When an old business permit is copied, edited, or shown to job applicants as “proof” of a real job offer, the problem is bigger than a fake document. It can involve identity theft, estafa, falsification, illegal recruitment, data privacy violations, and financial account scamming. Whether you are the business owner whose expired permit is being misused, or a job seeker who received the fake offer and paid money, the most important steps are to preserve evidence, verify the permit with the right government office, warn the affected parties, and file the correct report with law enforcement or the prosecutor.

Why scammers use old business permits in fake job offers

A business permit, often called a Mayor’s Permit, is issued by a city or municipality through its Business Permits and Licensing Office or BPLO. It shows that a business was authorized to operate in that LGU for a specific period. DILG issuances describe a business permit as a document secured from the city or municipal government, usually through the BPLO. (DILG)

Scammers like using old permits because they look official. A permit may show:

the business name;
business address;
permit number;
business line or activity;
owner or authorized representative;
official receipt or local tax information;
QR code or signature of an issuing officer;
the year of validity.

But a business permit is not the same as a valid job order, recruitment license, SEC registration, DTI registration, or proof that a recruiter is authorized to collect money. For example, a sole proprietor’s business name can be checked through the DTI Business Name Registration System, but DTI itself notes that its public search is limited to exact business name verification. (BNRS) For corporations and partnerships, SEC records may be requested through the SEC Express System, which provides company documents such as Articles of Incorporation, By-Laws, General Information Sheets, and other SEC-filed records. (SEC Express System)

A real but expired permit can still be used fraudulently if someone shows it to applicants to create the false impression that the job offer is legitimate, current, or connected with the real business.

Common scenarios

1. Your business permit was posted in a fake hiring ad

This often happens when a former employee, applicant, customer, supplier, or online scammer obtained a photo of your permit. The ad may use your business name, address, logo, or permit number to recruit applicants.

Typical warning signs include:

job ads posted from personal Facebook accounts, Telegram, WhatsApp, or Viber;
applicants asked to pay “processing,” “reservation,” “training,” “medical,” “uniform,” or “visa” fees;
the recruiter using a different email domain from the real company;
the business address copied from the permit, but the interview is online or in another location;
screenshots of old permits where the year, QR code, or official receipt details are blurred.

2. You are a job seeker who received a permit as “proof”

Scammers often send an old business permit when applicants ask, “Legit po ba ito?” The permit may be genuine, but it does not prove that the person messaging you is connected to the company.

Before paying anything, check:

whether the permit is current;
whether the business line matches the job offer;
whether the person contacting you is listed on the company’s official channels;
whether the email, phone number, and bank or e-wallet account match the real company;
whether the job is local or overseas, because overseas recruitment has stricter rules.

3. The fake offer involves overseas work

If the job is abroad, the issue may fall under illegal recruitment. Under Philippine rules on overseas employment, illegal recruitment includes canvassing, enlisting, contracting, hiring, procuring, referring, promising, or advertising employment abroad when done by a non-licensee or non-holder of authority. It can also include publishing false information or false documents in relation to recruitment or employment. (Department of Migrant Workers)

For overseas jobs, check the Department of Migrant Workers’ list of licensed recruitment agencies and approved job orders. The DMW site provides public access to licensed recruitment agencies and approved job orders, and its job order page reminds applicants to verify with the agency whether the job order is still active. (Department of Migrant Workers)

Is using an old business permit for fake job offers illegal?

Yes, depending on what was done, several Philippine laws may apply.

The exact charge depends on the evidence. A scammer who merely displays an old permit may be treated differently from someone who edited the permit, forged signatures, created a fake job contract, collected money, hacked accounts, or used another person’s identity.

