The digital landscape in the Philippines has seen a sharp increase in cyber-enabled crimes, specifically online estafa and social media account recovery scams. As transactions and personal interactions migrate further into the digital sphere, the legal framework has evolved to address these specific forms of deceit.

I. Governing Laws

The prosecution of these crimes primarily falls under a combination of the Revised Penal Code (RPC) and special legislation designed for the digital age:

Republic Act No. 10175 (Cybercrime Prevention Act of 2012): This is the primary law. It penalizes "Computer-related Fraud" and applies a higher penalty (one degree higher) to crimes already defined in the RPC if they are committed through Information and Communications Technologies (ICT).
Article 315 of the Revised Penal Code (Estafa): Defines swindling through unfaithfulness, abuse of confidence, or false pretenses.
Republic Act No. 11934 (SIM Registration Act): Aims to curb SMS-based scams and provides a mechanism for law enforcement to track perpetrators using mobile numbers.
Republic Act No. 12010 (State Financial Account Scamming Prevention Act - AFASA): A newer regulation specifically targeting "money mules," social engineering schemes, and economic sabotage involving financial accounts.

II. Online Estafa: Mechanisms and Elements

Online estafa occurs when the elements of traditional swindling are committed via the internet. Common examples include "budol-budol" via Messenger, fake online investment schemes, and non-delivery of purchased goods.

Legal Elements for Prosecution:

Defraudation: The victim must have suffered a loss (damage) or the offender intended to cause such loss.
Deceit or Abuse of Confidence: The offender used false pretenses, fraudulent acts, or fraudulent means to induce the victim to part with money or property.
ICT Involvement: The use of a computer system or the internet to execute the fraud.

Under Section 6 of R.A. 10175, the penalty for estafa is increased by one degree because the crime is committed through the use of ICT.

III. Social Media Account Recovery Scams

This specific scam involves "hackers" or "recovery experts" who claim they can restore access to a compromised account for a fee, only to disappear after payment or further compromise the user's data.

Applicable Charges:

Computer-related Fraud (Section 4(b)(2), R.A. 10175): Unauthorized input, alteration, or erasure of computer data with fraudulent intent.
Illegal Access (Section 4(a)(1)): Accessing a computer system without right.
Identity Theft (Section 4(b)(3)): The intentional acquisition, use, or transfer of identifying information belonging to another without right.

IV. Available Legal Remedies

Victims of these crimes have several avenues for recourse:

1. Criminal Action

The victim may file a formal complaint for Cyber-Estafa or Computer-related Fraud.

Where to file: The PNP Anti-Cybercrime Group (PNP-ACG) or the NBI Cybercrime Division (NBI-CCD).
Procedure: Law enforcement conducts an investigation. If they find sufficient evidence, the case is referred to the Department of Justice (DOJ) for preliminary investigation to determine probable cause for filing in court.

2. Civil Action for Damages

Under the Civil Code of the Philippines, a victim can sue for the recovery of the money lost (Actual Damages), Moral Damages (for mental anguish), and Exemplary Damages (to set a public example). This can be filed independently or alongside the criminal case.

3. Administrative Remedies and Reporting

Bangko Sentral ng Pilipinas (BSP): If the scam involved a bank or e-wallet (like GCash or Maya), victims can report the incident to the BSP’s Consumer Protection Department.
Cybercrime Investigation and Coordinating Center (CICC): Victims can report scams through the Inter-Agency Response Center (IARC) Hotline 1326 for immediate assistance in blocking fraudulent accounts or numbers.

V. Evidentiary Requirements

For a case to prosper, the victim must preserve digital evidence. Philippine courts follow the Rules on Electronic Evidence (REE). Essential evidence includes:

Screenshots: Full conversations showing the offer, the agreement, and the subsequent ghosting.
Proof of Transaction: Deposit slips, e-wallet transaction receipts, and reference numbers.
URLs and Profiles: The direct link to the perpetrator’s social media profile (not just the display name).
Header Information: If the scam occurred via email, the full email headers are necessary to track IP addresses.

VI. The "Money Mule" Complication

In many online scams, the money is sent to a "money mule"—a person who allows their account to be used for a fee. Under R.A. 12010 (AFASA), individuals who perform money mule activities can now be held liable even if they claim they were unaware of the primary scam, as the act of lending out a financial account for fraudulent purposes is now specifically criminalized.