Ancho - Final Case Folder

Download as pdf or txt
Download as pdf or txt
You are on page 1of 59

PHILIPPINE INVESTIGATION AND

FORENSIC SCIENCE ACADEMY


2nd floor BS Square Commercial Bldg., Doña Soledad Corner
West Service Road Paranaque City

In Partial Fulfillment of
Cyber Security and Investigation Course

Presented by:
CHARMAINE ANGELA ANCHO
TABLE OF CONTENTS

1. CASE REFERRAL
2. INVESTIGATION DATA FORM
3. BLOTTER ENTRY
4. SPOT REPORT
5. INVESTIGATION REPORT
A. SCEENSHOTS OF CONVERSATION/TRANSACTION THRU
MESSENGER OF MARY JANE S. IDICA (COMPLAINANT) AND
MARGARET J. ADA (SUSPECT)
B. SCREENSHOTS OF GCASH RECEIPTS AND TRANSACTION HISTORY
OF MARY JANE S. IDICA (COMPLAINANT)
C. SWORN STATEMENT OF ROSE S. PULA
D. SCREENSHOTS OF ALLEGED SCAMMER POSTS ON FACEBOOK
MARKETPLACE/FACEBOOK
E. COMPLAINT AFFIDAVIT OF MARY JANE IDICA
F. RECOVERED IP ADDRESS
G. REQUEST LETTER TO THE NATIONAL BUREAU OF INVESTIGATION
H. CERTIFICATION FROM THE NATIONAL BUREAU OF INVESTIGATION
I. CERTIFICATION OF ENGAGEMENT
J. SCEENSHOTS OF ENGAGEMENT/CONVERSATION WITH
MARGARET J. ADA (SUSPECT) OF THE ACG USING THE IDENTITY
OF MARIE TESS C. BALITA (WITNESS)
K. SPOT REPORT RE: ARRESTED PERSON
L. JOINT AFFIVADIT OF ARREST
M. ARREST AND BOOKING SHEET
i. PNP BOOKING SHEET
ii. REQUEST FOR MEDICAL
iii. RESULT OF MEDICAL
iv. MUGSHOT OF THE ARRESTED PERSON
v. TEN PRINTS OF THE ARRESTED PERSON
vi. PICTURE OF THE ARRESTED PERSON
N. INVENTORY RECEIPT OF CONFISCTAED ITEM/S
O. PHOTO OF THE CONFISCATED ITEM
P. REQUEST FOR DIGITAL FORENSIC EXAMINATION
Q. RESULT OF FORENSIC DIGITAL EXAMINATION
CASE REFERRAL
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

February 15, 2023


The Honorable Provincial Prosecutor
Office of Provincial Prosecutor
Justice Hall, Branch 21
Vigan City

SIR/MADAM:

I have the honor to refer to your Office, the records of investigation relative to the
case of Cyber Estafa and Identity Theft, committed on the 6th day of February at
Barangay Cabittaogan, Sta. Catalina, Ilocos Sur against MARGARET ADA y JUKE
(ARRESTED), female, 35 years old, Filipino, online seller and a resident of Barangay
III, Bantay, Ilocos Sur.

COMPLAINANT/VICTIM:

1. MARY JANE IDICA y SATIVA, female, single, 25 years old, Filipino,


Instructor, and a resident of Barangay Cabittaogan, Sta. Catalina, Ilocos Sur.

WITNESS:

1. MARIE TESS BALITA y CRUZ, female, single, 26 years old, Filipino,


Instructor, and a resident of Barangay Poblacion, Sta. Catalina, Ilocos Sur.
2. ROSE PULA y SIKAT, female, single, 30 years old, Filipino,
Businesswoman, and a resident of Tamag, Vigan City, Ilocos Sur.

PIECES OF EVIDENCE:

1. Blotter Entry;
2. Spot Report;
3. Investigation Report;
4. Screenshots of conversations;
5. Sworn Statement;
6. Complaint Affidavit of Mary Jane Idica;
7. Copy of Recovered IP Address;
8. NBI Certification;
9. Certificate of Engagement of the PNP;
10. Joint Affidavit of Arrest;
11. Sport Report re-Arrested Person;
12. Arrest and Booking Sheet; and
13. Result of Digital Forensic Examination

FACTS OF THE CASE:

This pertains to the alleged Estafa and Identity Theft in relation to Republic Act
No. 10175 (Cybercrime Prevention Act of 2012) that transpired on or about 10:30AM of
February 6, 2023 at Brgy. Cabittaogan, Sta. Catalina, Ilocos Sur. It appears that one
MARY JANE IDICA Y SATIVA, single, 25 years old, Instructor, and a resident of Brgy.
Cabittaogan, Sta. Catalina Ilocos Sur, was scammed by one MARGARET ADA Y
JUKE, 35 years old, online seller, and residing at Barangay III, Bantay, Ilocos Sur. Ms.
Idica sent her details and partial payment of nineteen thousand pesos (Php 19,000.00)
to Ms. Ada as payment for the Iphone 12 (256 GB). That after days of waiting for the
said item, Ms. Idica learned that she was already blocked by Ms. Ada.

Subsequently, one MARIE TESS BALITA y CRUZ, female, single, 26 years old,
Filipino, Instructor, and a resident of Barangay Poblacion, Sta. Catalina, Ilocos Sur, a
childhood friend of Ms. Idica, sent her a screenshot showing that her identity is already
circulating on Facebook Marketplace marked as “scammer”. Ms. Idica contacted one
ROSE PULA y SIKAT, female, single, 30 years old, Filipino, Businesswoman, and a
resident of Tamag, Vigan City, Ilocos Sur, who is believed to be one of the victims of
Ms. Ada who also posted on Facebook. Ms. Idica asked Ms. Pula to come before this
Station for the clarification of the said incident. Ms. Idica said that this was her first time
transacting online and she believed that Ms. Ada is the one who unlawfully and
surreptitiously used her identity and pretended to be her for her fraudulent activities.

The identification and geolocation of the suspect was found to through the use of
the IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police Provincial
Office with the following details:
(Attached is the recovered IP Address as “Tab F”)
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines

For the verification and confirmation of the identity of Ms. Ada, this Station
submitted a request letter addressed to the Head of Office of the National Bureau of
Investigation. Given to the emergency of the matter, a positive response was received
by this Station without delay.

