Crypto investment fraud can move fast: money is sent through bank accounts, e-wallets, exchanges, or crypto wallets, then routed through several addresses before the victim realizes what happened. In the Philippines, the right response is also fast and practical: preserve evidence, report to the correct agency, ask the bank/e-wallet/exchange to hold or trace the transaction, and file a sworn complaint if you want a criminal case to move forward. This guide explains where to report crypto investment scams in the Philippines, what laws may apply, what documents to prepare, and what usually happens after you file.

What Counts as a Crypto Investment Fraud Scheme?

A crypto scam is not illegal merely because it involves Bitcoin, USDT, Ethereum, NFTs, trading bots, staking, or a “mining package.” Crypto itself is not automatically prohibited in the Philippines. The legal problem usually starts when someone uses crypto to solicit investments through deception, unregistered securities offerings, unauthorized financial services, or online fraud.

Common examples include:

“Guaranteed” daily or monthly returns from crypto trading
USDT “staking” or “arbitrage” programs that depend on recruiting new members
Fake exchange platforms where your balance appears to grow but you cannot withdraw
Investment groups on Facebook, Telegram, Viber, WhatsApp, Discord, or TikTok
“Signal groups” requiring members to deposit to a wallet controlled by the promoter
Initial coin offerings, token sales, or crypto presales marketed to the public without proper registration
Fake representatives of legitimate exchanges asking you to transfer funds to a “verification wallet”
Romance or friendship scams that eventually push the victim into a crypto platform
“Tasking,” “pig butchering,” or online job schemes where victims are asked to deposit more crypto to unlock commissions

The important legal question is not what label the promoter uses. Philippine regulators and courts look at the substance of the transaction: Did the victim part with money or crypto? Was there a promise or expectation of profit? Did the profit depend mainly on the efforts of the promoter, trader, platform, or group leader? Was there deceit?

Why Crypto Investment Scams Often Fall Under Securities Law

Many crypto fraud schemes are treated as investment schemes because they involve an “investment contract.” Under Republic Act No. 8799, or the Securities Regulation Code, securities cannot be sold or offered for sale or distribution in the Philippines without a registration statement filed with and approved by the Securities and Exchange Commission (SEC). (Lawphil)

The Supreme Court has applied the “investment contract” concept in Philippine law. In Power Homes Unlimited Corporation v. SEC, the Court explained that an investment contract exists when a person invests money in a common enterprise and expects profits primarily from the efforts of others. The Court held that such an investment contract is a security under RA 8799 and must be registered before being offered to the public. (Lawphil)

This matters because many crypto scams are structured exactly this way:

Common crypto pitch	Why it may be an investment contract
“Invest ₱10,000 and earn 5% weekly from our trading bot.”	The investor expects profit from the promoter’s trading system.
“Buy our token now before listing; price will multiply.”	The public is being offered a profit opportunity tied to the issuer’s project.
“Deposit USDT and our team will arbitrage across exchanges.”	The investor relies on the team’s supposed expertise.
“Recruit others and earn passive income.”	The scheme may involve both securities violations and pyramid-style fraud indicators.

In 2025, the SEC also issued rules and guidelines for Crypto-Asset Service Providers (CASPs). The framework covers entities offering crypto-asset services, operating crypto-asset trading venues, engaging in crypto-asset intermediation, or marketing crypto-assets and crypto services to the Philippine public. It also recognizes consumer rights such as fair treatment, disclosure and transparency, protection of consumer assets against fraud and misuse, data privacy, and timely complaint handling. (Baker McKenzie InsightPlus)

For ordinary victims, the practical point is simple: if a person or platform offers crypto investments to Filipinos, uses social media or messaging apps to solicit money, promises returns, or operates like an exchange or trading venue, the SEC may be one of the proper agencies to report it to.

Laws That May Apply to Crypto Investment Fraud in the Philippines

Several laws can apply at the same time. A single crypto scam may involve securities violations, estafa, cybercrime, money laundering, and financial account abuse.

