I. Introduction

Online romance scams are a growing form of cyber-enabled fraud in the Philippines. They usually begin through dating apps, social media platforms, messaging applications, online games, or even professional networking sites. The scammer builds emotional trust with the victim, often over weeks or months, then asks for money, gifts, mobile wallet transfers, bank deposits, cryptocurrency, prepaid load, or help receiving and forwarding funds.

The harm is not only financial. Victims often suffer humiliation, emotional trauma, reputational damage, fear of exposure, and anxiety about whether they may have unknowingly participated in money laundering or other illegal activity. Philippine law provides several possible remedies, both criminal and civil, depending on the facts.

This article discusses the legal remedies available to online romance scam victims in the Philippine context, including criminal complaints, cybercrime remedies, civil recovery, bank and e-wallet remedies, data privacy issues, evidence preservation, and practical steps after discovering the scam.

This is general legal information, not a substitute for advice from a Philippine lawyer who can assess the facts and documents of a specific case.

II. What Is an Online Romance Scam?

An online romance scam is a fraudulent scheme where a person pretends to have romantic or emotional interest in the victim in order to obtain money, property, services, intimate images, account access, or other benefits.

Common romance scam narratives include:

The scammer claims to be an overseas worker, soldier, seafarer, doctor, engineer, businessperson, investor, or foreign national.
The scammer says they want to visit the Philippines but need money for airfare, visa, customs fees, medical bills, or emergency expenses.
The scammer sends fake documents, fake IDs, fake passports, fake remittance receipts, fake parcel tracking records, or fake investment screenshots.
The victim is told that a package, inheritance, or money transfer is being held by customs, immigration, a courier, or a bank.
The victim is pressured to send money through bank transfer, GCash, Maya, remittance centers, cryptocurrency wallets, or money mules.
The scammer asks the victim to open accounts, receive money, forward funds, or use the victim’s identity.
The scammer threatens to release private photos, videos, or conversations if the victim refuses to send more money.

A romance scam may involve one person or a criminal network. The “romantic partner” may be only the front-facing persona, while other people act as fake lawyers, customs officers, bank officers, couriers, police officers, doctors, investors, or relatives.

III. Possible Crimes Under Philippine Law

Online romance scams may fall under several criminal laws. The proper charge depends on what the scammer did, how the money or property was obtained, what platforms were used, and whether threats, fake identities, or intimate images were involved.

A. Estafa Under the Revised Penal Code

The most common criminal offense in romance scam cases is estafa, or swindling, under the Revised Penal Code.

Estafa generally involves defrauding another person through deceit, abuse of confidence, false pretenses, or fraudulent means, resulting in damage.

In a romance scam, estafa may exist when the scammer:

Pretends to be someone else;
Makes false promises of love, marriage, business, investment, travel, inheritance, or repayment;
Uses fake documents or fake emergencies;
Induces the victim to send money or property; and
Causes financial damage to the victim.

The deceit may consist of fake identity, fake romantic intention, fake emergency, fake investment opportunity, fake customs fee, fake medical need, or fake promise to return the money.

The amount lost is important because it may affect the penalty, the gravity of the offense, and the court where the case may be filed.

B. Cyber-Related Estafa Under the Cybercrime Prevention Act

If the estafa was committed through information and communications technology, such as Facebook, Messenger, Instagram, WhatsApp, Telegram, dating apps, email, online banking, e-wallets, or cryptocurrency platforms, it may be treated as cyber-related estafa under the Cybercrime Prevention Act of 2012.

The use of online platforms can aggravate the offense. In practical terms, this means a romance scam conducted through digital means may be prosecuted not only as ordinary estafa but as a cybercrime-related offense.

Evidence may include:

Chat logs;
Screenshots;
Profile URLs;
Email headers;
Phone numbers;
E-wallet numbers;
Bank account details;
IP-related records, where obtainable through proper legal process;
Transaction receipts;
Voice notes, videos, and call logs.

C. Computer-Related Fraud

The Cybercrime Prevention Act also penalizes computer-related fraud. This may apply where the scammer manipulates computer data, uses online systems deceitfully, or causes unauthorized transfers or transactions through digital means.

Examples include:

Fake online investment dashboards;
Fake banking or remittance pages;
Fraudulent payment links;
Phishing pages;
Unauthorized access to the victim’s accounts;
Manipulation of digital records to make the victim believe money was sent, held, or invested.