Thereafter, an entrapment operation was planned led by PEMS. Tolits D.


Tahimik and to hold the geolocation of Ms. Ada, PCpl. Charrie D. Tama engaged with
her using the identity and personal phone of Ms. Marie Tess Balita. PCpl. Tama
proposed that the mode of delivery of the item will be booked by her thru Lalamove
Express Delivery which Ms. Ada agreed with.

Joint operatives of Anti-Cybercrime Group-ISPPO led by PEMS. Tolits D.


Tahimik together with the Bantay Municipal Police Station proceeded to the Main
Entrance of Arveemar Subdivision, Bantay, Ilocos Sur as the said pick-up point address
stated by Ms. Ada and strategically positioned themselves in the area. Thereupon, Pat.
Boss I. Amo disguised as Lalamove rider. Few minutes after, Ms. Ada arrived at the
said location and had a little talk with Pat. Amo. Pat. Amo received the item placed in a
paper bag wrapped with clear packaging tape. Upon handing over the marked money to
Ms. Ada, operatives of immediately approached the subject and announced her arrest.

Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Operatives were able to
confiscate the following: a) four (4) pieces of One-thousand-peso bill and two (2) five-
hundred-peso bill; and b) one (1) Unit of Oppo Reno 3 Pro, color aurora blue, with a
Serial Number of Q4JZS4UCOFFENJ4T and IMEI1: 864910040231594/IMEI2:
864910040231586. Confiscated cellphone from Ms. Ada were subjected for Forensic
Examination at the Criminal Investigation and Detection Group - Anti-Transnational
Crime and Cyber Crime Division, Ilocos Sur Police Provincial Office.
Among the items confiscated from the suspect’s possessions are: a) four (4)
pieces of One-thousand-peso bill and two (2) five-hundred-peso bill; and b) one (1) Unit
of Oppo Reno 3 Pro, color aurora blue, with a Serial Number of Q4JZS4UCOFFENJ4T
and IMEI1: 864910040231594/IMEI2: 864910040231586. Confiscated cellphone from
Ms. Ada were subjected for Forensic Examination at the Criminal Investigation and
Detection Group - Anti-Transnational Crime and Cyber Crime Division, Ilocos Sur Police
Provincial Office for confirmation and retrieval of information pertinent to this case.

This case will be presented to you by PMSg. CHARMAINE ANGELA ANCHO of


this Office during the course of inquest proceedings. Further, request furnished this
Office copy of resolution of the case and other proceedings.

For appropriate action and disposition.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
INVESTIGATION DATA
FORM
Republic of the Philippines
Department of Justice
NATIONAL PROSECUTION SERVICE
Office of the Provincial Prosecutor
Vigan City, Ilocos Sur

INVESTIGATION AND DATA FORM

DATE RECEIVED: NPD DOCKET NO:


(Stamped and initiated): ____________ _____IV-03-INQ-14_______________
Time Received: ___________________ Assigned to: ATTY. AIANNE DECANO
Receiving Staff: ___________________ Date Assigned: FEBRUARY 15, 2023

To be accomplished by complainant/counsel/law enforcer


(Use back portion if space is not sufficient)

COMPLAINANT/s: Name, Sex, Age& Address RESPONDENT/s: Name, Sex, Age& Address
1. MARY JANE IDICA Y SATIVA, 1. MARGARET ADA y JUKE,
Filipino, female, single, 25 years Filipino, female, married, 35
old, Instructor, and a resident of years old, Online Seller, and a
Brgy. Cabittaogan, Sta. Catalina resident of Barangay III, Bantay,
Ilocos Sur Ilocos Sur.

LAW/S VIOLATED: WITNESS/ES: Name and Address


1. Article 315 (Swindling/Estafa) of 1. MARIE TESS BALITA y CRUZ,
the Revised Penal Code as female, single, 26 years old,
amended by RA No. 10951 in Filipino, Instructor, and a resident
relation to Section 6 of RA No. of Barangay Poblacion, Sta.
10175; and Catalina, Ilocos Sur.
2. Section 4 (b) 3 (Computer- 2. ROSE PULA y SIKAT, female,
Related Identity Theft) of single, 30 years old, Filipino,
Republic Act No. 10175 Businesswoman, and a resident
(Cybercrime Prevention Act of of Tamag, Vigan City, Ilocos Sur.
2012).

DATE & TIME OF COMMISSION: PLACE OF COMMISSION:


February 06, 2023, 10:30AM Barangay Cabittaogan, Sta. Catalina,
Ilocos Sur

1. Has a similar complaint been filed before any other office? YES NO
2. Is this complaint in the nature of a counter-affidavit? YES NO
If yes, indicate details below
3. Is the complaint related to another case before this Office? YES NO
If yes, indicate details below

NPS Docket No.: xv-______________


Handling Prosecutor: _____________

CERTIFICATION
I CERTIFY under oath, that all the information on this sheet is true and correct to
the best of our knowledge and belief. That we have not commenced any action or filed
any claim involving the same issues in any court, tribunal, or quasi-judicial agency, and
that if we should thereafter learn that a similar action has been filed and/or is pending; I
shall report that fact to this Honorable Office within five (5) days from knowledge
thereof.

MARY JANE IDICA Y SATIVA


Complainant

SUBSCRIBED AND SWORN TO before me this 15th day of February 2023 in


Vigan City, Ilocos Sur.

ATTY. KENNETH D. DIAZ


Administering Office
BLOTTER ENTRY REPORT
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

C E R T I F I C A T I O N

TO WHOM IT MAY CONCERN:

This is to certify that based on the Police Blotter of this Police Station, record of
the events mentioned hereunder was entered in the Log Book Blotter, to wit;
BLOTTER ENTRY NUMBER : 0310-2023
BLOTTER PAGE NUMBER : 023
NATURE OF CASE INCIDENT : Estafa and Identity Theft
DATE & TIME OF OCCURENCE : 06 February 2023
10:30 AM

FACTS OF THE CASE:

That on or about 12:32 in the afternoon of February 14, 2023, one Mary Jane
Idica y Sativa, single, 25 years old, Instructor, and a resident of Brgy. Cabittaogan, Sta.
Catalina Ilocos Sur, came into this station and filed a complaint against one Margaret
Ada y Juke who scammed her and believed to be the one who unlawfully and
surreptitiously used her identity and pretended to be her in deceiving others.

