I. Introduction

Facebook remains one of the most widely used social media platforms in the Philippines. It is used for personal communication, online selling, marketplace transactions, community groups, job postings, fundraising, political discussion, and business promotion. Because of this wide reach, Facebook is also frequently used by scammers to deceive victims.

Facebook scams in the Philippines may involve fake online shops, bogus sellers, phishing links, identity theft, investment fraud, love scams, fake job offers, account takeovers, charity scams, loan scams, impersonation, extortion, and other forms of online deceit. These acts may give rise not only to violations of Facebook’s community rules but also to criminal, civil, and regulatory liability under Philippine law.

This article discusses how Facebook scams may be reported in the Philippine context, what laws may apply, what evidence should be preserved, where complaints may be filed, and what practical steps victims should take.

II. What Is a Facebook Scam?

A Facebook scam is a fraudulent act committed through Facebook, Messenger, Facebook Marketplace, Facebook Groups, Facebook Pages, or Facebook ads, where a person uses deceit, false pretenses, impersonation, manipulation, or misrepresentation to obtain money, property, personal information, access credentials, or some other unlawful advantage.

Common Facebook scams in the Philippines include:

Fake online selling scams A seller posts items for sale, receives payment through GCash, Maya, bank transfer, remittance center, or other channels, and then fails to deliver the item.
Marketplace scams Fraudsters use Facebook Marketplace to sell non-existent goods, fake products, stolen items, or goods that differ from what was advertised.
Phishing scams Victims are tricked into clicking a link that imitates Facebook, a bank, GCash, Maya, courier services, or government agencies, leading them to reveal passwords, OTPs, card numbers, or account credentials.
Account takeover scams A scammer gains access to a Facebook account and uses it to borrow money from friends, sell fake goods, solicit donations, or spread phishing links.
Investment scams Fraudsters offer “guaranteed returns,” crypto investments, forex trading, “paluwagan,” networking schemes, or other high-yield opportunities through Facebook posts, groups, pages, or Messenger.
Romance scams A scammer builds an emotional relationship with a victim, then asks for money for supposed emergencies, travel expenses, business needs, hospital bills, or customs fees.
Fake job scams Victims are promised employment or overseas work but are asked to pay processing fees, medical fees, training fees, placement fees, or document fees.
Loan scams Scammers offer easy loans through Facebook, then demand advance processing fees or collect personal information for harassment, identity theft, or unauthorized transactions.
Impersonation scams Someone creates a fake Facebook account or page pretending to be another person, business, government agency, celebrity, public official, or organization.
Sextortion or blackmail scams Victims are threatened with the release of private photos, videos, or conversations unless they pay money.
Fake charity or emergency donation scams Scammers exploit disasters, illnesses, funerals, accidents, or public sympathy to solicit donations.
Courier and delivery scams Victims are sent fake delivery notices, fake tracking links, or demands for customs or delivery fees.
Ad scams Fraudsters use sponsored ads to promote fake stores, counterfeit goods, investment schemes, or phishing websites.

III. Relevant Philippine Laws

Several Philippine laws may apply to Facebook scams, depending on the facts.

A. Revised Penal Code: Estafa or Swindling

The most common criminal charge in online selling and deception cases is estafa under Article 315 of the Revised Penal Code.

Estafa generally involves defrauding another person through abuse of confidence, deceit, false pretenses, fraudulent acts, or other means recognized by law. In a Facebook scam, estafa may arise when the scammer falsely represents that they will deliver goods, provide services, invest funds, process documents, lend money, or perform an obligation, but the representation was fraudulent and caused the victim to part with money or property.

Examples:

A seller accepts payment for a phone but never ships it.
A person pretends to be a travel agent and collects payment for fake tickets.
A scammer promises investment profits but never invests the money.
A fake employer collects “processing fees” for a non-existent job.

If the fraud is committed using information and communications technology, cybercrime laws may also apply.

B. Cybercrime Prevention Act of 2012

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is highly relevant to Facebook scams.