Law	How it may apply
RA 8799, Securities Regulation Code	Applies when the scheme involves unregistered securities, investment contracts, fraudulent securities sales, or unauthorized solicitation.
SEC CASP Rules and Guidelines, 2025	Apply to crypto-asset service providers, crypto-asset offerings, trading venues, intermediaries, and marketing of crypto services to the Philippine public. (Baker McKenzie InsightPlus)
Revised Penal Code, Article 315 on Estafa	Applies when money or property is obtained through deceit, false pretenses, abuse of confidence, or fraudulent acts.
RA 10175, Cybercrime Prevention Act of 2012	Applies when fraud is committed through information and communications technology. The law specifically includes computer-related fraud. (Lawphil)
RA 11765, Financial Products and Services Consumer Protection Act	Strengthens protection for consumers of financial products and services and gives regulators broader consumer protection powers. (Lawphil)
RA 12010, Anti-Financial Account Scamming Act of 2024	Targets the misuse of financial accounts in cybercrime schemes, including mule accounts and fraudulent electronic communications. (Lawphil)
RA 9160, Anti-Money Laundering Act, as amended	May apply when proceeds of unlawful activity are moved through bank accounts, e-wallets, exchanges, or other covered channels.
Civil Code, Article 33	Allows an independent civil action for damages in cases of fraud, separate from the criminal action, based on preponderance of evidence. (Lawphil)

Where to Report Crypto Investment Fraud in the Philippines

There is no single “crypto fraud office” that handles every case. The right agency depends on what happened.

Situation	Where to report
Unregistered crypto investment solicitation, token sale, trading scheme, or guaranteed-return crypto program	SEC, especially through its investor protection or complaints channels
Fraud committed through Facebook, Telegram, WhatsApp, websites, fake apps, phishing links, or online impersonation	PNP Anti-Cybercrime Group or NBI Cybercrime Division
Need immediate reporting of online scam, phishing, scam SMS, or cyber fraud	CICC / I-ARC Hotline 1326 and eGov app eReport
Funds sent through a bank, e-wallet, payment app, or BSP-supervised financial institution	The bank/e-wallet first, then BSP consumer assistance if the provider mishandles the complaint
Funds sent to or through a crypto exchange or VASP	The exchange/VASP’s fraud or compliance team; if BSP-supervised, BSP consumer channels may also be relevant
You want a criminal case filed	Police/NBI investigation and/or complaint-affidavit before the prosecutor’s office
You want to recover money through a civil claim	Civil action, independent civil action for fraud, or civil liability in the criminal case

SEC

Use the SEC when the scheme involves investment solicitation, securities, investment contracts, crypto-asset offerings, or crypto-asset service providers. The SEC has an online iMessage ticketing system where the public may submit complaints and reports, including investment scam complaints. (Securities and Exchange Commission)

The SEC is especially relevant if:

The promoter claims to be “SEC registered” but is only registered as a corporation, not authorized to sell investments.
The scheme offers fixed or guaranteed returns.
The platform accepts pooled funds for trading, staking, mining, or arbitrage.
The promoter uses referral commissions.
The token, coin, or package is sold to the public as an investment.
The platform appears to be operating as a crypto exchange, trading venue, or intermediary without proper authority.

A frequent misunderstanding is that “SEC registered” means “allowed to accept investments.” It does not. A corporation may be registered with the SEC as a legal entity but still have no authority to solicit investments from the public.

PNP Anti-Cybercrime Group and NBI Cybercrime Division

Use law enforcement channels when the case involves online deception, fake accounts, impersonation, phishing, hacking, social media recruitment, fake websites, or refusal to release funds after online solicitation.