D. Identity Theft

A romance scam often involves stolen photos, fake names, fake IDs, or impersonation. If the scammer uses another person’s identity or uses the victim’s personal information without authority, this may involve identity theft under cybercrime and related laws.

Identity theft issues arise when:

The scammer uses photos of a real person;
The scammer creates a fake account under another person’s name;
The scammer uses the victim’s ID to open accounts;
The scammer asks the victim to send government IDs, selfies, signatures, or personal data;
The victim’s identity is later used to scam others.

Victims should be especially careful if they sent copies of passports, driver’s licenses, national IDs, UMIDs, PhilHealth IDs, company IDs, bank information, or selfie-verification photos.

E. Grave Threats, Light Threats, Coercion, or Unjust Vexation

Some romance scams turn into extortion. If the scammer threatens to harm the victim, expose private information, contact family members, report the victim falsely, or release intimate content, criminal liability may arise under the Revised Penal Code.

Possible offenses include:

Grave threats;
Light threats;
Coercion;
Unjust vexation;
Other related offenses depending on the words used and the acts committed.

Threats should be preserved exactly. Victims should save screenshots, URLs, usernames, phone numbers, call logs, voice messages, and any demand for money.

F. Robbery by Intimidation or Extortion-Like Conduct

If money is obtained through intimidation, threats, or coercive pressure rather than merely through deceit, the facts may support other criminal theories. Philippine prosecutors will evaluate whether the case is better charged as estafa, threats, coercion, robbery-related conduct, or a combination of offenses.

G. Anti-Photo and Video Voyeurism Act

If the scammer obtains, records, shares, or threatens to share intimate photos or videos, the Anti-Photo and Video Voyeurism Act of 2009 may apply.

This law is relevant where the scammer:

Records intimate images without consent;
Shares intimate photos or videos without consent;
Threatens to upload or distribute private sexual content;
Uses intimate material to demand money.

Even if the victim initially sent the image voluntarily to someone they trusted, the non-consensual sharing or threatened sharing may still create legal liability.

H. Safe Spaces Act and Gender-Based Online Sexual Harassment

If the scam involves sexual harassment, unwanted sexual remarks, threats involving sexual content, or gender-based online abuse, the Safe Spaces Act may also be relevant.

This may apply where the scammer:

Sends unwanted sexual messages;
Demands sexual images;
Threatens sexual humiliation;
Publicly posts sexually degrading content;
Uses gender-based harassment online.

I. Anti-Money Laundering Issues

Romance scams often use “money mule” accounts. A victim may be asked to receive money from someone else and forward it to another account. The scammer may claim this is for business, emergency expenses, investment, charity, or remittance problems.

This is dangerous. The victim may unknowingly become involved in money laundering, fraud, or receiving proceeds of crime.

If a victim has received and forwarded money, the victim should seek legal advice immediately. It is important to preserve all communications showing lack of criminal intent, the scammer’s instructions, transaction records, and the victim’s own belief at the time.

J. Use of Fake Public Officers or Fake Government Documents

Some romance scams involve fake customs officers, immigration officers, police officers, soldiers, prosecutors, judges, diplomats, or bank officials.

If the scammer used fake government authority, fake documents, fake receipts, fake warrants, fake certifications, or fake official seals, other criminal offenses may be implicated, including falsification, usurpation of authority, or use of falsified documents.

IV. Civil Remedies for Victims

Criminal prosecution punishes the offender, but victims also need recovery of money. Philippine law allows civil recovery in several ways.

A. Civil Liability Arising from Crime

When a criminal case is filed for estafa or another offense, the offender may also be held civilly liable for restitution, reparation, or indemnification.

In many criminal cases, the civil action is deemed included unless the victim reserves the right to file a separate civil action, waives it, or has already filed it separately.

A victim may ask for:

Return of the money or property;
Reimbursement of losses;
Interest, where proper;
Damages, depending on proof;
Costs of suit, where allowed.

The ability to recover depends heavily on whether the accused is identified, found, prosecuted, and has assets.

B. Independent Civil Action for Fraud

A victim may also consider a separate civil case for recovery based on fraud, misrepresentation, unjust enrichment, or other civil law grounds.