The law punishes certain cybercrimes and also treats some crimes under the Revised Penal Code as cybercrimes when committed through a computer system or similar means. This may include computer-related fraud, computer-related identity theft, and crimes such as estafa when committed using Facebook, Messenger, or other digital platforms.

In a Facebook scam, the use of Facebook, Messenger, fake websites, online payment accounts, emails, or other digital tools may bring the conduct within the scope of cybercrime investigation.

Possible cybercrime-related violations include:

Computer-related fraud Fraud committed through manipulation, misuse, or interference involving computer systems or digital data.
Computer-related identity theft Unauthorized acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person.
Cyber libel, where applicable This may arise separately if defamatory statements are made online, though victims should be careful when publicly accusing someone of being a scammer without adequate proof.
Aiding or abetting cybercrime Persons who knowingly assist in the scam may also face liability.
Attempted cybercrime Even unsuccessful attempts may be punishable in certain cases.

C. Access Devices Regulation Act

Republic Act No. 8484, the Access Devices Regulation Act, may apply when the scam involves credit cards, debit cards, account numbers, electronic payment credentials, or unauthorized use of access devices.

This law may be relevant where scammers:

obtain credit card information through phishing;
use stolen card details;
trick victims into revealing OTPs or card numbers;
use compromised accounts for unauthorized transactions;
possess or use access devices without authority.

D. Data Privacy Act of 2012

Republic Act No. 10173, the Data Privacy Act of 2012, may be relevant where scammers unlawfully collect, process, disclose, sell, or misuse personal information.

Facebook scams often involve personal data such as:

full names;
addresses;
phone numbers;
government IDs;
selfies with IDs;
bank details;
e-wallet numbers;
birthdays;
contact lists;
passwords;
OTPs;
photos and videos.

Victims may report misuse of personal information to the National Privacy Commission when the issue involves personal data breaches, identity theft, unauthorized disclosure, or misuse of personal information.

E. Consumer Protection Laws

If the scam involves online selling, deceptive trade practices, false advertising, or fraudulent business conduct, consumer protection laws may be relevant.

The Department of Trade and Industry may be involved in complaints against identifiable sellers or businesses, especially where the issue concerns defective goods, non-delivery, false advertising, unfair sales practices, or online transactions involving business sellers.

However, if the seller is purely fictitious, anonymous, or engaged in outright criminal fraud, law enforcement agencies may be more appropriate.

F. Securities Regulation Code and Investment Scam Laws

If the Facebook scam involves investments, securities, crypto investment schemes, forex trading pools, “double your money” programs, Ponzi schemes, or solicitation of funds from the public, the Securities and Exchange Commission may have jurisdiction.

Investment scams may involve:

offering guaranteed profits;
soliciting funds from the public;
selling unregistered securities;
operating without the necessary SEC registration or license;
using Facebook groups or pages to recruit investors;
promising unrealistic returns;
using fake testimonials and fake payout screenshots.

Victims should preserve screenshots of investment offers, group posts, account names, wallet addresses, payment receipts, and conversations.

G. Anti-Money Laundering Considerations

Where large sums are involved, or where fraud proceeds are moved through bank accounts, e-wallets, crypto wallets, remittance centers, or mule accounts, the matter may also raise anti-money laundering concerns.

Victims usually do not directly file money laundering cases themselves, but law enforcement and financial institutions may refer suspicious transactions to appropriate authorities.

H. Special Protection Laws

Depending on the victim and conduct, other laws may apply, including laws on:

violence against women and children;
child protection;
trafficking;
sexual exploitation;
voyeurism;
unjust vexation or grave coercion;
threats;
blackmail or extortion;
falsification;
use of fictitious names;
usurpation of authority;
illegal recruitment;
lending harassment;
harassment through misuse of personal data.

IV. Where to Report Facebook Scams in the Philippines

A victim may report a Facebook scam through several channels. The proper office depends on the nature of the scam.

A. Report to Facebook or Meta

The first step is often to report the scam directly on Facebook.