Possible legal violations under Philippine law

Act done by the scammer	Possible legal issue	Why it matters
Using a business name, permit, logo, or address to deceive applicants	Estafa or other deceits under the Revised Penal Code	The permit may be part of the false representation used to obtain money
Editing the permit date, permit number, QR code, signature, or official details	Falsification of documents	Altering a public, official, or commercial document can be criminal
Using the permit online, in emails, chats, or job platforms	Cybercrime	The use of ICT can trigger the Cybercrime Prevention Act
Pretending to be the real business or its HR officer	Computer-related identity theft	RA 10175 covers misuse of identifying information belonging to another person or juridical entity
Recruiting for overseas jobs without authority	Illegal recruitment	Especially serious if there are multiple victims or a syndicate
Asking applicants to send IDs, selfies, bank details, or OTPs	Data privacy and financial account scamming issues	Victims’ personal and financial data may be used for further scams
Using bank or e-wallet accounts to receive scam payments	Financial account scamming or money mule activity	Banks and e-wallet providers may hold or investigate suspicious accounts

Estafa and other deceits

Article 315 of the Revised Penal Code punishes swindling or estafa when a person defrauds another through the means listed in the law. One important form is fraud committed through false pretenses, including using a fictitious name or falsely pretending to possess power, influence, qualifications, property, credit, agency, business, imaginary transactions, or similar deceits. (Lawphil)

In a fake job offer, estafa may be considered when the applicant paid money because they believed the scammer was connected with a legitimate business. The old business permit can become evidence of the deceit.

If the facts do not neatly fit Article 315, Article 318 on other deceits may still be considered when a person defrauds or damages another by deceit not covered by the earlier provisions. (Lawphil)

Falsification of documents

If the old permit was edited, altered, or made to appear current, falsification may be involved. Article 171 of the Revised Penal Code lists acts of falsification such as imitating signatures, making untruthful statements in a narration of facts, altering true dates, and making alterations in a genuine document that change its meaning. Article 172 covers falsification by private individuals and the use of falsified documents. (Lawphil)

This is important because many fake job posts do not simply reuse a permit; they crop it, change the year, blur the QR code, paste another company logo, or combine it with a fake “certificate of registration.”

Cybercrime and online identity theft

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers cybercrime offenses such as computer-related forgery, computer-related fraud, and computer-related identity theft. The law defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or juridical entity without right. (Supreme Court E-Library)

This is especially relevant when scammers use the business name, permit, owner’s name, logo, or official-looking HR identity online. RA 10175 also provides that crimes under the Revised Penal Code and special laws committed through information and communications technologies may be covered by the Cybercrime Prevention Act, with the penalty one degree higher when applicable. (Supreme Court E-Library)

The NBI and PNP are the law enforcement authorities responsible for cybercrime enforcement under RA 10175, and they are required to organize cybercrime units or centers to handle cybercrime cases. (Supreme Court E-Library)

Illegal recruitment for overseas jobs

If the fake offer is for employment abroad, do not treat it as an ordinary HR scam. Illegal recruitment under RA 8042, as amended by RA 10022, can include promising or advertising overseas employment by someone without the required license or authority. It may also include false notices, false information, or false documents in relation to recruitment or employment. (Department of Migrant Workers)

Illegal recruitment becomes more serious when committed by a syndicate or in large scale. It is considered syndicated when carried out by three or more persons conspiring together, and large scale when committed against three or more persons individually or as a group. (Department of Migrant Workers)

Financial account scamming

If applicants were asked to deposit money to a bank account or e-wallet, Republic Act No. 12010, the Anti-Financial Account Scamming Act of 2024, may also be relevant. The law covers money mule activities, such as using, borrowing, selling, lending, buying, renting, or opening financial accounts for criminal proceeds, and social engineering schemes involving deception to obtain sensitive identifying information. (Lawphil)

RA 12010 also recognizes coordinated verification of disputed transactions and gives relevant institutions responsibilities in fraud management, temporary holding of disputed funds, and cooperation with investigations. (Lawphil)

What to do immediately if your old business permit is being used

1. Preserve the evidence before asking platforms to remove it

Do not rely on screenshots alone if you can capture more details.

Save:

screenshots of the job post, comments, recruiter profile, and messages;
full URLs or links to the post, profile, group, page, marketplace listing, or website;
date and time when you saw the post;
phone numbers, email addresses, usernames, Telegram handles, Viber numbers, WhatsApp numbers, and Facebook profile links;
copies of the fake job offer, fake contract, fake ID, or fake company authorization;
payment instructions, QR codes, bank account numbers, e-wallet numbers, and account names;
names and contact details of applicants who messaged your business;
proof that your real permit is expired or different from the document being used.

If you are the business owner, keep a clean copy of the genuine permit and mark the fake image separately. Do not alter the fake screenshot except to add a filename. If you need to post a warning publicly, redact personal data of innocent applicants.

