If someone built an online romantic relationship with you and then persuaded you to send money, cryptocurrency, gift cards, account credentials, or personal information, act quickly—but do not panic or delete the conversation. A romance scam can involve months of grooming before the first request for money, and the scammer may use a stolen identity, several bank accounts, or people acting as “money mules.” This guide explains how Philippine authorities generally treat romance scams, what to do immediately, where to report, what evidence to prepare, and what normally happens after a complaint is filed.
Is a romance scam a cybercrime in the Philippines?
“Romance scam” is a practical description, not the name of a single offense under Philippine law. The exact criminal charge depends on what the scammer did, what representations were made, how the money was transferred, and whether accounts or computer systems were manipulated.
Most romance scams may be investigated as estafa, or swindling, under Article 315 of the Revised Penal Code. A common legal basis is Article 315(2)(a), which covers fraud committed through a false name, false pretenses, or fraudulent representations concerning a person’s identity, qualifications, authority, business, property, or supposed transactions.
A typical case may involve the following:
- The scammer made a false representation before or at the time the victim sent money.
- The scammer knew the representation was false.
- The victim relied on the representation.
- The victim suffered financial loss as a result.
Examples include a supposed overseas soldier requesting money for “military leave,” a fake engineer claiming equipment is being held by customs, or an online partner asking for an emergency hospital payment while using another person’s photographs.
When the deception is carried out through Facebook, Messenger, WhatsApp, Telegram, a dating platform, email, or another information and communications technology system, Section 6 of the Cybercrime Prevention Act of 2012, Republic Act No. 10175 may apply. It provides that offenses under the Revised Penal Code and special laws are also covered when committed through information and communications technology, with the penalty generally imposed one degree higher. (Supreme Court E-Library)
Not every online lie is “computer-related fraud”
Section 4(b)(2) of RA 10175 separately punishes computer-related fraud. That offense focuses on unauthorized input, alteration, deletion, or suppression of computer data, or interference with a computer system, done with fraudulent intent and resulting in damage.
A scammer who merely lies through online messages may primarily be charged with estafa in relation to Section 6 of RA 10175. Computer-related fraud may become relevant when the scam also involves technical manipulation, unauthorized transactions, account takeover, falsified electronic data, or interference with a computer system. The distinction matters because investigators and prosecutors must match the evidence to the elements of the correct offense. (Supreme Court E-Library)
Bank accounts and money mules
The Anti-Financial Account Scamming Act, Republic Act No. 12010 of 2024, may also apply when bank accounts, e-wallets, or other financial accounts are used for money muling or prohibited social-engineering schemes.
A money mule is generally a person who knowingly allows an account to be used to receive, transfer, or withdraw proceeds of crime. The account holder may not be the person who created the fake romantic identity. Romance-scam funds are often moved through several accounts immediately after receipt, which is why reporting the transaction to the bank or e-wallet must be treated as an emergency. (Lawphil)
What to do immediately after discovering a romance scam
The first few hours may determine whether any funds can still be traced or temporarily held.
1. Stop sending money
Do not send a final payment, “clearance fee,” “tax,” “customs charge,” “lawyer’s fee,” “anti-money laundering certificate fee,” or “account verification deposit.” Scammers commonly invent a new obstacle each time the victim pays.
Do not borrow money to meet the scammer’s demand. Do not accept money from the scammer and forward it to another account, because doing so may place you in the middle of a money-mule transaction.
2. Contact the bank, e-wallet, remittance company, or cryptocurrency platform
Report the transaction through the institution’s official fraud or customer-protection channel. Ask for:
- A fraud-report or complaint reference number
- An attempted recall, trace, or temporary hold
- Preservation of transaction and recipient-account records
- Confirmation of the exact date, time, amount, destination account, and transaction reference
- Instructions for submitting your affidavit, police report, or additional evidence
Under RA 12010 and the Bangko Sentral ng Pilipinas’ implementing rules, financial institutions may temporarily hold funds involved in disputed transactions while verification is conducted. Current BSP rules provide for an initial holding period and allow the total temporary hold to reach up to 30 calendar days in qualifying cases. A hold is not automatic, and it does not guarantee recovery, particularly when the money has already been withdrawn or transferred onward. (Bangko Sentral ng Pilipinas)
Report first to the institution’s Financial Consumer Protection Assistance Mechanism, meaning its own customer-service or complaint process. If the institution does not properly address the complaint, the issue may be escalated through the BSP Online Buddy chatbot or the procedures in the BSP Consumer Assistance Mechanism guide. A BSP complaint does not replace a criminal complaint with the police or NBI.