Victims may report:

fake accounts;
hacked accounts;
scam pages;
fraudulent Marketplace listings;
fake ads;
phishing messages;
impersonation;
harassment;
threats;
intellectual property misuse;
suspicious links;
fake business pages.

Reporting to Facebook may result in removal of the account, page, group, listing, ad, or post. However, Facebook reporting alone usually does not recover money or automatically start a Philippine criminal investigation.

Victims should not rely solely on Facebook’s internal reporting system. They should also preserve evidence and report to Philippine authorities when money, identity theft, threats, or criminal conduct is involved.

B. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group is a principal law enforcement unit for cybercrime complaints in the Philippines.

A Facebook scam may be reported to the PNP Anti-Cybercrime Group when it involves:

online fraud;
phishing;
identity theft;
hacking;
fake accounts;
account takeover;
cyber extortion;
sextortion;
cyber harassment;
online threats;
unauthorized access;
online selling scams;
cyber-related estafa.

Victims should bring documentary and digital evidence, identification documents, and transaction records.

C. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division also handles cybercrime complaints, including online scams, phishing, identity theft, hacking, and cyber fraud.

A complaint may be filed with the NBI where the victim seeks investigation of cyber-related criminal conduct. The NBI may require personal appearance, sworn statements, screenshots, payment records, and other supporting evidence.

D. Local Police Station

Victims may also report the incident to the local police station. Local police may prepare a blotter report and refer the matter to the appropriate cybercrime unit.

A police blotter may be useful as an initial record, especially when:

the victim needs documentation for banks, e-wallet providers, or employers;
the victim is being harassed or threatened;
the victim needs proof that the incident was reported;
the matter is urgent.

However, for technical cybercrime investigation, specialized units such as the PNP Anti-Cybercrime Group or NBI Cybercrime Division are usually more appropriate.

E. Prosecutor’s Office

A victim may file a criminal complaint before the Office of the City Prosecutor or Provincial Prosecutor, supported by affidavits and documentary evidence.

For estafa or cyber-related estafa, the complaint usually includes:

the complainant’s affidavit;
affidavits of witnesses, if any;
screenshots of conversations and posts;
payment receipts;
bank or e-wallet transaction records;
account details of the scammer;
proof of demand, if applicable;
proof of non-delivery or fraudulent conduct;
identification documents of the complainant;
other supporting documents.

The prosecutor determines whether there is probable cause to file an information in court.

F. Department of Trade and Industry

The Department of Trade and Industry may be relevant where the complaint involves consumer transactions, online sellers, deceptive advertising, non-delivery of goods, defective goods, or unfair sales practices.

DTI may be more useful where the seller is an identifiable business or merchant. It may be less effective where the scammer uses fake names, fake accounts, or purely criminal deception.

G. Securities and Exchange Commission

The Securities and Exchange Commission should be considered where the scam involves investments, securities, crypto investment solicitation, unauthorized investment-taking, Ponzi schemes, or public offering of investment contracts.

Victims should report Facebook pages, groups, posts, videos, ads, and messages showing:

promises of profits;
recruitment mechanics;
investment packages;
payout schedules;
referral commissions;
supposed registration claims;
names of operators;
bank or e-wallet accounts used for collections.

H. National Privacy Commission

The National Privacy Commission may be appropriate where the Facebook scam involves misuse of personal data, identity theft, unauthorized disclosure of sensitive information, data breach, or coercive use of personal information.

Examples include:

scammers using a victim’s ID to open accounts;
posting private information online;
collecting IDs and selfies under false pretenses;
unauthorized use of personal data for loans;
doxxing;
sharing personal information in groups;
using hacked contact lists for fraud.

I. Banks, E-Wallet Providers, and Payment Channels

Victims should immediately report fraudulent transactions to the bank, e-wallet provider, remittance center, or payment platform used.

This may include:

GCash;
Maya;
banks;
credit card issuers;
debit card providers;
remittance companies;
payment gateways;
crypto exchanges;
online marketplaces.

