A fake SEC Certificate of Incorporation is often used to make a scam look “legal.” The scammer may send a PDF with an SEC logo, a registration number, a QR code, or a corporate name, then say, “Registered kami sa SEC, safe ito.” That is misleading. An SEC incorporation certificate may prove that a corporation exists, but it does not automatically authorize investment solicitation, lending, financing, securities selling, crypto trading, or any promise of guaranteed returns. If the certificate is forged, altered, copied from another company, or used to deceive people into sending money, you should report it quickly, preserve evidence, and file with the right offices.

Why a Fake SEC Incorporation Certificate Is Serious

A Philippine corporation gets legal personality from registration with the Securities and Exchange Commission, but scammers abuse this by showing fake or misused documents. Under the Revised Corporation Code, the SEC is the government agency that registers corporations and deals with corporate registration issues, including false or fraudulent corporate filings. The law also penalizes obtaining corporate registration through fraud and false or misleading certifications in required corporate reports. (Lawphil)

In practice, there are three common situations:

Situation	What it means	What to do
The certificate is completely fake	The company does not exist in SEC records, or the certificate number/name/QR code does not match SEC records.	Report to the SEC and file a cybercrime or estafa complaint if money was solicited.
The company is real, but the certificate is altered	A legitimate SEC certificate may have been edited, reused, or attached to a different scam page.	Report the misuse to the SEC and preserve the original file/source.
The company is registered, but not licensed to solicit investments	This is very common. SEC registration as a corporation is only a primary registration; investment-taking usually requires separate authority.	Report as an investment scam or unauthorized securities solicitation.

The SEC’s own materials for digital certificates state that certificates may contain QR/validation features and that a corporate registration does not authorize activities requiring a secondary license, such as investment solicitation or investment taking. (Esparc)

SEC Registration vs. Authority to Solicit Investments

This distinction is the most important point for ordinary victims.

A Certificate of Incorporation means the SEC approved the creation of a corporation. It does not mean:

the SEC endorses the company;
the investment is safe;
the company can collect investments from the public;
the promoters are licensed brokers, dealers, salesmen, investment advisers, or financing/lending operators;
the promised profits are legal.

Under the Securities Regulation Code, Republic Act No. 8799, securities generally cannot be sold or offered to the public in the Philippines unless properly registered, and persons acting as brokers, dealers, or salesmen must also be registered where required. (Lawphil)

Many scams are structured as “investment contracts.” The Supreme Court has applied the Howey Test in Philippine securities cases: if people invest money in a common enterprise and expect profits mainly from the efforts of others, the scheme may be treated as an investment contract requiring SEC regulation. (Lawphil)

So even if the corporation really exists, a promoter can still be violating the law if they use the SEC certificate to collect investments without the proper authority.

Legal Bases That May Apply

Revised Corporation Code — RA 11232

The Revised Corporation Code governs the formation, registration, supervision, and dissolution of corporations in the Philippines. If a certificate or corporate filing was obtained through fraud, or if false information was submitted to the SEC, the SEC may investigate and impose appropriate administrative consequences. The law also contains penal provisions for fraudulent corporate registration and false corporate submissions. (Lawphil)

Securities Regulation Code — RA 8799

If the fake SEC certificate is used to solicit investments, pooled funds, “slots,” “staking,” “profit sharing,” “trading packages,” “VIP accounts,” or guaranteed passive income, the Securities Regulation Code may apply. Section 8 deals with registration of securities, while Section 28 deals with registration of brokers, dealers, and salesmen. (Lawphil)

Revised Penal Code — Falsification and Estafa

A forged or altered SEC certificate may fall under falsification of a public or official document or use of falsified documents under Articles 171 and 172 of the Revised Penal Code, depending on who made or used the document and how it was used. (Lawphil)

If the document was used to make you send money, the facts may also support estafa under Article 315, especially where the scammer used false pretenses, fictitious identity, false authority, or imaginary transactions to induce payment. (Lawphil)

Cybercrime Prevention Act — RA 10175

If the fake certificate was sent through Facebook, Messenger, Telegram, WhatsApp, Viber, email, a website, an online investment platform, or any computer system, the Cybercrime Prevention Act may apply. Online fraud can trigger cybercrime investigation by the PNP Anti-Cybercrime Group or NBI Cybercrime Division. (Lawphil)

Anti-Financial Account Scamming Act — RA 12010

If you transferred money through a bank, e-wallet, payment app, or other financial account, RA 12010, the Anti-Financial Account Scamming Act, may help preserve funds. The law allows temporary holding of funds subject to a disputed transaction for a period not exceeding 30 calendar days under the rules issued by the BSP, and the BSP has issued implementing circulars on temporary holding and coordinated verification of disputed transactions. (Lawphil)

Civil Code Remedies

A victim may also have civil remedies for damages. Article 33 of the Civil Code allows an independent civil action for damages in cases involving fraud, separate from the criminal case. (Lawphil)

Step-by-Step Guide: How to Report a Fake SEC Incorporation Certificate Used in a Scam

1. Save the Evidence Before the Scammer Deletes It

Do this immediately. Scam pages, Telegram groups, Messenger threads, and websites are often deleted once victims start asking questions.