This may be useful where:

The wrongdoer is known and has assets;
There are bank accounts, properties, or business interests to pursue;
The victim wants to focus on recovery rather than punishment;
The facts involve both personal deception and contractual or investment misrepresentation.

However, civil litigation may be costly and slow. It is also difficult if the scammer used fake identities or is located abroad.

C. Small Claims

If the amount falls within the jurisdictional threshold for small claims and the defendant is identifiable and reachable in the Philippines, a small claims case may be considered.

Small claims may be useful when:

The scammer is known personally;
The scammer borrowed money under false romantic pretenses;
There are written admissions of debt;
The amount is within the applicable small claims limit;
The defendant has a real address and can be served.

Small claims are less useful when the scammer’s identity is fake, the defendant is abroad, or the claim requires complex fraud evidence.

D. Provisional Remedies

In some civil cases, victims may explore provisional remedies such as attachment, but these require strict legal grounds and court approval. Attachment may be relevant when the defendant is disposing of assets, hiding property, or is a non-resident defendant, but it requires careful legal handling.

V. Immediate Steps After Discovering a Romance Scam

A. Stop Sending Money

The first step is to stop all payments. Scammers often use emotional pressure, urgency, threats, guilt, or promises of repayment. Once fraud is suspected, no further transfers should be made.

B. Do Not Warn the Scammer Too Early

Victims often confront the scammer immediately. This can cause the scammer to delete accounts, erase chats, block the victim, or move funds. Before confrontation, preserve evidence.

C. Preserve Evidence

Evidence is critical. Victims should save:

Full chat histories, not only selected screenshots;
Screenshots showing usernames, profile links, dates, and times;
URLs of profiles and posts;
Phone numbers and email addresses;
Bank account names and numbers;
GCash, Maya, remittance, or crypto wallet details;
Receipts and proof of transfers;
Voice messages and call logs;
Photos, videos, documents, and IDs sent by the scammer;
Names of alleged couriers, lawyers, customs officers, or agents;
Any threats, demands, or promises of repayment.

Screenshots should show context. A screenshot of only the payment instruction may be less useful than a screenshot showing the conversation leading to the payment.

D. Export Chats Where Possible

Many platforms allow exporting chat history. Exported files can be stronger than scattered screenshots because they preserve dates and sequence.

Victims should avoid editing or cropping evidence excessively. Courts and investigators may need to see the complete conversation.

E. Keep Original Files

Original images, PDFs, audio clips, videos, and documents should be preserved. Do not rely only on forwarded copies. Metadata may become important.

F. Prepare a Timeline

A clear timeline helps police, prosecutors, lawyers, banks, and courts understand the case.

The timeline should include:

Date first contact was made;
Platform used;
Identity claimed by the scammer;
Important representations made;
Each request for money;
Each payment date, amount, and channel;
Total amount lost;
Discovery of fraud;
Threats or extortion attempts;
Reports already made.

G. Secure Accounts

Victims should immediately change passwords and enable two-factor authentication for:

Email accounts;
Social media accounts;
Banking apps;
E-wallets;
Cloud storage;
Dating apps;
Messaging apps.

If the victim shared OTPs, passwords, recovery codes, or remote access, urgent action is needed.

H. Report the Account to the Platform

Victims should report the scammer’s profile to the relevant platform, but only after preserving evidence. Platforms may remove accounts quickly, which is useful for harm prevention but may also make evidence harder to retrieve later.

VI. Where to Report in the Philippines

A. Philippine National Police Anti-Cybercrime Group

Victims may report online romance scams to the PNP Anti-Cybercrime Group or local police units. The report should include the evidence folder, timeline, and proof of transactions.

B. National Bureau of Investigation Cybercrime Division

Victims may also approach the NBI Cybercrime Division for cyber-enabled fraud, online extortion, identity theft, and related offenses.

C. Prosecutor’s Office

A criminal complaint may be filed with the Office of the City or Provincial Prosecutor. The complaint should usually include:

Complaint-affidavit;
Witness affidavits, if any;
Screenshots and chat records;
Proof of identity of the complainant;
Proof of payments;
Bank or e-wallet records;
Other supporting documents.

The prosecutor will determine probable cause and whether to file an Information in court.

D. Banks and E-Wallet Providers

Victims should immediately report fraudulent transactions to the relevant bank, e-wallet, remittance center, or payment platform.

