person who made the promise.
The exact amount sent.
The exact wallet or account that received funds.
The investment nature of the scheme.
Public solicitation or recruitment.
Lack of authority or misleading authority claims.
Withdrawal refusal.
Additional fee demands.
Similar complaints from other victims.
Screenshots and transaction records.
Timeline of events.

Authorities need facts, not only conclusions. Instead of saying “they scammed me,” explain how the scheme worked and attach proof.

XXX. Practical Legal Analysis of Common Scenarios

Scenario 1: “I invested in crypto trading and was promised 10% monthly.”

This may be an investment contract if the investor expected profits from the trader’s efforts. SEC authority may be required. If the promise was false or funds were misused, fraud may also be involved.

Scenario 2: “The platform shows profits, but I cannot withdraw unless I pay tax.”

This is a strong scam indicator. Preserve the withdrawal request, the tax demand, wallet address, and dashboard screenshots. Do not pay more.

Scenario 3: “A friend recruited me and earned commission.”

The friend may be a victim or a promoter. Preserve messages showing what they promised, whether they received referral benefits, and whether they knew of the scheme’s nature.

Scenario 4: “I sent crypto to a wallet and the scammer disappeared.”

Preserve transaction hashes and wallet addresses. Report to cybercrime authorities and the exchange used. Recovery is uncertain but tracing may help.

Scenario 5: “The company is SEC registered.”

Ask whether it has authority to offer the crypto investment product. Basic corporate registration is not enough.

Scenario 6: “The project is foreign registered.”

Foreign registration does not automatically authorize investment solicitation in the Philippines.

Scenario 7: “I connected my wallet to a website and my tokens disappeared.”

This may involve a malicious smart contract, phishing, or wallet-draining scam. Revoke permissions, move remaining funds if safe, preserve transaction hashes, and report.

Scenario 8: “The scammer says I will be sued if I report.”

Threats are common. Preserve the threat and include it in the complaint.

XXXI. Preventive Measures Before Investing in Crypto

Before joining any crypto investment, ask:

Who is the legal entity?
Is it authorized to solicit investments in the Philippines?
Is the investment product registered or exempt?
Are returns guaranteed?
Who controls the funds?
Can I withdraw without paying additional fees?
Is recruitment rewarded?
Are profits realistic?
Is there audited proof of income?
Are founders verifiable?
Is the platform a real exchange or a fake clone?
Are payments made to company accounts or personal wallets?
Is there an SEC advisory?
Do they ask for seed phrases or private keys?
Is pressure being used?
Is the website newly created?
Are there fake reviews?
Does the contract explain risks?
Is the investment being sold through group chats?
Would I still invest if a close friend had not invited me?

If the answer feels unclear, do not invest.

XXXII. Special Note on “Not Financial Advice” Disclaimers

Many promoters say, “This is not financial advice,” then immediately encourage people to invest, provide referral links, show profit screenshots, and explain how to deposit.

A disclaimer does not automatically remove legal responsibility. If the conduct is solicitation, promotion, brokering, or selling of an investment scheme, authorities may look at substance over wording.

XXXIII. Special Note on Stablecoins

Many scams use USDT or USDC because stablecoins are easier to price and transfer. The use of stablecoins does not make the scheme safer or lawful. A scam involving USDT is still a scam if funds are obtained through deception, unauthorized solicitation, or fake investment promises.

XXXIV. Special Note on Wallet Approval Scams

Some victims do not “send” crypto directly. Instead, they connect a wallet and approve a smart contract. The scam contract later drains funds.

Immediate steps:

Disconnect the wallet from the site.
Revoke token approvals using a trusted tool.
Move remaining funds to a new wallet if safe.
Do not reuse the compromised wallet for significant funds.
Preserve transaction hashes and contract addresses.
Report the malicious domain.

XXXV. Special Note on Fake Exchange Clones

A fake crypto exchange may copy the name, logo, and interface of a legitimate exchange. Check carefully for:

Misspelled domains.
Recently created domains.
Login pages sent by recruiters.
APKs outside official app stores.
Customer support only through Telegram.
Withdrawal blocked by “tax.”
No independent reviews.
No legitimate company details.
Fake app certificates.

Victims should not log in through links sent by strangers.

XXXVI. Special Note on Tax Claims

Scammers often misuse tax language. They may say:

“Pay 10% tax to unlock.”
“BIR requires crypto clearance.”
“International tax certificate needed.”
“Pay tax directly to this wallet.”
“Your profit is frozen until tax is paid.”

Victims should be skeptical. Taxes are not usually settled by sending crypto to a random wallet controlled by a supposed platform support agent. Preserve these messages as evidence.

XXXVII. Special Note on AML or Anti-Money Laundering Claims

Fake platforms often say the account is frozen for AML reasons and requires a payment to clear it. This is suspicious. Real AML compliance generally does not work by demanding more money from the customer to release funds.

Messages demanding “AML clearance fees” should be preserved and reported.

XXXVIII. If You Are a Recruiter Who Later Realized It Was a Scam

A recruiter who later realizes the scheme is fraudulent should:

Stop recruiting immediately.
Preserve all communications with organizers.
Inform recruits factually.
Do not destroy evidence.
Do not conceal commissions.
Report to authorities.
Seek legal advice.
Avoid collecting further money.
Avoid making false assurances.
Cooperate where appropriate.

Continuing to promote after warning signs may increase liability.

XXXIX. If You Are a Family Member of a Victim

A family member can help by:

Encouraging the victim not to send more money.
Helping preserve evidence.
Helping secure accounts.
Avoiding blame.
Helping file reports.
Checking if other relatives were recruited.
Watching for recovery scams.
Encouraging legal or emotional support.

Shame can cause victims to hide losses and send more money. Support is important.

XL. Legal Article Summary

Reporting a crypto investment scam in the Philippines requires more than saying that money was lost. A strong report identifies the platform, the persons involved, the promises made, the investment structure, the payment trail, wallet addresses, transaction hashes, withdrawal problems, and evidence of public solicitation.

Crypto does not place a scheme outside the law. If a person solicits money or crypto from the public with a promise of profit from trading, mining, staking, arbitrage, token appreciation, or managerial efforts, Philippine securities law may apply. If deception, hacking, phishing, identity theft, fake dashboards, or withdrawal blackmail is involved, cybercrime and fraud laws may also apply. If funds are moved through bank accounts, e-wallets, exchanges, or nominee wallets, anti-money laundering concerns may arise.

The most important practical steps for victims are:

Stop sending money, preserve evidence, secure accounts, report to the SEC for unauthorized investment solicitation, report to cybercrime authorities for online fraud, notify banks, e-wallets, and exchanges, and avoid recovery scams.

The controlling principle is clear:

A crypto label does not legalize fraud. A blockchain transaction does not erase liability. A foreign website does not defeat Philippine remedies. A victim should report early, preserve the money trail, and refuse further payments disguised as taxes, fees, or unlock charges.

Disclaimer

This article is for general legal information in the Philippine context and is not legal advice. For a specific case involving a crypto investment scam, consult a Philippine lawyer or report directly to the appropriate government agency, law-enforcement office, financial institution, or crypto platform.