If you suspect an online investment scam in the Philippines, act quickly but calmly. The most important first steps are to stop sending money, save every piece of evidence, report the payment channel immediately, and file complaints with the right government offices. A scam may involve several legal issues at the same time: unregistered securities, estafa, cybercrime, money mule accounts, fake e-wallet transactions, or even syndicated fraud. This guide explains where to report, what evidence to prepare, what laws may apply, and what practical problems victims usually face when trying to recover money.

What Counts as an Online Investment Scam in the Philippines?

An online investment scam usually involves someone offering “investments” through Facebook, Messenger, Telegram, WhatsApp, Viber, TikTok, YouTube, text messages, email, websites, apps, or online groups, while promising unusually high or guaranteed returns.

Common examples include:

“Double your money in 7 days”
Crypto, forex, or trading bot schemes promising fixed profits
Fake stock, commodities, or AI trading platforms
“Paluwagan” or “co-op” style schemes that are actually investment solicitations
Referral-based programs where old investors are paid using money from new investors
Fake SEC registration certificates or fake business permits
Influencers, recruiters, or “mentors” encouraging deposits into personal bank or e-wallet accounts

Under Philippine law, fraud can occur when a person uses deceit, false promises, or other misleading acts to make another person agree to something. The Civil Code describes fraud as insidious words or machinations that induce a person to enter into a contract. The BSP also warns that Ponzi and pyramiding schemes commonly rely on unrealistic promises, recruitment, and payments sourced from new participants rather than real business profits.

For investment scams, the key question is often this: Were you asked to put in money with the expectation of profit mainly from someone else’s efforts? If yes, it may involve an “investment contract,” which is treated as a security under Philippine securities law.

In Power Homes Unlimited Corp. v. Securities and Exchange Commission, the Supreme Court applied the investment contract test: there is an investment contract when there is an investment of money in a common enterprise with an expectation of profits primarily from the efforts of others. The Court also emphasized that securities must be registered before being sold or offered to the public in the Philippines. (Supreme Court E-Library)

Legal Basis: What Laws May Apply to Online Investment Scams

Online investment scams rarely fall under only one law. Depending on the facts, several Philippine laws may apply at the same time.

Legal issue	Law or rule	Why it matters
Unregistered investment solicitation	Securities Regulation Code, Republic Act No. 8799	Securities and investment contracts cannot generally be offered or sold to the public in the Philippines without proper registration or authority from the SEC. (Supreme Court E-Library)
Investment fraud	Financial Products and Services Consumer Protection Act, Republic Act No. 11765	RA 11765 defines investment fraud to include deceptive solicitation of investments, Ponzi schemes, and offering or selling investment schemes to the public without the required SEC license or permit unless exempt.
Estafa or swindling	Article 315, Revised Penal Code	Estafa may apply when money or property is obtained through false pretenses, deceit, or fraudulent acts. The law covers acts such as pretending to have authority, business, credit, property, or imaginary transactions. (Supreme Court E-Library)
Syndicated estafa	Presidential Decree No. 1689	If the fraud is carried out by a syndicate of five or more persons formed to defraud the public, syndicated estafa may be considered if the legal elements are present. (Supreme Court E-Library)
Cybercrime	Cybercrime Prevention Act of 2012, Republic Act No. 10175	If the scam uses computers, social media, messaging apps, websites, or electronic systems, cybercrime rules may apply. The NBI and PNP are the main law enforcement authorities for cybercrime matters. (Supreme Court E-Library)
Money mule accounts and account misuse	Anti-Financial Account Scamming Act, Republic Act No. 12010	RA 12010 penalizes money muling, selling or renting financial accounts, and social engineering schemes involving electronic communications. It also allows temporary holding of disputed funds in certain cases. (Lawphil)

A very common mistake is assuming that an entity is legitimate just because it is “SEC-registered.” In practice, many scams show a Certificate of Incorporation or company registration and claim that this proves they can accept investments. It does not.

A corporation may be registered as a legal entity but still have no authority to solicit investments from the public. For investment offerings, the important issue is whether the investment product, securities, or investment contract is properly registered or exempt, and whether the persons offering it are authorized.

Where to Report a Suspected Online Investment Scam in the Philippines

The right office depends on what you need to accomplish. In many cases, you should report to more than one office because each agency handles a different part of the problem.

