How to Verify If an Online Investment Platform Is Legitimate in the Philippines

An online investment platform may look professional, show impressive profits, and even allow small withdrawals at first. None of those facts proves that it is legitimate. In the Philippines, the safest approach is to verify three separate things before sending money: the legal identity of the operator, its authority to offer the specific investment, and the authenticity of the account or wallet receiving your funds.

This distinction matters because scammers often present genuine-looking SEC certificates, DTI registrations, business permits, foreign licenses, or screenshots of supposed government records. A company can be legally registered as a corporation yet still have no authority to solicit investments from the public.

What Makes an Online Investment Platform Legitimate in the Philippines?

A legitimate platform generally needs more than an attractive website and a registered business name. Depending on what it offers, it may need:

  1. A valid legal entity registered with the proper Philippine agency;
  2. A license or secondary authority covering its financial activity;
  3. Registration or an exemption for the particular securities being offered;
  4. Properly licensed brokers, salespersons, advisers, or agents;
  5. Transparent offering documents and risk disclosures; and
  6. Payment channels traceable to the licensed legal entity.

The relevant regulator depends on the product:

Product or activity Primary regulator to check
Shares, bonds, investment contracts, pooled investments, crowdfunding, securities brokerage Securities and Exchange Commission
Banks, e-wallets, remittance businesses, payment operators, trust products and BSP-regulated virtual asset services Bangko Sentral ng Pilipinas
Insurance, variable life insurance, pre-need plans and HMOs Insurance Commission
Cooperative savings or investment products Cooperative Development Authority
Cryptocurrency or digital asset services SEC, BSP or both, depending on the activity

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, recognizes the rights of financial consumers to fair treatment, transparent disclosure, protection against fraud and timely handling of complaints. It defines investment fraud broadly to include deceptive public solicitation, Ponzi schemes and public investment offerings made without the required SEC license or permit, unless the securities or transactions are legally exempt. (Supreme Court E-Library)

Philippine Laws That Apply to Online Investment Platforms

Securities Regulation Code

The principal law is Republic Act No. 8799, or the Securities Regulation Code.

Section 8 generally prohibits securities from being offered or sold in the Philippines unless a registration statement has been filed with and approved by the SEC, subject to the law’s exemptions. Section 26 prohibits fraudulent transactions and deceptive practices involving securities. Section 28 regulates brokers, dealers, salespersons and associated persons.

A “security” is not limited to ordinary company shares. It can include an investment contract—a transaction in which a person contributes money to a common enterprise, expects a profit and depends primarily on the efforts of promoters or other people to produce that profit.

In Power Homes Unlimited Corporation v. Securities and Exchange Commission, G.R. No. 164182, February 26, 2008, the Supreme Court applied this test to determine whether a business arrangement was an investment contract. Later decisions have reiterated that an investment contract exists when the required elements, including an expectation of profits arising primarily from others’ efforts, are present. (Supreme Court E-Library)

This means that calling a scheme a “membership,” “staking package,” “digital franchise,” “profit-sharing account,” “livestock program,” “advertising package,” “co-ownership,” or “managed trading service” does not remove it from SEC regulation. Authorities look at how the arrangement actually works, not merely the label used by the promoter.

Financial Products and Services Consumer Protection Act

Under RA No. 11765, financial consumers have the right to:

  • Clear and accurate disclosures;
  • Fair and equitable treatment;
  • Protection of their assets against fraud and misuse;
  • Data privacy and protection; and
  • Timely complaint handling and redress.

Financial service providers are responsible for claims made in their marketing materials. Contract terms that improperly waive a consumer’s right to sue, receive information, complain, or protect non-public data are unenforceable. The law also authorizes financial regulators to impose sanctions, issue cease-and-desist orders and establish complaint or adjudication mechanisms. (Supreme Court E-Library)

Estafa, cybercrime and financial account scamming

Fraudulent investment operations may also involve:

  • Estafa under Article 315 of the Revised Penal Code;
  • Syndicated estafa under Presidential Decree No. 1689, when the legal requirements are present;
  • Violations of RA No. 10175, the Cybercrime Prevention Act of 2012, when crimes are committed through information and communications technology; and
  • Violations of RA No. 12010, the Anti-Financial Account Scamming Act of 2024.