Initial investigation was conducted and it was revealed that Margaret Ada y Juke
is selling gadgets on Facebook Marketplace and Mary Jane Idica y Sativa sent her
interest to the said suspect on or about 9:30 in the morning of February 06, 2023. Ms.
Idica inquired for an iPhone 12 (256 GB) and Ms. Ada was able to convince her about
its specs and that it was a good deal price. An agreement was made that Ms. Ada will
send the phone thru JnT Courier and Ms. Idica will pay half of the price of the phone
amounting to nineteen thousand pesos (Php 19,000.00) thru GCash and will pay her
balance upon delivery. Ms. Ada then requested Ms. Idica to send two (2) valid
identification cards with a “selfie” while holding the said IDs as a proof that the
transaction was legit. Upon sending the demands as well as the payment thru GCash to
Ms. Ada, Ms. Ada told Ms. Idica that she will just pack the item and will update her as
soon as she finished it. Ms. Ada gave Ms. Idica a dummy tracking number and informed
her that the item was already shipped. However, days have passed by, but still no item
is being delivered. Ms. Idica checked her phone and learned that Ms. Ada already
blocked her on all her social media accounts. Ms. Idica learned through her friend, Ms.
Marie Tess Balita y Cruz that her identity and pictures were already circulating on
Facebook and had been tagged as “scammer.”
DISPOSITION: For the record as requested.
ATTENDED BY: PCpl. Narcos A. Demies
Issued this 14th day of February 2023, at Bantay, Ilocos Sur, Philippines.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
SPOT REPORT
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

MEMORANDUM
FOR : Director
Anti-Cybercrime Group

FROM : Cybercrime Response Team

SUBJECT : Spot Report RE: Estafa and Identity Theft

DATE : 14 February 2023

1. Reference: Police Blotter Entry No. 0310-2023 Pg. 023 dated February 14, 2023.

2. This pertains to the complaint filed by one MARY JANE IDICA y SATIVA,
Filipino, female, single, 25 years old, Instructor, and a resident of Barangay.
Cabittaogan, Sta. Catalina Ilocos Sur of the alleged Estafa and Identity Theft that
happened at about 10:30 in the morning of February 06, 2023 at the said place
against one MARGARET ADA y JUKE, Filipino, female, married, 35 years old,
Online Seller, and a resident of Barangay III, Bantay, Ilocos Sur. Said incident
has been corroborated by the witness, one ROSE PULA y SIKAT, female,
single, 30 years old, Filipino, Businesswoman, and a resident of Tamag, Vigan
City, Ilocos Sur.

3. Please be informed that the identity and geolocation of Ms. Ada was found to
through the use of IP Address recovered by the Anti-Cybercrime Group of Ilocos
Sur Police Provincial Office with the following details:
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines

This was substantiated by certification from the National Bureau of Investigation,


which has been obtained in accordance with a request for identity verification.

4. To hold the geolocation of Ms. Ada, PCpl. Charrie D. Tama engaged with her
using the personal phone and identity of Ms. Balita. Ms. Ada agreed with the
proposed mode of delivery was thru Lalamove Express Delivery to be booked by
PCpl. Tama, concealed as MARGARET ADA y JUKE, Filipino, female, married,
35 years old, Online Seller, and a resident of Barangay III, Bantay, Ilocos Sur.

5. Joint operatives of Anti-Cybercrime Group-ISPPO led by PEMS. Tolits D.


Tahimik together with the Bantay Municipal Police Station proceeded to the Main
Entrance of Arveemar Subdivision, Bantay, Ilocos Sur as the said pick-up point
address stated by Ms. Ada and strategically positioned themselves in the area.
Thereupon, Pat. Boss I. Amo disguised as Lalamove rider. Few minutes after,
Ms. Ada arrived at the said location and had a little talk with Pat. Amo. Pat. Amo
received the item placed in a paper bag wrapped with clear packaging tape.
Upon handing over the marked money to Ms. Ada, operatives of immediately
approached the subject and announced her arrest.
6. Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Operatives were able to
confiscate the following: a) four (4) pieces of One-thousand-peso bill and two (2)
five-hundred-peso bill; and b) one (1) Unit of Oppo Reno 3 Pro, color aurora blue,
with a Serial Number of Q4JZS4UCOFFENJ4T and IMEI1:
864910040231594/IMEI2: 864910040231586. Confiscated cellphone from Ms.
Ada were subjected for Forensic Examination at the Criminal Investigation and
Detection Group - Anti-Transnational Crime and Cyber Crime Division, Ilocos Sur
Police Provincial Office.

7. Arresting personnel informed Ms. Ada about the nature of the offense she
committed and was appraised by her constitutional rights in a dialect known to
her during and was brought to Ilocos Sur Gabriela Silang General Hospital for
medical examination as part of her right and later brought to this station together
with the confiscated items for proper documentation and disposition, and
subsequent filing of appropriate charges against her.

8. For information and progress to follow.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
INVESTIGATION REPORT
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

MEMORANDUM
FOR : Director
Anti-cybercrime Group

FROM : Cybercrime Response Team

SUBJECT : Investigation Report re: Swindling/Estafa under Article 315 of


the Revised Penal Code in relation to Section 6 of RA No.
10175 (Cybercrime Prevention Act of 2012) and Identity Theft in
Relation to Republic Act No. 10175 (Cybercrime Prevention Act
of 2012)

DATE : 14 February 2023

I. AUTHORITY:

1. Complaint Affidavit of Mary Jane Idica re: Identity Theft;

2. Police Blotter Entry No. 0310-2023 Pg. 023;

3. Spot Report dated 14 February 2023; and

4. PNP standard operating procedures.

II. MATTERS TO BE INVESTIGATED:

3. To determine the facts and circumstances surrounding the identity theft


filed by MARY JANE IDICA y SATIVA in relation to Republic Act No. 10175
(Cybercrime Prevention Act of 2012); and

4. To file appropriate action against the perpetrator, if evidence warrant.

III. FACTS OF THE CASE

5. At about 9:30 in the morning of February 06, 2023, one complainant, Mary
Jane Idica y Sativa reached Margaret Ada y Juke via Messenger and inquired about
the specs and price of iPhone 12 (256 GB) that is posted by the latter in Facebook
Market.