The report should request:

Freezing or holding of suspicious funds, if still possible;
Investigation of recipient accounts;
Preservation of transaction records;
Chargeback or reversal, where applicable;
Fraud case reference number;
Written confirmation of the report.

For bank and e-wallet transfers, speed matters. Funds are often withdrawn or moved quickly.

E. Bangko Sentral ng Pilipinas Consumer Assistance Channels

For issues involving banks, e-money issuers, or financial institutions, victims may elevate unresolved complaints through appropriate consumer assistance channels. The BSP generally does not act as the police or prosecutor, but it may handle complaints involving regulated financial institutions, consumer protection issues, or failure to act on reports.

F. National Privacy Commission

If the scam involves misuse of personal data, unauthorized sharing of personal information, identity theft, or failure of an organization to protect personal data, the victim may consider remedies under the Data Privacy Act.

The NPC may be relevant where:

Personal data was unlawfully collected or processed;
IDs or sensitive personal information were misused;
Private data was exposed;
A company mishandled the victim’s data;
There is a data breach involving personal information.

G. Anti-Money Laundering Council

The AMLC is not usually the first office for ordinary victim complaints, but financial institutions may file suspicious transaction reports. In larger cases, organized schemes, mule accounts, or cross-border laundering may trigger AMLC-related action.

VII. Evidence Needed for a Strong Complaint

A romance scam complaint becomes stronger when the victim can prove three things:

The scammer made false representations;
The victim relied on those representations;
The victim suffered damage because of that reliance.

Important evidence includes:

A. Proof of Deceit

Examples:

Fake identity;
Fake job or military status;
Fake emergency;
Fake promise to marry;
Fake investment profits;
Fake package delivery;
Fake customs or immigration demand;
Fake hospital bills;
Fake bank transfer receipts;
Fake documents or IDs.

B. Proof of Payment

Examples:

Bank deposit slips;
Online transfer confirmations;
GCash or Maya receipts;
Remittance center receipts;
Cryptocurrency transaction hashes;
Credit card statements;
Loan documents, if the victim borrowed money to send;
Screenshots of payment confirmation.

C. Proof Linking the Payment to the Scammer

This is often the hardest part. It is not enough to show that money was sent. The victim must connect the transfer to the scammer’s request.

Helpful evidence includes:

Chat where the scammer gives the account number;
Chat where the scammer confirms receipt;
Recipient account name;
Phone number tied to e-wallet account;
Email address used for payment;
Matching names in receipts and chat;
Instructions from the scammer to send to a third party;
Repeated use of the same account.

D. Proof of Identity

If the scammer used a fake identity, the victim may still proceed, but identifying the real person behind the account becomes an investigative challenge. Law enforcement may need platform, telecom, bank, and e-wallet records obtained through proper legal process.

VIII. Bank, E-Wallet, and Remittance Remedies

A. Report Immediately

Victims should report the transaction as fraud as soon as possible. The longer the delay, the lower the chance of freezing or recovering funds.

B. Ask for Account Freezing or Holding

Banks and e-wallet providers may not automatically reverse authorized transfers, especially if the victim voluntarily sent the money. However, they may investigate, flag accounts, preserve records, and in some cases hold suspicious funds.

C. Authorized Push Payment Problem

Many romance scams involve “authorized push payments,” meaning the victim personally authorized the transfer. This makes recovery harder because the bank or e-wallet provider may say it executed the customer’s instruction.

However, the victim should still report the fraud because:

The recipient account may still contain funds;
The account may be part of a mule network;
The provider may preserve records for law enforcement;
Repeated complaints may trigger account restrictions;
The report supports the criminal complaint.

D. Chargebacks

If payment was made by credit card, debit card, or certain online payment systems, chargeback may be possible depending on the transaction type, timing, card network rules, and evidence.

Chargebacks are less likely for direct bank transfers, cash remittances, crypto transfers, or voluntary e-wallet transfers, but victims should still ask.

E. Cryptocurrency Transfers

Cryptocurrency transfers are difficult to reverse. A victim should preserve:

Wallet addresses;
Transaction hashes;
Exchange account details;
Screenshots of instructions;
Chat logs;
Blockchain explorer records.

If the transfer went through a regulated exchange, reporting quickly may help if the recipient account is still identifiable or funds remain on-platform.

