I. Introduction

Online scams have become one of the most common forms of fraud in the Philippines. They occur through social media, messaging apps, fake online stores, phishing emails, investment schemes, romance scams, job scams, cryptocurrency fraud, online lending abuse, SIM-related fraud, and unauthorized bank or e-wallet transactions.

A victim of an online scam in the Philippines may have several remedies at the same time. These remedies may be criminal, civil, administrative, regulatory, and practical or preventive. The proper remedy depends on the facts: how the scam was committed, who handled the money, whether a bank or e-wallet was involved, whether personal data was misused, whether threats or blackmail occurred, and whether the scammer can be identified.

This article discusses the principal legal remedies available under Philippine law.

II. What Is an Online Scam?

An online scam is not always labeled as “online scam” under one specific law. Instead, it may fall under several offenses depending on the conduct involved.

Common examples include:

Fake online selling or non-delivery of goods after payment.
Phishing, where victims are tricked into giving passwords, OTPs, or account details.
Unauthorized transfers from bank or e-wallet accounts.
Fake investment schemes promising guaranteed profits.
Romance scams and impersonation.
Job recruitment scams.
Fake charity or donation drives.
Cryptocurrency, forex, or trading scams.
Blackmail or sextortion.
Identity theft and use of another person’s name, photo, or account.
Online lending harassment or misuse of contact lists.
SIM-card-enabled fraud and anonymous scam messaging.

Because these acts may involve deception, unauthorized access, misuse of data, or financial fraud, several Philippine laws may apply.

III. Criminal Remedies

The most direct remedy is to file a criminal complaint. A criminal case aims to punish the offender and may also allow the victim to recover damages.

A. Cybercrime Prevention Act of 2012

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, is one of the most important laws for online scam victims.

The law punishes certain offenses committed through or with the use of information and communications technology. It also increases the penalty when crimes under the Revised Penal Code or special laws are committed through ICT.

Online scams may fall under cybercrime when the internet, computers, mobile phones, social media, email, messaging apps, or digital platforms are used as tools.

Relevant cybercrime-related offenses may include:

1. Computer-related fraud

Computer-related fraud may apply when a person uses a computer system or online platform to deceive another person and cause damage.

This may cover schemes such as phishing, fake payment pages, fraudulent links, fake investment websites, unauthorized transfers, or fraudulent manipulation of online accounts.

2. Computer-related identity theft

This may apply when the scammer uses another person’s identity online, such as by creating a fake account, pretending to be someone else, using stolen photos, or impersonating a bank, company, government office, relative, friend, or public figure.

3. Illegal access

Illegal access may apply when the scammer hacks or unlawfully gains access to an account, device, email, bank account, e-wallet, cloud storage, or social media profile.

4. Data interference or system interference

These may apply when the scam involves damaging, altering, deleting, or interfering with computer data or systems.

5. Cyber-squatting

This may apply in limited cases where a domain name is registered in bad faith to mislead users, impersonate a business, or profit from another person’s name, trademark, or identity.

6. Other crimes committed through ICT

Under RA 10175, crimes already punishable under the Revised Penal Code and special laws may carry a higher penalty when committed through ICT. This is important because many scams are still legally treated as estafa, but with the internet as the means of commission.

B. Estafa under the Revised Penal Code

Many online scams are prosecuted as estafa under Article 315 of the Revised Penal Code.

Estafa generally involves fraud or deceit that causes damage to another person. In online scam cases, estafa may arise when the scammer makes false representations to obtain money, property, or benefits from the victim.

Examples:

A seller accepts payment online but never delivers the item and never intended to deliver it.
A person pretends to be an investor, broker, recruiter, or agent to obtain money.
A scammer promises high investment returns and disappears after receiving funds.
A person pretends to sell tickets, gadgets, vehicles, rentals, or services online.
A scammer induces the victim to transfer money by pretending to be a relative, bank employee, police officer, courier, or government representative.

