Ancho - Final Case Folder
Ancho - Final Case Folder
Ancho - Final Case Folder
In Partial Fulfillment of
Cyber Security and Investigation Course
Presented by:
CHARMAINE ANGELA ANCHO
TABLE OF CONTENTS
1. CASE REFERRAL
2. INVESTIGATION DATA FORM
3. BLOTTER ENTRY
4. SPOT REPORT
5. INVESTIGATION REPORT
A. SCEENSHOTS OF CONVERSATION/TRANSACTION THRU
MESSENGER OF MARY JANE S. IDICA (COMPLAINANT) AND
MARGARET J. ADA (SUSPECT)
B. SCREENSHOTS OF GCASH RECEIPTS AND TRANSACTION HISTORY
OF MARY JANE S. IDICA (COMPLAINANT)
C. SWORN STATEMENT OF ROSE S. PULA
D. SCREENSHOTS OF ALLEGED SCAMMER POSTS ON FACEBOOK
MARKETPLACE/FACEBOOK
E. COMPLAINT AFFIDAVIT OF MARY JANE IDICA
F. RECOVERED IP ADDRESS
G. REQUEST LETTER TO THE NATIONAL BUREAU OF INVESTIGATION
H. CERTIFICATION FROM THE NATIONAL BUREAU OF INVESTIGATION
I. CERTIFICATION OF ENGAGEMENT
J. SCEENSHOTS OF ENGAGEMENT/CONVERSATION WITH
MARGARET J. ADA (SUSPECT) OF THE ACG USING THE IDENTITY
OF MARIE TESS C. BALITA (WITNESS)
K. SPOT REPORT RE: ARRESTED PERSON
L. JOINT AFFIVADIT OF ARREST
M. ARREST AND BOOKING SHEET
i. PNP BOOKING SHEET
ii. REQUEST FOR MEDICAL
iii. RESULT OF MEDICAL
iv. MUGSHOT OF THE ARRESTED PERSON
v. TEN PRINTS OF THE ARRESTED PERSON
vi. PICTURE OF THE ARRESTED PERSON
N. INVENTORY RECEIPT OF CONFISCTAED ITEM/S
O. PHOTO OF THE CONFISCATED ITEM
P. REQUEST FOR DIGITAL FORENSIC EXAMINATION
Q. RESULT OF FORENSIC DIGITAL EXAMINATION
CASE REFERRAL
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur
SIR/MADAM:
I have the honor to refer to your Office, the records of investigation relative to the
case of Cyber Estafa and Identity Theft, committed on the 6th day of February at
Barangay Cabittaogan, Sta. Catalina, Ilocos Sur against MARGARET ADA y JUKE
(ARRESTED), female, 35 years old, Filipino, online seller and a resident of Barangay
III, Bantay, Ilocos Sur.
COMPLAINANT/VICTIM:
WITNESS:
PIECES OF EVIDENCE:
1. Blotter Entry;
2. Spot Report;
3. Investigation Report;
4. Screenshots of conversations;
5. Sworn Statement;
6. Complaint Affidavit of Mary Jane Idica;
7. Copy of Recovered IP Address;
8. NBI Certification;
9. Certificate of Engagement of the PNP;
10. Joint Affidavit of Arrest;
11. Sport Report re-Arrested Person;
12. Arrest and Booking Sheet; and
13. Result of Digital Forensic Examination
This pertains to the alleged Estafa and Identity Theft in relation to Republic Act
No. 10175 (Cybercrime Prevention Act of 2012) that transpired on or about 10:30AM of
February 6, 2023 at Brgy. Cabittaogan, Sta. Catalina, Ilocos Sur. It appears that one
MARY JANE IDICA Y SATIVA, single, 25 years old, Instructor, and a resident of Brgy.
Cabittaogan, Sta. Catalina Ilocos Sur, was scammed by one MARGARET ADA Y
JUKE, 35 years old, online seller, and residing at Barangay III, Bantay, Ilocos Sur. Ms.