6. Ms. Ada was able to convince Ms. Idica to buy the said phone by
emphasizing its standout specs and good price. An agreement was made that Ms. Ada
will send the phone thru JnT Courier and Ms. Idica will pay half of the amount of the
phone thru GCash, and will pay her balance upon delivery of the item.

7. To seal the deal, Ms. Ada then requested Ms. Idica to send two (2) valid
identification cards and a “selfie” while holding the said IDs as proof that the
transaction was legitimate. Upon sending the demands as well as the payment thru
GCash to Ms. Ada, Ms. Ada told Ms. Idica that she will just pack the item and will
update her as soon as she finished it. Ms. Ada gave Ms. Idica a dummy tracking
number and informed her that the item was already shipped. Days passed by, Ms.
Idica checked her phone and learned that Ms. Ada have already blocked her on all her
social media accounts. (Attached is the screenshot of transaction/conversation as “Tab
A” and the GCash Receipt & Transaction History as “Tab B”)

8. Marie Tess Balita y Cruz on February 14, 2023, a childhood friend of Ms.
Idica, and a resident of Barangay Poblacion, Sta. Catalina, Ilocos Sur said to this
Station that she was just scrolling on Facebook Marketplace when she saw posts
about the scamming issue of her friend. This was confirmed on the same day by one of
the victims of Ms. Ada, Rose Pula y Sikat, a resident of Tamag, Vigan City, Ilocos Sur.
According to Ms. Pula, she was also victimized by Ms. Ada and that she is willing to
testify as a witness if Ms. Idica will file a Complaint against Ms. Ada. (Attached is the
Sworn Statement of Rose S. Pula as “Tab C”)

9. Ms. Idica together with Ms. Balita immediately came to this police station
and reported the said incident. Ms. Idica said that this was her first time transacting
online and she believed that Ms. Ada is the one who unlawfully and surreptitiously
used her identity and pretended to be her for her fraudulent activities. Police officers of
this station help Ms. Idica in searching for the said suspect on the internet (Facebook)
and it was confirmed that the identity and pictures of Ms. Idica were already circulating
online, and had been tagged as a “scammer” on Facebook Marketplace. Frightened by
the incident, Ms. Idica filed a Complaint against Margaret Ada for stealing and using
her identity for her fraudulent activity and for not giving her the item that she paid.
(Attached are the screenshots of the alleged scammer posts on Facebook as “Tab D”
and Complaint Affidavit as “Tab E”)

10. The identification and geolocation of Ms. Ada was found to through the
use of the IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police
Provincial Office with the following details: (Attached is the recovered IP Address as
“Tab F”)
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines

11. Further, a request letter addressed to the Head of Office of the National
Bureau of Investigation for the verification and confirmation of the identity of Ms. Ada.
Given to the emergency of the matter, a positive response was received by this Station
without delay. (Attached is the Request Letter to the NBI as “Tab G” and the copy of
the Certification from the NBI as “Tab H”)

12. Thereafter, an entrapment operation was planned and to hold the


geolocation of Ms. Ada, PCpl. Charrie D. Tama engaged with her using the personal
phone and identity of Ms. Balita. Ms. Ada agreed with the proposed mode of delivery
was thru Lalamove Express Delivery to be booked by PCpl. Tama, concealed as Ms.
Balita. (Attached is the Certification of Engagement as “Tab I” screenshots of
conversation as “Tab J”)

13. Subsequently, joint operatives of Anti-Cybercrime Group-ISPPO led by


PEMS. Tolits D. Tahimik together with the Bantay Municipal Police Station proceeded
to the Main Entrance of Arveemar Subdivision, Bantay, Ilocos Sur as the said pick-up
point address stated by Ms. Ada and strategically positioned themselves in the area.
Thereupon, Pat. Boss I. Amo disguised as Lalamove rider. Few minutes later, Ms.
Ada arrived at the said location and had a little talk with Pat. Amo. Pat. Amo received
the item placed in a paper bag wrapped with clear packaging tape. Upon handing over
the marked money to Ms. Ada, operatives of immediately approached the subject and
announced her arrest. Operatives inspected the item received by Pat. Amo and
learned that it contains a rock placed inside the small box.
14. Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision,
Bantay, Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Ms. Ada was
appraised by her constitutional rights in a dialect known to her during her arrest and
was submitted for medical examination at Ilocos Sur Gabriela Silang General Hospital.
After which, she was taken into custody for the taking of her personal information, mug
shot, and ten prints/fingerprints that was submitted to the PNP Crime Laboratory at
Ilocos Sur Police Provincial Office, and for proper disposition. (Attached is the Spot
Report re-Arrested Person as “Tab K”, Joint Affidavit of Arrest as “Tab L” and the
Arrest and Booking Sheet as “Tab M”)

15. Among the items confiscated from the suspect’s possessions are: a) four
(4) pieces of One-thousand-peso bill and two (2) Five-hundred-peso bill; and b) one (1)
Unit of Oppo Reno 3 Pro, color aurora blue, with a Serial Number of
Q4JZS4UCOFFENJ4T and IMEI1: 864910040231594/IMEI2: 864910040231586.
Confiscated cellphone from Ms. Ada were subjected for Forensic Examination at the
Criminal Investigation and Detection Group - Anti-Transnational Crime and Cyber
Crime Division, Ilocos Sur Police Provincial Office for confirmation and retrieval of
information pertinent to this case. (Attached is the Inventory Receipt of Confiscated
Item as “Tab N”, Photo of the confiscated item as “Tab O”, the Request for Digital
Forensic Examination as “Tab P”, copy of Digital Forensic Examination Report as “Tab
Q")

IV. DISCUSSION

16. Based on the evidence presented at hand, it was established that cyber
estafa and identity theft was committed by Ms. Margaret Ada. The act of Ms. Ada in
defrauding Ms. Mary Jane Idica with unfaithfulness or abuse of confidence constitute
to estafa and her unlawful and surreptitious use of the identity of Ms. Idica established
that an identity theft was committed. These were done through the use of Information
and Communication Technology (ICT). Thus, the fraudulent acts of Ms. Margaret Ada
in violation to Revised Penal Code constitute to Swindling/Estafa and in violation of RA
No. 10175 otherwise known as Cybercrime Prevention Act of 2012, constitutes the
crime of Computer-related Identity Theft.

xxx

Article 315. Revised Penal Code.