Prompt reporting is important because the provider may be able to freeze funds, flag accounts, reverse unauthorized transactions in limited cases, block suspicious accounts, or preserve transaction records for investigation.

Victims should ask for a case reference number, ticket number, or written acknowledgment.

J. Barangay

For purely civil disputes between identifiable parties in the same city or municipality, barangay conciliation may sometimes be required before court action. However, many Facebook scams are criminal in nature or involve parties in different locations, fake identities, or cybercrime elements.

Barangay proceedings are generally not a substitute for reporting online fraud to cybercrime authorities.

V. Evidence to Preserve Before Reporting

Evidence is crucial. Victims should preserve evidence before the scammer deletes posts, blocks the victim, changes usernames, deactivates accounts, or removes listings.

Important evidence includes:

Screenshots of the Facebook profile, page, group, listing, or ad Include the name, username, profile URL, page URL, date, time, and visible posts.
Screenshots of Messenger conversations Capture the full conversation, including promises, representations, payment instructions, excuses, threats, admissions, and refusal to refund.
Transaction receipts Preserve GCash, Maya, bank transfer, remittance, credit card, or crypto transaction records.
Account numbers and wallet numbers Record the recipient’s name, mobile number, bank account number, e-wallet number, QR code, wallet address, or remittance details.
Links and URLs Copy the Facebook profile link, page link, group link, Marketplace listing link, ad link, phishing website link, and any shortened URLs.
Names and aliases used by the scammer Include Facebook name, username, real name if known, mobile number, email address, bank account name, and other identifiers.
Photos, IDs, documents, or shipping details sent by the scammer These may be fake but can still help investigators.
Proof of non-delivery or failed transaction Courier tracking, refund demands, seller excuses, or delivery inconsistencies may be relevant.
Witness statements Other victims, group admins, friends, or people contacted by the scammer may provide supporting affidavits.
Device and account information For hacked accounts, preserve security alerts, login notices, password reset emails, suspicious login locations, and recovery messages.
Demand letter or refund demand In some estafa complaints, proof that the victim demanded delivery or refund may help establish refusal or fraudulent intent, though the need for this depends on the facts.

VI. How to Take Proper Screenshots

Screenshots should be clear, complete, and organized. Ideally, they should show:

the date and time;
the full Facebook name;
the username or profile URL;
the entire message thread;
the payment instructions;
the amount paid;
the account receiving payment;
the scammer’s representations;
the victim’s payment confirmation;
the scammer’s failure or refusal to comply.

For better evidentiary value, victims may:

take screenshots on a device showing the system date and time;
save webpages as PDFs;
screen-record scrolling conversations;
export Facebook data where possible;
avoid editing or cropping screenshots unnecessarily;
keep original files;
back up evidence in cloud storage or external drives;
print copies for filing.

Screenshots are useful, but investigators may still require verification, affidavits, and other supporting records.

VII. Step-by-Step Guide to Reporting a Facebook Scam

Step 1: Stop Communicating Except to Preserve Evidence

Once a scam is suspected, avoid sending more money, OTPs, IDs, passwords, photos, or personal information. Do not click suspicious links. Do not delete conversations.

Communication should be limited to preserving evidence or making a clear demand for refund or delivery, where appropriate.

Step 2: Secure Your Facebook and Email Accounts

If the scam involves phishing or account takeover:

change your Facebook password;
change your email password;
enable two-factor authentication;
log out of unknown sessions;
check recovery email and phone number;
remove suspicious apps;
warn contacts not to transact with the hacked account;
report the account as hacked to Facebook.

If the scammer obtained banking or e-wallet information, secure those accounts immediately.

Step 3: Contact the Payment Provider

Report the transaction to the bank, e-wallet, remittance center, or payment provider. Provide:

transaction reference number;
date and time;
amount;
recipient account or wallet;
screenshots of the scam;
police blotter or complaint reference, if available.

Ask whether the receiving account can be frozen, flagged, or investigated.

Step 4: Report the Account, Page, Post, Ad, or Listing to Facebook

Use Facebook’s reporting tools to report:

scam or fraud;
fake account;
impersonation;
hacked account;
phishing;
harassment;
intellectual property violation;
suspicious Marketplace listing;
fake page;
fraudulent ad.