Idica sent her details and partial payment of nineteen thousand pesos (Php 19,000.00)
to Ms. Ada as payment for the Iphone 12 (256 GB). That after days of waiting for the
said item, Ms. Idica learned that she was already blocked by Ms. Ada.
Subsequently, one MARIE TESS BALITA y CRUZ, female, single, 26 years old,
Filipino, Instructor, and a resident of Barangay Poblacion, Sta. Catalina, Ilocos Sur, a
childhood friend of Ms. Idica, sent her a screenshot showing that her identity is already
circulating on Facebook Marketplace marked as “scammer”. Ms. Idica contacted one
ROSE PULA y SIKAT, female, single, 30 years old, Filipino, Businesswoman, and a
resident of Tamag, Vigan City, Ilocos Sur, who is believed to be one of the victims of
Ms. Ada who also posted on Facebook. Ms. Idica asked Ms. Pula to come before this
Station for the clarification of the said incident. Ms. Idica said that this was her first time
transacting online and she believed that Ms. Ada is the one who unlawfully and
surreptitiously used her identity and pretended to be her for her fraudulent activities.
The identification and geolocation of the suspect was found to through the use of
the IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police Provincial
Office with the following details:
(Attached is the recovered IP Address as “Tab F”)
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines
For the verification and confirmation of the identity of Ms. Ada, this Station
submitted a request letter addressed to the Head of Office of the National Bureau of
Investigation. Given to the emergency of the matter, a positive response was received
by this Station without delay.
Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Operatives were able to
confiscate the following: a) four (4) pieces of One-thousand-peso bill and two (2) five-
hundred-peso bill; and b) one (1) Unit of Oppo Reno 3 Pro, color aurora blue, with a
Serial Number of Q4JZS4UCOFFENJ4T and IMEI1: 864910040231594/IMEI2:
864910040231586. Confiscated cellphone from Ms. Ada were subjected for Forensic
Examination at the Criminal Investigation and Detection Group - Anti-Transnational
Crime and Cyber Crime Division, Ilocos Sur Police Provincial Office.
Among the items confiscated from the suspect’s possessions are: a) four (4)
pieces of One-thousand-peso bill and two (2) five-hundred-peso bill; and b) one (1) Unit
of Oppo Reno 3 Pro, color aurora blue, with a Serial Number of Q4JZS4UCOFFENJ4T
and IMEI1: 864910040231594/IMEI2: 864910040231586. Confiscated cellphone from
Ms. Ada were subjected for Forensic Examination at the Criminal Investigation and
Detection Group - Anti-Transnational Crime and Cyber Crime Division, Ilocos Sur Police
Provincial Office for confirmation and retrieval of information pertinent to this case.
COMPLAINANT/s: Name, Sex, Age& Address RESPONDENT/s: Name, Sex, Age& Address
1. MARY JANE IDICA Y SATIVA, 1. MARGARET ADA y JUKE,
Filipino, female, single, 25 years Filipino, female, married, 35
old, Instructor, and a resident of years old, Online Seller, and a
Brgy. Cabittaogan, Sta. Catalina resident of Barangay III, Bantay,
Ilocos Sur Ilocos Sur.
1. Has a similar complaint been filed before any other office? YES NO
2. Is this complaint in the nature of a counter-affidavit? YES NO
If yes, indicate details below
3. Is the complaint related to another case before this Office? YES NO
If yes, indicate details below
CERTIFICATION
I CERTIFY under oath, that all the information on this sheet is true and correct to
the best of our knowledge and belief. That we have not commenced any action or filed
any claim involving the same issues in any court, tribunal, or quasi-judicial agency, and
that if we should thereafter learn that a similar action has been filed and/or is pending; I
shall report that fact to this Honorable Office within five (5) days from knowledge
thereof.
C E R T I F I C A T I O N
This is to certify that based on the Police Blotter of this Police Station, record of
the events mentioned hereunder was entered in the Log Book Blotter, to wit;
BLOTTER ENTRY NUMBER : 0310-2023
BLOTTER PAGE NUMBER : 023
NATURE OF CASE INCIDENT : Estafa and Identity Theft
DATE & TIME OF OCCURENCE : 06 February 2023
10:30 AM
That on or about 12:32 in the afternoon of February 14, 2023, one Mary Jane
Idica y Sativa, single, 25 years old, Instructor, and a resident of Brgy. Cabittaogan, Sta.