Section 6 of RA No. 10175 generally imposes a penalty one degree higher when crimes under the Revised Penal Code or specified special laws are committed through information and communications technology. (Supreme Court E-Library)

RA No. 12010 covers money-mule activities and certain social-engineering schemes involving bank accounts, e-wallets and other financial accounts. It permits regulated institutions to place a temporary hold on funds involved in a disputed transaction for the period prescribed by the BSP, which may not exceed 30 calendar days unless extended by a court. A hold is not automatic and does not guarantee recovery, which is why victims should report suspicious transfers immediately. (Lawphil)

How to Check If an Investment Platform Is SEC Registered

1. Identify the exact legal entity

Do not search only the brand name shown on the app or Facebook page. Ask for:

  • Complete corporate or partnership name;
  • SEC registration number;
  • Date of incorporation;
  • Registered office address;
  • Names of directors and principal officers;
  • Official website and email domain;
  • Name of the company that owns the app;
  • Name of the entity receiving deposits; and
  • Details of any parent or foreign company.

Scammers frequently use names that closely resemble legitimate institutions. A platform called “ABC Global Trading” may show the certificate of an unrelated “ABC Global Trading Solutions Corporation.”

The legal name in the SEC record should match the name in the contract, platform terms, bank account, official receipt and payment instructions.

2. Search the SEC’s official databases

Use the SEC’s official Check with SEC portal to examine whether the entity is registered and whether it has relevant secondary licenses.

You may also use the SEC’s eSEARCH service for available corporate records and document requests.

Confirm at least the following:

  • The company actually exists;
  • Its registration has not been revoked or suspended;
  • Its primary purpose is consistent with the activity being promoted;
  • It has the necessary secondary license;
  • The registration number matches the document shown to you; and
  • Its registered name has not been altered.

SEC incorporation alone is not authority to collect investments. A corporation may be authorized to engage in software development, marketing, consultancy, agriculture or general trading, but not to sell securities or manage investments.

3. Verify the secondary license

Ask the platform to identify the exact regulatory authority under which it operates. Depending on the activity, it may need to be registered as a:

  • Broker or dealer in securities;
  • Investment company adviser;
  • Mutual fund distributor;
  • Investment house or underwriter;
  • Crowdfunding intermediary or funding portal;
  • Transfer agent;
  • Operator of an alternative trading system;
  • Crypto-asset service provider; or
  • Other regulated capital-market institution.

Search the entity and its representatives in the SEC’s Electronic Registry of Application for Market Participants. The registry identifies registered capital-market institutions and professionals and states the type of license held. (eramp.sec.gov.ph)

The license must cover the actual service offered. For example, authority to distribute mutual funds does not automatically authorize a company to operate a securities exchange, manage discretionary trading accounts or sell its own unregistered investment packages.

4. Ask for proof that the investment itself may be offered

Request a copy of the applicable:

  • SEC Order of Registration;
  • Permit to Sell Securities;
  • Approved prospectus or offering document;
  • Confirmation of an exempt transaction;
  • Crowdfunding approval or registration;
  • Fund registration documents; or
  • Written explanation identifying the specific legal exemption relied upon.

RA No. 8799 recognizes exempt securities and exempt transactions. However, a promoter should be able to explain the exemption clearly and provide documents supporting it.

A supposed “private placement” advertised to thousands of people through Facebook, Telegram, TikTok or paid online advertisements deserves close scrutiny. A narrowly exempt private offering is not the same as an open public solicitation.

5. Search for SEC advisories and enforcement orders

Search the SEC website and official channels using:

  • The complete company name;
  • Brand or platform name;
  • Names of promoters;
  • Website domain;
  • Mobile app name; and
  • Previous names used by the operation.

An SEC advisory is a serious warning. However, the absence of an advisory does not prove legitimacy. New scams may operate for weeks or months before regulators receive enough evidence to issue a public notice.

You can request clarification or report a platform through the SEC’s iMessage ticketing system. The system accepts inquiries and complaints and produces a trackable electronic ticket. (Securities and Exchange Commission)

How to Verify Banks, E-Wallets and Crypto Platforms

Check BSP-supervised institutions

Use the BSP’s official directories of supervised financial institutions.