Where to report	Best for	What to prepare
Securities and Exchange Commission	Unregistered investment solicitation, Ponzi schemes, pyramiding, fake SEC registration claims, unauthorized brokers or investment platforms	Entity name, recruiter details, links, screenshots, proof of payment, promised returns, SEC registration claims
Your bank, e-wallet, payment provider, or remittance company	Attempting to stop, trace, hold, or dispute a transfer	Transaction reference number, date/time, amount, sender and recipient account, screenshots, police/NBI report if available
BSP Consumer Assistance Mechanism	Escalating unresolved complaints involving BSP-supervised financial institutions, such as banks or many e-wallet/payment entities	Proof you first complained to the financial institution, case number, reply, transaction documents
PNP Anti-Cybercrime Group	Criminal investigation involving online platforms, social media, phishing, fake websites, identity misuse, or electronic evidence	IDs, screenshots, URLs, chat records, payment records, account details
NBI Cybercrime Division	Criminal investigation and sworn complaint for cyber-related fraud	IDs, complaint sheet, sworn statement or affidavit, digital evidence, supporting documents
Cybercrime Investigation and Coordinating Center	Cybercrime reporting and coordination, especially for online scam incidents	Screenshots, links, account names, payment details, victim information
City or Provincial Prosecutor’s Office	Filing a criminal complaint such as estafa, cybercrime-related fraud, or other offenses	Complaint-affidavit, witness affidavits, evidence, respondent details

The BSP’s consumer guidance specifically directs victims of scam or fraud to law enforcement agencies such as the PNP, NBI, and CICC for formal investigation, while SEC-related investment or lending concerns may be raised through the SEC’s official reporting channels.

SEC Reporting

For suspected illegal investment-taking, the SEC is usually a key office. You can use the SEC’s official iMessage portal to submit a complaint or issue and create a ticket. The SEC portal also links users to tools for checking company registration and SEC-related records. (Securities and Exchange Commission)

Before or while reporting, verify the company through official SEC channels. The government has also encouraged investors to use official verification tools such as Check with SEC and to report suspicious investment activities through official channels. (Philippine Information Agency)

Bank, E-Wallet, or Payment Provider Reporting

Report the transaction to the bank, e-wallet, crypto exchange, payment app, or remittance company immediately. Ask for:

A formal fraud or scam report ticket
A request to hold or freeze the recipient account if still possible
Written confirmation of your report
The requirements for a dispute or investigation
Instructions for submitting a police, NBI, or prosecutor’s complaint if needed

Under RA 12010, financial institutions have obligations related to fraud management systems and disputed transactions. The law also provides for temporary holding of disputed funds for up to 30 calendar days in covered situations, and it addresses coordination among financial institutions in disputed transactions. (Lawphil)

This does not guarantee recovery. Scammers often move money quickly through several mule accounts. But reporting early gives you the best chance of preserving funds or creating a paper trail for investigation.

BSP Escalation for Bank or E-Wallet Complaints

The Bangko Sentral ng Pilipinas is not a substitute for the police, NBI, or SEC when the problem is a criminal scam. However, the BSP may help when your complaint against a BSP-supervised financial institution remains unresolved.

The BSP says consumers should first raise the concern with the financial institution. If unresolved, they may file through the BSP Online Buddy or other BSP consumer assistance channels. The complaint should include a summary, requested resolution, contact details, copies of the complaint to the financial institution, the institution’s reply, and supporting documents. (Bureau of the Treasury)

PNP, NBI, and CICC Reporting

For online scams, report to cybercrime authorities because they can help document the criminal complaint and, where appropriate, pursue investigation steps involving electronic evidence.

The BSP’s published scam-reporting guidance lists the following law enforcement and cybercrime reporting channels:

Agency	Contact details listed in BSP guidance
PNP Anti-Cybercrime Group	Email: acg@pnp.gov.ph; phone: (0998) 598-8116 or (+632) 414-1560
NBI Cybercrime Division	Email: ccd@nbi.gov.ph; phone: (+632) 523-8231 local 3454 or 3455
Cybercrime Investigation and Coordinating Center	Email: report@cicc.gov.ph; hotline: 1326; mobile: (0991) 481-4225, (0947) 714-7105, or (0966) 976-5971

The NBI Citizens Charter describes its Cybercrime Division process as an external investigation service for victims of computer crimes. The intake process may include a complaint sheet, preliminary interview, sworn statements or affidavits, and submission of documents. The published process indicates no fee for the listed service and an estimated intake processing time of about one hour, although the actual investigation and case build-up can take much longer. (National Bureau of Investigation)

Step-by-Step: How to Report a Suspected Online Investment Scam

1. Stop sending money and secure your accounts

Do not pay “taxes,” “release fees,” “verification fees,” “anti-money laundering clearance,” or “withdrawal charges” just to get your supposed earnings. These are common second-stage scam tactics.

