An online investment scam can feel confusing and embarrassing, especially when the scammer used professional-looking documents, fake trading dashboards, “SEC registration” screenshots, or a friendly recruiter you personally know. The most important thing is to act quickly: preserve evidence, alert the bank or e-wallet, report the scheme to the proper Philippine agencies, and prepare a clear complaint that investigators can actually use. This guide explains where to report an online investment scam in the Philippines, what laws may apply, what documents to prepare, and what realistic steps may help you recover funds or support a criminal case.

What Counts as an Online Investment Scam in the Philippines?

An online investment scam usually involves someone asking you to place money into a supposed investment, trading platform, crypto opportunity, lending pool, tasking scheme, franchise, “AI trading bot,” forex program, or similar offer, with promises such as:

guaranteed daily, weekly, or monthly returns;
“risk-free” profits;
high returns with little or no explanation of the business;
referral commissions for recruiting others;
fake dashboards showing profits you cannot withdraw;
requests for “tax,” “unlocking fee,” “verification fee,” or “anti-money laundering fee” before withdrawal;
payments sent to personal bank accounts, GCash/Maya wallets, crypto wallets, or nominee accounts instead of a legitimate corporate account.

In Philippine law, many of these schemes may involve an investment contract, which is treated as a security. Under Republic Act No. 8799, or the Securities Regulation Code, securities generally cannot be sold or offered to the public in the Philippines unless properly registered with the Securities and Exchange Commission (SEC). The law also regulates persons acting as brokers, dealers, salesmen, or agents.

The Supreme Court has applied the “investment contract” concept in cases such as Power Homes Unlimited Corp. v. SEC, G.R. No. 164182, February 26, 2008, where a scheme may be considered an investment contract when people invest money in a common enterprise and expect profits mainly from the efforts of others. In SEC v. Prosperity.com, Inc., G.R. No. 164197, January 25, 2012, the Court again discussed the test for determining whether an arrangement is an investment contract. In SEC v. Santos, G.R. No. 195542, March 19, 2014, the Court dealt with liability connected with solicitation of investments and the role of persons who induce others to invest.

A simple rule helps: SEC registration as a corporation is not the same as authority to solicit investments from the public. A company may be registered as a corporation but still have no authority to sell securities, investment contracts, or similar products.

Where to Report an Online Investment Scam in the Philippines

Different agencies handle different parts of the problem. For best results, do not rely on only one channel if money has already been transferred.

Your concern	Where to report	Purpose
Unregistered investment solicitation, fake investment company, Ponzi-style scheme	SEC Enforcement and Investor Protection Department through the SEC iMessage portal	Regulatory action, advisories, investigation of securities violations
Online fraud, fake websites, hacked accounts, cyber-enabled scam	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Criminal investigation, digital evidence handling, possible filing for prosecution
Money sent through bank, e-wallet, payment service, or virtual asset platform	Your bank/e-wallet/crypto platform first, then BSP if unresolved	Fraud dispute, possible temporary hold, account investigation
Need urgent cyber scam triage or hotline reporting	CICC / Inter-Agency Response Center 1326	Reporting and coordination for online scams
Personal data, IDs, selfies, or account credentials were misused	National Privacy Commission	Data privacy complaint or breach-related concerns
Cross-border cybercrime, foreign suspects, international evidence	DOJ Office of Cybercrime	Central authority functions, international cooperation, cybercrime coordination

Legal Bases Commonly Involved in Online Investment Scam Cases

Securities Regulation Code: RA 8799

The Securities Regulation Code is central when the scam involves public solicitation of investments.

Key provisions include:

Section 8: securities must not be sold or offered for sale or distribution in the Philippines without an approved registration statement, unless exempt;
Section 26: prohibits fraudulent transactions in connection with the purchase or sale of securities;
Section 28: regulates brokers, dealers, salesmen, and associated persons;
Section 73: provides penalties for violations of the Code.

The SEC is especially relevant when the scheme looks like a pooled investment, investment contract, securities offering, crowdfunding-type investment, fake trading platform, or public solicitation using social media.

Revised Penal Code: Estafa Under Article 315

Many scam complaints are framed as estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa commonly involves deceit or abuse of confidence that causes damage to another person.

In an online investment scam, estafa may be present where the scammer:

falsely claimed there was a legitimate business or trading activity;
used fake documents, fake licenses, or fake dashboards;
promised returns while intending to take the money;
induced the victim to transfer funds because of those false representations.