To prove estafa, the victim generally needs to show:

The scammer made false representations or used deceit.
The victim relied on those representations.
The victim gave money, property, or some benefit.
The victim suffered damage.
The deceit existed before or at the time the victim parted with the money or property.

A mere failure to deliver or pay is not always estafa. The key issue is usually whether there was fraud from the beginning.

C. Theft, Qualified Theft, or Robbery-Related Theories

When money is taken from an account without consent, the facts may support other offenses in addition to cybercrime or estafa.

For example, unauthorized bank withdrawals, stolen e-wallet balances, or account takeovers may involve unlawful taking. Depending on the circumstances, the conduct may be treated as theft, qualified theft, computer-related fraud, illegal access, or another offense.

D. Access Device Regulation Act

The Access Devices Regulation Act of 1998, Republic Act No. 8484, may apply when the scam involves credit cards, debit cards, ATM cards, account numbers, passwords, access codes, or similar devices used to obtain money, goods, services, or anything of value.

This law may be relevant in cases involving:

Credit card fraud.
Debit card fraud.
Unauthorized use of card information.
Possession or use of counterfeit access devices.
Fraudulent use of account numbers or credentials.
OTP or password-based scams connected to financial accounts.

RA 8484 is especially important when the scammer uses stolen financial credentials or induces the victim to provide access details.

E. E-Commerce Act

The Electronic Commerce Act, Republic Act No. 8792, recognizes the legal validity of electronic documents, electronic data messages, and electronic signatures.

Although the E-Commerce Act is not the main fraud statute, it helps victims because digital records can be legally recognized. This includes emails, screenshots, online confirmations, digital receipts, electronic contracts, transaction records, and other electronic evidence.

In an online scam case, electronic evidence may be crucial to prove:

The scammer’s representations.
Payment instructions.
Account details.
Delivery promises.
Admissions.
Threats or demands.
Identity indicators.
Transaction history.

F. Securities Regulation Code and Investment Scams

If the scam involves investment offers, the Securities Regulation Code, Republic Act No. 8799, may apply.

Investment schemes may be illegal when persons solicit investments from the public without proper registration, license, or authority. The Securities and Exchange Commission has authority over many investment-related frauds.

Red flags of illegal investment schemes include:

Guaranteed high returns.
Promise of quick profits.
Referral commissions or recruitment-based income.
No clear business model.
No SEC registration or license to sell securities.
Use of celebrities or fake endorsements.
Pressure to invest immediately.
Payment through personal bank accounts or e-wallets.
“Crypto,” “forex,” “trading,” or “AI trading” claims without proper licensing.

Victims may file complaints with law enforcement and may also report the scheme to the SEC.

G. Consumer Protection Laws

If the online scam involves goods or services sold to consumers, consumer protection laws may be relevant.

The Consumer Act of the Philippines, Republic Act No. 7394, protects consumers from deceptive, unfair, or unconscionable sales acts and practices. In online transactions, victims may also look to rules and regulations issued by agencies such as the Department of Trade and Industry.

For example, a victim may seek help if an online seller:

Misrepresents the nature, quality, or availability of goods.
Fails to deliver after payment.
Uses fake reviews or misleading advertisements.
Refuses to honor warranties or refunds.
Uses deceptive pricing or hidden charges.
Operates as a business without proper disclosures.

However, if the matter is clearly criminal fraud, a DTI complaint may not be enough. Criminal remedies may still be necessary.

H. Data Privacy Act

The Data Privacy Act of 2012, Republic Act No. 10173, may apply when the scam involves misuse of personal information.

This is common in phishing, identity theft, fake accounts, online lending harassment, doxxing, unauthorized sharing of IDs, or use of personal information to open accounts.

Victims may consider remedies under the Data Privacy Act when there is:

Unauthorized collection of personal data.
Unauthorized disclosure of personal data.
Misuse of IDs, photos, signatures, or contact details.
Unauthorized processing of personal information.
Data breach involving a company, platform, lender, or service provider.
Failure of an organization to protect personal data.
Harassment using harvested contact lists.

Complaints may be filed with the National Privacy Commission when the facts involve personal data violations.