Catalina Ilocos Sur, came into this station and filed a complaint against one Margaret
Ada y Juke who scammed her and believed to be the one who unlawfully and
surreptitiously used her identity and pretended to be her in deceiving others.
Initial investigation was conducted and it was revealed that Margaret Ada y Juke
is selling gadgets on Facebook Marketplace and Mary Jane Idica y Sativa sent her
interest to the said suspect on or about 9:30 in the morning of February 06, 2023. Ms.
Idica inquired for an iPhone 12 (256 GB) and Ms. Ada was able to convince her about
its specs and that it was a good deal price. An agreement was made that Ms. Ada will
send the phone thru JnT Courier and Ms. Idica will pay half of the price of the phone
amounting to nineteen thousand pesos (Php 19,000.00) thru GCash and will pay her
balance upon delivery. Ms. Ada then requested Ms. Idica to send two (2) valid
identification cards with a “selfie” while holding the said IDs as a proof that the
transaction was legit. Upon sending the demands as well as the payment thru GCash to
Ms. Ada, Ms. Ada told Ms. Idica that she will just pack the item and will update her as
soon as she finished it. Ms. Ada gave Ms. Idica a dummy tracking number and informed
her that the item was already shipped. However, days have passed by, but still no item
is being delivered. Ms. Idica checked her phone and learned that Ms. Ada already
blocked her on all her social media accounts. Ms. Idica learned through her friend, Ms.
Marie Tess Balita y Cruz that her identity and pictures were already circulating on
Facebook and had been tagged as “scammer.”
DISPOSITION: For the record as requested.
ATTENDED BY: PCpl. Narcos A. Demies
Issued this 14th day of February 2023, at Bantay, Ilocos Sur, Philippines.
MEMORANDUM
FOR : Director
Anti-Cybercrime Group
1. Reference: Police Blotter Entry No. 0310-2023 Pg. 023 dated February 14, 2023.
2. This pertains to the complaint filed by one MARY JANE IDICA y SATIVA,
Filipino, female, single, 25 years old, Instructor, and a resident of Barangay.
Cabittaogan, Sta. Catalina Ilocos Sur of the alleged Estafa and Identity Theft that
happened at about 10:30 in the morning of February 06, 2023 at the said place
against one MARGARET ADA y JUKE, Filipino, female, married, 35 years old,
Online Seller, and a resident of Barangay III, Bantay, Ilocos Sur. Said incident
has been corroborated by the witness, one ROSE PULA y SIKAT, female,
single, 30 years old, Filipino, Businesswoman, and a resident of Tamag, Vigan
City, Ilocos Sur.
3. Please be informed that the identity and geolocation of Ms. Ada was found to
through the use of IP Address recovered by the Anti-Cybercrime Group of Ilocos
Sur Police Provincial Office with the following details:
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines
4. To hold the geolocation of Ms. Ada, PCpl. Charrie D. Tama engaged with her
using the personal phone and identity of Ms. Balita. Ms. Ada agreed with the
proposed mode of delivery was thru Lalamove Express Delivery to be booked by
PCpl. Tama, concealed as MARGARET ADA y JUKE, Filipino, female, married,
35 years old, Online Seller, and a resident of Barangay III, Bantay, Ilocos Sur.
7. Arresting personnel informed Ms. Ada about the nature of the offense she
committed and was appraised by her constitutional rights in a dialect known to
her during and was brought to Ilocos Sur Gabriela Silang General Hospital for
medical examination as part of her right and later brought to this station together
with the confiscated items for proper documentation and disposition, and
subsequent filing of appropriate charges against her.
MEMORANDUM
FOR : Director
Anti-cybercrime Group
I. AUTHORITY:
5. At about 9:30 in the morning of February 06, 2023, one complainant, Mary
Jane Idica y Sativa reached Margaret Ada y Juke via Messenger and inquired about
the specs and price of iPhone 12 (256 GB) that is posted by the latter in Facebook
Market.