3. Preserve the entire conversation
Do not immediately delete the chat, deactivate your account, or block the scammer before preserving the evidence. Avoid provoking the scammer or telling the person exactly what you plan to report.
Save:
- The full conversation, not only selected messages
- Profile names, usernames, account IDs, and profile links
- Phone numbers and email addresses
- Photographs and videos sent by the scammer
- Voice notes and recorded calls lawfully in your possession
- Dates and times of communications
- Bank, e-wallet, remittance, or crypto transaction records
- QR codes, wallet addresses, deposit slips, and receipts
- Requests for money and the reasons given
- Copies of identification documents the scammer sent
- Threats, demands, or instructions to conceal the transaction
- Reports made to the dating platform or social-media provider
The Rules on Electronic Evidence, A.M. No. 01-7-01-SC, govern the treatment of electronic documents and electronic data in Philippine proceedings. Keep the original files and the original device whenever possible. Do not crop, alter, annotate, or enhance the only copy of a screenshot. You may create a separate highlighted copy for explanation, but preserve an untouched version. (Lawphil)
4. Secure your accounts and identity
Change passwords immediately if you disclosed a password, one-time PIN, recovery code, card details, or answers to security questions. Start with your email account because it is often used to reset other accounts.
Also consider:
- Enabling two-factor authentication
- Signing out of unknown devices
- Informing your bank if identity documents were exposed
- Checking for unauthorized account changes
- Reporting a duplicated or impersonating social-media profile
- Monitoring credit, loan, and e-wallet activity
- Informing trusted family members if the scammer may contact them
Never include passwords, PINs, one-time passwords, or complete card security codes in an ordinary complaint email.
Where to report a romance scam in the Philippines
You may report to more than one office, but use the same accurate chronology and disclose any case or reference numbers already issued.
| Office or institution | Best use | Official reporting channel |
|---|---|---|
| Cybercrime Investigation and Coordinating Center | Immediate cyber-scam intake, referral, and coordination | Call 1326, email report@cicc.gov.ph, or use the CICC online report portal |
| PNP Anti-Cybercrime Group | Formal police complaint, cyber investigation, preservation requests, and coordination with regional police units | Visit the PNP ACG at Camp Crame or the appropriate regional anti-cybercrime unit; email acg@pnp.gov.ph or use the PNP ACG eComplaint portal |
| NBI Cybercrime Division | Formal investigation, digital-forensic work, organized or transnational scams, and cases involving multiple accounts or identities | Visit the NBI Cybercrime Division or an NBI regional office; email ccd@nbi.gov.ph or use the NBI online complaint form |
| Bank, e-wallet, remittance service, or crypto platform | Attempted hold, recall, tracing, account protection, and transaction-record preservation | Use only the institution’s official app, hotline, branch, or fraud-reporting channel |
| Bangko Sentral ng Pilipinas | Escalation of an unresolved complaint against a BSP-supervised financial institution | Use the BSP Online Buddy or BSP Consumer Assistance Mechanism |
| National Telecommunications Commission | Reporting scam text messages, sender numbers, and related telecommunications abuse | Use the NTC text scam and spam reporting portal |
CICC’s 1326 hotline has been promoted as a round-the-clock cybercrime and scam reporting channel. CICC has also stated that it aims to provide feedback within 24 hours, but this means an intake update or referral—not completion of an investigation or recovery of the money. (Philippine News Agency)
A report to Facebook, a dating application, the NTC, or a bank is useful, but none of these alone replaces a formal criminal complaint when you want Philippine law-enforcement authorities to investigate the offenders.
How to file a formal complaint with the PNP or NBI
1. Prepare a one-page case summary
Before going to the office, prepare a concise summary containing:
- Your full name and contact details
- The scammer’s claimed name and all known aliases
- The platform where contact began
- The approximate date the relationship started
- The false story or representations used
- Each request for money
- The total amount lost
- The recipient account names and numbers
- The date you discovered the deception
- Any continuing threat, blackmail, or risk to another person
This summary helps the desk officer understand the case without searching through thousands of chat messages.
