If someone convinced you through Telegram, Viber, Messenger, WhatsApp, Discord, or another messaging app to “invest” in a guaranteed-profit scheme, act quickly. In the Philippines, the right report depends on what happened: the SEC handles illegal investment solicitation, the PNP Anti-Cybercrime Group and NBI Cybercrime Division investigate online fraud, and your bank or e-wallet provider is the first place to request an urgent hold, freeze, or transaction dispute. This guide explains where to report, what evidence to preserve, what laws may apply, and how to avoid the common mistakes that weaken scam complaints.

What Counts as an Investment Scam on a Messaging App?

An investment scam is not limited to a fake stockbroker or a fake trading website. In Philippine practice, many scams start with a private message, group chat, livestream, referral link, or “mentor” who promises unusually high returns.

Common examples include:

“Double your money in 7 days” offers
Crypto, forex, gold, casino, AI trading, or “arbitrage” schemes with guaranteed profits
“Task investment” or “recharge” schemes where you must deposit more to withdraw
Fake investment apps showing fabricated earnings
“VIP signal groups” where members are pressured to send money to personal bank or e-wallet accounts
Romance-investment scams, also called “pig butchering,” where trust is built before the victim is pushed into a fake platform
Group chats using fake testimonials, screenshots of payouts, and fake SEC certificates
Recruit-and-earn arrangements where returns depend mainly on new members’ deposits

A legitimate business registration is not the same as authority to solicit investments. A corporation may be registered with the SEC as a legal entity, but it still needs the proper registration, license, permit, or exemption to offer securities or investment contracts to the public. Under the Securities Regulation Code, securities cannot generally be sold or offered for sale or distribution in the Philippines without a registration statement filed with and approved by the SEC. (Lawphil)

The Main Philippine Laws That May Apply

Securities Regulation Code: RA 8799

Republic Act No. 8799, the Securities Regulation Code, is the core law for illegal investment solicitation. It covers securities such as shares, bonds, and investment contracts. An investment contract usually exists when a person puts in money in a common enterprise and expects profits mainly from the efforts of others.

The Supreme Court has applied this concept in Philippine securities cases. In Power Homes Unlimited Corporation v. SEC, the Court discussed the Howey test for determining whether a scheme is an investment contract. In SEC v. Oudine Santos, the Court held that a person who induced investors to place money in unregistered investment products could be liable under the Securities Regulation Code even if that person was presented as an “investment consultant” rather than the main owner of the company. (Lawphil)

For victims, this matters because the person chatting with you may claim, “Agent lang ako,” “Admin lang ako,” or “I only shared the opportunity.” That does not automatically remove liability if the person actually solicited, promoted, or procured the sale of an unregistered investment.

Financial Products and Services Consumer Protection Act: RA 11765

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, expressly recognizes investment fraud as deceptive solicitation of investments from the public. It covers financial products and services such as securities, investments, payments, remittances, deposits, insurance, pre-need products, and similar services. (Supreme Court E-Library)

This law is useful where the scam involves misleading investment marketing, fake financial products, or financial service providers. It also strengthens the role of regulators such as the SEC, BSP, Insurance Commission, and Cooperative Development Authority.

Revised Penal Code: Estafa Under Article 315

Many investment scams are also reported as estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa by deceit generally involves:

A false pretense or fraudulent representation;
The false representation was made before or at the same time as the fraud;
The victim relied on it and parted with money or property; and
The victim suffered damage.

The Supreme Court has repeatedly applied these elements in investment-scam situations. In People v. Mateo, the Court affirmed that fraudulent promises of investment returns can amount to syndicated estafa where the scheme is carried out by a group and involves funds solicited from the public. (Supreme Court E-Library)

Cybercrime Prevention Act: RA 10175

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, matters because the scam happened through electronic communications, websites, apps, or online accounts. It penalizes computer-related fraud and may increase penalties when crimes under the Revised Penal Code are committed through information and communications technology. (Lawphil)

In Disini v. Secretary of Justice, the Supreme Court reviewed the constitutionality of RA 10175 and upheld major parts of the Cybercrime Prevention Act while striking down specific provisions. (Lawphil)