The exact charge depends on the facts, the amount, the evidence, and the prosecutor’s evaluation.

Cybercrime Prevention Act: RA 10175

When the scam is committed through social media, messaging apps, websites, email, online banking, e-wallets, or computer systems, the Cybercrime Prevention Act of 2012 may apply.

The DOJ implementing rules recognize computer-related fraud, computer-related identity theft, and crimes under the Revised Penal Code or special laws committed through information and communications technology. Under RA 10175, certain crimes committed through ICT may carry a penalty one degree higher than the ordinary offense.

Anti-Financial Account Scamming Act: RA 12010

The Anti-Financial Account Scamming Act, RA 12010 of 2024, is important when scammers use bank accounts, e-wallets, payment accounts, or “money mule” accounts.

RA 12010 penalizes, among others:

money muling, such as selling, lending, renting, buying, or allowing the use of a financial account to receive or transfer scam proceeds;
social engineering schemes, where scammers deceive people into giving sensitive information that allows unauthorized access to financial accounts;
related attempts, aiding, abetting, and other offenses.

It also allows financial institutions, under conditions set by law and BSP rules, to temporarily hold funds subject of a disputed transaction for a period that must not exceed 30 calendar days, unless extended by a competent court. This is why early reporting to your bank, e-wallet, or payment provider matters.

Financial Products and Services Consumer Protection Act: RA 11765

The Financial Products and Services Consumer Protection Act, RA 11765 of 2022, recognizes financial consumers’ rights, including protection of consumer assets against fraud and misuse, data privacy and protection, and timely handling and redress of complaints.

This law is useful when your complaint involves a bank, e-money issuer, payment service provider, securities intermediary, insurance company, lending company, financing company, cooperative, or other regulated financial service provider.

Data Privacy Act: RA 10173

If the scammer used your IDs, selfie, address, phone number, bank details, or personal information to open accounts, impersonate you, dox you, or threaten you, the Data Privacy Act of 2012 may also be relevant. The National Privacy Commission complaint process may apply when the issue involves misuse of personal data, although the NPC is not the main agency for recovering investment losses.

Step-by-Step: How to Report an Online Investment Scam

1. Stop Sending Money Immediately

Scammers often ask for more money after the first loss. Common excuses include:

withdrawal tax;
AMLA clearance fee;
exchange fee;
wallet verification fee;
account upgrade;
lawyer’s fee;
“final processing” fee.

These are usually part of the scam. Paying more rarely unlocks anything. It often only confirms to the scammer that the victim can still be pressured.

2. Preserve Evidence Before the Scammer Deletes It

Do not rely only on screenshots. Save the evidence in a way that shows the full story.

Prepare copies of:

chat conversations from Messenger, Telegram, WhatsApp, Viber, Instagram, TikTok, SMS, or email;
profile links, usernames, phone numbers, and email addresses;
group chat names and invite links;
screenshots of the investment website, dashboard, wallet, or app;
domain name or website URL;
bank deposit slips, InstaPay/PESONet receipts, GCash/Maya transaction receipts, QR codes, account names, and account numbers;
crypto wallet addresses and transaction hashes;
videos, voice notes, Zoom links, webinars, or recorded presentations;
promised return schedules, contracts, certificates, IDs, business permits, SEC screenshots, or “licenses” sent by the scammer;
proof of failed withdrawals or demands for additional fees;
names of recruiters, uplines, agents, group admins, and people who vouched for the investment.

For screenshots, include the date, time, sender name, account handle, and URL where possible. For chats, export the conversation if the app allows it. Keep original files because investigators may later ask for metadata.

3. Report the Transaction to Your Bank, E-Wallet, or Payment Provider

This should be done as soon as possible, ideally on the same day. Use the official hotline, in-app help center, branch, or fraud reporting channel of the bank, e-wallet, or platform.

Give them:

your name and account details;
date and time of transfer;
amount;
reference number;
recipient account name and number;
screenshots of the scam;
police/NBI/SEC ticket number, if already available.

Ask for a written reference number. If money was sent to another bank or e-wallet, ask your provider to coordinate with the receiving institution. Under RA 12010, financial institutions have mechanisms for disputed transactions, but speed matters because scam proceeds are often moved quickly through multiple accounts.

If the provider does not act on your complaint or gives an unsatisfactory response, you may escalate unresolved complaints involving BSP-supervised financial institutions through the BSP Consumer Assistance Mechanism or the BSP Online Buddy process described in the BSP complaint guide. BSP escalation is not a substitute for filing a criminal complaint when fraud is involved.