Swindling/Estafa

Paragraph 1(b)
1. With unfaithfulness or abuse of confidence, namely:
(b) By misappropriating or converting, to the prejudice of another,
money, goods, or any other personal property received by the
offender in trust or on commission, or for administration, or under any
other obligation involving the duty to make delivery of or to return the
same, even though such obligation be totally or partially guaranteed
by a bond; or by denying having received such money, goods, or
other property.

xxx

Paragraph 2(a)
2. By means of any of the following false pretenses or fraudulent acts
executed prior to or simultaneously with the commission of the fraud:
(a) By using fictitious name, or falsely pretending to possess power,
influence, qualifications, property, credit, agency, business or
imaginary transactions, or by means of other similar deceits.
….………………….xxx

RA No. 10175. Cybercrime Prevention Act of 2012


Section 4(b) 3 (Computer-related Identity Theft)
The intentional acquisition, use, misuse, transfer, possession,
alteration, or deletion of identifying information belonging to another,
whether natural or juridical, without right.

Identity theft occurs when somebody uses your personal information,


to include but not limited to name, birthday, telephone number, credit
card number, without your permission in order to commit fraud or
other crimes.

xxx

Section 6.
All crimes defined and penalized by the Revised Penal Code, as
amended, and special laws, if committed by, through and with the
use of information and communications technologies shall be
covered by the relevant provisions of this Act: Provided, That the
penalty to be imposed shall be one (1) degree higher than that
provided for by the Revised Penal Code, as amended, and special
laws, as the case may be.
….………………….xxx

GR NO. 198932. October 09, 2019.


In the case of Danilo S. Ibanez, Petitioner, v. People of the Philippines,
Respondent,

XXX The essence of this kind of estafa is the appropriation or


conversion of money or property received to the prejudice of the
entity to whom the return thereof should be made. The words
"convert" and "misappropriate" connote the act of using or disposing
of another's property as if it were one's own, or of devoting it to a
purpose or use different from that agreed upon. To misappropriate
for one's own use includes not only conversion to one's personal
advantage, but also every attempt to dispose of the property of
another without right. In proving the element of conversion or
misappropriation, a legal presumption of misappropriation arises
when the accused fails to deliver the proceeds of the sale or to return
the items to be sold and fails to give an account of their
whereabouts.…….XXX

CRIM CASE NO. SB-08-CRM-0260-0261. November 23, 2018.

In the case of Jesus O. Typoco, Jr., Accused, v. People of the Philippines,


Plaintiff,

XXX The law explicitly provides that in the prosecution of Estafa


under the said provision, it is indispensable that the element of
deceit, consisting in the false statement or fraudulent representation
of the accused, be made prior to, or at least simultaneously with the
commission of the fraud, it being essential that such false statement
or representation constitutes the very cause or the only motive which
induced the offended party to part with his good.…….XXX

GR NO. 203335. February 18, 2014.


In the case of Jose Jesus M. Disini, Jr., Rowena S. Disini, Lianne Ivy P.
Medina, Janette Toral and Ernesto Sonido, Jr., Petitioners, Vs. The Secretary
of Justice, The Secretary of the Department of the Interior and Local
Government, The Executive Director of the Information and Communications
Technology Office, The Chief of the Philippine National Police and the
Director of the National Bureau of Investigation, Respondents,

Xxx The usual identifying information regarding a person includes his


name, his citizenship, his residence address, his contact number, his
place and date of birth, the name of his spouse if any, his occupation,
and similar data. The law punishes those who acquire or use such
identifying information without right, implicitly to cause
damage.…….XXX

V. CONCLUSION

17. Ms. Margaret Ada y Jukes’s action to deceive others with unfaithfulness or
abuse of confidence through the misappropriation or conversion money, goods/property
of another to whom a return should be made and by deceiving others by means of using
the identity of Ms. Mary Jane Idica through the use of Information and Communication
Technology (ICT) is a clear indication of violations of Section 4 (b) (3) (Computer-
related Identity Theft) of RA No. 10175 (Cybercrime Prevention Act of 2012) and
Article 315 (Swindling/Estafa) of the Revised Penal Code as amended by RA No.
10951 in relation to Section 6 of RA No. 10175.

VI. RECOMMENDATION

18. WHEREFORE, premises considered, it is recommended that a case of


Swindling/Estafa in violation under the Revised Penal Code and in violation of RA
No. 10175 otherwise known as Cybercrime Prevention Act of 2012, constitutes the
crime of Computer-related Identity Theft be filed against Margaret Ada y Juke before the
Provincial Prosecutors Office of Ilocos Sur.

19. Respectfully submitted for your perusal and approval.

Prepared by: Noted by:

PMSg. CHARMAINE ANGELA ANCHO PLT. BRUCE D. MAGKAMALI


Investigator-On-Case Chief, Investigation Section

Approved/Disapproved by:

PMAJ. SHABI D. PULBO


Director, Anti-Cybercrime Group
SCREENSHOTS OF CONVERSATION/TRANSACTION THRU MESSENGER OF
MARY JANE IDICA AND MARGARET ADA

CONVERSATION EXHIBIT

1_A_Conversation.jpg 1_B_Conversation.jpg
1_C_Conversation.jpg 1_D_Conversation.jpg
1_E_Conversation.jpg
SCREENSHOTS OF GCASH RECEIPT AND TRANSACTION HISTORY FROM MARY
JANE IDICA

GCASH TRANSACTION EXHIBIT

2_A_Gcash Transaction.jpg 2_A_Gcash Transaction.jpg


Republic of the Philippines )
Lungsod ng Bantay, Ilocos Sur ) s.s.
x- - - - - - - - - - - - - - - - - - - - - -x

SINUMPAANG SALAYSAY

Ako, ROSE S. PULA, 30 taong gulang, babae, dalaga, Filipino, at nakatira sa


Tamag, Vigan City, Ilocos Sur, matapos manumpa ng naaayon sa ating Salingang
Batas ay nagsasabi ng mga sumusunod:

PAUNANG SALITA

Ang nagtatanong sa akin sa Sinumpaang Salaysay na ito ay si PMSg.


