If you lost money to a fake investment platform, “crypto trader,” Telegram trading group, romance-investment scheme, or app that suddenly refuses withdrawals, the most important thing is to act quickly and preserve proof. In the Philippines, these cases may involve investment fraud, estafa, cybercrime, money muling, consumer protection violations, and possible money laundering. This guide explains where to report the scam, what evidence to prepare, what government offices can realistically do, and what recovery options may be available.

First: secure your money and evidence

Before filing anything, stop the bleeding.

Do not send more money for:

“Withdrawal tax”
“Anti-money laundering clearance”
“Account verification”
“Unlocking fee”
“Gas fee” demanded by the scammer
“Recovery fee” from someone who claims they can hack the funds back

Many victims lose a second or third round of money because the scammer says the first investment is “profitable” but cannot be withdrawn unless another fee is paid.

Do these immediately:

Call or message your bank, e-wallet, card issuer, or crypto exchange. Ask them to flag the transaction as fraud, create a ticket number, and check if a hold, recall, reversal, dispute, or account freeze is possible.
Preserve evidence before the scammer deletes accounts. Save screenshots, export chats, copy profile links, record transaction IDs, and take screen recordings of the platform or app.
Do not delete the app, chat thread, or email trail. Investigators may need metadata, timestamps, headers, wallet addresses, usernames, phone numbers, and device details.
Write a timeline while details are fresh. Include when you were contacted, what promises were made, how much you paid, where you sent the money, and when withdrawals were denied.
Report quickly. Recovery is most realistic when funds are still in a bank, e-wallet, payment account, or centralized exchange. Once money is withdrawn, passed through several mule accounts, converted to crypto, mixed, or transferred abroad, recovery becomes harder.

Is a fake investment or crypto trading scam illegal in the Philippines?

Usually, yes. But the exact legal theory depends on what happened.

A fake investment or crypto trading scam may involve several laws at the same time:

Situation	Possible legal issue
A person promises guaranteed returns from trading, crypto, forex, mining, or staking	Securities violation or investment fraud
You sent money because of false promises and lost it	Estafa or swindling
The scam was done through Facebook, Telegram, WhatsApp, fake apps, websites, or online wallets	Cybercrime
A bank account, e-wallet, or crypto account was used as a pass-through account	Money muling or financial account scamming
A financial institution failed to act on a disputed suspicious transaction	Consumer protection or AFASA issues
Scam proceeds were moved through accounts to conceal their source	Possible money laundering concern

Key Philippine legal bases

Investment contracts and securities laws

Under the Securities Regulation Code, or Republic Act No. 8799, securities include investment contracts. In simple terms, an investment contract exists when people put in money in a common scheme expecting profits mainly from the efforts of others. The Supreme Court has applied this test in Philippine cases such as Power Homes Unlimited Corporation v. SEC and SEC v. Prosperity.Com, Inc. (Supreme Court E-Library)

This matters because many scams are presented as:

“Managed crypto trading”
“AI trading bot”
“Forex copy trading”
“Mining investment”
“Staking pool”
“Guaranteed daily profit”
“Double your money in 30 days”
“VIP trading signal group”
“Community investment program”

Even if the word “crypto” is used, the arrangement may still be treated as an investment contract if people are pooled or solicited to invest money with the expectation that someone else will generate profit for them.

A common mistake is assuming that SEC registration alone makes an investment offer legal. A company may be registered as a corporation but still have no authority to sell securities, solicit investments, or operate as a broker, dealer, investment adviser, financing company, lending company, or crypto-asset service provider. Always distinguish between ordinary corporate registration and the required license or permit for the specific activity.