I. SIM Registration Law

The SIM Registration Act, Republic Act No. 11934, is relevant when the scam was committed using a mobile number.

The law requires SIM registration and may help law enforcement trace scam-related numbers through proper legal processes. Victims should preserve the scammer’s phone number, SMS messages, call logs, payment instructions, and screenshots.

The existence of SIM registration does not mean victims can personally demand the identity of the SIM owner from a telecom provider. Disclosure generally requires lawful process through proper authorities.

J. Anti-Money Laundering Remedies

Online scams often involve bank accounts, e-wallets, crypto wallets, or money mule accounts. If the proceeds of the scam are transferred, hidden, converted, or layered through financial channels, anti-money laundering rules may become relevant.

Victims may report suspicious transactions to the bank, e-wallet provider, law enforcement, and appropriate authorities. Banks and covered institutions have their own obligations regarding suspicious transactions, account freezes, and cooperation with authorities.

Victims cannot usually force a bank to reverse a transaction simply by alleging fraud. But quick reporting may help freeze funds or preserve records.

IV. Civil Remedies

A victim may also pursue civil remedies to recover money or obtain damages.

A. Civil action for damages

A victim may sue the scammer for damages based on fraud, breach of obligation, unjust enrichment, quasi-delict, or other applicable civil law grounds.

Possible recoverable amounts may include:

Actual damages, such as the money lost.
Moral damages, in proper cases involving mental anguish, humiliation, or serious distress.
Exemplary damages, if the conduct was wanton, fraudulent, or oppressive.
Attorney’s fees, when allowed by law.
Costs of suit.
Interest, when applicable.

Civil claims may be filed separately or may be impliedly instituted with the criminal action, depending on the case and procedural rules.

B. Civil liability arising from crime

When a criminal action is filed, the civil action for recovery of damages is generally deemed instituted with it, unless the victim waives, reserves, or separately files the civil action.

This is important because a criminal conviction may include an order for restitution or payment of damages.

However, recovery still depends on whether the offender can be identified, prosecuted, and made to pay. Even a favorable judgment may require execution against assets.

C. Small Claims Case

If the scam involves a recoverable sum of money and the amount falls within the jurisdictional threshold for small claims, the victim may consider filing a small claims case.

Small claims proceedings are designed to be faster and simpler. Lawyers are generally not allowed to appear for the parties during the hearing, although parties may consult lawyers beforehand.

A small claims case may be useful when:

The scammer is known.
The scammer has an address.
The claim is for a sum of money.
The evidence is documentary.
The goal is recovery rather than imprisonment.

However, small claims may not be effective when the scammer used a fake identity, cannot be located, or is part of an organized syndicate.

D. Breach of contract or refund claims

Some online scam-like situations are also contractual disputes. For example, a legitimate seller may have failed to deliver due to delay, negligence, or supply problems. A service provider may have failed to perform.

In those situations, the remedy may be a civil claim for refund, damages, or specific performance rather than a criminal complaint.

The distinction matters because Philippine law does not treat every unpaid obligation or failed transaction as a crime. Fraud must be shown for criminal liability.

V. Administrative and Regulatory Remedies

Some cases should also be reported to regulatory agencies.

A. Philippine National Police Anti-Cybercrime Group

Victims may report online scams to the PNP Anti-Cybercrime Group. This is often appropriate for phishing, hacking, online selling scams, identity theft, sextortion, social media scams, and fraud committed through digital platforms.

The victim should prepare:

Screenshots of conversations.
URLs and profile links.
Phone numbers and email addresses used.
Bank or e-wallet account numbers.
Proof of payment.
Transaction reference numbers.
Delivery details, if any.
Names or aliases used.
Any ID or document sent by the scammer.
A written narrative of events.

B. National Bureau of Investigation Cybercrime Division

Victims may also report to the NBI Cybercrime Division. The NBI may investigate cybercrime, online fraud, identity theft, phishing, hacking, sextortion, and other digital offenses.

The NBI may be especially useful when the victim needs formal investigation, forensic assistance, or coordination for cybercrime cases.