Anti-Financial Account Scamming Act: RA 12010

Republic Act No. 12010, the Anti-Financial Account Scamming Act, is especially relevant if the scam involved bank accounts, e-wallets, money mules, fake account owners, or social engineering. The law covers electronic communications, including SMS, social media platform messages, email, and technology-powered instant messaging. It defines financial accounts to include deposit accounts, investment accounts, credit card accounts, e-wallets, and other accounts used for financial products or services. (Lawphil)

RA 12010 penalizes money muling, such as selling, lending, renting, or allowing the use of a financial account to receive or move criminal proceeds. It also covers social engineering schemes involving deception to obtain sensitive account information. (Lawphil)

Importantly, institutions supervised by the BSP may have duties to protect access to financial accounts through risk management systems, multi-factor authentication, fraud monitoring, and related controls. The law also recognizes temporary holding of disputed funds under BSP rules and states that conviction is not always a prerequisite to restitution where the institution failed to exercise required diligence. (Lawphil)

First 24 Hours: What to Do Before Filing the Main Complaint

The first day is often the most important. Scammers move money quickly through mule accounts, crypto wallets, and layered transfers.

Stop sending money immediately. Do not pay “tax,” “unlocking fee,” “withdrawal fee,” “verification fee,” or “anti-money laundering clearance fee.” These are common second-stage demands.
Take screenshots before blocking anyone. Capture the profile, username, phone number, group name, invite link, transaction instructions, promises of profit, payment account details, and threats or pressure tactics.
Export the chat if the app allows it. A full exported conversation is better than selected screenshots because it shows sequence and context.
Report the transaction to your bank or e-wallet provider. Ask for an urgent fraud report, transaction trace, account hold, and written reference number. If the receiving account is in the same institution, say so clearly.
Change passwords and enable multi-factor authentication. Do this for your email, banking apps, e-wallets, Facebook, Telegram, Viber, and any account connected to the scam.
Do not delete the app or reset the phone yet. Investigators may need the device, metadata, or original messages.
Write a simple timeline while your memory is fresh. Include dates, amounts, account numbers, usernames, and what you were told before each transfer.

Where to Report an Investment Scam in the Philippines

Different offices handle different parts of the problem. In many serious cases, you should report to more than one office because each has a different role.

Office or Platform	Best For	What It Can Usually Do
Bank or e-wallet provider	Recent transfers, unauthorized transactions, mule accounts	Receive fraud report, trace transaction, request hold or reversal where possible
SEC	Illegal investment solicitation, Ponzi schemes, unregistered investment contracts	Investigate investment scheme, issue advisories or sanctions, refer for prosecution
PNP Anti-Cybercrime Group	Online scam, fake accounts, messaging app fraud	Cybercrime investigation, digital evidence handling, coordination for warrants
NBI Cybercrime Division	Serious online fraud, organized scam groups, cross-border elements	Investigation, affidavits, forensic assistance, case build-up
BSP	Unresolved bank, e-wallet, or BSP-supervised financial institution complaint	Escalate unresolved financial consumer complaints
National Privacy Commission	Misuse of ID, personal data, identity theft, leaked documents	Data privacy complaint, orders against misuse of personal information
City or Provincial Prosecutor / DOJ	Criminal complaint for estafa, cybercrime, securities violations	Preliminary investigation and filing of criminal case in court

Step-by-Step Guide to Filing the Report

Step 1: Report to Your Bank or E-Wallet Provider First

If you transferred money through a bank, GCash, Maya, Coins.ph, online banking, card, or remittance channel, report it through the institution’s official fraud channel immediately.

Provide:

Your full name and registered mobile number or account number
Date and time of transfer
Amount
Reference number
Receiving account name and number
Screenshots of payment instructions
Scam narrative in chronological order
Police blotter or cybercrime complaint reference, if already available

Ask for:

A fraud case reference number
Whether funds can be held or recalled
Whether the receiving account can be restricted
A written response or incident acknowledgment
Instructions for filing supporting documents

Do not rely only on a hotline call. Follow up by email, in-app ticket, or written complaint so there is a record.