2. Create a transaction-loss schedule
Use a simple table:
| Date and time | Amount | Sending institution | Recipient or destination | Reference number | Reason given by scammer |
|---|---|---|---|---|---|
| 12 June 2026, 2:15 p.m. | ₱25,000 | Bank or e-wallet name | Account name and number | Transaction reference | Claimed hospital emergency |
Include failed or reversed transfers separately. If different currencies were used, state the original amount and currency rather than estimating everything in pesos.
3. Organize evidence by category
Place evidence in clearly labeled folders:
- Identity and profile evidence
- Complete communications
- Requests for money
- Transaction records
- Bank and platform reports
- Threats or blackmail
- Chronology and witness information
Bring the device containing the original messages, together with its charger. Keep a backup. If an investigator takes custody of a device or storage media, ask for an inventory, acknowledgment, or official receipt describing what was received.
4. Execute a complaint-affidavit or sworn statement
A complaint-affidavit is a written statement made under oath describing the facts and identifying the available evidence. It should be chronological, specific, and based on what you personally know.
Avoid conclusions such as “the account owner is definitely the mastermind” unless you have evidence. State instead that the money was sent to an account under that name and that you are requesting investigation of the account holder’s role.
The NBI’s published procedure indicates that a complainant normally completes a complaint sheet, undergoes a preliminary interview, and executes a sworn complaint or submits supporting affidavits. The published intake process lists no fee and an estimated processing time of roughly one hour, but that estimate concerns initial intake—not the entire investigation. (National Bureau of Investigation)
An investigator may administer the oath or ask you to submit a notarized affidavit. Bring several signed copies, but confirm the receiving office’s current requirements before notarizing a large set.
5. Obtain proof that the complaint was received
Before leaving, ask for whatever the office can properly provide, such as:
- Complaint reference or docket number
- Receiving copy
- Investigator’s name, office, and official contact details
- List of additional requirements
- Date or method for follow-up
- Instructions concerning the preservation or turnover of devices
Do not rely only on the name of a person spoken to by telephone.
6. Submit supplementary evidence promptly
Scammers frequently delete profiles, change numbers, or move funds. Send newly discovered information to the assigned investigator while keeping an exact copy of what you submitted.
Label each additional submission—for example, “Supplemental Evidence No. 1”—and explain why it matters. Do not repeatedly rewrite the entire story in inconsistent ways.
What documents should you bring?
| Document or item | Why it matters |
|---|---|
| Government-issued identification | Confirms the complainant’s identity |
| Complaint summary and detailed chronology | Shows how the deception developed |
| Complaint-affidavit or draft sworn statement | States the facts under oath |
| Complete chat export and screenshots | Proves representations, requests, and continuing communications |
| Original phone, computer, or storage device | Allows verification and possible forensic examination |
| Bank statements, e-wallet records, remittance receipts, or crypto records | Proves the transfer and financial loss |
| Recipient account details | Helps trace destination and intermediary accounts |
| Bank, CICC, PNP, NBI, NTC, or platform reference numbers | Prevents duplication and links related reports |
| Copies of the scammer’s profiles and identifiers | Helps platforms and investigators locate relevant records |
| Witness affidavits, when available | Supports facts personally observed by other people |
| Special power of attorney, when a representative will assist | Shows the representative’s authority, subject to the agency’s requirements |
What happens after the report?
Initial assessment and preservation of data
The investigator will assess the possible offenses, relevant accounts, platforms, locations, and persons involved. Under Section 13 of RA 10175, service providers must preserve specified traffic data and subscriber information for at least six months. Content data may also be preserved after a law-enforcement preservation order, subject to the law’s requirements.
Preservation does not automatically give investigators access to the data. Under Section 14, disclosure of subscriber information, traffic data, or other relevant data generally requires a court warrant connected with an officially docketed complaint. Once properly served, the provider is directed by law to disclose the specified data within the statutory period. (Supreme Court E-Library)
This is one reason a formal, properly documented complaint is more useful than an informal social-media post.