2. Verify the permit status with the issuing BPLO

Ask the Business Permits and Licensing Office of the city or municipality that issued the permit for confirmation.

Request, when available:

certification that the permit was issued for a specific year only;
certification that the permit is expired, cancelled, amended, or not renewed;
confirmation whether the permit number, QR code, business line, address, or owner details match their records;
if the image was edited, confirmation that the altered version does not match the official record.

Some LGUs now use QR codes or online permit systems. Quezon City, for example, requires renewal one year from the issuance date and lists the previous business permit, official receipt, and barangay business clearance among renewal requirements. (Quezon City Government)

3. Post a careful public warning

A public warning can protect applicants and your business reputation. Keep it factual.

You can state:

your business is not hiring through the fake account;
the permit being circulated is expired, altered, or unauthorized;
you do not collect placement, processing, training, or reservation fees through personal accounts;
applicants should verify only through your official page, website, office number, or email;
affected persons should preserve screenshots and payment records.

Avoid naming a suspected individual unless you have solid evidence. A careless accusation can create a separate defamation issue.

4. Report the fake post to the platform

Report the ad or profile for impersonation, scam, fraud, or intellectual property misuse. If the business has a verified page or official domain, include that in the report.

For job platforms, ask for:

takedown of the fake listing;
preservation of account data;
advertiser details, if they release them only to law enforcement;
confirmation that the listing was removed.

Platforms usually will not give private account data directly to victims. Law enforcement may need to request it through proper process, especially when subscriber information, traffic data, or account records are involved.

5. Notify banks, e-wallet providers, and payment channels

If victims paid money, they should immediately contact the bank or e-wallet provider used for the transfer. The goal is to flag the receiving account, request transaction tracing, and ask whether funds can still be held or disputed.

Prepare:

transaction reference number;
sending and receiving account details;
amount and date;
screenshots of the payment instruction;
proof that the job offer was fake;
police blotter or complaint reference, if already available.

Speed matters. In practice, recovery is harder once funds are withdrawn, passed through several accounts, converted to crypto, or moved to another wallet.

6. File a report with the proper law enforcement office

For online scams, report to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. For overseas recruitment scams, report to the DMW Anti-Illegal Recruitment channels or the nearest DMW/POEA regional office. For local employment scams, the local police, NBI, and city prosecutor may also be involved depending on the facts.

Bring printed and digital copies. Investigators often need both:

printed complaint-affidavit or sworn statement;
screenshots with URLs;
payment receipts;
fake permit image;
genuine permit or BPLO certification;
IDs of complainants;
contact details of witnesses;
proof of ownership or authority if filing for a corporation or business.

7. Execute affidavits while memories are fresh

A complaint usually needs sworn statements. The business owner, applicant-victims, and witnesses should prepare affidavits describing what happened in chronological order.

A useful affidavit answers:

Who contacted whom?
What job was offered?
What document was shown?
What was false about it?
What money or personal data was requested?
What payment was made?
What account received the money?
How did the complainant discover the fraud?
What damage was suffered?

If a corporation is the complainant, attach proof that the representative is authorized, such as a Secretary’s Certificate or board authorization.

8. Consider filing with the prosecutor

A police or NBI report may lead to investigation, but criminal prosecution generally proceeds through the Office of the City or Provincial Prosecutor. The prosecutor evaluates whether there is probable cause.

Expect the process to include:

Filing of complaint-affidavit and supporting evidence.
Assignment to an investigating prosecutor.
Subpoena to the respondent, if identifiable.
Submission of counter-affidavit.
Possible reply-affidavit.
Resolution finding probable cause or dismissing the complaint.
Filing of Information in court if probable cause is found.

Timelines vary widely. Simple complaints may move in a few months. Cybercrime complaints involving anonymous accounts, foreign platforms, multiple victims, or bank tracing can take longer because investigators may need preservation requests, subpoenas, warrants, or coordination with service providers.

What job applicants should do if they already paid

If you are the job seeker, act quickly.