The directories include lists for:

  • Banks;
  • Electronic money issuers;
  • Operators of payment systems;
  • Money service businesses;
  • Trust entities;
  • Remittance and transfer companies; and
  • Virtual asset service providers.

The BSP’s list of electronic money issuers and its VASP list are updated periodically. As of May 31, 2026, the BSP was publishing current directories identifying active institutions.

Be careful about the scope of the authorization:

  • An e-wallet license means the institution may issue or operate electronic money. It does not authorize every investment advertised inside or through the wallet.
  • Registration as an operator of a payment system concerns payment operations. It is not approval of an investment scheme.
  • BSP registration as a virtual asset service provider does not mean every token, staking program or profit product offered through the platform is SEC-approved.

For crypto-related services, verify all applicable BSP and SEC authorizations. Philippine regulators distinguish between payment, transfer, custody, exchange and investment-related activities. BSP guidance issued in 2026 recognizes both BSP-authorized VASPs and SEC-authorized crypto-asset service providers as distinct regulated categories. (SME Development Bureau)

Do not rely on app-store availability

An app’s presence in the Apple App Store or Google Play Store is not a government license. Neither are:

  • A verified social-media badge;
  • Thousands of positive reviews;
  • A high app-store rating;
  • A celebrity endorsement;
  • A sponsorship of a public event; or
  • A claim that the platform is “internationally regulated.”

App listings, social-media accounts and websites can remain accessible even while a platform lacks authority to solicit Philippine customers.

How to Check Insurance, Pre-Need and Cooperative Investments

If the product combines investment and insurance—such as variable life insurance—verify both the company and the individual agent with the Insurance Commission.

The Insurance Commission publishes lists of companies with valid certificates of authority, including insurance companies and HMOs. Its published list of insurance companies was updated through December 31, 2025, while separate lists cover other regulated entities. (Insurance Commission)

For cooperative-based products:

  1. Confirm the cooperative’s registration with the Cooperative Development Authority;
  2. Verify that the person soliciting money is genuinely connected with the cooperative;
  3. Ask whether the product is available only to members;
  4. Review the cooperative’s latest audited financial statements; and
  5. Confirm whether another regulator, such as the BSP or Insurance Commission, also has jurisdiction.

A cooperative certificate should not be treated as blanket authority to offer unlimited investment packages to the general public.

Documents a Legitimate Platform Should Be Able to Provide

Document or information What to verify
SEC certificate of incorporation Legal name, number, date and QR code or digital authentication
Articles of incorporation Whether the stated purpose matches the activity
Secondary license or certificate of authority Exact financial activity authorized
Permit to sell or registration order Specific securities or investment product covered
Prospectus or offering memorandum Risks, fees, business model, use of funds and withdrawal terms
Audited financial statements Auditor, reporting period, assets, liabilities and qualifications
General Information Sheet Directors, officers, shareholders and registered address
Agent or salesperson credentials Full name and SEC or IC registration number
Contract and risk disclosure Legal counterparty, governing law, fees and dispute process
Official payment instructions Account name must be consistent with the licensed entity

Never accept screenshots as final proof. Obtain information independently from the regulator’s portal or official contact channels.

Red Flags That Commonly Appear in Philippine Investment Scams

Red flag Why it matters
Guaranteed daily, weekly or monthly returns Genuine investments normally involve risk
“No risk” or “capital guaranteed” without a regulated guarantor The guarantee may be meaningless or unfunded
Recruitment commissions Returns may depend on new members rather than real business activity
Payments to personal bank or e-wallet accounts Funds may be going directly to promoters or money mules
Crypto-only deposits Transfers may be difficult to reverse or trace to a legal entity
Pressure to invest immediately Prevents proper verification
Withdrawal fees, tax-clearance fees or AML fees Victims are often asked to pay repeatedly before a supposed release
Changing websites or company names May indicate evasion of complaints or enforcement
Remote-access software requirement Can expose bank accounts, passwords and devices
Profits visible only on an internal dashboard The figures may be fabricated
SEC certificate but no secondary license The company may exist but lack authority to solicit investments
Foreign license only Foreign registration does not automatically authorize solicitation in the Philippines

A successful initial withdrawal is not proof of legitimacy. Ponzi operations commonly pay early investors with money contributed by later investors to build trust and encourage larger deposits.