Financial Products and Services Consumer Protection Act

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765 of 2022, gives financial consumers rights such as fair treatment, disclosure and transparency, protection of assets against fraud and misuse, data privacy, and proper handling of complaints. It also defines investment fraud broadly, including deceptive solicitation, Ponzi schemes, boiler room operations, and offering or selling investment schemes without the required SEC license or permit. (Supreme Court E-Library)

RA 11765 is important because it gives financial regulators such as the SEC and BSP stronger enforcement powers. These may include cease and desist orders, administrative sanctions, disgorgement funds, consumer redress, and civil adjudication of certain financial consumer claims up to ₱10,000,000. (Supreme Court E-Library)

Estafa under the Revised Penal Code

Many fake investment scams may also fall under estafa, or swindling, under Article 315 of the Revised Penal Code. In plain language, estafa usually involves deceit or abuse of confidence that causes another person to part with money or property. Philippine jurisprudence commonly looks for false pretenses or fraudulent representations made before or at the same time the victim paid money, reliance by the victim, and resulting damage. (Lawphil)

Not every failed investment is automatically estafa. A genuine business failure is different from a scheme where the supposed trader, broker, or company never intended to trade, used fake dashboards, invented profits, impersonated a licensed entity, or used new victim payments to pay old victims.

Cybercrime Prevention Act

If the scam was committed through a computer system, online platform, fake website, social media account, messaging app, or electronic wallet, the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, may also apply. Online fraud schemes can involve computer-related fraud or ordinary crimes committed through information and communications technology. (Supreme Court E-Library)

This is why victims are often directed to the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, especially when the suspect is hiding behind online aliases, fake accounts, spoofed websites, or foreign-hosted platforms.

Anti-Financial Account Scamming Act

The Anti-Financial Account Scamming Act, or Republic Act No. 12010 of 2024, specifically targets financial account scamming, including money muling and social engineering schemes. It covers financial accounts such as bank accounts, investment accounts, credit card accounts, and e-wallets. It also penalizes acts such as allowing another person to use your account to receive scam proceeds, selling or renting accounts, recruiting mules, and deceiving people through electronic communications to obtain sensitive financial information. (Lawphil)

RA 12010 is especially relevant when scam proceeds pass through local bank accounts or e-wallets. Financial institutions may temporarily hold disputed funds in certain suspicious transactions, and they can be liable for restitution in specific cases where they fail to exercise the required diligence or fail to implement adequate risk controls. (Lawphil)

Where to report a fake investment or crypto trading scam in the Philippines

There is no single office that handles every aspect of a scam. In practice, you may need to report to several offices because each one has a different role.

Office or institution	When to report there	What they can usually do
Your bank, e-wallet, card issuer, or crypto exchange	Immediately after discovering the scam	Flag the transaction, investigate, attempt a hold or recall, freeze or restrict accounts where legally allowed
SEC	If the scam involves investment solicitation, trading promises, securities, crypto investment schemes, or unregistered entities	Investigate investment fraud, issue advisories or cease and desist orders, impose sanctions, refer cases
NBI Cybercrime Division	If the scam happened online or suspects need tracing	Receive complaint, interview complainant, gather evidence, investigate cybercrime aspects
PNP Anti-Cybercrime Group	If urgent police cybercrime assistance is needed	Receive cybercrime complaints and conduct investigation
BSP	If a BSP-supervised bank, e-wallet, remittance company, or payment provider mishandled your complaint	Escalate unresolved consumer complaints through BSP consumer assistance channels
City or Provincial Prosecutor / DOJ	If you want a criminal case for estafa, cybercrime, or related offenses filed against identifiable suspects	Conduct preliminary investigation and determine probable cause
Civil courts or small claims courts	If recovery from an identifiable person or entity is the goal	Order payment of money if you prove your claim

The SEC’s iMessage portal accepts complaints and reports, and the SEC also maintains online services including “Check with SEC” for verification purposes. (Securities and Exchange Commission) The BSP allows financial consumers to escalate unresolved complaints through BSP Online Buddy, email, mail, phone, or walk-in channels, and requires supporting documents such as a summary of the concern, requested resolution, prior complaint to the financial institution, and relevant proof. (Bureau of Small and Medium Enterprises)

For cybercrime reporting, the NBI Citizens Charter describes the process for filing a complaint with the NBI Cybercrime Division: the complainant files a complaint or request for investigation, undergoes an interview or initial investigation, and submits sworn statements, affidavits, devices, and supporting documents. The listed government service fee is none, although investigation after intake can take much longer than the initial processing time. (National Bureau of Investigation) The DOJ Office of Cybercrime also directs cybercrime complainants to the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. (Cybercrime Center)