This may reduce further harm to other victims.

Step 5: File a Complaint with Cybercrime Authorities

For criminal conduct, prepare a complaint with the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or appropriate law enforcement office.

Bring:

valid government ID;
printed screenshots;
digital copies of evidence;
transaction receipts;
payment account details;
links and usernames;
affidavits, if available;
chronology of events;
list of witnesses;
copies of reports made to Facebook and payment providers.

Step 6: Prepare a Sworn Statement

Authorities may require an affidavit or sworn statement. A useful statement should include:

the complainant’s name and address;
how the victim found the scammer;
the Facebook account, page, group, or listing involved;
the scammer’s representations;
the amount paid;
the date, time, and mode of payment;
what happened after payment;
demands for refund or delivery;
harm suffered;
attached evidence.

The affidavit should be truthful, chronological, and specific.

Step 7: Consider Filing with Other Agencies

Depending on the case:

online selling issue: DTI;
investment scam: SEC;
data privacy issue: NPC;
illegal recruitment: DMW or appropriate labor authorities;
threats, extortion, sextortion: cybercrime authorities and local police;
bank or e-wallet fraud: financial institution and law enforcement.

VIII. Sample Complaint-Affidavit Structure

A complaint-affidavit for a Facebook scam may be structured as follows:

Republic of the Philippines City/Province of ________

AFFIDAVIT-COMPLAINT

I, [Name], of legal age, Filipino, residing at [Address], after being sworn in accordance with law, state:

I am the complainant in this case.
On or about [date], I saw a Facebook post/listing/page/account under the name [name/account] offering [goods/services/investment/job/etc.].
The account used the following Facebook link or username: [URL/username].
The person represented to me that [state the promise or representation].
Relying on these representations, I paid the amount of PHP [amount] on [date] through [GCash/Maya/bank/remittance/etc.] to [account name/account number/mobile number].
Attached are copies of the payment receipt and screenshots of our conversations.
After receiving payment, the person failed to deliver the promised item/service/refund/investment return.
I demanded [delivery/refund/explanation] on [date], but the person [blocked me/refused/ignored me/gave false excuses/deactivated the account].
I later discovered that [other facts showing fraud, such as other victims, fake identity, deleted page, false tracking number, etc.].
I am executing this affidavit to file a complaint for estafa, cybercrime, and other applicable offenses.

IN WITNESS WHEREOF, I have signed this affidavit on [date] at [place].

[Signature] [Name]

Subscribed and sworn to before me this ___ day of _______.

This is only a general template. Actual affidavits should be tailored to the facts and requirements of the receiving office.

IX. Reporting Different Types of Facebook Scams

A. Online Selling Scam

For a Facebook online selling scam, the victim should preserve:

seller’s profile or page;
product listing;
price and item description;
conversation;
payment receipt;
delivery promises;
tracking number, if any;
refund demands;
proof of blocking or non-response.

Possible legal basis:

estafa;
cybercrime-related fraud;
consumer protection violations, if the seller is a business;
possible falsification or identity theft if fake IDs or fake documents were used.

Reports may be made to:

Facebook;
payment provider;
PNP Anti-Cybercrime Group;
NBI Cybercrime Division;
DTI, if seller is an identifiable merchant.

B. Phishing Scam

For phishing, the victim should preserve:

phishing link;
message containing the link;
fake login page screenshot;
sender’s profile;
security alerts;
unauthorized transaction records;
affected accounts.

Immediate actions:

change passwords;
enable two-factor authentication;
contact bank or e-wallet;
report unauthorized transactions;
report to Facebook;
report to cybercrime authorities.

Possible legal basis:

cybercrime;
identity theft;
computer-related fraud;
unauthorized access;
access device violations;
data privacy violations.

C. Investment Scam

For Facebook investment scams, victims should preserve:

investment posts;
group or page name;
names of promoters;
promised returns;
payout schedules;
recruitment messages;
screenshots of testimonials;
SEC registration claims;
receipts and wallet addresses;
conversations with recruiters.