Step 2: File a Report With the SEC for Illegal Investment Solicitation

If the scheme involved promised returns, pooled funds, profit-sharing, investment packages, trading bots, crypto staking, or similar solicitations, file with the Securities and Exchange Commission.

The SEC’s iMessage system is its official web-based platform for inquiries, issues, and complaints. It allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)

Include these details:

Name of the entity, app, website, or group chat
Names and usernames of recruiters, agents, admins, and endorsers
SEC registration number or certificate shown by the scammer, if any
Copies of investment contracts, receipts, “certificates,” dashboards, and payout screenshots
Screenshots of promised profits, guaranteed returns, referral commissions, and withdrawal problems
Proof of payments and receiving accounts
Your timeline and total loss

A strong SEC report explains why the offer looks like an investment contract or investment fraud, not merely that you lost money. Point out if the return came from “company trading,” “AI bots,” “mining,” “casino operations,” “forex,” or “new member deposits” rather than from your own active business efforts.

Step 3: File With PNP Anti-Cybercrime Group or NBI Cybercrime Division

For the cybercrime side, report to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. The PNP has referred cybercrime complaints to the PNP ACG e-Complaint channel and ACG email in official FOI responses. (www.foi.gov.ph)

The NBI Cybercrime Division’s Citizen’s Charter states that the general public may request investigative assistance for computer crimes. Its process includes proceeding to the Cybercrime Division, filing a complaint sheet, undergoing preliminary interview and initial investigation, executing sworn statements or submitting affidavits, and submitting supporting documents. The listed initial processing time for the early intake steps is around one hour and ten minutes, although the full investigation can take much longer depending on complexity. (National Bureau of Investigation)

Bring or prepare:

Valid government ID
Printed screenshots and digital copies
Phone used in the conversation, if available
Proof of fund transfers
Names, usernames, links, mobile numbers, wallet addresses, and bank details
Draft complaint-affidavit or written timeline
List of other victims, if known
Any threats, extortion, or blackmail messages

The police or NBI report is important because banks, e-wallet providers, prosecutors, and regulators often ask for a formal law enforcement reference before escalating fraud holds or case build-up.

Step 4: Escalate to BSP if the Bank or E-Wallet Response Is Inadequate

The BSP is not a substitute for filing a criminal complaint against the scammer. Its role is usually to handle complaints against BSP-supervised financial institutions, such as banks and many e-money issuers, when their handling of your complaint is unresolved or inadequate.

The BSP says consumers may file through BSP Online Buddy (BOB) after raising the concern with the financial institution first. As an alternative, consumers may submit a Complaints, Inquiries and Requests form by email to the BSP consumer assistance address. BSP also lists phone, walk-in, and mail channels. (Bangko Sentral ng Pilipinas)

Your BSP complaint should include:

Your complaint to the bank or e-wallet provider
The provider’s reply, if any
Reference numbers
Proof of transaction
Explanation of what the provider failed to do
The specific remedy you want, such as investigation, written explanation, reversal, or assistance in tracing funds

For complaints submitted by email or postal mail, BSP says it will evaluate and, when necessary, respond or refer the concern to the supervised institution within seven banking days from receipt. (Bangko Sentral ng Pilipinas)

Step 5: File a Data Privacy Complaint if Your ID or Personal Data Was Misused

If the scammer used your ID, selfie, SIM, bank details, address, passport, ACR I-Card, employment records, or private photos, consider a complaint with the National Privacy Commission.

The Data Privacy Act of 2012, RA 10173, protects individual personal information in government and private information systems. (National Privacy Commission) The NPC states that a person whose personal information has been misused, maliciously disclosed, improperly disposed of, or otherwise mishandled has the right to file a complaint. (National Privacy Commission)

NPC complaints generally require a filled-out complaint form or complaint-affidavit, supporting evidence, and notarization. The NPC’s filing instructions mention submission in person, by courier, or by email to its complaints channel. (National Privacy Commission)

Evidence Checklist for Messaging App Investment Scams

Good evidence is organized, complete, and easy to verify. Do not submit 200 random screenshots without a timeline.