Step-by-step process to report and seek recovery

1. Report to your financial institution immediately

Start with the channel that handled the money:

Bank
E-wallet
Remittance center
Credit card issuer
Crypto exchange
Payment app
Foreign exchange or trading platform, if legitimate and reachable

Ask for:

Fraud case number or ticket number
Written acknowledgment
Transaction tracing
Account hold or freeze request
Chargeback or card dispute, if paid by card
Recall or reversal request, if possible
Confirmation that the recipient account was flagged

Use clear wording:

“I am reporting a suspected investment/crypto trading scam. Please urgently review these transactions, preserve records, and check if the recipient account or wallet can be held, frozen, or escalated under your fraud and financial account scamming procedures.”

Do not rely only on phone calls. Follow up by email or in-app ticket so there is a written record.

2. Prepare a concise scam timeline

Your timeline should be simple and chronological:

Date	Event	Evidence
March 1	Contacted by “trader” through Facebook	Screenshot of profile and first message
March 3	Added to Telegram group showing fake profits	Telegram screenshots and group link
March 5	Sent ₱50,000 to named e-wallet account	Receipt and transaction reference
March 8	Dashboard showed ₱80,000 profit	Screen recording of fake platform
March 10	Withdrawal denied unless “tax” was paid	Chat screenshot
March 11	Sent additional ₱15,000	Receipt
March 12	Account blocked	Screenshot of blocked account

This helps banks, investigators, prosecutors, and courts understand the case quickly.

3. Save all proof in both screenshot and file form

Screenshots are helpful, but they are not enough. Save:

Full chat exports where possible
Sender phone numbers and usernames
Profile links, not just display names
Website URLs and domain names
App download links
Email headers, if the scam used email
Bank receipts
E-wallet transaction references
Crypto wallet addresses
Blockchain transaction hashes
Fake dashboard screenshots
Voice notes or call logs
Group chat member lists, if visible
IDs, contracts, certificates, or “licenses” sent by the scammer
SEC, BSP, DTI, or exchange logos misused by the scammer

For crypto scams, the wallet address and transaction hash are crucial. A screenshot saying “USDT sent” is weaker than the actual blockchain transaction ID.

4. Check whether the company or platform is legitimate

Use official verification channels, not links sent by the scammer.

Check:

SEC registration and secondary licenses
SEC advisories
BSP-supervised financial institution lists
BSP virtual asset service provider information, where applicable
Whether the domain name is newly created or impersonating a known platform
Whether the app is downloaded from an official app store or a side-loaded APK
Whether the supposed “license” number actually matches the entity

Be careful with names. Scammers often use names similar to real corporations, licensed brokers, or global exchanges. A fake page may say it is connected to a legitimate company even when it is not.

5. File a report with the SEC if investment solicitation is involved

Report to the SEC when the scheme involves:

Guaranteed returns
Pooling of investor money
Crypto or forex trading handled by someone else
Sale of tokens, mining contracts, staking packages, trading accounts, or investment slots
Public solicitation through Facebook, TikTok, Telegram, YouTube, seminars, or group chats
Use of SEC registration to make the scheme look legitimate

Attach your timeline and evidence. A good SEC complaint usually includes:

Name of the company, platform, group, or individual
SEC registration number, if claimed
Website, social media links, and app links
Screenshots of investment promises
Proof of payment
Names and account details of recipients
List of victims, if there are others
Explanation of why you believe it is an investment solicitation or scam

The SEC route is important for stopping the scheme and helping regulators establish a pattern. However, an SEC complaint does not automatically return your money. Recovery usually depends on whether funds can be traced, frozen, disgorged, settled, or awarded through a civil, administrative, or criminal process.

6. File with NBI Cybercrime Division or PNP Anti-Cybercrime Group

File with cybercrime authorities when:

The scammer used fake online identities
The platform is a fake website or app
Communications happened through social media or messaging apps
The suspect used hacked accounts
Money passed through online wallets or crypto wallets
You need law enforcement tracing, preservation requests, or coordination with platforms

Bring printed and digital copies. If you have a phone containing the chats, bring it. If you have screenshots only, organize them by date and label the file names.