Immediately secure your accounts:

Change passwords for email, banking, and e-wallet accounts
Turn on multi-factor authentication
Log out unknown devices
Block access to remote-control apps if you installed any
Call your bank or e-wallet if you shared OTPs, passwords, card details, or IDs

Do not delete your conversation with the scammer. Deleting chats may destroy useful evidence.

2. Preserve evidence before the scammer disappears

Take screenshots and export records as early as possible. Scammers often delete pages, change usernames, remove group chats, or block victims once reports begin.

Save:

Facebook pages, TikTok accounts, Telegram groups, websites, app pages, and referral links
Full chat conversations, not just selected screenshots
Names, aliases, usernames, phone numbers, email addresses, and profile links
Promised returns, investment packages, “VIP plans,” or commission charts
Payment instructions and recipient bank/e-wallet details
Proof of payment, receipts, transaction reference numbers, and timestamps
Any fake certificates, permits, SEC documents, or business registration claims
Names of recruiters, uplines, influencers, admins, and group moderators
Withdrawal attempts and messages refusing release of funds

For digital evidence, make screenshots clear enough to show the date, time, account name, URL, and conversation context. If possible, save the original files and not just cropped images.

3. Report the transfer to your bank or e-wallet first

If you sent money recently, this is urgent. Call the provider’s fraud hotline or use the in-app help function. Then follow up in writing.

Give the provider:

Your full name and account number or wallet number
Date and time of transfer
Amount sent
Recipient name, account number, wallet number, or QR details
Transaction reference number
Why you believe it is a scam
Copies of screenshots and receipts

Ask for a case number. Keep that number because the SEC, PNP, NBI, CICC, BSP, or prosecutor may ask for proof that you reported the transaction.

4. Check the SEC status of the entity

Search the entity through official SEC tools and take screenshots of what you find. But remember: company registration is not the same as authority to solicit investments.

Look for:

Whether the company exists in SEC records
Whether its registered name matches the name used online
Whether it has a secondary license or authority relevant to the activity
Whether the SEC has issued advisories about it
Whether the “certificate” shown to you is altered, outdated, or unrelated

If the scheme involves investment-taking from the public, your complaint should focus not only on whether the company exists, but also on how it solicited money, what returns it promised, who promoted it, and what payment channels it used.

5. File a report with the SEC

When reporting to the SEC, include a short but complete narrative:

When and how you discovered the investment offer
Who invited or recruited you
What returns were promised
How much you paid and to whom
What proof was shown to make it appear legitimate
Whether you were encouraged to recruit others
Whether withdrawals were blocked or delayed
Links to the website, page, app, or group
Names and contact details of other victims, if available

Attach payment proof, screenshots, chats, and promotional materials. If the scheme is still active, mention that it continues to solicit the public so the SEC can assess whether urgent action may be appropriate.

6. File a cybercrime or criminal complaint

For criminal investigation, go to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, CICC, or the appropriate local police cybercrime desk if available.

Bring:

Valid government ID
Printed and digital copies of evidence
Proof of payment
Names or usernames of suspects
Bank or e-wallet details
Timeline of events
Names and contact details of witnesses or other victims

You may be asked to execute a sworn statement or complaint-affidavit. A complaint-affidavit is a written statement under oath explaining what happened, who was involved, what law may have been violated, and what evidence supports the complaint.

7. Prepare for prosecutor-level filing if needed

A criminal case does not automatically begin just because you posted about the scam or submitted a form online. For prosecution, investigators or complainants usually need affidavits and evidence sufficient to show probable cause.

For estafa or cybercrime-related fraud, prosecutors typically look for:

A clear false representation or deceit
Proof that the victim relied on that deceit
Proof that money or property was delivered
Proof of damage or loss
Identification of the responsible persons, if possible
Connection between the online accounts, payment accounts, and suspects

If there are many victims, it helps to organize the evidence. A master timeline, spreadsheet of payments, list of victim-affiants, and screenshots of common promotional materials can make the complaint easier to understand.