Save:

the fake SEC certificate in its original file format, if possible;
screenshots of the certificate showing the full page, QR code, SEC registration number, company name, date, and signatures;
the exact URL of the website, Facebook page, TikTok account, Telegram channel, email address, or profile that sent it;
screenshots of conversations where the certificate was used to convince you;
proof of payment, including bank transfer slips, GCash/Maya receipts, remittance records, crypto wallet addresses, or deposit slips;
the name, phone number, username, and account details of the person who received the money;
screenshots of promises such as “guaranteed income,” “daily payout,” “double your money,” “SEC registered,” or “legal investment.”

Do not rely on screenshots alone. If possible, download the PDF, copy the link, record the profile URL, and save the email headers or message details. Investigators need identifiers, not just names that can be changed.

2. Check Whether the Certificate Matches SEC Records

Before reporting, do a basic verification. This helps you explain whether the certificate is fake, altered, or simply being misused.

You can check through:

the SEC’s online systems, including eSEARCH and “Check with SEC” links listed on the SEC iMessage portal; (Securities and Exchange Commission)
the SEC Check validation page if the document has a validation code; (mobileapp.sec.gov.ph)
SEC Express, where you can request plain or authenticated copies of company-related documents such as Articles of Incorporation, By-Laws, General Information Sheet, and other corporate records. SEC Express indicates delivery of documents within 3 to 5 working days from release for Metro Manila and up to 7 working days for provincial deliveries. (secexpress.ph)

When checking, compare:

Detail	What to compare
Corporate name	Exact spelling, punctuation, “Inc.” or “Corporation,” and any added words
SEC registration number	Whether it matches the company name in SEC records
Date of incorporation	Whether it is consistent with the company’s records
QR code or validation code	Whether it validates through the SEC system
Purpose clause	Whether the company’s stated purpose allows the advertised activity
Secondary license	Whether the company is authorized for investment, securities, lending, financing, or other regulated activities

A mismatch does not always prove fraud by itself, but it is a strong reason to report.

3. Prepare a Clear Report Packet

A good complaint is organized. Investigators and SEC officers handle many reports, so make your packet easy to review.

Prepare:

One-page summary State who contacted you, what they offered, what SEC certificate they used, how much money was requested or paid, and why you believe the certificate is fake or misused.
Timeline of events Example:
- January 5: Saw Facebook ad.
- January 6: Agent sent SEC certificate.
- January 7: Sent ₱20,000 through GCash.
- January 10: Account stopped replying.
- January 11: SEC certificate failed validation.
Evidence folder Label files clearly:
- Fake_SEC_Certificate.pdf
- Messenger_Conversation_01.png
- GCash_Receipt_20000.pdf
- Facebook_Page_URL.txt
- Promised_Returns_Screenshot.png
Identity documents Prepare a valid government ID. If you are abroad, use a passport or foreign government ID plus any document showing your contact details.
Affidavit-complaint, if filing a criminal complaint For police, NBI, or prosecutor filings, a sworn affidavit is usually required. It should narrate the facts from personal knowledge and attach supporting documents.

4. File a Report with the SEC

Use the SEC’s iMessage system for public inquiries, complaints, incidents, and requests. The SEC describes iMessage as its official web-based platform for managing public complaints and generating a unique electronic ticket for submissions.

In iMessage:

Open a new ticket.
Sign in or create the required eSECURE access if prompted.
In the service field, select the most relevant service.
For investment-related scams, choose the Enforcement and Investor Protection Department service for eComplaints on Investment Scams, if available.
If the issue is a company record problem, missing company, or certificate verification concern, use the relevant Company Registration and Monitoring Department or extension office service where applicable.
Upload the fake certificate, screenshots, proof of payment, and your summary.
Save the ticket number and monitor replies.

The SEC iMessage guide shows that the system lets users select the needed service, create a ticket, upload files, and track open or closed tickets. It also lists “eComplaints on Investment Scams” under the Enforcement and Investor Protection Department.

5. File with PNP Anti-Cybercrime Group or NBI Cybercrime Division

If money was taken, identities were misused, online platforms were used, or the scammer is still actively recruiting victims, file a criminal complaint as well.