The DOJ Office of Cybercrime notes that RA 10175 created the Office of Cybercrime within the Department of Justice as the central authority for cybercrime-related international mutual assistance matters. (Cybercrime Center) The NBI also provides investigative assistance for victims of computer crimes through its Cybercrime Division process, which includes preliminary interview, complaint sheet preparation, and sworn complaint steps. (National Bureau of Investigation)

For Manila complainants, the NBI states that complaints may be filed under oath through its Complaints and Recording Division, while walk-in complainants in field offices may approach the chief or an agent for complaint filing. (National Bureau of Investigation)

CICC / I-ARC Hotline 1326

For immediate online scam reporting, the Cybercrime Investigation and Coordinating Center (CICC) and partner agencies operate the Inter-Agency Response Center hotline 1326. Government information sources describe 1326 as a central number for reporting online scams, including investment fraud, phishing, deceitful messages, and other cybercrimes. (Philippine Information Agency)

This is useful when:

The scam is ongoing.
You just sent money or crypto.
You received scam SMS or phishing links.
You need quick routing to the proper government or enforcement channel.
The scam involves mobile numbers, e-wallets, or online accounts.

The eGovPH app’s eReport feature has also been used for reporting scam messages, with reports routed for action such as number blocking by the proper agencies. (Philippine News Agency)

BSP and Financial Service Providers

If your money passed through a bank, e-wallet, remittance company, or BSP-supervised Virtual Asset Service Provider (VASP), report immediately to that provider’s fraud or customer protection channel. Ask for:

Temporary hold, freeze, or blocking of the recipient account if still possible
Transaction trace or investigation
Written confirmation of your report
Case number or ticket number
Preservation of records for law enforcement

BSP guidance on VASPs states that users should first communicate directly with the VASP through its available contact channels, but may raise concerns through BSP consumer assistance channels if needed. (Bureau of Small and Medium Enterprises) BSP Circular No. 1108 also recognizes that virtual asset transactions pose risks including money laundering, terrorist financing, IT, consumer protection, and financial stability concerns. (Bureau of Small and Medium Enterprises)

Step-by-Step: What to Do After Discovering a Crypto Investment Scam

1. Stop sending money or crypto immediately

Scammers often ask for more payments after the first loss:

“Tax clearance fee”
“Withdrawal unlocking fee”
“Anti-money laundering verification”
“Gas fee”
“VIP upgrade”
“Account reactivation”
“Final deposit before release”

These are usually recovery traps. Do not send more money to withdraw your own funds.

2. Preserve evidence before accounts disappear

Take screenshots and screen recordings immediately. Save the original files, not just forwarded copies.

Collect:

Full name, alias, username, and profile links of the promoter
Facebook, Telegram, Viber, WhatsApp, TikTok, Instagram, Discord, or website URLs
Chat history from first contact to last message
Advertisements, posts, reels, livestreams, or group announcements
Whitepaper, pitch deck, contract, certificate, or “investment agreement”
Wallet addresses used
QR codes
Transaction hashes or blockchain links
Bank deposit slips, GCash/Maya receipts, InstaPay/PESONet reference numbers
Exchange withdrawal confirmations
Names of recruiters, uplines, admins, and group leaders
Promised returns and withdrawal rules
Any SEC, DTI, BSP, BIR, or “license” documents shown by the promoter

Do not edit screenshots except to make duplicate working copies. Keep the originals because investigators may ask for metadata, device inspection, or authentication.

3. Report to the platform or financial institution first

If payment was through a bank or e-wallet, report immediately through official fraud channels. Time matters. Some banks and e-wallets can still flag or hold funds if reported quickly, especially if the recipient account has not yet been emptied.

If crypto was sent through an exchange:

Open a fraud ticket with the exchange.
Provide the transaction hash, receiving wallet address, amount, date, and time.
Ask whether the receiving wallet is hosted by their platform.
Ask them to preserve records and coordinate with law enforcement.
Request a written response or ticket number.

Exchanges usually will not return funds merely because you ask. They often require law enforcement requests, subpoenas, freeze orders, or formal legal process. Still, an early report helps preserve records.