Account tracing and coordination
Investigators may coordinate with banks, e-wallet operators, telecommunications providers, social-media companies, remittance businesses, and foreign counterparts. They may examine whether:
- The recipient account belongs to the scammer or a money mule
- Funds were transferred to additional accounts
- Several victims sent money to the same destination
- The account was opened using stolen or fabricated identification
- The same device, phone number, IP address, or profile is connected to other cases
Identifying a bank-account holder does not automatically prove that the person created the fake romantic profile. Investigators must determine whether the holder knowingly participated, was deceived into receiving money, sold or lent the account, or had the account taken over.
Preliminary investigation by the prosecutor
If sufficient evidence identifies one or more respondents, the complaint may be referred to the appropriate city or provincial prosecutor for preliminary investigation. This is the process in which the prosecutor decides whether probable cause exists to file a criminal case in court.
A victim may also inquire about direct filing through the Department of Justice’s preliminary-investigation complaint process. In an anonymous or cross-border romance scam, however, law-enforcement investigation is often necessary first because bank, telecommunications, and platform records may require preservation orders, warrants, or formal government requests.
Court proceedings
Section 21 of RA 10175 gives jurisdiction over covered cybercrime cases to the Regional Trial Court, including designated special cybercrime courts. Philippine jurisdiction may exist when an element of the offense occurred in the Philippines, a relevant computer system was located wholly or partly in the country, a person in the Philippines was affected, or other statutory jurisdictional grounds apply. (Supreme Court E-Library)
A criminal case may take months or longer, especially when there are numerous bank accounts, anonymous profiles, foreign platforms, or suspects outside the Philippines. A complaint can lead to investigation and prosecution, but it does not guarantee that the offender will be identified or that the money will be recovered.
Do you need to report to the barangay first?
Usually, no.
The Katarungang Pambarangay system under Section 408 of the Local Government Code generally does not cover offenses punishable by imprisonment of more than one year or a fine exceeding ₱5,000. Barangay conciliation also becomes impractical when the offender’s true identity or residence is unknown, the parties do not reside in the same city or municipality, or the case involves a serious cyber-enabled offense. (Lawphil)
For a typical romance-scam complaint, go directly to the bank or payment provider and to CICC, PNP ACG, or NBI. Do not delay urgent reporting while trying to obtain a barangay Certificate to File Action unless the prosecutor or investigating office specifically requires barangay proceedings for a separate dispute.
Common mistakes that can weaken a romance-scam complaint
Waiting before reporting the transaction
Funds may be withdrawn, converted into cryptocurrency, or transferred through several accounts within minutes. Report to the financial institution first, even if your evidence package is not yet complete.
Sending more money to “catch” the scammer
Do not conduct your own entrapment, arrange a confrontation, or send a test payment unless instructed and supervised by authorized investigators. You may lose more money, expose yourself to danger, or interfere with evidence.
Deleting or editing messages
Blocking the account before saving evidence may remove access to parts of the conversation. Cropped screenshots may omit dates, usernames, or surrounding context needed to authenticate the exchange.
Posting accusations publicly
The photographs may belong to an innocent person whose identity was stolen. Publicly accusing the person shown in the photographs may harm an innocent individual and alert the actual scammer. Give the identifying material to investigators and the relevant platform.
Paying a “recovery hacker”
Victims are frequently targeted again by people claiming they can hack the scammer, recover cryptocurrency, bribe a bank employee, or release frozen funds for an advance fee. Legitimate Philippine authorities do not require payment to a private account to open a cybercrime investigation.
Giving different versions to different agencies
Minor memory differences are understandable, but major inconsistencies can cause delay. Maintain one master chronology and transaction schedule. When you discover an error, correct it expressly rather than silently replacing an earlier statement.
Reporting from abroad or as a foreign victim
A Filipino or foreign victim outside the Philippines may still be able to report when the suspect, recipient account, relevant computer system, or another material part of the offense has a sufficient Philippine connection. The jurisdictional assessment depends on the actual facts.
Useful steps include:
- Report immediately to the financial institution in the country from which the money was sent.
- File a report with local police or the relevant cybercrime authority where you are located.
- Submit the Philippine-related evidence to CICC, PNP ACG, or NBI.