Charmaine Angela Ancho, na ginanap dito sa loob ng Anti Cyber Crime Group – Ilocos
Sur Police Provincial Office, Camp Elpidio R. Quirino, Bantay, Ilocos Sur ngayong ika-
14 ng Pebrero ng Abril 2023 bandang 5:00 ng hapon. Sinasagot ko ang mga
katanungan sa akin sa ilalim ng aking sinumpaan na magsasabi ako ng katotohanan
lamang at batid ko na maaari akong kasuhan ng “False Testimony” o “Perjury” kung
sakaling ako ay magsisisnungaling.

MGA KATANUNGAN AT SAGOT

T1 : Nakakaintindi ka ba po ng wikang tagalog para yun ang gamitin natin?


S1 : Opo.

T2 : Marunong ka ba po magbasa at magsulat?


S2 : Opo.

T3 : Ano ang inabot mo sa pagaaral?


S3 : Ako po ay nakapagtapos ng kolehiyo at may kursong Bachelor of Science in
Business Administration.

T4 : Ginang Rose, ikaw ba po ay magsasabi ng buong katotohanan at pawang


katotohanan sa iyong mga salaysay?
S4 : Opo, ako po ay magsasabi ng buong katotohanan at pawang katotohanan
lamang.

T5 : Ikaw ba ay handang magbigay ng iyong Malaya at kusang loob na


salaysay?
S5 : Opo handa po ako magbigay ng aking malayang at kusang loob na salaysay.

T6 : Maari mo bang sabihin sa pagsisiyasat na ito ang iyong tunay na


pangalan at iba pang mapagkikilanlan sa iyong tunay na pagkatao?
S6 : Ako po si Rose Sikat Pula, 30 taong gulang, babae, dalaga, Filipino, at nakatira
sa Tamag, Vigan City, Ilocos Sur. Ako po ay isang business woman, mayroon po
akong pwesto sa palengke ng Vigan City, Ilocos Sur at nagtitinda po ako ng mga
beauty products.

T7 : Ano naman ang iyong dahilan at ikaw ay narito sa aming tangapan at


nagbibigay ng iyong malaya at kusang loob na salaysay, ma’am?
S7 : Ako po ay pumunta dito upang tumistigo tungkol sa problemang kinakahanap ni
Mary Jane S. Idica dahil ako rin po ay isang biktima ng taong gumawa sa kaniya
nito.

T8 : Maaring mo po bang sabihin at ikwento sa akin ang buong pangyayari?


S8 : Noong araw po ng February 10, nagtitingin po ako ng mga cellphone sa
Facebook Market place na ireregalo ko po sana sa aking nobyo sa kaniyang
kaarawan. Nang mayroon akong natipuhan na iPhone na siyang gustong gusto
ng aking nobyo. Nag message ako nag post na ang pangalan ay Mary Jane Idica
gamit ang aking Facebook account. Nag inquire ako tungkol sa iPhone 12 Pro
Max (256 GB). Sinagot naman niya ako ng mga specs nito at kung ano ang
kagandahan sa cellphone na iyon kumpara sa iba at ang sabi niya ay naka
promo daw sila hanggang katapusan lamang ng Pebrero kaya ako nakumbinsi
na bumili nalang sa kaniya dahil iniisip ko na saying din yung matitipid ko kung
sakali. Pumayag ako sa deal namin na magbabayad ako ng kalahati ng presyo
nung cellphone amounting to 33,500 pesos at ihuhulog ko ito sa kaniyang GCash
account tiyaka niya ipapadala yung cellphone sa JnT courier at ang aking
balanse ay babayaran ko na lamang pagka deliver sa akin nung delivery rider.
Nag-send pa siya sa akin ng picture ng kaniyang ID na patunay na hindi raw siya
manloloko at para na rin daw sa ikakapanatag ng loob ko. Dahil doon, mas
naging kampante ako sa transaction ko sa kaniya.

Pagkatapos kong mananghalian, pumunta ako sa 7-11 malapit sa palengke at


doon ko na rin inihulog ko yung bayad ko sa kaniyang GCash account mga
bandang 12:30 ng tanghali. Pagkatapos ay sined ko na sa kaniya yung resibo at
ang sabi niya, aayusin niya lang daw yung cellphone at tiyaka niya ako babalitan.
Mag okay ako dun kasi kampante nga ako eh. Pero mga bandang 3:00 na ng
hapon ay wala pa rin siyang message. Panay na ako message sa kaniya at
humuhingi ako ng update sa cellphone pero hindi niya sini-seen. Sinubukan ko
ring tinawagan yung number niya sa GCash, nari-ring naman pero hindi niya
sinasagot.

Nawala na sa isip ko yung cellphone. Mga bandang 5:30 ng hapon nung


matapos akong magsara ng store ay tinignan ko cellphone ko kung may update
na siya pero wala pa rin. Ang ikinagulat ko ay na-blocked na pala ako. Sinubukan
ko ulit tawagan yung number niya pero hindi na siya nagri-ring tapos namamatay
na agad yung call na para bang naka-block na rin yung number ko sa kaniya.

Pinost ko sa Facebook yung ID niya. Sinabi ko dun na manloloko siya, na


pagkatapos ma-send yung bayad sa kaniya eh biglang hindi na siya
magpaparamdam para ma-aware ko na rin po yung iba. Para wala na siyang
maloko ulit. Malaking bagay sa akin yung pera na yon kasi inipon ko yun eh.
Tinipid tipid ko pa man din sarili ko. Sinabi ko pa man din na sayang yung
matitipid ko sa promo nila. Iniyak ko nalang po talaga kasi hindi ko naman siya
kilala at wala rin namang nag approach sa akin after ko mai-post.

Mga bandang 1:10 nitong araw, may tumawag sa akin na number at ang sabi
niya ay siya raw yung tunay na Mary Jane Idica na pinost kong scammer sa
Facebook. Nagalit ako nung una, nakabigkas ako ng mga hindi magagaling salita
sa kaniya. Tapos inanyayahan niya ako sa Anti-Cybercrime Group sa ISPPO,
Bantay, Ilocos Sur para dun daw kami mag-usap at maipaliwanag niya yung
nangyari. Nang makarating ako sa Police Station, dun ko na rin ikwinento lahat
sa kaniya.