C. Prosecutor’s Office

A criminal complaint may be filed with the appropriate prosecutor’s office for preliminary investigation. Law enforcement agencies may assist in preparing the complaint, but a victim may also file directly if the evidence and respondent details are sufficient.

A complaint-affidavit should usually include:

The victim’s personal details.
The respondent’s known details.
A chronological narration of facts.
The amount lost.
The method of deception.
The online accounts or phone numbers used.
Payment details.
Attached screenshots and proof.
Witness affidavits, if any.
Certification or authentication of electronic evidence when required.

D. Securities and Exchange Commission

For investment scams, pyramiding schemes, unauthorized solicitation of investments, and fake corporations, victims may report to the SEC.

The SEC may issue advisories, investigate entities, coordinate with law enforcement, and take regulatory action. Victims should check whether the entity is registered and whether it has authority to solicit investments, because corporate registration alone does not automatically authorize investment solicitation.

E. Bangko Sentral ng Pilipinas

For complaints involving banks, e-wallets, electronic money issuers, payment systems, unauthorized transactions, failed dispute handling, or financial consumer issues, victims may complain to the financial institution first and then elevate the matter to the Bangko Sentral ng Pilipinas through appropriate consumer assistance channels.

The BSP does not function as a criminal court, but it may help address failures by supervised financial institutions, including issues involving consumer protection, fraud handling, and dispute resolution.

F. National Privacy Commission

If personal data was misused, exposed, sold, unlawfully processed, or used for harassment, victims may file a complaint with the National Privacy Commission.

This may apply to:

Identity theft.
Unauthorized use of IDs or photos.
Online lending harassment.
Doxxing.
Data leaks.
Unauthorized disclosure of personal information.
Failure of a company to secure personal data.

G. Department of Trade and Industry

For online selling complaints involving registered businesses, defective goods, deceptive sales practices, refund issues, or consumer protection concerns, victims may report to the DTI.

The DTI route is usually more appropriate for consumer disputes with identifiable sellers or businesses. For fake identities and outright fraud, law enforcement may be more appropriate.

H. E-wallets, banks, platforms, and telecom providers

Victims should also report immediately to the private entities involved, such as:

Banks.
E-wallet providers.
Payment processors.
Online marketplaces.
Social media platforms.
Messaging platforms.
Telecom providers.
Courier services.

The purpose is to preserve records, request account freezing if possible, dispute unauthorized transactions, block accounts, report abuse, and prevent further harm.

VI. Immediate Steps After Being Scammed

A victim should act quickly. Delay can make it harder to trace funds, preserve evidence, or identify the scammer.

Step 1: Stop communicating except to preserve evidence

Do not send more money. Do not click more links. Do not provide more OTPs, passwords, IDs, or selfies. Avoid warning the scammer in a way that causes them to delete accounts or messages before evidence is preserved.

Step 2: Preserve all evidence

Take screenshots and export records where possible.

Important evidence includes:

Chat messages.
SMS messages.
Emails.
Social media profiles.
URLs.
Phone numbers.
Bank account names and numbers.
E-wallet numbers.
QR codes.
Transaction receipts.
Reference numbers.
Delivery tracking numbers.
Advertisements or posts.
Group chat messages.
Voice notes or call logs.
Photos, IDs, or documents sent by the scammer.
Any proof showing the scammer’s representations.

Screenshots should show dates, times, usernames, profile URLs, and complete message context.

Step 3: Report to the bank or e-wallet immediately

Ask the bank or e-wallet provider to:

Freeze the receiving account if possible.
Investigate the transaction.
Preserve transaction records.
Provide a complaint reference number.
Initiate a dispute process if the transaction was unauthorized.
Coordinate with the receiving institution.

Speed matters because funds may be withdrawn or transferred quickly.

Step 4: Change passwords and secure accounts

If phishing or hacking is involved:

Change passwords.
Enable two-factor authentication.
Revoke suspicious device access.
Log out all sessions.
Check email forwarding rules.
Check linked phone numbers and recovery emails.
Inform contacts if the account was used to scam others.