6. Ms. Ada was able to convince Ms. Idica to buy the said phone by
emphasizing its standout specs and good price. An agreement was made that Ms. Ada
will send the phone thru JnT Courier and Ms. Idica will pay half of the amount of the
phone thru GCash, and will pay her balance upon delivery of the item.
7. To seal the deal, Ms. Ada then requested Ms. Idica to send two (2) valid
identification cards and a “selfie” while holding the said IDs as proof that the
transaction was legitimate. Upon sending the demands as well as the payment thru
GCash to Ms. Ada, Ms. Ada told Ms. Idica that she will just pack the item and will
update her as soon as she finished it. Ms. Ada gave Ms. Idica a dummy tracking
number and informed her that the item was already shipped. Days passed by, Ms.
Idica checked her phone and learned that Ms. Ada have already blocked her on all her
social media accounts. (Attached is the screenshot of transaction/conversation as “Tab
A” and the GCash Receipt & Transaction History as “Tab B”)
8. Marie Tess Balita y Cruz on February 14, 2023, a childhood friend of Ms.
Idica, and a resident of Barangay Poblacion, Sta. Catalina, Ilocos Sur said to this
Station that she was just scrolling on Facebook Marketplace when she saw posts
about the scamming issue of her friend. This was confirmed on the same day by one of
the victims of Ms. Ada, Rose Pula y Sikat, a resident of Tamag, Vigan City, Ilocos Sur.
According to Ms. Pula, she was also victimized by Ms. Ada and that she is willing to
testify as a witness if Ms. Idica will file a Complaint against Ms. Ada. (Attached is the
Sworn Statement of Rose S. Pula as “Tab C”)
9. Ms. Idica together with Ms. Balita immediately came to this police station
and reported the said incident. Ms. Idica said that this was her first time transacting
online and she believed that Ms. Ada is the one who unlawfully and surreptitiously
used her identity and pretended to be her for her fraudulent activities. Police officers of
this station help Ms. Idica in searching for the said suspect on the internet (Facebook)
and it was confirmed that the identity and pictures of Ms. Idica were already circulating
online, and had been tagged as a “scammer” on Facebook Marketplace. Frightened by
the incident, Ms. Idica filed a Complaint against Margaret Ada for stealing and using
her identity for her fraudulent activity and for not giving her the item that she paid.
(Attached are the screenshots of the alleged scammer posts on Facebook as “Tab D”
and Complaint Affidavit as “Tab E”)
10. The identification and geolocation of Ms. Ada was found to through the
use of the IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police
Provincial Office with the following details: (Attached is the recovered IP Address as
“Tab F”)
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines
11. Further, a request letter addressed to the Head of Office of the National
Bureau of Investigation for the verification and confirmation of the identity of Ms. Ada.
Given to the emergency of the matter, a positive response was received by this Station
without delay. (Attached is the Request Letter to the NBI as “Tab G” and the copy of
the Certification from the NBI as “Tab H”)
15. Among the items confiscated from the suspect’s possessions are: a) four
(4) pieces of One-thousand-peso bill and two (2) Five-hundred-peso bill; and b) one (1)
Unit of Oppo Reno 3 Pro, color aurora blue, with a Serial Number of
Q4JZS4UCOFFENJ4T and IMEI1: 864910040231594/IMEI2: 864910040231586.
Confiscated cellphone from Ms. Ada were subjected for Forensic Examination at the
Criminal Investigation and Detection Group - Anti-Transnational Crime and Cyber
Crime Division, Ilocos Sur Police Provincial Office for confirmation and retrieval of
information pertinent to this case. (Attached is the Inventory Receipt of Confiscated
Item as “Tab N”, Photo of the confiscated item as “Tab O”, the Request for Digital
Forensic Examination as “Tab P”, copy of Digital Forensic Examination Report as “Tab
Q")
IV. DISCUSSION
16. Based on the evidence presented at hand, it was established that cyber
estafa and identity theft was committed by Ms. Margaret Ada. The act of Ms. Ada in
defrauding Ms. Mary Jane Idica with unfaithfulness or abuse of confidence constitute
to estafa and her unlawful and surreptitious use of the identity of Ms. Idica established
that an identity theft was committed. These were done through the use of Information
and Communication Technology (ICT). Thus, the fraudulent acts of Ms. Margaret Ada
in violation to Revised Penal Code constitute to Swindling/Estafa and in violation of RA
No. 10175 otherwise known as Cybercrime Prevention Act of 2012, constitutes the
crime of Computer-related Identity Theft.