T9 : May mga karagdagang katanungan lang ako tungkol sa iyong salaysay,


ma’am. Maaari po ba?
S9 : Sige po.

T10 : Mapapatunayan mo po ba, base sa iyong salaysay, na si Mary Jane Idica


na iyong naka-usap sa Messenger at ang naka-usap mo sa Police Station
ay hindi iisa at magka-ibang tao talaga sila, ma’am?
S10 : Opo. Napatunayan ko po yon nang ipakita ni Mary Jane Idica, yung naka-usap
ko sa Police Station, yung ID niya na siyang ID rin na isinend sa akin nung Mary
Jane na naka-usap ko sa Messenger at siya ring isinend ni Mary Jane kay
Margaret Ada.

T11 : Nabanggit mo kanina ma’am na nawala sa isip mo iyong cellphone. Ano


ang ibig mong sabihin dito?
S11 : Nawala sa isip ko kasi sa mga ganong oras, 4:00-5:00 ng hapon, nag aayos na
ako sa store para magsara. Naga-audit at nag i-inventory ako sa mga oras na
yon kaya pansamantalang nawala sa isip ko yung tungkol sa cellphone, sir.

T12 : Maaari mo bang ilahad kung ano iyong ID na pinadala sayo sa Messenger
ni Mary Jane Idica, ma’am?
S12 : Driver’s license po, sir.

T13 : Bakit hindi ka nag-report sa mga awtoridad ng PNP noong nangyari ang
insidente sayo, ma’am?
S13 : Hindi ko nalang po ini-report kasi ayaw ko na rin po ng paulit-ulit na bumabalik
sa police station at sa kung ano-ano pa pong mga bagay lalo na po inaalagaan
ko rin ang lola ko pagka-uwi ko ng bahay. Nag focus nalang po ako sa store ko
para makabawi po ulit. Isa pa po, dalawa lang po kami sa store ng pinsan ko,
ayaw ko pong iwan kung maaari ang pwesto.

T14 : Bakit po ma’am? May sakit po ba ang lola niyo? Ilang taon na po siya?
S14 : 86 years old na siya, sir. Naatake kasi siya noong nakaraang taon. Kaya hindi
na siya gaanong nakaka-kilos. Kailangan lagging may naka-supervise sa kaniya
para hindi siya mapano.

T15 : Nabanggit mo po na kung maaari ay ayaw mong iwan ang iyong pwesto.
Ngunit bakit noong tinawagan ka po ni Mary Jane Idica ay dali-dali kang
pumunta dito sa aminig tanggapan, ma’am?
S15 : Aaminin ko sir, nag baka sakali akong maibalik yung pera ko. Pero ang nasa
isip ko na lamang po habang nagda-drive ko ng motor ko kanina ay para
masagot na rin po ang mga katanungan ko kung bakit po nagawa ni Mary Jane
iyon at kung ano yung tunay na nangyari talaga, sir. Para na rin po matahimik
ang utak ko sa kakaisip, iniwan ko po nalang po muna yung pwesto sa pinsan
ko.

T16 : Lagi po ba kayong binabagabag ng nangyari sa inyo, ma’am?


S16 : Halos araw-araw po, sir. Ipon ko po kasi yun eh. Ang hirap pa man din po ng
kita ngayon sa store.

T17 : Nabanggit mo rin kanina ma’am na pumunta ka sa 7-11 malapit sa


palengke ng Vigan City at doon mo na rin inihulog ‘yong paunang bayad sa
cellphone. Wala ka po bang GCash account ma’am at doon mo nalang
inihulog?
S17 : Doon ko na po inihulog sir kasi ayaw ko po ng hassle. Mayroon po akong
GCash account pero hindi po ako naglalagay ng pera doon kasi automatic po na
nagbabawas yung GCash ko dahil sa mga subscriptions ko po sa ibat-ibang
applications ko sa cellphone ko, sir.

T18 : Pansamantala ay wala na po akong itatanong sa iyo, ma’am. Mayroon ka


po bang ibang ibig na idagdag o bawasan sa salaysay mong ito?
S18 : Wala na po.

T19 : Ikaw po ba ay tinakot, pinangakuan, o binigyan ng pabuya sa pagbibigay


mo ng salysay na ito, ma’am?
S19 : Hindi po ako tinakot ng kung sino man at wala pong nangako sakin at wala din
pong nagbigay ng kung anu mang bagay sakin upang magbigay ng salaysay na
ito. Ako po mismo ang nag-boluntaryo na magbigay po ng salaysay.

T20 : Handa mo bang lagdaan ang salaysay mong ito na binubuo ng apat na
pahina, ma’am?
S20 : Opo.

……………………..WAKAS NG SALAYSAY……………………

BILANG PATUNAY ay inilalakip namin ang aming lagda ngayong ika-14 ng


Pebrero 2023 dito sa Camp Elpidio R. Quirino, Lungsod ng Bantay, Ilocos Sur.

ROSE SIKAT PULA


Nagsalaysay

PINAPATUNAYAN AT SINUSUMPAAN sa aking harapan ngayong ika-14 ng


Pebrero taong 2023 dito sa lalawigan ng Bantay, Ilocos Sur. Pinatutunayan ko rin na
personal kong inalam ang mga sasalaysay na kanilang boluntaryong ginawa at ganap
na nauunawaan ang nilalaman ng kanilang salaysay.

ATTY. AIANNE D. DECANO


Administering Officer
SCREENSHOTS OF ALLEGED SCAMMER POSTS ON FACEBOOK
MARKETPLACE

FACEBOOK POST OF SCAM EXHIBIT

3_A_Facebook Post of Scam.jpg

3_B_Facebook Post of Scam.jpg


3_C_Facebook Post of Scam.jpg

3_D_Facebook Post of Scam.jpg

3_E_Facebook Post of Scam.jpg


Republic of the Philippines)
Bantay, Ilocos Sur ) S.S.
x- - - - - - - - - - - - - - - - - - - - x

COMPLAINT AFFIDAVIT

I, MARY JANE IDICA Y SATIVA, Filipino, female, single, 25 years old, an


instructor, and a resident of Brgy. Cabittaogan, Sta. Catalina, Ilocos Sur
1. That, at about 9:30 in the morning of February 06, 2023, I reached Margaret
Ada y Juke thru Messenger and inquired about the specs and price of iPhone
12 (256 GB) that she posted in Facebook Market.