You may be asked to execute a sworn statement or complaint-affidavit. This is a written statement under oath explaining what happened. It should be factual, chronological, and supported by attachments.

7. Escalate to BSP if your bank or e-wallet mishandles the complaint

If the issue involves a BSP-supervised financial institution, first complain directly to that institution. If unresolved, escalate to BSP consumer assistance.

BSP’s consumer assistance channels may require:

Summary of your concern
Resolution requested
Your contact details
Copy of your complaint to the financial institution
The institution’s reply, if any
Supporting documents such as receipts, screenshots, and account details (Bureau of Small and Medium Enterprises)

BSP complaints are useful when the issue is not just the scam itself, but the financial institution’s response, such as failure to receive a complaint, unreasonable delay, poor fraud handling, unclear denial, or possible failure to act on suspicious transactions.

8. Consider a prosecutor’s complaint for estafa or cybercrime

If you know the suspect’s identity or have enough details to identify them, you may file a criminal complaint with the appropriate prosecutor’s office.

Usually, you need:

Complaint-affidavit
Affidavits of witnesses, if any
Proof of payments
Screenshots and chat records
Identity documents
Demand letter, if appropriate
Certification or records from banks, e-wallets, platforms, or exchanges, if available
NBI or PNP report, if already obtained

The prosecutor conducts preliminary investigation, which means the prosecutor determines whether there is probable cause to charge the respondent in court. This can take weeks to months depending on the office, number of respondents, completeness of evidence, and whether subpoenas are served successfully.

9. Explore civil recovery if the recipient is identifiable

A criminal case punishes wrongdoing, but recovery may still require a civil remedy.

Civil recovery options may include:

Demand letter
Small claims case
Ordinary civil action for sum of money, damages, fraud, or unjust enrichment
Civil action against an identifiable company, officer, promoter, mule, or recipient
Claim within the criminal case, where available
Regulatory consumer redress or adjudication, where applicable

For smaller money claims, the Supreme Court has raised the small claims threshold to ₱1,000,000, making small claims a possible route for certain money claims that are simple enough and supported by documents. (Supreme Court of the Philippines)

Small claims may not be suitable if the case requires complex fraud evidence, unknown defendants, foreign defendants, multiple victims, corporate veil issues, crypto tracing, or provisional remedies. But when the recipient is known and the claim is document-based, it can be faster than an ordinary civil case.

10. Ask about preservation, freezing, and tracing

Victims often ask, “Can the account be frozen?”

Possibly, but not always directly by the victim.

Under RA 12010, financial institutions may temporarily hold disputed funds in certain suspicious transactions, subject to legal requirements and time limits. (Lawphil) For money laundering concerns, the Anti-Money Laundering Council may seek a freeze order from the Court of Appeals; freeze orders require legal findings and are not simply issued on a victim’s personal request. (Lawphil)

Practically, your job as a victim is to report quickly and give clear transaction details so banks, e-wallets, exchanges, investigators, prosecutors, and regulators can act before funds disappear.

Documents and evidence to prepare

Document or evidence	Why it matters
Government ID or passport	Proves your identity as complainant
Written timeline	Helps investigators understand the case quickly
Proof of payment	Shows amount, date, recipient, and transaction reference
Bank or e-wallet statements	Shows source and movement of funds
Crypto transaction hashes	Allows blockchain tracing and exchange reporting
Wallet addresses	Identifies sending and receiving wallets
Chat screenshots and exports	Shows promises, misrepresentations, withdrawal denial, and identity clues
Website URLs and app links	Helps identify fake platforms and preserve online evidence
Social media profile links	More useful than display names, which can be changed
Fake licenses, certificates, contracts, or receipts	Shows how the scammer induced trust
Prior complaint tickets	Shows you reported to bank, e-wallet, exchange, SEC, BSP, NBI, or PNP
Affidavit or complaint-affidavit	Required for many formal complaints
Authority or SPA, if filed by a representative	Needed when the victim is abroad or someone else files on the victim’s behalf

For evidence from abroad, Philippine offices may require notarization, consular acknowledgment, apostille, certified copies, or English translation depending on where the document was made and how it will be used.