A Practical Verification Checklist Before Sending Money

  1. Write down the platform’s exact legal name, domain, app publisher and account details.
  2. Identify the product: securities, managed trading, lending, crypto, insurance, cooperative investment or another arrangement.
  3. Check primary registration with the SEC or appropriate agency.
  4. Confirm the exact secondary license.
  5. Verify the individual agent or salesperson.
  6. Ask for the permit, registration or exemption covering the specific offering.
  7. Search SEC, BSP, IC and CDA advisories.
  8. Compare the legal entity with the bank or wallet account receiving funds.
  9. Read the contract, withdrawal rules, risk disclosures and fee schedule.
  10. Verify the office address and official contact details independently.
  11. Check audited financial statements and corporate officers.
  12. Do not transfer money while any material question remains unanswered.

What to Do If You Already Sent Money

1. Stop sending additional funds

Do not pay a supposed:

  • Withdrawal charge;
  • Tax-clearance fee;
  • Verification deposit;
  • Anti-money laundering fee;
  • Account-upgrade fee;
  • Insurance fee; or
  • Recovery fee.

Legitimate Philippine taxes are not normally collected by sending money to a platform employee’s personal account or crypto wallet.

2. Contact the bank or e-wallet immediately

Report the transfer as a suspected fraud transaction. Provide:

  • Transaction date and time;
  • Amount;
  • Reference number;
  • Recipient’s name and account number;
  • Screenshots of the solicitation;
  • Website and app details; and
  • Police, NBI or SEC report number when available.

Ask the institution to initiate its fraud process, coordinate with the receiving institution and determine whether the funds can still be placed on hold. Do not wait for the platform to stop replying.

For complaints involving a BSP-supervised institution, first use that institution’s consumer assistance channel. Unresolved complaints may be escalated through the BSP Online Buddy and Consumer Assistance Mechanism. The BSP asks for a complaint summary, the resolution requested, contact details, the complaint previously filed with the institution and supporting documents. (SME Development Bureau)

3. Preserve all evidence

Keep original electronic files whenever possible:

  • Complete chat histories;
  • Emails, including headers;
  • Voice recordings and call logs;
  • Website URLs;
  • Screenshots showing dates and account names;
  • Advertisements and livestream recordings;
  • Contracts and presentations;
  • Deposit slips and transfer confirmations;
  • Bank and e-wallet statements;
  • Cryptocurrency wallet addresses;
  • Transaction hashes or blockchain transaction IDs;
  • Names, telephone numbers and identification documents used by promoters; and
  • Copies of the platform’s terms before the website changes or disappears.

Do not edit or crop the only copy of an important screenshot. Save the original and create a separate marked copy for explanation.

4. File reports with the proper agencies

For securities or investment solicitation, file through the SEC’s iMessage system and select the service connected with the Enforcement and Investor Protection Department.

For computer-related fraud, victims may approach the NBI Cybercrime Division or a Regional Cybercrime Center. The NBI’s published process includes an initial complaint sheet, interview, sworn statements and submission or examination of relevant devices and supporting documents. The initial intake process has no stated government fee, although the investigation and prosecution can take considerably longer. (National Bureau of Investigation)

The NBI Anti-Fraud Division may also handle fraud complaints. Its Citizen’s Charter identifies commercial documents, evidence and a demand letter, when applicable, among the materials a complainant may present. (National Bureau of Investigation)

A criminal complaint may eventually involve a complaint-affidavit before the prosecutor’s office. The evidence should establish who made the representations, why they were false, how you relied on them, how much you transferred and how you suffered damage.

5. Be careful with “fund recovery” services

Victims are often targeted a second time by people claiming to be:

  • SEC investigators;
  • BSP officers;
  • NBI agents;
  • Foreign regulators;
  • Blockchain recovery specialists; or
  • Lawyers who have already “located” the funds.