Step 5: Report the online account or post

Report the scam profile, page, group, listing, or post to the platform. However, preserve evidence first, because reports may lead to deletion of content.

Step 6: File a police or NBI report

Bring printed and digital copies of the evidence. Prepare a clear timeline and list of transactions.

Step 7: Execute a complaint-affidavit

A formal complaint usually requires a sworn statement. The affidavit should be factual, chronological, and supported by attachments.

Step 8: Consider civil recovery

If the scammer is identifiable, the victim may consider civil action, small claims, or restitution through a criminal case.

VII. Evidence in Online Scam Cases

Evidence is often the most important part of an online scam case.

A. Electronic evidence is admissible

Philippine rules recognize electronic evidence. Messages, emails, electronic documents, screenshots, metadata, system logs, and digital records may be used, subject to rules on admissibility, authentication, and relevance.

B. Screenshots are useful but may not be enough

Screenshots help, but stronger evidence may include:

Original device containing the messages.
Exported chat history.
Email headers.
Platform records.
Bank certifications.
Transaction records.
Affidavits from witnesses.
Notarized screenshots or verified printouts.
Cybercrime investigation reports.
Preservation requests or platform responses.

C. Preserve the original files

Do not rely only on cropped screenshots. Keep the original device, original messages, and original files. Avoid editing images or deleting conversations.

D. Chain of custody matters

For more serious cases, the way evidence is collected, stored, and presented may affect admissibility and weight. Victims should avoid manipulating files and should cooperate with investigators.

VIII. Remedies Involving Banks and E-Wallets

Many online scams involve fund transfers through banks or e-wallets.

A. Unauthorized transactions

If the victim did not authorize the transaction, the case may involve unauthorized access, account takeover, phishing, or failure of security controls. The victim should immediately notify the financial institution and follow its dispute process.

Important details include:

Date and time of transaction.
Amount.
Recipient account.
Device used.
Whether OTP was shared.
Whether the victim clicked a link.
Whether the victim lost the SIM or phone.
Whether the account was accessed from an unknown device.

B. Authorized but fraud-induced transfers

If the victim personally transferred the money because of deception, banks and e-wallets may be less likely to reverse the transaction automatically. The transaction was authorized in form, even though induced by fraud.

Still, the victim should report immediately because the receiving account may be frozen or flagged if funds remain.

C. Money mule accounts

Scammers often use accounts belonging to other persons. These may be rented, borrowed, stolen, or opened using false information.

The named account holder may be investigated. Depending on the evidence, the account holder may claim to be another victim, a negligent participant, or part of the scheme.

D. Bank secrecy and privacy limits

Victims may not automatically obtain the account holder’s personal details from banks or e-wallets because of privacy and bank secrecy rules. Law enforcement, prosecutors, courts, or regulators may need to use proper legal processes.

IX. Remedies for Phishing

Phishing occurs when a victim is tricked into giving confidential information, such as passwords, OTPs, PINs, card details, login credentials, or recovery codes.

Possible remedies include:

Complaint for cybercrime.
Complaint for computer-related fraud.
Complaint for illegal access if accounts were accessed.
Complaint for identity theft if personal data was used.
Bank or e-wallet dispute.
Data privacy complaint if personal data was unlawfully processed.
Report to the impersonated institution.
Report the phishing domain, email, or page.

Victims should preserve the phishing link, sender email, SMS number, page screenshots, and transaction records.

X. Remedies for Fake Online Sellers

A fake online seller case may involve estafa, cybercrime, consumer protection law, or civil claims.

The victim should collect:

The seller’s profile link.
The product listing.
Chat history.
Payment instructions.
Proof of payment.
Delivery promises.
Tracking number, if fake or invalid.
Other complaints from victims, if available.

If the seller is an identifiable registered business, DTI remedies may be useful. If the seller used a fake identity and disappeared, law enforcement is usually more appropriate.