The DOJ Office of Cybercrime advises the public to report cybercrime incidents to either the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. It lists the NBI Cybercrime Division in Quezon City and the PNP Anti-Cybercrime Group at Camp Crame as reporting points. (Cybercrime Division)

Bring or prepare:

valid ID;
affidavit-complaint;
printed screenshots;
digital copies on USB or cloud folder;
proof of payment;
fake SEC certificate;
URLs, usernames, phone numbers, email addresses, and account numbers;
SEC ticket number, if already filed.

For online scam concerns, the government also uses the 1326 anti-scam reporting channel through DICT/CICC-related reporting mechanisms. (Department of Education Dictionary)

6. Immediately Notify Your Bank, E-Wallet, or Payment Provider

Do not wait for the SEC or police before contacting your bank or e-wallet. Time matters.

Tell the financial institution:

you are reporting a scam;
the transaction is disputed;
the recipient account may be involved in fraud;
you are requesting preservation, tracing, or temporary holding of funds where legally available;
you can provide a police report, affidavit, SEC ticket, or complaint reference once available.

Under RA 12010 and BSP rules, disputed electronic fund transfers may be subject to temporary holding and coordinated verification, subject to legal requirements and institutional procedures. (Lawphil)

In practice, banks and e-wallets often ask for:

transaction reference number;
date and time of transfer;
amount;
sender and receiver account details;
screenshots of the scam conversation;
police report or complaint affidavit;
government ID.

7. Report the Website, Page, Phone Number, or Platform

This does not replace a legal complaint, but it can prevent more victims.

Report to:

Facebook, TikTok, Instagram, Telegram, WhatsApp, or the relevant platform;
the domain registrar or hosting provider, if there is a scam website;
NTC or telco channels, if the scam involved SMS or mobile numbers;
the bank or e-wallet where the recipient account is maintained.

When reporting to platforms, attach the fake certificate and identify the exact post or account where it was used. Avoid submitting only “scammer po ito” without evidence.

Documents, Fees, and Timelines

Item	Usually needed?	Notes
Fake SEC certificate	Yes	Keep the original PDF/image and screenshots.
SEC verification result	Strongly recommended	Use SEC validation tools, SEC Express, or SEC inquiry/ticket.
Proof of payment	Yes, if money was sent	Include transaction reference numbers.
Screenshots of chats/posts	Yes	Capture timestamps, usernames, URLs, and promises made.
Affidavit-complaint	Usually yes for criminal cases	Must be sworn before a prosecutor, authorized officer, or notary.
Valid ID	Yes	Passport is acceptable for foreigners or Filipinos abroad.
SEC iMessage ticket number	Helpful	Shows you already reported the corporate or investment aspect.
Police/NBI complaint reference	Helpful for banks/e-wallets	Often requested for fund recovery or account investigation.

Typical timing:

Step	Practical timeline
Saving evidence	Immediately
SEC iMessage ticket creation	Usually same day once submitted
SEC review/response	Varies depending on complexity and attachments
SEC Express document request	Delivery is stated as 3 to 5 working days from release in Metro Manila and up to 7 working days for provincial delivery
Bank/e-wallet scam report	Same day is best
Temporary hold of disputed funds	Up to 30 calendar days under AFASA, subject to BSP rules and institutional process
PNP/NBI initial intake	Same day to several days, depending on office and completeness of documents
Prosecutor preliminary investigation	Can take months in practice, although Rule 112 sets short periods for affidavit submission and resolution steps once the complaint proceeds

Under Rule 112 of the Rules of Criminal Procedure, preliminary investigation generally requires affidavits and supporting documents, and the respondent is given an opportunity to submit counter-affidavits. (Lawphil)

Special Notes for Filipinos and Foreigners Abroad

If you are outside the Philippines, you can still prepare and file reports online where available, especially with the SEC through iMessage. Criminal complaints may require a sworn affidavit.

For documents executed abroad:

If you sign an affidavit before a Philippine Embassy or Consulate, it can generally be used in the Philippines as a consular notarized document.
If you sign before a local foreign notary in an Apostille country, the document may need an apostille from the competent authority of that country before use in the Philippines.
If the country is not covered by the Apostille Convention, consular legalization may still be required.

The DFA’s Apostille guidance explains that foreign documents are not apostillized by the DFA, and Philippine embassies note that documents issued abroad for use in the Philippines may need the apostille of the issuing country if both countries are parties to the Apostille Convention. (Apostille Philippines)

For practical purposes, if you are abroad and lost money to a Philippine-based scam, prepare a clean evidence packet first, then ask the receiving agency whether they require a consularized or apostilled affidavit.

Common Pitfalls When Reporting a Fake SEC Certificate

Mistake 1: Assuming “SEC registered” means safe

This is the scammer’s favorite line. SEC registration is not a guarantee of legitimacy and not a license to solicit investments.

Mistake 2: Reporting without the certificate file

A screenshot is useful, but the original PDF or image may contain metadata, QR codes, or other clues. Save both.