4. File an SEC report if the scheme involved investment solicitation

File with the SEC if the crypto activity was promoted as an investment. Include a short narrative:

Who recruited you
What was promised
How much you invested
How you paid
Why you believe it is fraudulent
Whether others were recruited
Whether the entity claims to be SEC registered
Whether you found an SEC advisory or lack of license

Use the SEC iMessage portal and choose the category closest to investment scam or public assistance. Keep the ticket number. (Securities and Exchange Commission)

5. File a cybercrime complaint with PNP-ACG or NBI-CCD

For criminal investigation, prepare a complaint package. A typical package includes:

Document	Practical notes
Valid government ID	Passport, driver’s license, UMID, PhilID, PRC ID, or other accepted ID
Complaint-affidavit or sworn statement	Usually notarized or sworn before the proper officer
Chronology of events	Use dates, times, platforms, amounts, and names
Screenshots and chat logs	Print important screenshots; keep digital copies
Transaction records	Bank/e-wallet receipts, exchange records, crypto transaction hashes
Wallet addresses and links	Include blockchain explorer links if available
Promoter information	Names, aliases, phone numbers, email addresses, social media links
Witness statements	From other victims, recruiters, or people who saw the solicitation
SEC or BSP verification results	If you checked registration or license status
Prior reports	Bank tickets, exchange tickets, SEC ticket, CICC report number

The NBI process for computer crime complaints includes preliminary interview and assistance in filling out a sworn complaint sheet. (National Bureau of Investigation)

6. If you want prosecution, prepare for preliminary investigation

A police or NBI report is not always the same as a criminal case in court. For many fraud cases, the complaint must proceed to the prosecutor’s office for preliminary investigation, which is the process of determining whether there is probable cause to charge someone in court.

The DOJ’s filing requirements for preliminary investigation include an Investigation Data Form, complaint-affidavit or sworn statement, and supporting evidence. (Department of Justice) Rule 112 of the Rules of Criminal Procedure describes preliminary investigation as an inquiry to determine whether a crime has probably been committed and whether the respondent is probably guilty and should be held for trial. (Lawphil)

In practice, expect the prosecutor to require:

A clear sworn narrative
Specific respondents, if known
Proof of payment
Proof of deceit or false representation
Proof linking the respondent to the wallet, account, page, or platform
Evidence that the promise was made before or at the time you sent money
Copies of government-issued IDs and contact details

If the scammer used fake names, the case may first require further investigation to identify the responsible persons.

How to Write the Complaint Narrative

A useful complaint narrative is clear and chronological. Avoid emotional generalizations and focus on facts.

Use this structure:

Introduction State your name, address, contact details, and that you are reporting a crypto investment fraud scheme.
How you were contacted Identify the platform, date, recruiter, group name, or advertisement.
What was promised Quote the exact promised return, withdrawal terms, referral commissions, and claimed licenses.
Why you relied on it Explain what made you believe the scheme was legitimate: documents shown, testimonials, group chats, fake exchange dashboard, celebrity or influencer endorsement, or supposed SEC/BSP registration.
Payments made List every payment in a table.
What happened after payment Explain withdrawal denial, additional fees demanded, blocked accounts, disappearing admins, deleted group chats, or fake technical excuses.
Damage suffered State the total amount lost in pesos and crypto, plus other direct losses.
Evidence attached Number your attachments.

Example payment table:

Date	Amount	Method	Recipient	Reference / Tx Hash
12 March 2026	₱50,000	GCash	Juan D. / mobile number	Ref. No. 123456
15 March 2026	500 USDT	Binance withdrawal	Wallet address ending 8xA3	Tx hash
20 March 2026	₱25,000	Bank transfer	ABC Trading OPC	InstaPay Ref. No. 78910

Common Pitfalls That Hurt Crypto Fraud Complaints

Waiting too long before reporting

Crypto moves quickly. Bank and e-wallet accounts may be emptied within minutes or hours. Exchanges may retain logs, but the chance of freezing assets is higher when reports are made immediately.