XI. Remedies for Investment Scams

Investment scams are especially serious because they often involve multiple victims and large amounts.

Possible remedies include:

Criminal complaint for estafa.
Cybercrime complaint if online platforms were used.
SEC complaint for unauthorized investment solicitation.
Anti-money laundering reporting.
Civil action for recovery of money.
Coordination with other victims.
Preservation of promotional materials and payment records.

Victims should preserve:

Investment contracts.
Receipts.
Wallet addresses.
Bank or e-wallet transfers.
Group chat messages.
Marketing materials.
Screenshots of promised returns.
Names of uplines, agents, or recruiters.
SEC registration claims.
Any proof of withdrawals or refusal to release funds.

A company’s registration with the SEC as a corporation does not necessarily mean it is authorized to solicit investments from the public.

XII. Remedies for Romance Scams and Sextortion

Romance scams involve emotional manipulation to obtain money. Sextortion involves threats to expose intimate images, videos, or conversations unless the victim pays.

Possible offenses may include:

Cybercrime.
Estafa.
Grave threats or coercion.
Unjust vexation or harassment-related offenses, depending on facts.
Anti-photo and video voyeurism violations, if intimate content is involved.
Data privacy violations.
Violence against women and children laws, if applicable and relationship circumstances support it.

Victims should not pay further demands. Payment often leads to more demands. They should preserve threats, usernames, payment details, and account links, then report promptly.

XIII. Remedies for Identity Theft and Fake Accounts

If someone uses another person’s name, photos, documents, or identity online, remedies may include:

Complaint for computer-related identity theft.
Complaint under the Data Privacy Act.
Civil action for damages.
Platform takedown request.
Complaint for estafa if the fake identity was used to scam others.
Complaint for libel or cyberlibel if defamatory statements were made.

Victims should gather:

Links to fake accounts.
Screenshots showing the impersonation.
Proof of ownership of the real identity.
Messages sent by the fake account.
Reports from third parties who were contacted or scammed.

XIV. Remedies for Online Lending Harassment

Some online lending apps or collectors misuse personal data, contact lists, photos, or threats to pressure borrowers.

Possible remedies include:

Complaint with the National Privacy Commission.
Complaint with the SEC if the lending company is regulated by the SEC.
Criminal complaint if threats, coercion, unjust vexation, libel, or other offenses are involved.
Civil action for damages.
Platform report against abusive apps.

Victims should preserve collection messages, call logs, threats, screenshots, app permissions, privacy notices, and proof that contacts were messaged.

XV. Remedies for Cryptocurrency and Online Trading Scams

Cryptocurrency-related scams may be harder to pursue because wallets may be pseudonymous and funds can move quickly. However, remedies still exist.

Possible remedies include:

Criminal complaint for estafa or cybercrime.
SEC complaint if investment solicitation is involved.
Reporting wallet addresses to platforms or exchanges.
Reporting bank or e-wallet cash-in and cash-out channels.
Civil action if the scammer is identifiable.
Anti-money laundering reporting where applicable.

Victims should preserve:

Wallet addresses.
Transaction hashes.
Exchange records.
Screenshots of dashboards.
Chat records.
Promised returns.
Deposit and withdrawal history.
Identity details of recruiters or agents.

A common scam pattern is allowing the victim to withdraw a small amount at first, then blocking withdrawal after larger deposits.

XVI. Jurisdiction and Venue

Online scams often involve parties in different cities, provinces, or countries.

A. Philippine jurisdiction

Philippine authorities may have jurisdiction when:

The victim is in the Philippines.
The scam was accessed or received in the Philippines.
The financial loss occurred in the Philippines.
The offender is in the Philippines.
Philippine financial institutions or platforms were used.
Any element of the offense occurred in the Philippines.

B. Foreign scammers

If the scammer is abroad, recovery and prosecution become more difficult. Authorities may need international cooperation, platform records, mutual legal assistance, or coordination with foreign law enforcement.

Even then, victims should still report because domestic money mule accounts, recruiters, or cash-out channels may be traceable.