Possible legal basis:

estafa;
securities law violations;
cybercrime;
syndicated estafa, if applicable;
money laundering-related investigation.

Reports may be made to:

SEC;
PNP Anti-Cybercrime Group;
NBI Cybercrime Division;
payment providers.

D. Romance Scam

For romance scams, victims should preserve:

profile information;
photos used;
conversations;
requests for money;
remittance receipts;
bank or e-wallet details;
promises or emotional manipulation;
threats, if any.

Possible legal basis:

estafa;
cybercrime-related fraud;
identity theft;
extortion, if threats are used.

Victims should avoid sending more money, even if the scammer claims to be detained, hospitalized, stranded, or in danger.

E. Sextortion or Blackmail Through Facebook

Sextortion requires urgent action. Victims should:

stop paying;
preserve screenshots;
preserve account links;
report to Facebook;
secure accounts;
inform trusted persons if needed;
report immediately to cybercrime authorities.

Possible legal basis:

grave threats;
coercion;
unjust vexation;
cybercrime;
anti-photo and video voyeurism laws;
child protection laws, if minors are involved;
violence against women and children laws, depending on the relationship and circumstances.

Victims should avoid negotiating endlessly with extortionists. Payment often leads to further demands.

F. Fake Job or Illegal Recruitment Scam

If the Facebook scam involves job offers, overseas work, processing fees, visa fees, or placement fees, victims should preserve:

job post;
recruiter’s profile;
company name used;
conversations;
payment receipts;
fake contracts;
fake visas;
fake IDs;
promised salary and location;
other victims’ information.

Possible legal basis:

estafa;
illegal recruitment;
cybercrime;
falsification;
trafficking-related offenses, where applicable.

Reports may be made to cybercrime authorities and labor or migrant worker agencies, depending on whether local or overseas employment is involved.

G. Fake Loan App or Lending Scam

Facebook loan scams may involve advance fees, identity theft, harassment, or public shaming.

Victims should preserve:

loan advertisement;
app or page name;
terms offered;
amount paid;
data requested;
harassment messages;
threats to contacts;
unauthorized use of photos or IDs.

Possible legal issues:

fraud;
unfair debt collection practices;
data privacy violations;
cyber harassment;
identity theft;
unauthorized lending operations.

Reports may be made to:

cybercrime authorities;
National Privacy Commission;
SEC, for lending or financing companies;
payment providers.

X. Civil Remedies

A victim may also consider civil remedies, especially where the scammer is identifiable and has assets.

Possible civil claims include:

recovery of money;
damages;
attorney’s fees;
costs of suit;
injunction, in appropriate cases.

Civil action may be separate from, impliedly instituted with, or reserved from the criminal action depending on procedural circumstances. Legal advice is recommended when deciding how to proceed.

XI. Can the Victim Get the Money Back?

Recovery depends on several factors:

how quickly the transaction is reported;
whether funds remain in the receiving account;
whether the receiving account is real or a mule account;
whether the bank or e-wallet can freeze or trace funds;
whether the scammer can be identified;
whether criminal or civil proceedings succeed;
whether there are assets to satisfy restitution or judgment.

Immediate reporting to payment providers increases the chance of preserving funds, but recovery is never guaranteed.

XII. Risks of Publicly Posting “Scammer Alerts”

Victims often post warnings on Facebook to alert others. While this may help prevent further harm, it can also create legal risks.

A victim should avoid:

making accusations without evidence;
posting private personal information;
posting IDs, addresses, phone numbers, or family details;
using insulting or defamatory language;
encouraging harassment;
naming the wrong person;
exposing sensitive personal data.

A safer post states verifiable facts, such as:

“I transacted with this account on [date]. Payment was sent to [masked account details]. The item was not delivered. I have reported the matter to the authorities.”

Victims should be careful with the word “scammer” if the identity is uncertain or if the matter may be a civil dispute rather than criminal fraud.

