I. Snapshot

If you’ve lost money to an “investment platform” (apps, websites, chats, e-wallet channels, crypto/forex/real-estate or “double your money” schemes), you can pursue parallel remedies: (1) criminal (put scammers in jail and seek restitution), (2) civil (get a money judgment and provisional asset freezes), and (3) regulatory/administrative (SEC/BSP/Insurance Commission/AMLC actions that can halt operations and trace funds). Move fast, preserve evidence, and run remedies in parallel—don’t wait for one track to finish before starting another.

II. What laws typically apply

A) Criminal

Estafa/Swindling (Revised Penal Code). Classic tool for misrepresentations, false pretenses, or fraudulent conversion of funds.
Syndicated/large-scale fraud. Heavier penalties when committed by a group engaging in investment-type solicitation from the public.
Cybercrime (R.A. 10175). If the fraud used computers/online means, estafa may be treated as cyber-estafa (with higher penalties and special investigative tools).
Anti-Money Laundering (AMLA). Fraud proceeds can be frozen via AMLC petitions; “investment fraud” is a predicate offense enabling bank/e-wallet tracing.
Access device fraud / computer misuse. Where cards, OTPs, hacked accounts, or social-engineering were used.

B) Regulatory / Administrative

Securities Regulation (public offering/sale of securities without registration; unlicensed brokers; misleading statements).
Financial Consumer Protection (unfair, abusive, or fraudulent acts by entities offering financial products/services).
BSP (virtual asset service providers/e-money issuers/remittance agents); Insurance Commission (if “investment” is disguised insurance/pre-need).
SEC can issue Cease-and-Desist Orders, impose fines, cite in contempt, and refer for criminal prosecution.

C) Civil

Damages under the Civil Code (fraud, abuse of rights, quasi-delict, unjust enrichment).
Rescission/annulment of contracts induced by fraud; restitution of amounts paid; interest and attorney’s fees.
Representative/class-type suits where numerous victims share common issues.

III. Your first 48 hours: preservation & containment

Preserve evidence
- Keep screenshots (ads, dashboards, chats, promises of returns), receipts, TXIDs (for crypto), bank/e-wallet reference numbers, emails/SMS with OTP traces, IDs of the counterparty, and who instructed what.
- Export statements in full (PDF/CSV) and download KYC selfies/video calls if the platform took them.
Stop further loss
- Revoke API keys/permissions; change passwords; enable 2FA; freeze connected cards.
- File dispute/chargeback with banks/cards/e-wallets immediately (issuer rules often allow 60–120 days; sooner is better).
Notify authorities
- Report to law enforcement (ACG/NBI) with your evidence pack.
- File a complaint with SEC (if public solicitation/securities), BSP (if e-money/VASP angle), or Insurance Commission (if disguised insurance).
- Lodge a report with AMLC via the investigating agency to trigger freeze/trace options.

IV. Building the criminal case

Elements you’ll prove (in plain terms)

You were deceived (false claims: guaranteed returns, “licensed by ___” when not, fabricated trading screenshots);
You relied and paid/invested;
The accused appropriated the money or never intended legitimate investment use;
You suffered damage (loss of funds).

Where and how to file

Police/ACG/NBI complaint with your affidavit and evidence. Name known persons and John/Jane Does for unknown operators; include handles and wallet addresses.
Ask investigators to issue subpoenas to banks/e-wallets/telcos for KYC, IP logs, device IMEIs, and money trails.

What remedies can accompany the case

Restitution as part of criminal judgment.
Asset freezing/seizure via AMLC/court (works best if funds are still within regulated channels).
Hold departure orders against identified suspects (through proper prosecutorial/court processes).

V. Civil suit & provisional remedies (to actually get money back)

Complaint for damages/rescission in the proper court (based on amount and defendant’s location).
Rule 57: Writ of Preliminary Attachment—freeze defendants’ assets at the start so a later judgment is not hollow. Grounds include fraud in contracting a debt or disposing of assets to defraud creditors.
Injunction/TRO to stop further disposition of investor funds or website operations (often alongside SEC action).
Garnishment after judgment or on attachment against bank accounts, e-wallet balances, and receivables.
Representative action if many victims share common questions (economies of scale; stronger bargaining power).

Tip: File civil even if criminal is pending. Different standards of proof; civil can move faster on money recovery and attachments.

VI. Regulatory track (to shut them down and aid recovery)

SEC: File an enforcement complaint with your documents. SEC can issue a Cease-and-Desist Order, name and shame the entity, refer to DOJ, and coordinate bank freezes with AMLC.
BSP: If the platform accepts fiat through e-money or operates as a VASP without license/oversight, BSP can order closure/penalties and alert the AMLC.
AMLC: With law-enforcement, pursue freeze orders on identified accounts and wallets; coordinate chain-hops on crypto with exchange compliance teams.