XVII. Can Victims Recover Their Money?

Recovery is possible but not guaranteed.

It depends on:

Whether the funds remain in the recipient account.
How quickly the victim reported.
Whether the receiving account can be frozen.
Whether the scammer or mule can be identified.
Whether law enforcement can trace the transaction.
Whether the case results in restitution or damages.
Whether the offender has assets.
Whether the bank or e-wallet finds grounds for reversal.
Whether the matter is covered by consumer protection or financial dispute rules.

The fastest possible reporting gives the victim the best chance of preserving funds.

XVIII. Can a Victim Force Facebook, Telegram, Viber, TikTok, Instagram, or Other Platforms to Reveal the Scammer?

Usually, a private person cannot simply demand a platform to disclose user identity information. Platforms generally require lawful legal process, such as requests from law enforcement, subpoenas, court orders, or other procedures.

Victims should still preserve profile URLs, usernames, user IDs, group links, messages, and timestamps because these may help authorities make proper requests.

XIX. Role of Barangay Proceedings

Barangay conciliation may apply to some disputes between parties who live in the same city or municipality, subject to the Katarungang Pambarangay rules. However, many online scam cases are criminal, cross-border, or involve unknown offenders, making barangay conciliation impractical or inapplicable.

If the scammer is known and located nearby, barangay proceedings may sometimes be relevant before filing certain civil actions. For serious criminal offenses or cybercrime matters, direct reporting to law enforcement or prosecutors may be more appropriate.

XX. Demand Letters

A demand letter may be useful when the scammer is known. It may show that the victim demanded payment or delivery and that the other party failed or refused.

A demand letter should include:

The facts of the transaction.
The amount paid.
The date of payment.
The obligation promised.
The failure or fraudulent conduct.
A demand for refund or performance.
A deadline.
A warning that legal action may follow.

However, in cases involving organized scammers, sending a demand letter may alert the scammer and cause deletion of evidence. Evidence should be preserved first.

XXI. Affidavit of Complaint

A complaint-affidavit is a sworn written statement used to initiate criminal proceedings.

It should be clear and factual. It should avoid exaggeration and should attach all supporting evidence.

A basic structure may include:

Name, age, address, and personal circumstances of the complainant.
Identification of the respondent, if known.
How the complainant encountered the respondent.
What the respondent represented.
Why the complainant believed the representation.
What amount was paid and how.
What happened after payment.
How the complainant discovered the scam.
What damage was suffered.
What laws may have been violated.
List of attachments.

The attachments should be marked and organized.

XXII. Sample Evidence Checklist

Victims should organize evidence as follows:

Evidence	Purpose
Screenshots of chats	Shows representations, promises, threats, or admissions
Profile links and usernames	Helps identify online accounts
Payment receipts	Proves transfer of money
Bank/e-wallet details	Helps trace recipient
Transaction reference numbers	Helps institutions locate records
Product listing or advertisement	Shows false offer
Emails and headers	Helps trace phishing or impersonation
Call logs and SMS	Shows contact and communication
IDs or documents sent	May identify respondent or fake identity
Witness statements	Supports the victim’s version
Platform reports	Shows prompt action
Bank complaint reference	Shows timely dispute
Timeline of events	Helps investigators and prosecutors

XXIII. Common Defenses Raised by Accused Persons

Victims should be aware of common defenses.

A. “It was only a civil debt”

The accused may argue that the matter is merely a failure to pay or deliver. The victim must show deceit from the beginning, not merely non-performance.

B. “My account was only used by someone else”

The account holder may claim that the bank, e-wallet, SIM, or social media account was borrowed, hacked, sold, or used without consent. Investigators will look at transaction patterns, withdrawals, device logs, communications, and benefit received.

C. “The victim voluntarily sent the money”

A voluntary transfer does not automatically defeat fraud. If consent was obtained through deceit, criminal liability may still exist.

D. “The screenshots are fake”

This is why original devices, full chat exports, metadata, platform records, and corroborating evidence matter.