xxx
Paragraph 1(b)
1. With unfaithfulness or abuse of confidence, namely:
(b) By misappropriating or converting, to the prejudice of another,
money, goods, or any other personal property received by the
offender in trust or on commission, or for administration, or under any
other obligation involving the duty to make delivery of or to return the
same, even though such obligation be totally or partially guaranteed
by a bond; or by denying having received such money, goods, or
other property.
xxx
Paragraph 2(a)
2. By means of any of the following false pretenses or fraudulent acts
executed prior to or simultaneously with the commission of the fraud:
(a) By using fictitious name, or falsely pretending to possess power,
influence, qualifications, property, credit, agency, business or
imaginary transactions, or by means of other similar deceits.
….………………….xxx
xxx
Section 6.
All crimes defined and penalized by the Revised Penal Code, as
amended, and special laws, if committed by, through and with the
use of information and communications technologies shall be
covered by the relevant provisions of this Act: Provided, That the
penalty to be imposed shall be one (1) degree higher than that
provided for by the Revised Penal Code, as amended, and special
laws, as the case may be.
….………………….xxx
V. CONCLUSION
17. Ms. Margaret Ada y Jukes’s action to deceive others with unfaithfulness or
abuse of confidence through the misappropriation or conversion money, goods/property
of another to whom a return should be made and by deceiving others by means of using
the identity of Ms. Mary Jane Idica through the use of Information and Communication
Technology (ICT) is a clear indication of violations of Section 4 (b) (3) (Computer-
related Identity Theft) of RA No. 10175 (Cybercrime Prevention Act of 2012) and
Article 315 (Swindling/Estafa) of the Revised Penal Code as amended by RA No.
10951 in relation to Section 6 of RA No. 10175.
VI. RECOMMENDATION
Approved/Disapproved by:
CONVERSATION EXHIBIT
1_A_Conversation.jpg 1_B_Conversation.jpg
1_C_Conversation.jpg 1_D_Conversation.jpg
1_E_Conversation.jpg
SCREENSHOTS OF GCASH RECEIPT AND TRANSACTION HISTORY FROM MARY
JANE IDICA
SINUMPAANG SALAYSAY
PAUNANG SALITA
Mga bandang 1:10 nitong araw, may tumawag sa akin na number at ang sabi
niya ay siya raw yung tunay na Mary Jane Idica na pinost kong scammer sa
Facebook. Nagalit ako nung una, nakabigkas ako ng mga hindi magagaling salita
sa kaniya. Tapos inanyayahan niya ako sa Anti-Cybercrime Group sa ISPPO,
Bantay, Ilocos Sur para dun daw kami mag-usap at maipaliwanag niya yung
nangyari. Nang makarating ako sa Police Station, dun ko na rin ikwinento lahat
sa kaniya.
T12 : Maaari mo bang ilahad kung ano iyong ID na pinadala sayo sa Messenger
ni Mary Jane Idica, ma’am?
S12 : Driver’s license po, sir.
T13 : Bakit hindi ka nag-report sa mga awtoridad ng PNP noong nangyari ang
insidente sayo, ma’am?
S13 : Hindi ko nalang po ini-report kasi ayaw ko na rin po ng paulit-ulit na bumabalik
sa police station at sa kung ano-ano pa pong mga bagay lalo na po inaalagaan
ko rin ang lola ko pagka-uwi ko ng bahay. Nag focus nalang po ako sa store ko
para makabawi po ulit. Isa pa po, dalawa lang po kami sa store ng pinsan ko,
ayaw ko pong iwan kung maaari ang pwesto.