Evidence	Why It Matters
Full chat history	Shows promises, deceit, pressure, and payment instructions
Profile screenshots	Identifies usernames, phone numbers, photos, aliases, and group admins
Group chat screenshots	Shows public solicitation and other victims
Payment receipts	Proves amount, date, reference number, and receiving account
Bank or e-wallet statements	Confirms actual loss
Website or app screenshots	Shows fake dashboard, earnings, locked withdrawals, or required fees
SEC certificate shown by scammer	Helps SEC check if it was fake, altered, or misused
Voice notes or call logs	Supports identity and solicitation
Timeline	Helps investigators understand the sequence
Witness names	Useful if others were invited through the same group

For digital files, keep the original file names where possible. Save screenshots in folders by date. Back them up to cloud storage or an external drive. If you print screenshots, also keep the digital originals.

How to Write a Strong Complaint-Affidavit

A complaint-affidavit is a sworn written statement. It should be factual, chronological, and specific.

A practical structure is:

Personal details. State your name, age, nationality, address, phone number, and email.
How contact began. Explain who messaged you, on what app, and when.
What was promised. Quote or describe the promised returns, withdrawal terms, risk claims, guarantees, and deadlines.
Why you believed them. Mention fake testimonials, SEC documents, celebrity images, group chat payouts, referral from a friend, or screenshots of earnings.
Payments made. List each transfer by date, amount, channel, reference number, and receiving account.
What happened after payment. Explain failed withdrawals, demands for more money, blocking, deletion of group chats, threats, or excuses.
Damage suffered. State total loss and any additional harm, such as identity misuse.
Evidence attached. Number your attachments clearly.
Relief requested. Ask for investigation, filing of appropriate charges, preservation of digital evidence, tracing of accounts, and assistance in recovering funds where legally possible.

Avoid exaggeration. Do not guess the scammer’s real identity unless you can support it. Use “the person using the Telegram username ___” if the true identity is unknown.

Common Mistakes That Hurt Scam Reports

Waiting Too Long Before Reporting

Money can move through several accounts within hours. Even if recovery is uncertain, early reporting improves the chance of account holds, transaction tracing, and identifying mule accounts.

Deleting Chats After Blocking the Scammer

Blocking is fine, but deleting chats destroys context. Take screenshots, export chats, and back up files first.

Sending More Money to “Unlock” Withdrawals

A common tactic is to show fake profits and then demand more payment for taxes, AMLC clearance, account verification, or “VIP withdrawal.” Legitimate Philippine regulators do not require private chat payments to release investment earnings.

Reporting Only to the Messaging App

Use the app’s report button, but understand its limits. A platform report may suspend an account, but it is not the same as an SEC complaint, cybercrime report, bank fraud report, or prosecutor’s complaint.

Focusing Only on the Recruiter’s Real Name

In cybercrime investigations, usernames, phone numbers, device data, IP logs, bank accounts, e-wallet accounts, and transaction trails may be more useful than a displayed name.

Accepting a Private Settlement Without Documentation

Some scammers return a small amount to delay reports or make you recruit others. If any repayment occurs, document it. Do not sign a waiver that says you were never deceived unless the matter has truly been resolved and you understand the consequences.

Special Situations for OFWs and Foreigners

If You Are a Filipino Abroad

You can still report a Philippine-related scam, especially if the scammer, victim, bank account, e-wallet, company, or solicitation is connected to the Philippines.

Practical steps:

Prepare a detailed affidavit abroad.
Check whether the Philippine Embassy or Consulate near you offers consular notarization for affidavits or special powers of attorney. Philippine embassies commonly notarize private documents such as affidavits and SPAs for use in the Philippines. (Philippine Embassy)
Authorize a trusted representative in the Philippines through a Special Power of Attorney if in-person follow-up is needed.
Keep your original digital evidence and provide copies to your representative.

If You Are a Foreigner

Foreigners can file complaints in the Philippines if the offense has a Philippine connection. Useful documents include your passport bio page, Philippine address or hotel address if applicable, ACR I-Card if you have one, proof of remittance, and screenshots showing that the solicitation targeted you from the Philippines or used Philippine accounts.

If your affidavit is notarized abroad for use in the Philippines, ask the receiving office whether it requires consular notarization, apostille, or another form of authentication. DFA apostille rules are technical, and requirements can depend on where the document was executed and where it will be used. (Apostille Government Services)

Will Reporting Get Your Money Back?