4. Check Whether the Entity Is Registered and Authorized

Before filing with the SEC, verify what the scammer claimed.

Useful checks include:

the official Check with SEC portal;
the SEC eSEARCH portal for company records;
the SEC’s public advisories on investment scams.

Look for two different things:

Primary registration — whether the company exists as a corporation, partnership, or one person corporation.
Secondary license or authority — whether it is allowed to solicit investments, sell securities, act as broker/dealer, operate as investment company, lending company, financing company, crowdfunding intermediary, or other regulated financial service provider.

Many victims are misled because scammers show a certificate of incorporation. That document only proves the entity was registered as a juridical person. It does not automatically authorize public investment-taking.

5. File a Report with the SEC Through iMessage

For suspected investment scams, use the SEC iMessage portal. The SEC’s iMessage User Guide describes iMessage as the SEC’s web-based platform for public inquiries, complaints, incidents, and requests, with ticket tracking.

Choose the service under:

Enforcement and Investor Protection Department → eComplaints on Investment Scams

Your SEC complaint should include:

name of the entity or platform;
names and contact details of recruiters or agents;
website, app, social media pages, and group links;
amount invested and payment dates;
promised returns;
copies of contracts, receipts, certificates, and marketing materials;
proof that withdrawals were refused or additional fees were demanded;
list of other known victims, if available.

A clear timeline helps the SEC understand whether the matter involves unregistered securities, illegal solicitation, a Ponzi scheme, or another violation of the Securities Regulation Code.

6. File a Criminal Complaint with PNP ACG or NBI Cybercrime Division

For criminal investigation, you may report to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. These agencies handle cyber-enabled fraud, online evidence, account tracing requests, and coordination with prosecutors.

The NBI’s citizen charter for Investigative Assistance for Victims of Computer Crimes indicates that a complainant may proceed to the Cybercrime Division to file a complaint or request investigation, undergo interview, execute sworn statements, and submit supporting documents.

For PNP ACG, use official PNP ACG channels only, such as its official website or e-complaint facility. Be careful with fake “cyber police” pages that ask for payment.

A criminal complaint usually requires:

complaint-affidavit;
valid government ID;
supporting evidence;
transaction records;
witness affidavits, if any;
printed and digital copies of screenshots and files;
contact details of suspects, recruiters, and account holders;
proof of your residence or location, when relevant to venue.

A complaint-affidavit is a sworn written statement explaining what happened. It should be factual and chronological. Avoid exaggerations. State exactly what was promised, who said it, when you relied on it, how much you paid, and what happened after payment.

7. Report to CICC or Hotline 1326 for Online Scam Assistance

The Cybercrime Investigation and Coordinating Center (CICC) and the Inter-Agency Response Center hotline 1326 are used for cybercrime and online scam reporting and coordination. This channel can be useful for initial reporting, especially when the scam is ongoing, involves phishing links, fake websites, or multiple victims.

Still, for a full criminal case, victims are commonly directed to law enforcement agencies such as PNP ACG or NBI, and for investment solicitation issues, to the SEC.

8. File with the Prosecutor When the Case Is Ready

In many cases, PNP or NBI will investigate first and then refer the complaint for preliminary investigation. A victim may also file a complaint directly with the Office of the City Prosecutor or Provincial Prosecutor if the evidence and affidavits are complete.

During preliminary investigation, the prosecutor determines whether there is probable cause to charge the respondent in court. The respondent may be required to submit a counter-affidavit. If probable cause is found, an information is filed in court.

For cybercrime, securities violations, estafa, and AFASA-related offenses, the proper court is generally not the barangay. Katarungang Pambarangay is not designed for serious cyber-enabled investment fraud, especially when the offense carries penalties beyond barangay conciliation coverage, involves unknown persons, multiple locations, corporate entities, or public offenses requiring prosecution.