XIII. What Not to Do After Being Scammed

Victims should avoid:

Sending more money to “unlock,” “refund,” or “process” anything.
Giving OTPs, passwords, PINs, recovery codes, or card numbers.
Deleting messages or blocking the scammer before collecting evidence.
Editing screenshots in ways that reduce credibility.
Publicly posting sensitive personal data.
Threatening violence or harassment.
Paying sextortion demands.
Relying only on Facebook reporting.
Assuming that a bank account name is the real scammer.
Ignoring the possibility that the recipient account is a mule account.

XIV. Practical Checklist for Victims

A victim of a Facebook scam should prepare the following:

valid government ID;
written timeline of events;
screenshots of profile, page, post, listing, or ad;
screenshots of Messenger conversations;
payment receipts;
bank or e-wallet transaction details;
account name and number of recipient;
Facebook URLs and usernames;
phone numbers and email addresses used;
proof of demands for refund or delivery;
reports made to Facebook;
reports made to bank or e-wallet;
names of other victims or witnesses;
printed and digital copies of all evidence.

XV. Suggested Chronology Format

A clear chronology helps investigators and prosecutors.

Date	Event	Evidence
[Date]	Saw Facebook post/listing	Screenshot of post
[Date]	Messaged seller/scammer	Messenger screenshots
[Date]	Sent payment	Receipt/reference number
[Date]	Scammer promised delivery/refund	Conversation screenshot
[Date]	No delivery received	Courier proof or statement
[Date]	Demanded refund	Screenshot of demand
[Date]	Scammer blocked/deleted account	Screenshot or account link
[Date]	Reported to bank/Facebook/police	Case/reference number

XVI. Liability of Mule Accounts

Many Facebook scams use bank accounts or e-wallet accounts belonging to other people. These may be “mule accounts,” meaning accounts used to receive and transfer scam proceeds.

The named account holder may claim they were also deceived, paid a commission, or allowed someone else to use the account. Investigators will examine whether the account holder knowingly participated, negligently allowed use, or was also a victim.

Victims should still report the account details because they are important for tracing funds.

XVII. Reporting Hacked Facebook Accounts Used for Scams

When a hacked account is used to scam friends or contacts, the account owner should:

recover the account through Facebook’s hacked account process;
warn contacts through other channels;
change email and Facebook passwords;
enable two-factor authentication;
check logged-in devices;
report unauthorized messages and posts;
preserve evidence of account compromise;
report to cybercrime authorities if money was obtained.

Friends who sent money should file their own reports as victims.

XVIII. Facebook Group Admins and Page Admins

Admins of Facebook groups and pages should take steps to reduce scams:

require post approval;
ban suspicious sellers;
require proof of legitimacy for sellers;
warn members against advance payments;
discourage sharing OTPs and IDs;
remove phishing links;
preserve evidence before deleting scam posts;
cooperate with victims and authorities;
avoid publicly exposing sensitive personal data.

Admins may face reputational issues if their groups are repeatedly used for scams, although liability depends on participation, knowledge, negligence, and specific facts.

XIX. Businesses Impersonated on Facebook

Businesses whose names, logos, pages, or brands are used by scammers should:

report impersonation to Facebook;
issue public advisories through official channels;
preserve screenshots;
inform customers of official pages and payment channels;
report fraudulent pages to law enforcement;
consider intellectual property complaints if trademarks or copyrighted materials are used;
monitor ads using their name or logo.

Businesses should also remind customers that payments should only be made through verified channels.

XX. Special Issues Involving Minors

If a minor is involved as a victim, complainant, or person depicted in photos or videos, heightened care is necessary.

Cases involving minors may implicate child protection laws, anti-sexual exploitation laws, cybercrime laws, and privacy concerns. Parents, guardians, schools, and authorities should avoid spreading the minor’s identity or private materials.

For sextortion or sexual exploitation involving minors, immediate reporting to cybercrime authorities is crucial.

XXI. Time Limits and Urgency

Victims should act quickly. Evidence can disappear, accounts can be deleted, funds can be withdrawn, and scammers can change identities.