- Identify every Philippine bank, e-wallet, telephone number, address, and account linked to the scam.
- Ask the receiving Philippine office whether it requires a personal appearance, video interview, original affidavit, or representative.
An affidavit signed abroad may be acknowledged or sworn before a Philippine embassy or consulate. When executed before a foreign notary in a country that applies the Apostille Convention, an apostille is generally used for authentication in the Philippines. Documents from a non-Apostille country may require consular authentication. Confirm the exact requirement with the Philippine office that will receive the document before sending originals. (Philippine Embassy in New Delhi)
A victim may authorize a representative in the Philippines through a special power of attorney, but this does not necessarily eliminate the need for the victim’s own sworn statement, interview, or testimony.
RA 10175 designates the Department of Justice’s Office of Cybercrime as the central authority for international cooperation, including appropriate mutual legal-assistance requests. These processes are normally pursued through Philippine law-enforcement and prosecutorial channels rather than through a victim’s private request to a foreign platform. (Supreme Court E-Library)
Frequently Asked Questions
Can I report a romance scam even if I sent the money voluntarily?
Yes. The issue is not simply whether you pressed the transfer button. The important question is whether you sent the money because of material false representations or a fraudulent scheme. Preserve the messages showing what you were told before each payment.
Can I report if I do not know the scammer’s real name?
Yes. Provide every available identifier, including usernames, profile links, email addresses, phone numbers, recipient accounts, wallet addresses, photographs, voice notes, and transaction references. Identifying the person behind the account is part of the investigation.
Should I report to the PNP ACG or the NBI?
Either may receive a cyber-enabled fraud complaint. The PNP ACG has police cybercrime units and regional coordination, while the NBI Cybercrime Division handles cyber investigations and digital-forensic work. The best practical choice may be the office that can formally receive your complaint promptly. Disclose any report already filed with another agency.
Is a screenshot enough evidence?
A screenshot can be valuable, but it is stronger when supported by the complete chat export, original device, profile link, account identifiers, transaction records, and a clear affidavit explaining how the communication led to the payment.
Can the police trace a Facebook or dating-app account?
Potentially, but tracing depends on available records, preservation timing, the platform’s data, legal process, account security, and whether the scammer used false details, compromised accounts, anonymizing services, or foreign infrastructure. A profile photograph alone rarely proves the scammer’s identity.
Can I recover the money?
Recovery is possible when funds are reported and held before withdrawal or onward transfer, or when assets are later located. It is not guaranteed. The fastest practical step is to report directly to the sending institution and obtain a fraud reference number, followed by a formal law-enforcement complaint.
What if the scammer threatens to publish intimate photographs?
Save the threats, account details, payment demands, and copies of the material in your possession. Do not pay and do not negotiate alone. Tell the receiving officer immediately that the case involves threats, blackmail, or intimate content so the additional offenses and urgent protective steps can be assessed.
Can I report a small loss?
Yes. The amount does not prevent you from reporting. A seemingly small transaction may connect to many other victims, recipient accounts, or an organized scheme. Clearly state the exact amount and avoid exaggerating the loss.
Will I have to surrender my phone?
An investigator may need to inspect or forensically examine the device containing the original communications. Ask whether an inspection, forensic copy, or temporary turnover is required. Back up the evidence and obtain a written inventory or acknowledgment for any device left in official custody.
Key Takeaways
- A Philippine romance scam is commonly investigated as estafa under Article 315 of the Revised Penal Code, often in relation to Section 6 of RA 10175 when information and communications technology was used.
- Stop sending money and report the transfer to the bank, e-wallet, remittance company, or crypto platform immediately.
- Preserve the complete conversation, original files, account identifiers, transaction records, and the device containing the evidence.
- Report through CICC’s 1326 hotline or online portal, then file a formal complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
- Prepare a clear chronology, transaction-loss schedule, complaint-affidavit, and organized evidence folders.
- A bank report, platform report, NTC report, or barangay complaint does not replace a formal cybercrime complaint.
- Do not pay supposed recovery agents, publicly accuse the person shown in stolen photographs, or attempt your own entrapment.
- Victims outside the Philippines may still report when the scam has a sufficient Philippine connection, although affidavits, authentication, jurisdiction, and international evidence requests may require additional steps.