Reporting improves your chances, but it does not guarantee recovery. Recovery depends on:

Whether funds are still in the receiving account;
How fast the bank or e-wallet receives the report;
Whether the receiving account is real, fake, borrowed, or sold;
Whether law enforcement can identify the account owner and related suspects;
Whether prosecutors file charges;
Whether the court orders restitution or civil liability;
Whether assets are found and preserved.

A criminal case can result in civil liability, including restitution, depending on the offense and evidence. Under RA 12010, conviction for violations carries civil liability, which may include restitution for damage caused or unwarranted benefits derived from the violation. (Lawphil)

For many victims, the practical goal is not only refund. It is also to stop further loss, preserve evidence, help regulators warn the public, prevent mule accounts from being reused, and build a record strong enough for prosecution or financial dispute resolution.

Frequently Asked Questions

Can I report an investment scam if I only know the scammer’s username?

Yes. A username, phone number, profile link, group invite link, wallet address, or receiving bank account can still be useful. State clearly that the person’s real identity is unknown and identify them by the account or username used.

Should I report first to the SEC or to the police?

If the scheme involves investment solicitation, report to the SEC. If money was already taken through online deception, also report to PNP ACG or NBI Cybercrime. If the transfer is recent, contact your bank or e-wallet provider immediately before anything else.

Is an SEC registration certificate proof that the investment is legitimate?

No. SEC company registration only shows that an entity exists as a registered juridical entity. It does not automatically authorize public investment solicitation, securities selling, crypto investment operations, or guaranteed-return schemes.

Can I file a complaint if the scam happened in a Telegram or Viber group?

Yes. Export or screenshot the group name, administrators, member list if visible, pinned messages, payment instructions, testimonials, and promises of returns. Group solicitation can be important evidence that the offer was made to the public.

Do I need a notarized affidavit?

For formal criminal complaints and many agency proceedings, a sworn complaint-affidavit is usually needed. Initial online reports may be accepted without notarization, but you may later be asked to appear, swear to your statement, or submit a notarized affidavit.

Can the barangay handle an online investment scam?

Usually, no. Barangay conciliation is generally for certain disputes between individuals in the same city or municipality and for less serious matters. Online investment scams often involve cybercrime, estafa, securities violations, unknown suspects, multiple victims, or amounts beyond barangay-level disputes.

What if the recruiter is my friend or relative?

You can still report. Many scams spread through trusted people who may be victims themselves or active recruiters. In your affidavit, separate facts you personally know from assumptions. State exactly what that person told you, what screenshots they sent, and whether they received commissions or referral bonuses.

What if the scammer says I violated AMLA or need to pay tax before withdrawal?

That is a common scam script. Legitimate taxes, AMLC matters, and compliance checks are not paid to random personal accounts through chat. Preserve the message and include it in your report because it shows continuing deception.

Can I recover money sent to a crypto wallet?

It is harder, but still report it. Provide the wallet address, transaction hash, exchange name, screenshots, and chat instructions. If the crypto passed through a regulated exchange or local payment channel, investigators may still find useful leads.

How long does a scam complaint take?

Initial intake may happen within the same day, but investigation, subpoenas, bank coordination, prosecutor review, and court proceedings can take months or longer. The NBI Citizen’s Charter lists short processing times for initial complaint intake steps, but that is different from the full investigation and prosecution timeline. (National Bureau of Investigation)

Key Takeaways

Report fast: first to your bank or e-wallet, then to the SEC for investment solicitation and PNP ACG or NBI Cybercrime for online fraud.
Preserve the full chat, not just selected screenshots.
An SEC company registration is not the same as authority to solicit investments.
RA 8799, RA 11765, the Revised Penal Code, RA 10175, RA 12010, and RA 10173 may all be relevant depending on the facts.
Do not pay extra “withdrawal,” “tax,” “AML,” or “verification” fees.
A clear timeline, transaction proof, and organized attachments make your complaint stronger.
OFWs and foreigners can report Philippine-connected scams, but affidavits or SPAs signed abroad may need consular notarization or proper authentication.