Immediate action is especially important for:

unauthorized bank or e-wallet transfers;
phishing;
hacked accounts;
sextortion;
threats;
investment scams still recruiting victims;
scams involving multiple victims.

Even if some time has passed, victims may still report. However, delay may make recovery and identification more difficult.

XXII. Difference Between a Civil Breach and a Scam

Not every failed Facebook transaction is automatically a criminal scam. There is a difference between:

a seller who is delayed but intends to deliver;
a seller who made a mistake;
a business dispute over quality;
a refund disagreement;
a genuine inability to perform;
a deliberate fraudulent scheme.

Criminal fraud generally requires deceit or fraudulent intent. Evidence of fraud may include:

fake identity;
multiple victims;
deletion of account after payment;
false tracking numbers;
refusal to refund;
blocking the victim;
repeated excuses inconsistent with facts;
use of stolen photos;
use of fake receipts or documents;
immediate transfer of funds;
pretending to be a legitimate business;
promise of unrealistic returns.

The more evidence of deceit at or before the time of payment, the stronger the criminal complaint.

XXIII. Jurisdiction and Venue

Cyber scams often involve victims and scammers in different cities or provinces. Reports may be made where the victim resides, where the transaction occurred, where payment was sent, where the effects were felt, or where the offender may be found, depending on procedural rules and the nature of the offense.

Cybercrime authorities are often better equipped to handle cases involving different locations, anonymous accounts, digital evidence, and online platforms.

XXIV. Dealing With Banks and E-Wallets

When reporting to a bank or e-wallet provider, victims should be concise and specific.

The report should include:

“I am reporting a fraudulent transaction.”
Date and time of transfer.
Amount.
Recipient account name and number.
Transaction reference number.
Explanation of how the scam happened.
Screenshots of the Facebook conversation.
Request to preserve records, investigate, and freeze funds if possible.

Victims should request written acknowledgment and keep all ticket numbers.

XXV. Preventive Measures

To avoid Facebook scams:

transact only with verified sellers or reputable businesses;
avoid advance payments to unknown sellers;
check page history, reviews, comments, and transparency information;
search for duplicate photos or suspicious listings;
avoid deals that are too cheap or urgent;
never share OTPs, passwords, or PINs;
avoid clicking unknown links;
use secure payment methods with buyer protection where available;
verify job offers through official company channels;
verify investment offers with proper regulatory registration;
avoid sending IDs unless necessary and only to legitimate entities;
watermark ID copies for specific transactions;
enable two-factor authentication;
keep Facebook and email accounts secure.

XXVI. Legal Caution on Evidence and Privacy

Victims should preserve evidence but must also avoid unlawful acts while collecting it. Do not hack, threaten, entrap unlawfully, impersonate authorities, or access accounts without permission.

When submitting evidence to authorities, unedited copies are preferable. When posting publicly, redact sensitive personal information, including:

full account numbers;
addresses;
government ID numbers;
signatures;
children’s names;
private photos;
unrelated personal details.

XXVII. Conclusion

Reporting Facebook scams in the Philippines requires both platform-based reporting and formal legal action. Facebook reports may remove scam accounts or posts, but they do not replace complaints filed with Philippine authorities. Victims should preserve evidence, secure their accounts, contact payment providers immediately, and report the matter to the appropriate office, such as the PNP Anti-Cybercrime Group, NBI Cybercrime Division, DTI, SEC, NPC, banks, or e-wallet providers.

The applicable law depends on the nature of the scam. Online selling scams may involve estafa and cybercrime. Phishing may involve identity theft, access device violations, and data privacy issues. Investment scams may involve securities violations. Sextortion may involve threats, coercion, cybercrime, and special protection laws. Fake job scams may involve estafa and illegal recruitment.

The most important steps are speed, documentation, and proper reporting. A victim should keep screenshots, receipts, account details, links, and a clear timeline. These materials are essential for investigation, prosecution, account freezing, and possible recovery of funds.