T14 : Bakit po ma’am? May sakit po ba ang lola niyo? Ilang taon na po siya?
S14 : 86 years old na siya, sir. Naatake kasi siya noong nakaraang taon. Kaya hindi
na siya gaanong nakaka-kilos. Kailangan lagging may naka-supervise sa kaniya
para hindi siya mapano.
T15 : Nabanggit mo po na kung maaari ay ayaw mong iwan ang iyong pwesto.
Ngunit bakit noong tinawagan ka po ni Mary Jane Idica ay dali-dali kang
pumunta dito sa aminig tanggapan, ma’am?
S15 : Aaminin ko sir, nag baka sakali akong maibalik yung pera ko. Pero ang nasa
isip ko na lamang po habang nagda-drive ko ng motor ko kanina ay para
masagot na rin po ang mga katanungan ko kung bakit po nagawa ni Mary Jane
iyon at kung ano yung tunay na nangyari talaga, sir. Para na rin po matahimik
ang utak ko sa kakaisip, iniwan ko po nalang po muna yung pwesto sa pinsan
ko.
T20 : Handa mo bang lagdaan ang salaysay mong ito na binubuo ng apat na
pahina, ma’am?
S20 : Opo.
……………………..WAKAS NG SALAYSAY……………………
COMPLAINT AFFIDAVIT
8. Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Operatives were
able to confiscate the following: a) four (4) pieces of One-thousand-peso bill,
and two (2) five-hundred-peso bill; and b) one Unit of Oppo Reno 3 Pro, color
aurora blue, with a Serial Number of Q4JZS4UCOFFENJ4T and IMEI1:
864910040231594/IMEI2: 864910040231586.
9. That, I am executing this Affidavit to attest to the truth of the foregoing facts
and represents the filing criminal of charges against MARGARET ADA Y
JUKE in violation of the RA No. 10175 otherwise known as Cybercrime
Prevention Act of 2012, Section 4(b) 3 (Computer-related Identity Theft) and
of Article 315 (Swindling/Estafa) of the Revised Penal Code as amended by
RA No. 10951 in relation to Section 6 of RA No. 10175.
4_A_Recovered IP Address.jpg
4_B_Recovered IP Address.jpg
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur
Sir/Ma’am;
In line with the on-going investigation of the alleged Swindling/Estafa prescribed under
Article 315 of the Revise Penal Code and Identity Theft in relation to Republic Act No.
10175, otherwise known as Cybercrime Prevention Act of 2012 of the person listed
below.
NAMES ADDRESS
BARANGAY III, BANTAY,
MARGARET ADA y JUKE
ILOCOS SUR
C E R T I F I C A T I O N
This certification is issued upon the request of PLT. Bruce D. Magkamali, Chief of
Investigation Section, Anti-Cybercrime Group-ISPPO, Bantay, Ilocos Sur for whatever
legal purpose it may serve.
Issued this 14th day of February 2023 at the National Bureau of Investigation,
Bantay, Ilocos Sur.
By:
C E R T I F I C A T I O N
This is to certify that PCpl. Charrie D. Tama, a member of this Station, who
mainly engaged and had communication thru Messenger with Ms. Margaret J. Ada,
person of interest of the alleged Estafa and Identity Theft filed by the complainant, Ms.
Mary Jane S. Idica with the Police Blotter Entry No. 0310-2023 Pg. 023.
This further certifies that the engagement has made thru the use of the personal
cellphone and identity of Ms. Marie Tess C. Balita, one of the witnesses.
This certification is being issued this 14th day of February 2023 for the legal
proceedings of this case.
MEMORANDUM
FOR : Director
Anti-Cybercrime Group
I. References:
a. Police Blotter Entry No. 0310-2023 Pg. 023, dated February 14, 2023.
IV. Remarks:
To be presented to the court of origin.