Evidence Checklist for Reporting an Online Investment Scam

Evidence	Why it matters	Practical tip
Proof of payment	Shows actual loss and where the money went	Save receipts, reference numbers, account names, wallet numbers, and timestamps
Chat history	Shows promises, instructions, admissions, and identities	Export full conversations when possible; avoid cropped screenshots only
Social media posts and ads	Shows public solicitation	Capture the page name, URL, date, comments, and admin details
Investment packages or profit charts	Shows promised returns and scheme structure	Save PDFs, videos, screenshots, and presentation decks
SEC certificates or business permits shown by scammers	Helps prove misrepresentation	Do not assume they are real; submit them for verification
Withdrawal refusal messages	Shows the point where the scheme failed or demanded more money	Preserve demands for “tax,” “clearance,” or “unlocking fees”
IDs, names, and bank details of recruiters	Helps identify respondents	Save profile links and not just display names
List of other victims	Supports pattern, scale, and possible syndicate	Get consent before sharing personal data publicly
Device and account security records	Useful if there was hacking or unauthorized access	Keep login alerts, OTP messages, and device history

Practical Timelines, Fees, and Common Bottlenecks

Reporting can be fast; investigation and recovery are usually not.

Step	Typical practical timing	Notes
Bank or e-wallet fraud report	Same day, ideally immediately	The sooner you report, the better the chance of tracing or holding funds
SEC online complaint or ticket	Can be submitted online	SEC review depends on completeness, volume of complaints, and whether the scheme is still active
NBI or PNP complaint intake	Often same day for initial intake if documents are ready	Investigation, identification of suspects, subpoenas, and case build-up may take weeks or months
BSP escalation	After the financial institution fails to resolve the complaint	BSP guidance says complaints should include the institution’s response and supporting documents (Bureau of the Treasury)
Prosecutor complaint	Depends on evidence and location	Incomplete affidavits, unclear respondent identity, or missing transaction records can delay filing

Common bottlenecks include:

The money was immediately transferred to other accounts
The recipient account is a mule account under another person’s name
The scammer used fake IDs or stolen identities
The platform, website, or group has been deleted
Victims only saved partial screenshots
The scammer is outside the Philippines
The victim sent crypto to a wallet that is difficult to identify
The complainant cannot clearly identify the recruiter or account holder
Other victims are afraid or unwilling to sign affidavits

This is why early evidence preservation is critical. Under the cybercrime rules, electronic data preservation and disclosure procedures exist, but law enforcement generally needs proper legal process and sufficient details to identify what data must be preserved. (Supreme Court E-Library)

Special Situations

The company is SEC-registered. Is it still a scam?

Yes, it can still be a scam or unauthorized investment activity. SEC registration as a corporation only means the entity was registered as a juridical person. It does not automatically authorize the company to sell securities, investment contracts, pooled investments, or profit-sharing schemes to the public.

If the “investment” depends on money from participants and promised returns from the efforts of the company, trader, bot, or management team, the scheme may require proper securities registration or authority.

The investment involves crypto, forex, or trading bots

Crypto and forex labels do not automatically make a scheme legal. Look at the real substance:

Are returns guaranteed?
Are profits supposedly generated for you by someone else?
Are you required to recruit?
Are withdrawals blocked unless you pay more?
Is money sent to personal accounts?
Are there fake dashboards showing profits that cannot be withdrawn?

Even if the product is digital, the legal issues may still involve estafa, cybercrime, investment fraud, unauthorized investment solicitation, or financial account scamming.

I am an OFW or foreigner abroad. Can I report from outside the Philippines?

Yes. Many reports can begin online through the SEC, your bank or e-wallet, BSP channels, CICC, or email-based law enforcement contact points. However, if a sworn affidavit, special power of attorney, or notarized document is required for filing or representation in the Philippines, documents signed abroad may need proper consular notarization or apostille/legalization depending on where they are executed.

Philippine embassies and consulates commonly notarize affidavits and special powers of attorney for use in the Philippines, usually requiring personal appearance. Documents executed in certain foreign countries may also need an apostille or consular process before being used in the Philippines. (Philippine Embassy) (Philippine Embassy Canberra)

What if a friend or relative recruited me?

Preserve the evidence objectively. A recruiter may be another victim, but may also be liable if they knowingly made false claims, continued recruiting after red flags appeared, or received commissions for bringing in investors.

Do not rely only on verbal promises. Save messages showing:

Who invited you
What they promised
Whether they claimed the investment was guaranteed
Whether they showed fake profits or fake proof of legitimacy
Whether they told you to recruit others
Whether they received commissions or bonuses

Should I post the scammer’s name online?