Mistake 3: Hiding your own transaction details

Some victims are embarrassed, especially if the investment involved crypto, gambling-like returns, or “under the table” arrangements. Give accurate facts. Incomplete information makes tracing harder.

Mistake 4: Posting accusations online before filing

Public warnings may help others, but careless posts can create separate risks, including defamation or doxxing complaints. Stick to verifiable facts: “I filed a report with SEC under ticket number ___ regarding this certificate,” rather than adding threats or insults.

Mistake 5: Waiting too long to contact the bank or e-wallet

If funds have moved through multiple accounts, recovery becomes harder. Report to the financial institution immediately, even while preparing the SEC or police complaint.

Mistake 6: Confusing SEC action with money recovery

The SEC can investigate regulatory violations and issue advisories or orders. Money recovery usually requires action through banks/e-wallets, criminal proceedings, civil claims, restitution, settlement, or court processes.

What to Say in the SEC Report

A clear SEC report can be short but complete. Include these points:

“I am reporting a suspected fake or altered SEC Certificate of Incorporation used to solicit money from the public.”
“The certificate was sent by [name/profile/link] on [date].”
“The entity used the certificate to claim it was SEC-registered and authorized to offer [investment/lending/crypto/trading package].”
“I paid/saw others pay [amount], through [bank/e-wallet/account], on [date].”
“I verified or attempted to verify the certificate through [SEC system/SEC Express/validation code], and found [result].”
“Attached are the certificate, screenshots, proof of payment, URLs, account details, and timeline.”
“I request verification of the certificate and appropriate action on the investment solicitation or misuse of SEC registration documents.”

Frequently Asked Questions

How do I know if an SEC Certificate of Incorporation is fake?

Check whether the company name, SEC registration number, date, QR code, and validation code match SEC records. Use SEC online tools, SEC Express, or SEC iMessage to verify. A certificate is suspicious if the QR code fails, the company cannot be found, the name does not match, the document looks edited, or the promoter refuses to provide verifiable SEC records.

Is a company allowed to collect investments just because it has an SEC certificate?

No. SEC incorporation is only primary registration. Public investment solicitation usually requires separate authority under securities laws. A real corporation can still be operating illegally if it solicits investments without a required secondary license.

Where should I report a fake SEC certificate used in a scam?

Report it to the SEC through iMessage, especially if it involves corporate registration documents or investment solicitation. If money was taken or the scam happened online, also report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. Notify your bank or e-wallet immediately.

What if the company is real but the certificate is being used by scammers?

Report it anyway. The issue may be unauthorized use, impersonation, alteration, or investment solicitation without authority. A real SEC record does not protect scammers who misuse that record to deceive people.

Can the SEC help me get my money back?

The SEC can investigate regulatory violations, issue advisories, and take administrative or enforcement action. Direct fund recovery usually involves banks/e-wallets, criminal complaints, civil claims, restitution, or court processes. Report to your financial institution immediately if you transferred money.

What criminal case can be filed for a fake SEC certificate scam?

Possible offenses include falsification or use of falsified documents under Articles 171 and 172 of the Revised Penal Code, estafa under Article 315, and cybercrime-related offenses under RA 10175 if the internet or electronic systems were used. The exact charge depends on the evidence and the prosecutor’s evaluation.

Do I need a notarized affidavit to report to the SEC?

For an SEC iMessage report or tip, you may begin with documents and screenshots. For formal criminal complaints with the police, NBI, or prosecutor, a sworn affidavit-complaint is commonly required.

Can I report even if I did not send money?

Yes. You can report attempted scams, fake certificates, fake SEC logos, and unauthorized investment solicitation. This can help the SEC or law enforcement stop the scheme before more victims pay.

I am outside the Philippines. Can I still report?

Yes. You can file an SEC report online and coordinate with Philippine law enforcement. If a sworn affidavit is needed, ask the receiving office whether it must be consularized through a Philippine Embassy/Consulate or apostilled in the country where you are located.

Should I message the scammer after discovering the certificate is fake?

Avoid arguments or threats. Do not warn them in a way that causes them to delete evidence. Save everything first, report to the SEC and law enforcement, then follow the instructions of the agency handling your complaint.

Key Takeaways

A fake SEC Certificate of Incorporation should be reported to the SEC, especially if used to solicit investments.
SEC incorporation does not mean the company is authorized to take investments from the public.
Preserve the original certificate file, screenshots, URLs, chats, and proof of payment before pages or accounts disappear.
If money was sent, report immediately to your bank or e-wallet and ask about disputed transaction handling.
If the scam happened online, file with the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
For criminal complaints, prepare a sworn affidavit, valid ID, evidence folder, timeline, and payment records.
Filipinos and foreigners abroad can still report, but sworn documents may need consular notarization or apostille depending on where they are executed.