We, PEMS. Tolits D. Tahimik and PSSg. Dopium D. Cruz, both members of the
Philippine National Police, presently assigned at the Anti-Cybercrime Group – Ilocos
Sur Police Provincial Office, do hereby depose and state THAT:
1. We are among the members of the Anti-Cybercrime Group – Ilocos Sur Police
Provincial Office who conducted entrapment operations at the Barangay III,
Bantay, Ilocos Sur.
2. Said operation stemmed from the complaint of Mary Jane Idica y Sativa, single,
25 years old, Instructor, and a resident of Barangay Cabittaogan, Sta. Catalina
Ilocos Sur for the violation of
3. At about 12:32 in the afternoon of February 14, 2023, one Mary Jane Idica y
Sativa, single, 25 years old, Instructor, and a resident of Barangay Cabittaogan,
Sta. Catalina Ilocos Sur, came into this station reporting that one Margaret Ada
y Juke was allegedly scammed her after she sent her details to Ms. Ada.
4. Upon investigation, in her transaction with Margaret Ada, she inquired to Ms. Ada
thru Messenger regarding the iPhone 12 (256 GB) that she posted in Facebook
Marketplace. Ms. Ada was capable to convince her was able to close the deal.
Ms. Idica gave Ms. Ada a photo of her two (2) valid IDs, a selfie holding the said
IDs, and sent the receipt of the down payment of the said item as it was
demanded by Ms. Ada. Ms. Ada gave Ms. Idica a dummy tracking number and
said that it was already shipped. But days have passed by, the said item is still
not being received by Ms. Idica. After Ms. Idica learned that she was blocked by
Ms. Ada in all her social media accounts, her friend, Marie Tess C. Balita
informed her about her identity and photos that were circulating on Facebook and
is being tagged as a “scammer.” According to Ms. Idica, this was her first time
transacting online and she believed that Ms. Ada unlawfully and surreptitiously
used her identity and pretended to be her for her fraudulent activities.
5. Ms. Idica contacted one Rose Pula y Sikat, who is believed to be one of the
victims of Ms. Ada who also posted on Facebook and asked her to come to this
Station for the clarification of the incident. After a while, Ms. Pula came to this
Station and told her story. Ms. Pula then told Ms. Idica that should the latter files
a criminal and civil case against Ms. Ada, she is willing to testify as a witness
thereof.
7. The identification and geolocation of the suspect was found to through the use of
the IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police
Provincial Office with the following details:
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines
8. Request letter addressed to the Head of Office of the National Bureau of
Investigation was submitted for the verification of the identity of Ms. Ada. Given
to the emergency of the matter, a positive response was received by this Station
without delay.
9. To hold the geolocation of Ms. Ada, PCpl. Charrie D. Tama engaged with Ms.
Ada using the identity and personal phone of Ms. Marie Tess Balita. PCpl. Tama
proposed that the mode of delivery of the item will be booked by her thru
Lalamove Express Delivery which Ms. Ada agreed with.
11. Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Ms. Ada was appraised
by her constitutional rights in a dialect known to her during her arrest and was
submitted for medical examination at the Gabriela Silang General Hospital. After
which, she was taken into custody for the taking of her personal information, mug
shot, and ten prints/fingerprints, and for proper disposition.
12. Among the items confiscated from the suspect’s possessions are: a) four (4)
pieces of One-thousand-peso bill and two (2) Five-hundred-peso bill; and b) one
(1) Unit of Oppo Reno 3 Pro, color aurora blue, with a Serial Number of
Q4JZS4UCOFFENJ4T and IMEI1: 864910040231594/IMEI2: 864910040231586.
Confiscated cellphone from Ms. Ada were subjected for Forensic Examination at
the Criminal Investigation and Detection Group - Anti-Transnational Crime and
Cyber Crime Division, Ilocos Sur Police Provincial Office for confirmation and
retrieval of information pertinent to this case.
ATTENDING PHYSICIAN
Gabriela Silang General Hospital
City of Vigan, Ilocos Sur
Sir/Ma’am:
a. MARGARET ADA y JUKE, female, 35 years old, Filipino, online seller and a
resident of Barangay III, Bantay, Ilocos Sur.