Be careful. Public warnings can help others, but false or excessive accusations may expose you to defamation, privacy, or cyber-libel issues. A safer approach is to report to authorities, preserve evidence, and share factual warnings without inventing facts or publishing private personal data unnecessarily.

For example, it is safer to say: “I reported this investment offer to the proper authorities because I was unable to withdraw funds and was asked to pay additional fees,” rather than making unsupported claims about someone’s criminal guilt before any official finding.

Frequently Asked Questions

Can I report a suspected online investment scam before I lose money?

Yes. You do not have to wait until you lose money. If someone is publicly offering suspicious investments, promising guaranteed high returns, using fake SEC documents, or pressuring people to deposit funds, you can report the activity to the SEC and relevant cybercrime authorities.

Early reporting is especially useful when the scheme is still actively recruiting.

Should I report to the SEC or the police first?

If money was already sent, report to your bank or e-wallet first because timing matters. Then report to both the SEC and cybercrime authorities if the facts support it.

Use the SEC for unauthorized investment solicitation and securities-related concerns. Use the PNP, NBI, or CICC for criminal investigation, online fraud, identity misuse, fake websites, hacking, phishing, or recovery-related investigation.

What if the investment company shows an SEC certificate?

Do not rely on the certificate alone. Check whether the entity has authority to solicit investments, not merely whether it is registered as a corporation.

A Certificate of Incorporation does not automatically mean the company can accept public investments, sell investment contracts, operate a trading pool, or promise returns to the public.

Can my bank or e-wallet freeze the scammer’s account?

Possibly, but it depends on timing, evidence, internal fraud procedures, and legal requirements. Report immediately and ask for a temporary hold, fraud investigation, and coordination with the receiving institution.

Under RA 12010, disputed financial transactions and temporary holding mechanisms are recognized in covered situations, but recovery is not automatic and scammers often move funds quickly. (Lawphil)

Will filing a complaint with the SEC get my money back?

Not necessarily. The SEC can investigate investment-related violations, issue advisories, and take regulatory action when warranted. Money recovery may require coordination with financial institutions, criminal proceedings, civil action, restitution orders, settlement, or asset recovery measures.

Still, SEC reporting is important because it helps stop ongoing public solicitation and supports a broader government record against the scheme.

What if I paid through crypto?

Report it anyway. Save the wallet address, transaction hash, exchange account details, screenshots, chat instructions, and platform links.

Crypto transfers are often difficult to reverse, but the evidence may still help investigators connect the scam to local recruiters, bank accounts, exchange accounts, websites, or social media profiles.

Do I need a notarized affidavit to report?

For initial online reports, not always. But for a formal criminal complaint, prosecutor filing, or court-related process, you should expect to execute a sworn statement or complaint-affidavit.

If you are abroad, ask the receiving office what form of notarization, consular notarization, or apostille/legalization they will accept.

Can a group of victims file one complaint?

Yes, victims can coordinate, but each victim should ideally prepare their own affidavit and proof of payment. One person’s evidence may not prove another person’s loss.

For large scams, it helps to create a shared evidence folder, victim list, transaction spreadsheet, timeline, and common set of screenshots showing the scheme’s public solicitation.

What if the scammer is outside the Philippines?

You can still report if Filipino victims, Philippine bank or e-wallet accounts, Philippine-based recruiters, Philippine companies, or Philippine online solicitation are involved.

Cross-border cases are harder and may take longer, but Philippine cybercrime rules recognize international cooperation mechanisms, and local evidence may still support investigation against recruiters, mule account holders, or local participants. (Supreme Court E-Library)

Key Takeaways

Stop sending money immediately, even if the scammer says you must pay more to withdraw your “profits.”
Save full evidence: chats, links, screenshots, payment records, account details, and promised returns.
Report to your bank or e-wallet first if money was recently transferred.
Report unregistered investment solicitation to the SEC through official channels.
Report online fraud to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC.
Escalate unresolved bank or e-wallet complaints to the BSP only after first raising the issue with the financial institution.
SEC company registration does not automatically mean authority to solicit investments.
For formal criminal action, be ready to execute a sworn complaint-affidavit and submit organized evidence.
If you are abroad, you may still report, but affidavits or powers of attorney may need consular notarization or apostille/legalization.
The faster you report and preserve evidence, the better your chances of helping authorities trace accounts, stop further recruitment, and build a stronger case.