Stop paying immediately. Do not send “unlocking,” “refund processing,” “visa,” “medical,” “insurance,” or “final deployment” fees.
Do not delete chats. Even embarrassing messages may help prove deceit.
Save payment records. Include reference numbers and account names.
Contact your bank or e-wallet provider. Ask for a fraud report and transaction dispute.
Verify the business directly. Use official contact details from the real company website, DTI, SEC, or the LGU—not the number given by the recruiter.
For overseas jobs, check DMW. Verify the agency and job order before further communication.
File a complaint. If multiple applicants were victimized, coordinate evidence but each victim should preserve their own proof of payment and communication.
Monitor identity theft risk. If you sent IDs, selfies, signatures, or bank details, watch for SIM, loan, e-wallet, or account takeover attempts.

What business owners should do to protect themselves

Secure your permits and internal records

Business permits are often displayed on premises, uploaded during platform verification, sent to suppliers, or included in applications. That makes them easy to copy.

Practical safeguards:

watermark scanned permits with the purpose, date, and recipient, such as “For mall accreditation only – 04 July 2026”;
avoid sending high-resolution permits through unsecured chats;
blur QR codes or permit numbers when posting publicly, unless the LGU requires full display;
keep a log of where permits were submitted;
limit access to permit files to authorized staff;
use official company email for recruitment;
publish one verified hiring page or official recruitment email.

Notify your customers and applicants

If the fake job offer is spreading, silence may cause more harm. A short factual notice can stop people from paying.

Include:

the exact fake page or account name, if already public;
the statement that it is not connected with your business;
the official recruitment channel;
a reminder that the company does not collect fees from applicants;
instructions for victims to preserve evidence.

Ask BPLO, DTI, or SEC for supporting documents

Depending on your business type, secure documents showing your true registration status.

Business type	Where to verify	Useful document
Sole proprietorship	DTI BNRS	Business Name Certificate or DTI certification
Corporation or partnership	SEC	Articles, GIS, SEC certification, company documents
Local business operation	City/Municipal BPLO	Mayor’s Permit, permit certification, business closure/retirement record
Overseas recruitment agency	DMW	License status and approved job orders
Local manpower agency	DOLE/LGU, depending on activity	Business registration and labor-related records

DTI’s BNRS allows business name search, renewal, certification requests, and transaction inquiry. It also notes that certificates and official receipts can be sent to the registrant’s email after successful payment for BN transactions. (BNRS)

Required documents checklist

Purpose	Documents to prepare
Proving the permit is old, expired, or altered	Genuine permit, fake permit image, BPLO certification, official receipt, renewal record
Proving identity theft or impersonation	Screenshots of fake profile/page, URLs, usernames, copied logo, fake HR email, fake letterhead
Proving estafa or financial loss	Payment receipts, bank/e-wallet transfer records, demand messages, proof of amount paid
Proving fake recruitment	Job ad, offer letter, employment contract, chat messages, list of applicants, promised deployment details
Proving authority to file for a business	DTI certificate, SEC documents, Secretary’s Certificate, owner’s ID, authorization letter
Filing abroad	Affidavit executed before a Philippine Embassy/Consulate or notarized/apostilled document, passport copy, SPA for Philippine representative

Special notes for Filipinos and foreigners abroad

If you are outside the Philippines, you can still help build a Philippine complaint. The usual bottleneck is getting sworn documents accepted.

Practical options include:

executing an affidavit before a Philippine Embassy or Consulate;
using a local notary and apostille if the country is part of the Apostille Convention;
issuing a Special Power of Attorney to a trusted representative in the Philippines;
preserving original electronic evidence in your device and cloud account;
submitting passport pages, visa pages, or foreign police reports if relevant.

The DFA’s Apostille system covers authentication of documents and also provides electronic Apostilles for certain documents. (Apostille Philippines)

For foreigners who were scammed by a Philippine-based recruiter or fake Philippine business, the same evidence principles apply. The complaint should clearly show the Philippine connection: the business name, Philippine permit, Philippine bank/e-wallet account, Philippine phone number, Philippine address, Filipino recruiter, or platform activity directed at Philippine applicants.

Common pitfalls that weaken these cases

Relying only on a barangay blotter

A barangay blotter may help record what happened, but it is usually not enough for cybercrime, estafa, falsification, or illegal recruitment. These cases often require police, NBI, DMW, or prosecutor action.

Deleting the scammer after confrontation

Many victims angrily message the scammer first. The scammer then blocks them, deletes posts, changes usernames, or moves to another account. Preserve evidence before confronting anyone.