What recovery is realistic?

Recovery depends on speed, traceability, and whether the recipient can be identified.

Recovery is more realistic when:

You report within hours or a few days
Funds are still in a local bank or e-wallet
The receiving account is identifiable
The scam used a centralized exchange with compliance procedures
Several victims report the same scheme
The scammer used real IDs or accounts
There are assets that can be frozen, attached, disgorged, or levied

Recovery is harder when:

Funds were withdrawn in cash
Money passed through many mule accounts
Crypto was transferred to self-custody wallets
Crypto was mixed, bridged, or moved across chains
The platform is foreign, fake, or unreachable
The scammer used stolen identities
The victim waited months before reporting
Evidence consists only of incomplete screenshots

The law can punish scammers, but actual recovery is often a race against time. A police report or SEC complaint is important, but it is not the same as a refund order. For refunds, you usually need one of the following: successful bank/e-wallet action, exchange hold, settlement, regulatory redress, disgorgement, civil judgment, restitution in a criminal case, or asset recovery through law enforcement.

Common pitfalls that hurt scam victims

Paying more after withdrawals are blocked

If the platform says you must pay “tax,” “AML fee,” or “verification fee” before withdrawal, treat it as a major red flag. Legitimate taxes are not normally paid to a random wallet or personal bank account controlled by the same platform.

Relying on fake dashboards

Many fake trading apps show profits that do not exist. The numbers are just screen displays controlled by the scammer. What matters is whether your funds are in a real, regulated account under your control.

Believing SEC registration equals authority to solicit investments

A corporation may be registered but still have no authority to sell investment contracts, take public investments, or operate a trading platform. Always check the exact license.

Waiting too long

Banks, e-wallets, and exchanges can act only if funds are still traceable and reachable. Report even if you are embarrassed. Scam victims often delay because they hope the scammer will still release the money.

Filing only one report

A scam may need several tracks: bank/e-wallet report for urgent fund hold, SEC report for investment solicitation, cybercrime report for online tracing, BSP escalation for financial institution handling, and prosecutor/civil action for liability and recovery.

Trusting “fund recovery experts”

Many recovery agents are also scammers. Be suspicious of anyone who guarantees recovery, asks for payment in crypto, claims to have a “special contact” inside a bank or exchange, or says they can hack the scammer’s wallet.

Harassing a mule account holder

Some recipient account holders are active accomplices, but some may be victims or paid mules. Threats and public accusations can create separate legal problems. Preserve evidence and report through proper channels.

Using incomplete or edited evidence

Do not crop out timestamps, URLs, usernames, reference numbers, or sender details. Investigators need complete context.

Special notes for OFWs, foreigners, and victims outside the Philippines

If you are outside the Philippines, you can still prepare a report, especially if:

The scammer is in the Philippines
The receiving bank or e-wallet account is Philippine-based
The company claims to be Philippine-registered
The scheme targeted Filipino investors
You sent money to a Philippine account or intermediary

Practical steps:

Report to your sending bank, card issuer, or exchange in your country immediately. This is separate from Philippine reporting.
Preserve foreign transaction records. Keep SWIFT receipts, remittance slips, exchange withdrawal records, card statements, and blockchain transaction hashes.
Prepare a notarized or consularized affidavit if needed. If your affidavit is executed abroad, Philippine authorities may require consular acknowledgment or apostille, depending on the country and intended use.
Use a Special Power of Attorney if someone in the Philippines will file for you. The SPA may need notarization, apostille, or consular acknowledgment.
Expect practical delays. Time zones, original documents, foreign platform records, translations, and cross-border requests can slow down investigation.
Report in both jurisdictions when appropriate. If your foreign bank, exchange, or local police has a fraud process, use it. Philippine authorities may not be able to compel a foreign exchange or foreign suspect without international cooperation.

Frequently Asked Questions

Can I still recover money from a crypto scam in the Philippines?