E. “The investment failed; it was not a scam”

In investment fraud cases, the issue is whether there was fraudulent misrepresentation, unauthorized solicitation, Ponzi-like operations, or deceitful promises.

XXIV. Practical Limits of Legal Remedies

Legal remedies are real, but victims should understand the practical challenges.

Scammers use fake names.
SIMs may be registered using false or stolen information.
Bank accounts may belong to mules.
Funds may be withdrawn quickly.
Foreign scammers may be hard to reach.
Platforms may not disclose records without legal process.
Prosecution takes time.
Civil judgments may be hard to collect if the offender has no assets.
Poor evidence weakens a case.
Delay reduces chances of recovery.

Because of these limits, immediate action is essential.

XXV. Preventive Legal and Practical Measures

Victims and potential victims should observe the following:

Never share OTPs, passwords, PINs, or recovery codes.
Verify sellers and businesses before paying.
Avoid payments to personal accounts for business transactions when suspicious.
Check SEC authority for investment offers.
Be skeptical of guaranteed high returns.
Avoid clicking links from unsolicited messages.
Use official apps and websites only.
Enable two-factor authentication.
Keep transaction records.
Report scam numbers and accounts.
Do not send IDs unless necessary and verified.
Be cautious with job offers requiring upfront fees.
Do not pay blackmailers.
Verify requests for money through a separate channel.
Regularly monitor bank and e-wallet transactions.

XXVI. Which Remedy Should a Victim Choose?

The right remedy depends on the situation.

Situation	Possible Remedy
Fake seller took payment and disappeared	Criminal complaint for estafa/cybercrime; platform report; bank/e-wallet report
Unauthorized bank or e-wallet transfer	Bank/e-wallet dispute; cybercrime complaint; possible access device fraud
Phishing link caused account takeover	Cybercrime complaint; bank report; account recovery; data privacy complaint
Fake investment scheme	SEC report; estafa complaint; cybercrime complaint; AML-related reporting
Personal data misused	NPC complaint; cybercrime complaint for identity theft
Fake account impersonation	Cybercrime complaint; platform takedown; NPC complaint
Online lending harassment	NPC complaint; SEC complaint; criminal complaint if threats or abuse occurred
Sextortion	Cybercrime/law enforcement report; preserve threats; do not pay
Known person owes money after online transaction	Demand letter; small claims; civil action; criminal complaint only if fraud exists
Scam using mobile number	Preserve number and SMS; report to law enforcement and telecom provider
Scam using bank/e-wallet mule	Report immediately to bank/e-wallet and law enforcement

XXVII. Important Philippine Laws Commonly Involved

The following laws are frequently relevant in online scam cases:

Revised Penal Code — estafa, theft, threats, coercion, falsification, and related crimes.
Republic Act No. 10175, Cybercrime Prevention Act of 2012.
Republic Act No. 8792, Electronic Commerce Act.
Republic Act No. 8484, Access Devices Regulation Act.
Republic Act No. 10173, Data Privacy Act of 2012.
Republic Act No. 8799, Securities Regulation Code.
Republic Act No. 7394, Consumer Act of the Philippines.
Republic Act No. 11934, SIM Registration Act.
Anti-Money Laundering Act, as amended.
Rules on Electronic Evidence.
Rules on Small Claims Cases.
Other special laws depending on the facts, such as laws on photo and video voyeurism, violence against women and children, child protection, lending companies, financing companies, or financial consumer protection.

XXVIII. Conclusion

Victims of online scams in the Philippines are not limited to one remedy. Depending on the facts, they may file criminal complaints for estafa, cybercrime, identity theft, access device fraud, or other offenses; pursue civil recovery; file small claims; report to banks, e-wallets, platforms, telecom providers, the SEC, BSP, DTI, NPC, PNP, or NBI; and preserve evidence for prosecution.

The strongest cases are built on prompt action, organized evidence, clear proof of deceit, traceable payment records, and timely reporting. While recovery is not always guaranteed, Philippine law provides multiple avenues to hold scammers accountable and to seek restitution, damages, regulatory action, and criminal punishment.