VII. Evidence playbook (what convinces investigators, prosecutors, and judges)

Money trail: deposits, remittances, tx hashes (with block explorer printouts), exchange receipts, QR codes used.
Representations: “guaranteed 20% daily,” “licensed by SEC/BSP,” “no risk,” referral bonuses—capture dates and URLs.
Corporate layer: website domain WHOIS, company names used, “terms” pages, payment processors, bank account names that received your funds.
Link analysis: show how your funds went from your account → their account → onward (even partial tracing helps).
Victim clustering: list of other victims with similar fact patterns; shared group chats and identical wallet destinations.

VIII. Special scenarios

A) Crypto-only schemes

Convert TXIDs into a trace narrative (Tx1 → Exchange A deposit → internal transfer → Off-ramp account name).
Request law enforcement to preserve exchange records and ask exchanges to lock accounts tied to your funds pending lawful orders.
If local VASPs were used, push for KYC disclosure via subpoena/court order.

B) Cross-border platforms

Use MLAT or letters rogatory via the DOJ/OIL, and seek domestic attachment against local assets/agents.
Serve resident agents of foreign companies and go after local payment intermediaries (collectors, over-the-counter partners) who processed the money.

C) Inside jobs / licensed intermediaries

If a licensed broker/agent mis-sold, pursue administrative complaints with their regulator (SEC/BSP/IC) and civil/criminal cases personally. Licenses can be suspended; bonds/insurance may respond.

IX. Timelines & prescription (act quickly)

Chargebacks/disputes: often 60–120 days from posting—do now.
Criminal: prescription varies with penalty; serious fraud typically has long periods, but earlier filing preserves evidence and freezing options.
Civil: contract/tort claims generally 4–10 years depending on cause; securities civil liability has specific windows (often from discovery of the untruth or violation). When in doubt, file early.

X. Defense angles you’ll face (and how to counter)

“It was high risk investing, not fraud.” → Show false statements, fabricated performance, unlicensed solicitation, Ponzi-style payouts.
“You consented via terms.” → Consent to terms doesn’t excuse unlawful solicitation or fraudulent misrepresentation.
“Funds already gone; nothing to freeze.” → Seek attachment on other assets; go after aiders/abettors and beneficiaries; leverage AMLC tracing.

XI. Practical checklists

A) Victim quick-start

☐ Compile timeline and evidence binder (fund flows + screenshots).
☐ File bank/e-wallet disputes; request recall/chargebacks.
☐ Report to ACG/NBI; request subpoenas and AMLC referral.
☐ Lodge SEC/BSP/IC complaints (for shutdown + coordination).
☐ File civil case with attachment in proper venue.
☐ Coordinate with other victims for scale and shared counsel.

B) Lawyer’s immediate motions

☐ Application for writ of attachment (Rule 57).
☐ Motion to preserve evidence/subpoena duces tecum to banks/e-wallets/VASPs/telcos.
☐ Prayer for TRO/Prelim Injunction halting further solicitation or dissipation.
☐ AMLC freeze request channel via investigating agency.

XII. Red flags (spot the scam next time)

“Guaranteed return / risk-free.”
Pressure to top-up to unlock withdrawals; referral structures with unusually high overrides.
Unlicensed “brokers,” borrowed permits, or fake badges.
Returns paid from new deposits (Ponzi).
No clear product or opaque “AI trading bot.”

XIII. Model affidavit paragraph (adapt to your facts)

I invested ₱[amount] on [dates] via [platform/app/URL] after being promised [return/guarantee] by [name/handle]. Funds were transmitted through [bank/e-wallet/crypto], reference [numbers/TXIDs]. Despite demands dated [dates], respondents refused to return my capital/“profits.” Platform dashboards showed fabricated trades and later disabled withdrawals. I suffered ₱[loss]. I attach Annexes A–H (screenshots, receipts, chats, domain data) and request investigation for estafa/cybercrime, and coordination with AMLC to freeze and trace proceeds.

XIV. Key takeaways

Run criminal, civil, and regulatory tracks together; each supports the others.
Speed matters: chargebacks, freezes, and attachments work best early.
Evidence wins: money trail + false promises + licensing gaps make a powerful case.
Even when scammers hide behind apps or crypto, regulated on-/off-ramps and KYC trails give you recovery leverage.
Coordinate with other victims; larger cases move regulators and courts faster.

If you want, share your timeline (dates, amounts, payment rails, screenshots) and I can map a step-by-step filing plan and draft pleadings checklists tailored to your case.