Deleting chats out of embarrassment

Do not delete conversations, even if they contain personal, romantic, or embarrassing details. In romance-investment scams, the relationship-building messages may prove how trust was created and how deceit was used.

Reporting only to Facebook or Telegram

Platform reports may remove the page, but they do not automatically create a Philippine criminal case. Preserve the content first, then report to law enforcement and regulators.

Believing “SEC registered” means investment authority

Many scammers show a certificate of incorporation. That only proves the entity exists as a corporation or registered entity. It does not automatically authorize it to sell investment contracts, securities, crypto-assets, or financial products to the public.

Paying recovery agents

Be careful with “crypto recovery experts” who promise to hack wallets, reverse blockchain transactions, or recover USDT for an upfront fee. Many are second-layer scammers targeting victims who are already desperate.

Sending incomplete evidence

A screenshot of a wallet address is helpful, but not enough. Investigators need the story connecting the scammer, the promise, the payment, and the loss.

Can You Recover the Money?

Recovery is possible in some cases, but it is not guaranteed.

The chances are better when:

The funds went to a Philippine bank or e-wallet account that can be identified quickly.
The recipient account still has funds.
The exchange is regulated or cooperative.
The wallet is hosted by a platform with know-your-customer records.
There are many victims and a coordinated investigation.
The promoter used real names, bank accounts, phone numbers, or registered entities.
Law enforcement acts quickly enough to preserve data or request freezing.

Recovery is harder when:

Funds were sent directly to a self-custody wallet.
Crypto was moved through mixers, bridges, decentralized exchanges, or multiple chains.
The scammer is abroad.
The platform is fake and not connected to a real exchange.
The victim has only a nickname, phone number, or deleted chat.

In a criminal case, the civil liability may be included in the criminal action. Separately, Civil Code Article 33 allows an independent civil action for damages in cases of fraud. (Lawphil) This may matter if you know the person who recruited you, the entity behind the scheme, or the local bank/e-wallet account holder who received the funds.

Special Notes for OFWs and Foreigners

If you are an OFW abroad

You can still prepare evidence and coordinate with Philippine agencies. Practical options include:

Filing online reports where available, such as SEC iMessage or CICC/eGov channels
Reporting to the bank, e-wallet, or exchange immediately
Preparing a complaint-affidavit before the Philippine Embassy or Consulate
Executing a Special Power of Attorney if a trusted representative in the Philippines will file documents for you
Keeping your original device and account access, because investigators may ask for verification

Philippine embassies and consulates can notarize or acknowledge documents for use in the Philippines. If a document is executed before a foreign notary, it may need an apostille or consular authentication depending on the country and document type.

If you are a foreigner scammed by a Philippine-based person or platform

Foreigners may report to Philippine authorities if the scam has a Philippine connection, such as a Philippine company, Filipino promoter, Philippine bank or e-wallet account, Philippine phone number, Philippine victims, or solicitation directed at persons in the Philippines.

Prepare clear identity documents and, if documents are executed abroad, expect possible apostille requirements. If your evidence is in another language, a certified English translation may be needed.

Typical Timelines and Practical Expectations

Timelines vary widely depending on the amount involved, number of victims, quality of evidence, identity of suspects, and cooperation of banks, platforms, or foreign exchanges.

Stage	Practical timeline
Bank/e-wallet/exchange fraud report	Same day to several weeks for initial response
SEC online complaint ticket	Acknowledgment may be quick, but evaluation and action can take longer
PNP/NBI intake and affidavit preparation	Same day to several visits, depending on completeness
Cybercrime investigation	Weeks to months, especially if subpoenas or technical tracing are needed
Prosecutor’s preliminary investigation	Several months is common; complex cases may take longer
Court case after filing of information	Often years, depending on docket, evidence, and accused’s participation
Asset recovery	Fast only if funds are frozen early; otherwise uncertain

A realistic mindset helps: filing reports is not only about immediate refund. It also helps preserve evidence, identify account holders, support freezing or takedown requests, warn the public, and build a case against the people behind the scheme.