Possibly, but recovery is difficult once crypto leaves a centralized exchange or is transferred through multiple wallets. Your best chance is to report immediately to the exchange, preserve wallet addresses and transaction hashes, and file with cybercrime authorities. If the funds reached a regulated exchange, investigators or compliance teams may be able to request preservation or identify the account holder.

Should I report to SEC, NBI, PNP, BSP, or my bank first?

Report to your bank, e-wallet, card issuer, or exchange first because they may still be able to act on the transaction. Then report to the SEC if the scheme involved investment solicitation, to NBI or PNP if it was online fraud, and to BSP if a BSP-supervised financial institution mishandled your complaint.

Is an SEC-registered company automatically allowed to solicit investments?

No. SEC registration as a corporation is not the same as authority to sell securities or solicit investments from the public. Investment contracts and securities generally require proper registration, permits, or licenses. A scammer may show a real certificate of incorporation but still be operating an illegal investment scheme.

What if the scammer is only a Telegram, WhatsApp, or Facebook account?

You can still report. Save the account link, username, phone number, group invite link, profile photos, chat exports, and payment details. Investigators may need platform data, bank records, e-wallet records, SIM registration details, or exchange KYC information, depending on what is legally obtainable.

Can the bank or e-wallet freeze the recipient’s account?

They may be able to temporarily hold or restrict disputed funds in specific circumstances, especially when the transaction is promptly reported and appears suspicious. But this is not guaranteed. The institution must follow banking, anti-fraud, data privacy, and regulatory procedures. That is why complete transaction details and fast reporting are critical.

How do I report a fake trading app or website?

Save the URL, app link, screenshots, account dashboard, deposit instructions, wallet addresses, and chats showing who invited you. Report the app or website to your bank or exchange if money was sent, to the SEC if it solicited investments, and to NBI or PNP cybercrime units if it is part of an online fraud scheme.

Can I file estafa for a failed investment?

You can consider estafa if there was deceit, false representation, or fraudulent inducement before or at the time you sent the money. A mere business loss is not automatically estafa. Stronger facts include fake licenses, guaranteed profits, fabricated trading results, refusal to allow withdrawals, use of new investor funds to pay old investors, and disappearance after receiving money.

What if I am a foreigner scammed by someone in the Philippines?

You may report in the Philippines if there is a Philippine connection, such as a Philippine recipient account, Philippine-based promoter, Philippine-registered company, or victims in the Philippines. You may need properly authenticated affidavits and documents if you are abroad. You should also report to your own bank, exchange, and local fraud authorities.

Are crypto recovery agents legitimate?

Be extremely careful. Many are recovery scams. Red flags include guaranteed recovery, upfront crypto payments, fake screenshots of “recovered funds,” claims of hacking wallets, or pressure to act immediately. Legitimate recovery normally works through banks, exchanges, courts, regulators, and law enforcement—not secret hacking.

How long does a scam report take?

Initial intake can be fast, especially if your documents are ready. But investigation, subpoenas, platform responses, prosecutor review, court proceedings, and recovery can take months or years. Urgent bank, e-wallet, or exchange reporting should be done immediately because that is where time matters most.

Key Takeaways

Stop sending money as soon as withdrawals are blocked or extra fees are demanded.
Report first to the bank, e-wallet, card issuer, or crypto exchange that handled the transaction.
Preserve complete evidence: chats, URLs, screenshots, receipts, wallet addresses, and transaction hashes.
Report investment solicitation to the SEC and online fraud to NBI Cybercrime Division or PNP Anti-Cybercrime Group.
Escalate to BSP if a BSP-supervised financial institution mishandles your complaint.
Estafa, cybercrime, investment fraud, money muling, and consumer protection laws may all apply depending on the facts.
Recovery is most realistic when funds are reported quickly and are still traceable in a bank, e-wallet, or centralized exchange.
SEC registration alone does not mean a company is allowed to solicit investments.
Avoid “recovery agents” who guarantee results or ask for upfront crypto payments.
A well-organized timeline and complete evidence package can make the difference between a weak complaint and one investigators can act on.