IX. Cyber Libel Concerns When Posting About the Scammer

Victims often want to post the scammer’s name, photos, account numbers, screenshots, or accusations on social media. This can warn others, but it also carries legal risk.

If the person named is wrongly identified, or if the post includes defamatory statements, the victim may face a cyber libel complaint. Even truthful posts can create legal complications if written recklessly, with unnecessary insults, or without sufficient evidence.

Safer approaches include:

Reporting to authorities first;
Reporting to the platform;
Sharing warnings without unnecessary personal attacks;
Avoiding publication of sensitive personal information;
Consulting a lawyer before naming individuals publicly;
Coordinating with law enforcement where appropriate.

Victims should be especially careful if the scammer used stolen photos of an innocent person.

X. Sextortion and Intimate Image Blackmail

Some romance scams escalate into sextortion. The scammer may threaten to release nude photos, sexual videos, private chats, or edited images.

A. Do Not Pay

Paying often does not stop the blackmail. Scammers usually demand more.

B. Preserve the Threats

Save all messages showing:

The threat;
The demand for money;
The account used;
The platform;
The images or videos involved;
The deadline or pressure tactics.

C. Report to Authorities and Platforms

This may involve cybercrime, threats, coercion, anti-voyeurism violations, or gender-based online sexual harassment.

D. Warn Close Contacts Carefully

If the scammer threatens to send images to family, friends, or coworkers, victims may choose to privately warn trusted contacts not to open suspicious messages. This should be done calmly and without amplifying the content.

E. Preserve Mental Health and Safety

Sextortion is psychologically severe. Victims should consider reaching out to trusted family, friends, counselors, or crisis support. The legal case is important, but immediate emotional safety is also important.

XI. What If the Victim Sent IDs or Personal Information?

Victims who sent IDs, selfies, signatures, addresses, employment details, bank information, or OTPs should take protective steps.

A. Notify Banks and E-Wallet Providers

Ask them to flag accounts for possible identity theft.

B. Monitor Credit and Financial Activity

Watch for:

Unauthorized loans;
New accounts;
SIM registration misuse;
E-wallet verification attempts;
Online lending app misuse;
Unauthorized bank activity.

C. Replace Compromised Credentials

If passwords, OTPs, recovery codes, or authentication details were shared, change them immediately.

D. File Reports for Identity Theft

If the victim’s identity is used to scam others or open accounts, a report should be filed quickly to establish that the victim is also a complainant, not a participant.

XII. What If the Victim Became a Money Mule?

A money mule is someone who receives, transfers, withdraws, converts, or forwards money for another person. Romance scammers often manipulate victims into becoming money mules by saying:

“My bank account is frozen.”
“Please receive my salary.”
“My client will pay you, then send it to me.”
“I need your account for business.”
“Please convert this to crypto.”
“Please withdraw and send through remittance.”

This is legally risky. Even if the victim did not intend to commit a crime, the victim may become part of the money trail.

A victim in this situation should:

Stop all transfers;
Preserve all instructions from the scammer;
Do not delete messages;
Do not spend the money;
Notify the bank or e-wallet provider;
Seek legal advice before giving detailed statements;
Prepare evidence showing lack of knowledge and lack of intent.

XIII. Cross-Border Problems

Many romance scams are international. The scammer may claim to be abroad, use foreign numbers, route money through different countries, or operate from organized scam hubs.

Cross-border cases are harder because:

The scammer may be outside Philippine jurisdiction;
Platforms may be foreign companies;
Bank accounts may be under fake or mule identities;
Evidence may require international cooperation;
Funds may be moved quickly;
Cryptocurrency may pass through mixers or foreign exchanges.

Even so, victims should report locally. Philippine authorities may coordinate with foreign counterparts in appropriate cases, especially organized cybercrime, trafficking-linked scam operations, money laundering, or large-scale fraud.

XIV. Prescriptive Periods and Delay

Victims should act promptly. Criminal and civil claims are subject to prescriptive periods, and evidence may disappear quickly.

Delay may cause problems because:

Platforms may delete records;
Banks may no longer be able to hold funds;
CCTV at remittance centers may be overwritten;
Mule accounts may be closed;
Phones may be changed;
The scammer may erase profiles;
Witness memories may fade.

Even if months have passed, the victim may still have remedies, but early reporting is strongly preferable.