Please furnish the arresting officer/s, PEMS. Tolits D. Tahimik and PSSg.
Dopium D. Cruz a copy of the Medical Examination result for our reference.
MEDICAL CERTIFICATE
ANTI-CYBERCRIME
GROUP - ILOCOS SUR
MARGA POLICE PROVINCIAL 05/11/1988
BRGY. III, BANTAY, ILOCOS OFFICE
02/14/2023
PICTURE OF THE ARRESTED PERSON
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur
ITEMS/ARTICLE QUANTITY
Oppo Reno 3 Pro cellphone, color aurora blue,
with a Serial Number of Q4JZS4UCOFFENJ4T
One (1)
and IMEI1: 864910040231594/IMEI2:
864910040231586
One-thousand-peso bill Four (4)
Five-hundred-peso bill Two (2)
Witness by:
HON. ARJAY PUGAL
Barangay Captain
PHOTO OF CONFISCATED ITEM
SERIAL NUMBER:
Q4JZS4UCOFFENJ4T
IMEI1:
864910040231594
IMEI2:
864910040231586.
MEMORANDUM
FOR : Director, CIDG
(Attn: Chief, ATCCD)
1. References:
Spot Report re: Estafa and Identity Theft dated, February 14, 2023
That on or about 12:32 in the afternoon of February 14, 2023, one Mary
Jane Idica y Sativa, single, 25 years old, Instructor, and a resident of Brgy. Cabittaogan,
Sta. Catalina Ilocos Sur, filed a complaint to this Station that she was scammed and her
identity was circulating on Facebook and had been tagged as scammer. Ms. Idica
believed that it was one Margaret Ada y Juke who allegedly scammed her and used her
identity unlawfully and surreptitiously, and pretended to be her for her fraudulent
activities.
The identification and geolocation of the suspect was found to through the
use of IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police
Provincial Office with the following details:
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines
5. Herewith is/are the required storage media necessary for the digital
forensic examination:
7. Further, request that this Office be furnished a copy of the ATCCD digital
forensic examination result for our reference.
Others: __________________________________
B. Mode of Request:
Others:__________________________________
Requested this office to conduct Digital Forensic Examination to verify and confirm if the
confiscated item was used by the suspect for the commission of the crime and recover
pertinent information that will link to the suspect.
Please identify the types of evidence/information to be searched for/ recovered:
A. Lab
Case #:
E. Assigne
d by
F. Assigne
d to
G. Priority
Introduction
A request for service was issued to conduct a digital forensic examination of the
confiscated cellphone belonging to Margaret Juke Ada, evidence item marked CAA-1-
02-14-2023. The request for examination was issued by PLT. Bruce D. Magkamali,
Chief of Investigation of the Anti-Cybercrime Group – Ilocos Sur Provincial Police Office
to verify and confirm if the confiscated cellphone was used by Margaret Juke Ada for
the commission of fraudulent activity, and to recover pertinent information that will link
the her.
The report was written by PMSg. Rommel P. Rabara, a digital forensic examiner.
The examination uncovered information that is associated with Margaret Juke Ada.
Summary
The registry files of the system and the data of the user were inspected on the
same day using the RegRipper (v 2.8) Tool for extracting/parsing information from the
registry. This tool is used because of its standard and acceptance in digital forensic
community.
The important data present such as the registry files and information of the user,
active accounts on Facebook and Messenger including their links were found by going
through the logical file system particularly the SAM (Security Accounts Manager)
Registry File. Through the analyzation, it was found out that there are two (2) accounts
that are active both in Facebook and Messenger App namely, Margaret Juke Ada and
Mary Jane Idica. Further, the account of Mary Jane Idica was just recently registered on
the device. The users also have the same passwords and never has a failed attempt in
logging in.
Conclusion
From the evidence, this Office concludes that it is probable that Margaret Juke
Ada uses the same account that was logged in on the two (2) afore mentioned
applications since passwords of both accounts are the same. In addition, Margaret Juke
Ada seemed to have been using it for quite a while since the account of Mary Jane Idica
was just recent added to the device.