Documents to Prepare Before You Report

Document or evidence	Why it matters
Valid ID	Confirms complainant identity
Complaint-affidavit	Main sworn narrative for investigators and prosecutors
Payment receipts and reference numbers	Proves transfer of money
Recipient account names, numbers, wallet IDs	Helps trace funds and identify account holders
Chat screenshots and exported chats	Proves solicitation, promises, and deceit
Website/app screenshots	Shows the platform, fake dashboard, and representations
SEC registration claims or certificates	Helps compare claimed legitimacy with actual authority
Proof of failed withdrawal	Shows the scam’s turning point
List of recruiters/admins/uplines	Helps identify possible participants
Witness affidavits	Useful for group scams or referral-based schemes
Special Power of Attorney	Needed if someone will file for you

Sample Timeline of Events for a Complaint-Affidavit

A good complaint is easy to follow. Use a timeline like this:

First contact — “On 10 March 2026, I was contacted by ___ through Facebook Messenger.”
Representation — “He/she represented that ___ was a registered investment platform earning through crypto trading.”
Promise — “I was promised 8% weekly returns and withdrawal anytime.”
Reliance — “Because of these representations and the documents sent to me, I transferred money.”
Payment — “On 12 March 2026, I sent ₱50,000 via GCash/InstaPay to account name ___, account number ___, reference number ___.”
Further inducement — “I was later asked to add funds to qualify for a higher plan.”
Failed withdrawal — “On 30 March 2026, I tried to withdraw but was told to pay a tax/unlocking fee.”
Discovery — “I checked SEC advisories and found no authority to solicit investments.”
Damage — “My total loss is ₱___, excluding expenses.”
Evidence — “Copies of chats, receipts, screenshots, and account details are attached as Annexes A to ___.”

This format helps investigators connect deceit, payment, and damage.

Practical Timelines and Fees

Step	Typical timing	Usual cost
Bank/e-wallet fraud report	Same day to a few days for initial response	Usually none
SEC iMessage ticket	Ticket generated online; evaluation may take days to weeks	Usually none for basic reporting
NBI/PNP complaint intake	Same day if documents are complete; investigation may take weeks or months	Usually none for filing; copying/notarization costs may apply
Notarization of affidavit	Same day	Varies by notary and location
Prosecutor preliminary investigation	Often months, depending on docket and complexity	Filing itself is generally not like a civil filing fee, but document costs apply
Court case	May take years if contested	Litigation-related costs vary
BSP escalation	After reporting first to the financial institution	Usually none

Timelines vary heavily. Cases involving crypto, foreign platforms, fake identities, or multiple mule accounts usually take longer. Recovery is also harder if the funds were withdrawn in cash, converted to crypto, or moved through several wallets.

What If the Victim Is a Filipino Abroad or a Foreigner?

A Filipino overseas or foreign victim may still report a scam connected to the Philippines if Philippine accounts, Philippine-based recruiters, Philippine victims, Philippine companies, or Philippine computer systems are involved.

Practical points:

SEC iMessage can be accessed online.
Banks, e-wallets, and platforms usually accept reports through official online channels.
Law enforcement may initially receive information online, but a sworn complaint-affidavit may still be required.
If the affidavit is signed abroad, it may need notarization before a Philippine Embassy or Consulate, or apostille/authentication depending on the country and intended use.
Non-English documents should be translated if they will be used in Philippine proceedings.
A representative in the Philippines may need a Special Power of Attorney.
Cross-border evidence, foreign suspects, and foreign platforms may require coordination through the DOJ Office of Cybercrime, mutual legal assistance, or foreign law enforcement.

Under RA 12010, jurisdiction may exist when elements are committed in the Philippines, when Philippine computer systems or infrastructure are used, when damage is caused to a person in the Philippines, or when the financial account is maintained with an institution operating in the Philippines.

Common Mistakes That Hurt Investment Scam Complaints

Waiting Too Long Before Reporting

Funds can move in minutes. Even if a full complaint-affidavit is not ready, report the transaction immediately to the bank, e-wallet, or platform. A formal affidavit can follow.

Filing Only a Barangay Blotter

A blotter may record an incident, but it usually does not trigger the specialized cybercrime, securities, or financial account investigation needed for online investment scams.

Deleting Chats Out of Shame or Anger

Deleted chats can make the case harder. Preserve everything, even embarrassing messages. Investigators are used to these cases.

Assuming a Corporate Registration Means the Investment Is Legal

A certificate of incorporation does not authorize public investment solicitation. Always check whether the entity has the proper SEC authority for the specific activity.

Publicly Accusing People Without Evidence

Victims understandably want to warn others, but careless posts naming people as criminals may create separate legal risks, including defamation or cyberlibel issues. Keep public posts factual and preserve evidence for authorities.

Paying a “Recovery Agent”

After an investment scam, victims are often targeted again by people claiming they can recover the money for a fee. Some pretend to be lawyers, hackers, police contacts, or “crypto tracing agents.” Treat upfront recovery fees as a major red flag.