Frequently Asked Questions

How do I report a crypto scam in the Philippines?

Start by preserving evidence, then report to the platform or financial institution that handled the transaction. If it involved investment solicitation, report to the SEC. If it involved online fraud, fake accounts, phishing, or social media recruitment, report to PNP-ACG, NBI Cybercrime Division, or the CICC/I-ARC hotline 1326.

Is crypto investment illegal in the Philippines?

Not automatically. The legal issue is whether the person or platform is properly authorized and whether the product is being offered lawfully. Crypto investment schemes that promise profits, pool funds, sell tokens to the public, or operate as crypto-asset services may fall under SEC and other regulatory rules.

What if the company is SEC registered?

SEC company registration only means the entity was registered as a corporation, partnership, or similar entity. It does not automatically mean the entity may solicit investments, sell securities, offer crypto-assets, or operate a crypto trading platform. Always check whether it has the specific authority required for the activity.

Can I file estafa for a crypto scam?

Yes, if the evidence shows deceit, false pretenses, or fraudulent acts that caused you to part with money or property. Estafa under Article 315 of the Revised Penal Code is commonly considered in investment fraud cases. If the deception was committed online, RA 10175 may also be relevant.

Can the police trace a crypto wallet?

Sometimes. Blockchain transactions may be traceable, but identifying the person behind a wallet depends on whether the wallet is connected to an exchange, KYC account, IP logs, phone numbers, bank records, or other evidence. Self-custody wallets and cross-border transfers are harder to trace.

Should I report to SEC or NBI first?

If the scheme is still actively recruiting investors, report to the SEC as soon as possible. If you lost money through online deception, also report to NBI or PNP-ACG. These reports serve different purposes: SEC focuses on regulatory and securities violations, while law enforcement handles criminal investigation.

What if I sent USDT or Bitcoin and the scammer is abroad?

Report anyway. Provide the transaction hash, wallet address, exchange used, communications, and any Philippine connection. Cross-border recovery is harder, but reports can help with exchange notices, law enforcement coordination, and identifying linked accounts.

Can I get my money back from GCash, Maya, or my bank?

It depends on timing and facts. Report immediately and request account blocking or transaction investigation. If the funds are already withdrawn or transferred, recovery becomes harder. If the provider mishandles your complaint, BSP consumer assistance may be relevant for BSP-supervised entities.

Do I need a lawyer to report a crypto investment scam?

You can file initial reports yourself. However, a lawyer may help if the amount is substantial, there are many victims, the facts are complex, the suspect is known, you need a carefully drafted complaint-affidavit, or you are considering both criminal and civil remedies.

What evidence is most important?

The strongest evidence usually includes the promised returns, proof of payment, wallet addresses or transaction hashes, conversations with the recruiter or admin, screenshots of the platform or dashboard, withdrawal refusal messages, and proof linking the respondent to the account or wallet that received the funds.

Key Takeaways

Crypto investment fraud in the Philippines may involve securities violations, estafa, cybercrime, money laundering, and financial account scamming.
Report investment-type crypto schemes to the SEC, especially when there are promised returns, public solicitation, token sales, pooled trading, or referral commissions.
Report online deception, fake accounts, phishing, and platform-based fraud to PNP-ACG, NBI Cybercrime Division, or CICC/I-ARC 1326.
Report immediately to the bank, e-wallet, exchange, or VASP that handled the transaction and ask for preservation, tracing, or blocking where possible.
Preserve original evidence: chats, screenshots, receipts, wallet addresses, transaction hashes, links, group posts, and IDs of recruiters.
“SEC registered” does not mean authorized to solicit investments.
A police or NBI report is usually only the start; prosecution normally requires a sworn complaint and supporting evidence for preliminary investigation.
Recovery is possible but time-sensitive and fact-dependent, especially when funds pass through identifiable Philippine financial accounts.