Verify the person through independently obtained government or professional contact details. Do not use the telephone number, email address or link supplied by the supposed recovery agent.

Special Issues for OFWs, Foreigners and Overseas Investors

A Philippine SEC registration does not necessarily make an investment legal in another country, and a foreign license does not automatically authorize a platform to solicit investors in the Philippines.

When the operator is offshore:

  • Verify the foreign license directly with the foreign regulator;
  • Confirm whether the license covers the specific entity and product;
  • Check whether the company is authorized to accept Philippine residents;
  • Determine which entity is named in the contract;
  • Review the governing-law and dispute-resolution clauses; and
  • Confirm whether the company has assets or a registered office in the Philippines.

Recovery can be more difficult when the operator, bank accounts, servers and officers are located in different countries. Service of legal documents, preservation of electronic evidence and enforcement of judgments may require international cooperation.

A complainant abroad may be asked to execute a notarized complaint-affidavit or special power of attorney. Depending on the document’s country of origin and the receiving agency’s requirements, notarization, apostille or Philippine consular authentication may be required. Confirm the exact documentary requirements before sending originals.

Frequently Asked Questions

Is an SEC-registered company automatically allowed to offer investments?

No. SEC incorporation establishes the company’s legal existence. It does not automatically give the company authority to sell securities, manage investments or solicit money from the public. Check its secondary licenses and the registration or exemption covering the specific offering.

How can I check an SEC registration number?

Search the legal name or registration details through Check with SEC or SEC eSEARCH. Compare the official record with the certificate shown by the platform, including the full company name and registration number.

Is a DTI certificate enough proof that a platform is legitimate?

No. A DTI business-name registration primarily records a sole proprietor’s business name. It is not a securities license, investment permit or guarantee of financial capacity.

Does a mayor’s permit or BIR certificate make an investment legal?

No. Local permits and tax registration may show that a business completed certain administrative registrations. They do not replace SEC, BSP, IC or CDA authority for regulated financial activities.

Are guaranteed investment returns illegal?

Not every contractual guarantee is automatically illegal, but unusually high or fixed returns are a major warning sign. Verify who provides the guarantee, whether that entity is regulated, how the guarantee is funded and whether the underlying investment may legally be offered.

Is cryptocurrency trading legal in the Philippines?

Cryptocurrency ownership or trading is not automatically illegal, but the platform and services involved may be regulated. Check the BSP’s VASP directory and any applicable SEC crypto-asset authorization. A foreign crypto exchange’s availability online does not establish Philippine authorization.

Can I trust a platform that allows me to withdraw a small profit?

Not by itself. Fraudulent platforms may allow early withdrawals to encourage larger investments. Verify the operator and license independently before treating any withdrawal as proof of legitimacy.

What should I do if the platform asks for a tax before releasing my money?

Do not send additional funds until the charge has been independently verified. Requests to pay “tax,” “AML clearance,” “unlocking” or “verification” fees to personal accounts or crypto wallets are common features of investment scams.

Can my bank reverse an investment scam transfer?

Sometimes, particularly if the report is made quickly and the funds remain in a regulated account. Reversal is not guaranteed. Contact the sending institution immediately and provide complete transaction and fraud evidence.

How long does an investment fraud complaint take?

Agency intake may occur on the day of filing, but investigation, asset tracing, preliminary investigation and court proceedings may take months or years. Delays are common when suspects use multiple accounts, money mules, cryptocurrency or foreign entities. Immediate reporting improves the chance that accounts and evidence can be preserved.

Key Takeaways

  • SEC registration alone does not authorize a company to solicit investments.
  • Verify the legal entity, secondary license and specific investment product separately.
  • Use official SEC, BSP, Insurance Commission and CDA records—not screenshots supplied by promoters.
  • Confirm that deposits go to the licensed entity, not a personal account or unrelated wallet.
  • Guaranteed returns, recruitment commissions and repeated withdrawal fees are major warning signs.
  • Report suspicious transfers to the bank or e-wallet immediately.
  • Preserve complete digital evidence before websites, chats or accounts disappear.
  • File with the SEC, BSP, NBI or other regulator that has jurisdiction over the product and platform.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.