Posting unredacted IDs of applicants

Business owners sometimes post screenshots of applicants’ IDs to prove they were contacted. This may create data privacy problems. Redact innocent persons’ addresses, ID numbers, birthdates, and signatures.

Assuming a real permit means a real job

A real permit can still be misused. A valid business permit only shows local authority to operate a business. It does not prove that the person chatting with you is an employee, HR officer, recruiter, or authorized collector of fees.

Paying to personal accounts

Legitimate employers generally do not ask applicants to pay recruitment or processing fees to a random personal bank account or e-wallet. For overseas jobs, verify the agency and job order with DMW before paying anything.

Waiting too long to report payment

Banks and e-wallet providers may have limited ability to hold or recover funds after withdrawal. Report quickly, even if you are still completing your police or NBI complaint.

Frequently Asked Questions

Can someone be charged if they used a real but expired business permit?

Yes, if the expired permit was used to deceive applicants, collect money, impersonate the business, or make a fake job offer appear legitimate. The issue is not only whether the permit once existed; the issue is how it was used.

Is editing the date on an old business permit falsification?

It can be. Altering true dates or changing a genuine document in a way that affects its meaning may fall under falsification provisions of the Revised Penal Code, depending on the evidence and the person involved. (Lawphil)

What if the scammer only sent a screenshot of my permit?

A screenshot can still be evidence. If it was used to impersonate the business, deceive applicants, or collect money, it may support complaints for estafa, identity theft, cybercrime, or other offenses.

Should I report to the barangay, police, NBI, or DMW?

For online fake job offers, report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. If the job is overseas, report to DMW as well. A barangay blotter can document the incident, but it usually should not be your only step.

Can applicants get their money back?

Possibly, but it depends on how quickly the payment is reported, whether funds remain in the receiving account, whether the account holder is identified, and whether a civil or criminal case results in restitution. For smaller money claims against an identifiable person, small claims may be considered when the claim is for payment or reimbursement of money within the current threshold under the Rules on Expedited Procedures. The Supreme Court has stated that small claims cases cover claims up to ₱1,000,000, exclusive of interest and costs. (Supreme Court of the Philippines)

Can the business owner be blamed for the scam?

Usually, the real business owner is not liable merely because a scammer copied an old permit without authority. But the owner should act promptly once aware: preserve proof, warn the public, request takedown, secure BPLO certification, and report the impersonation.

What if an employee or former employee leaked the permit?

Preserve evidence linking that person to the leak or scam. Possible issues may include breach of company policy, labor discipline, data privacy violations, estafa, falsification, or cybercrime, depending on what they did. Avoid public accusations until evidence is organized.

How do I verify if a Philippine business is real?

For sole proprietorships, check the DTI BNRS exact name search. For corporations and partnerships, request SEC records or search through official SEC channels. For local operation, contact the BPLO of the city or municipality. For overseas recruitment, check DMW licensed agencies and approved job orders. Do not rely only on a screenshot sent by the recruiter.

Is a fake job offer automatically illegal recruitment?

Not always. Illegal recruitment usually matters when the offer involves overseas employment or recruitment activities regulated by Philippine labor migration laws. A local fake job offer may still be estafa, cybercrime, falsification, or identity theft even if it is not illegal recruitment.

What if I am abroad and cannot personally appear in the Philippines?

You can execute an affidavit abroad, send authenticated or apostilled documents when needed, and authorize a Philippine representative through a Special Power of Attorney. Keep original electronic evidence because investigators or prosecutors may later ask how the screenshots were obtained.

Key Takeaways

An old business permit does not prove a job offer is legitimate.
Using an expired or copied permit to deceive applicants may involve estafa, falsification, cybercrime, identity theft, illegal recruitment, or financial account scamming.
Preserve screenshots, URLs, chat records, payment receipts, and copies of both the genuine and fake permit before asking for takedown.
Verify the permit with the issuing BPLO, business name with DTI, company records with SEC, and overseas recruitment authority with DMW.
Job seekers should stop paying, report payments to banks or e-wallets immediately, and file a complaint with the proper law enforcement office.
Business owners should issue a factual warning, secure official certifications, and report impersonation quickly to protect applicants and their own reputation.