Not Including Recruiters

The person who invited you may say, “I’m also a victim.” That may be true in some cases. But if that person actively solicited investments, received commissions, handled payments, or repeated false claims, investigators need those facts.

Can You Still Recover the Money?

Recovery depends on speed, traceability, and whether funds remain in a regulated account.

Possible routes include:

temporary hold of disputed funds under RA 12010 and BSP rules;
reversal or dispute process through the financial institution, if available;
restitution or civil liability in a criminal case;
separate civil action for sum of money, damages, or recovery of property;
settlement, if the respondent is identified and willing to return funds;
forfeiture or asset proceedings in appropriate cases.

The difficult reality is that many scam accounts are mule accounts. The registered account holder may not be the mastermind. The money may be quickly withdrawn, transferred, or converted. This is why early reporting and complete transaction details are crucial.

Frequently Asked Questions

How do I report an online investment scam to the SEC Philippines?

Use the SEC iMessage portal and select Enforcement and Investor Protection Department → eComplaints on Investment Scams. Attach your narrative, proof of payments, chats, website links, names of recruiters, promised returns, and proof that withdrawals were refused or additional fees were demanded.

Should I report to SEC, NBI, or PNP?

Report to the SEC if the issue involves investment solicitation, securities, investment contracts, or an entity claiming to be a legitimate investment company. Report to PNP ACG or NBI Cybercrime Division if you want criminal investigation for online fraud, estafa, identity theft, fake websites, or cyber-enabled scam activity. In serious cases, report to both.

Is an online investment scam estafa?

It can be, depending on the facts. Estafa under Article 315 of the Revised Penal Code generally involves deceit or abuse of confidence that causes damage. If the scammer used false promises, fake documents, fake profits, or fake authority to make you transfer money, estafa may be considered by investigators or prosecutors.

Does cybercrime law apply if the scam happened on Facebook, Telegram, or WhatsApp?

Yes, it may apply. The Cybercrime Prevention Act covers certain computer-related offenses and crimes committed through information and communications technology. Online chats, fake websites, apps, emails, and e-wallet transfers can be relevant digital evidence.

Can the bank or e-wallet freeze the scammer’s account?

A financial institution may temporarily hold funds subject of a disputed transaction under RA 12010 and BSP rules when legal conditions are met. This is not automatic and does not guarantee recovery, but immediate reporting improves the chance that funds can be traced or held before they are withdrawn.

What if I sent money to a GCash, Maya, or bank account under another person’s name?

Include the account name, account number or mobile number, transaction reference, date, time, and amount in your complaint. The account holder may be a money mule, nominee, recruiter, or direct participant. Investigators need those details to trace the flow of funds.

What if the scam involved cryptocurrency?

Report it anyway. Provide wallet addresses, transaction hashes, exchange names, screenshots, and chat records. Crypto cases are harder because transfers may be irreversible and cross-border, but wallet information can still help investigators identify patterns, exchanges, and linked accounts.

Can I file a complaint if I am abroad?

Yes. You can report online to the SEC and to financial institutions. For criminal complaints, Philippine authorities may require a sworn affidavit. If signed abroad, the affidavit may need consular notarization, apostille, or other authentication depending on where it was executed and how it will be used.

What if the recruiter is my friend or relative?

State the facts calmly. Many investment scams spread through trust networks. Your friend or relative may be a victim, a negligent promoter, or an active participant. Investigators will look at what they knew, what they promised, whether they earned commissions, and whether they continued recruiting despite red flags.

Is it worth reporting if the amount is small?

Yes. Small individual losses can be part of a much larger pattern. A single complaint may help authorities connect accounts, recruiters, websites, and other victims. It also creates an official record you may need for bank disputes, insurance claims, employer reporting, or future proceedings.

Key Takeaways

Act quickly: report to your bank, e-wallet, or payment provider as soon as you discover the scam.
Preserve all evidence before chats, websites, groups, and fake dashboards disappear.
Report investment solicitation schemes to the SEC through iMessage, especially if the entity promised passive profits or guaranteed returns.
File with PNP ACG or NBI Cybercrime Division for criminal investigation of online fraud, estafa, cybercrime, identity theft, or account tracing.
SEC registration as a corporation does not mean authority to solicit investments from the public.
RA 8799, the Revised Penal Code, RA 10175, RA 12010, RA 11765, and RA 10173 may all be relevant depending on the facts.
Recovery is possible in some cases, but it depends heavily on speed, evidence, and whether the funds are still traceable.
Avoid paying “recovery agents” or additional withdrawal fees; these are common second-stage scams.