XV. Practical Complaint Package

A well-prepared complaint package should include:

A written narrative;
A timeline of events;
Total amount lost;
Table of transactions;
Screenshots of key conversations;
Full exported chat history, if available;
Proof of transfers;
Scammer profile links;
Account numbers and wallet details;
Phone numbers and emails;
Copies of fake documents sent by the scammer;
Threat messages, if any;
Victim’s valid ID;
Affidavit or complaint-affidavit;
Witness statements, if relevant.

A transaction table may look like this:

Date	Amount	Channel	Recipient Name	Account/Wallet	Purpose Claimed	Proof
Jan. 5, 2026	₱10,000	GCash	Juan D.	09xx xxx xxxx	Medical emergency	Screenshot, receipt
Jan. 10, 2026	₱25,000	Bank transfer	Maria S.	BDO xxxx	Customs fee	Receipt, chat
Jan. 15, 2026	₱50,000	Remittance	Pedro R.	Cebuana ref. no.	Travel expense	Receipt

XVI. Common Defenses and Challenges

A. “It Was a Loan, Not a Scam”

The scammer may claim the money was a personal loan or gift. The victim should show deceit from the beginning, false identity, fake emergencies, or repeated fraudulent representations.

B. “The Victim Sent the Money Voluntarily”

Voluntary transfer does not automatically defeat estafa. The issue is whether the victim was induced by deceit.

C. “The Account Holder Is Not the Scammer”

Recipient accounts may belong to money mules. Investigators must determine whether the account holder knowingly participated, negligently allowed account use, or was also deceived.

D. Fake Identity

If the scammer’s name and photos are fake, law enforcement may need records from platforms, banks, telecoms, and e-wallet providers.

E. Foreign Scammer

Foreign location complicates arrest and recovery but does not necessarily prevent filing a report in the Philippines, especially if the victim is in the Philippines, the transaction used Philippine financial channels, or part of the offense occurred locally.

XVII. Can the Victim Recover the Money?

Recovery is possible but difficult. The chances depend on:

How quickly the victim reports;
Whether the funds remain in the recipient account;
Whether the account holder is identifiable;
Whether banks or e-wallets can preserve records;
Whether the scammer has assets in the Philippines;
Whether criminal prosecution succeeds;
Whether civil action is practical;
Whether the case involves organized fraud with traceable accounts.

Many victims do not recover all funds. Still, reporting is important because it may prevent further victimization, support account freezing, identify mule networks, and create legal records.

XVIII. Role of Lawyers

A lawyer can help by:

Reviewing evidence;
Drafting the complaint-affidavit;
Identifying proper charges;
Coordinating with law enforcement;
Filing civil claims;
Seeking provisional remedies;
Advising on data privacy and cyber libel risks;
Responding if the victim is accused of being a money mule;
Communicating with banks or platforms;
Representing the victim in preliminary investigation and court.

For large losses, sextortion, identity theft, cross-border elements, or money mule issues, legal assistance is especially important.

XIX. Prevention and Red Flags

Romance scam red flags include:

The person avoids video calls or gives excuses;
The relationship becomes intense quickly;
The person asks for secrecy;
The person has repeated emergencies;
The person requests money before meeting in person;
The person asks for crypto or remittance transfers;
The person sends fake-looking documents;
The person claims funds are stuck in customs, immigration, or a bank;
The person asks the victim to receive and forward money;
The person threatens self-harm, exposure, or abandonment if money is not sent;
The person discourages the victim from talking to family, friends, police, or lawyers.

A genuine romantic partner should not require repeated emergency payments, secret transactions, or use of the victim’s bank account.

XX. Conclusion

Online romance scams in the Philippines may give rise to criminal, civil, banking, cybercrime, data privacy, and platform-based remedies. The most common legal route is a complaint for estafa, often with cybercrime implications when committed through online platforms. Additional charges may arise where there is identity theft, threats, sextortion, falsified documents, misuse of intimate images, or money laundering activity.

The victim’s strongest tools are speed, evidence preservation, careful reporting, and legal guidance. A well-documented case should show the scammer’s false representations, the victim’s reliance, the transfer of money or property, and the resulting damage. While recovery can be difficult, especially in cross-border or cryptocurrency cases, prompt action improves the chances of tracing funds, identifying account holders, and preventing further harm.