2. At about 9:35AM, Margaret J. Ada replied to my inquiry and tried to convince


me to buy the cellphone because of its good price. That, I will just need to
send her my half payment for the transaction to proceed. Then she asks me
to send two valid identification cards with a “selfie” while holding the said IDs
as a proof that the transaction was legit. We made a deal that I will send the
said downpayment thru GCash and after which, she will send the item thru
JnT Courier. I immediately went to 7/11 Convenient Store to cash in. After
sending the receipt, she told me that she will just pack the item.

3. At about 10:30AM, Margaret J. Ada sent me a tracking number stating that


the item was already shipped. But days have passed, still, no item is being
delivered. Because of worry, I checked our conversation and found out that I
was already blocked in all my social media accounts.

4. On the same day, my friend, Marie Tess C. Balita sent me a screenshot


showing that my identity is already circulating on Facebook and marked as a
“scammer.” I contacted Rose S. Pula and asked her to come to Anti-
Cybercrime Group-ISPPO to discuss the incident.

5. Thereafter, I immediately went to Anti-Cybercrime Group - ISPPO to file aa


complaint. I believed that Ms. Ada is the one who unlawfully and
surreptitiously used my identity and pretended to be her for her fraudulent
activities. Operatives help me search and find Ms. Ada. But to my surprise, it
was confirmed that my identity and pictures that I sent to Ms. Ada was
already circulating on Facebook and they are calling me “scammer.”

6. The Anti-Cybercrime Group organized a team for the conduct of entrapment


operation and engaged with Ms. Ada using the identity of Ms. Balita. Ms. Ada
agreed that the mode of delivery will be booked personally by Ms. Balita thru
Lalamove Express Delivery.

7. Joint operatives of Anti-Cybercrime Group-ISPPO together with the Bantay


Municipal Police Station proceeded to the Main Entrance of Arveemar
Subdivision, Bantay, Ilocos Sur as the said pick-up point address stated by
Ms. Ada and one of the members of the team will disguised as Lalamove
rider. Upon handing over the money to Ms. Ada, they immediately
approached and announced her arrest.

8. Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Operatives were
able to confiscate the following: a) four (4) pieces of One-thousand-peso bill,
and two (2) five-hundred-peso bill; and b) one Unit of Oppo Reno 3 Pro, color
aurora blue, with a Serial Number of Q4JZS4UCOFFENJ4T and IMEI1:
864910040231594/IMEI2: 864910040231586.

9. That, I am executing this Affidavit to attest to the truth of the foregoing facts
and represents the filing criminal of charges against MARGARET ADA Y
JUKE in violation of the RA No. 10175 otherwise known as Cybercrime
Prevention Act of 2012, Section 4(b) 3 (Computer-related Identity Theft) and
of Article 315 (Swindling/Estafa) of the Revised Penal Code as amended by
RA No. 10951 in relation to Section 6 of RA No. 10175.

IN WITNESS WHEREOF, I have hereunto set my hand and affixed my signature


this 14th day of February 2023 at Bantay, Ilocos Sur, Philippines.

MARY JANE IDICA Y SATIVA


Affiant

SUBSCRIBED AND SWORN to before me this 14th day of February 2023 at


Bantay, Ilocos Sur, Philippines.

ATTY. AIANNE D. DECANO


Administering Officer
RECOVERED IP ADDRESS AND IP DETAILS

RECOVERED IP ADDRESS EXHIBIT

4_A_Recovered IP Address.jpg

4_B_Recovered IP Address.jpg
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

February 14, 2023

The Head of Office


National Bureau of Investigation
Bantay, Ilocos Sur

Sir/Ma’am;
In line with the on-going investigation of the alleged Swindling/Estafa prescribed under
Article 315 of the Revise Penal Code and Identity Theft in relation to Republic Act No.
10175, otherwise known as Cybercrime Prevention Act of 2012 of the person listed
below.
NAMES ADDRESS
BARANGAY III, BANTAY,
MARGARET ADA y JUKE
ILOCOS SUR

In this connection, may we request to furnish this office a copy of certification to


ascertain whether the above-mentioned person/s is/are (a) law abiding and have no
derogatory record/s/pending criminal case/s as per available records kept in your good
office as of this date.
Your outmost cooperation on this matter is highly appreciated.
Thank you and God bless!

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section

For your perusal;


Republika ng Pilipinas
(Republic of the Philippines)
Kagawaran ng Katarungan
(Department of Justice)
PAMBANSANG KAWANIHAN NG PAGSISIYASAT
(NATIONAL BUREAU OF INVESTIGATION)
Ilocos Sur

C E R T I F I C A T I O N

This is to certify that according to the records available in this office,


MARGARET JUKE ADA has been charged in court with the following case/s, to wit:

▪ Criminal Case No. 12345-56 entitled PP vs MARGARET J. ADA for


Swindling/Estafa under Article 315, par. 1(b) of the Revised Penal Code and said
case was DISMISSED on December 28, 2020 by the Municipal Trial Court in
Cities, Vigan City, Ilocos Sur.
▪ Criminal Case No. 1309-21 entitled PP vs MARGARET J. ADA for Identity Theft
in violation of the Republic Act No. 10175, otherwise known as Cybercrime
Prevention Act of 2012. Said case was DISMISSED on September 23, 2022 in
Regional Trial Court, Branch 43, Dagupan City, Pangasinan.
▪ Criminal Case No. 1420-73 entitled PP vs MARGARET J. ADA for
Swindling/Estafa under Article 315, pars. 1(b) and 2(a) of the Revised Penal
Code filed at the Municipal Trial Court, Batac, Ilocos Norte on November 17,
2022. Said case status is PENDING.

This certification is issued upon the request of PLT. Bruce D. Magkamali, Chief of
Investigation Section, Anti-Cybercrime Group-ISPPO, Bantay, Ilocos Sur for whatever
legal purpose it may serve.

Issued this 14th day of February 2023 at the National Bureau of Investigation,
Bantay, Ilocos Sur.

LUKE ANDREI I. PETMALU


Officer-in-Charge

By:

ACE MATTHEW D. TANOR


Deputy Director for Investigation Service
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

C E R T I F I C A T I O N

TO WHOM IT MAY CONCERN:

This is to certify that PCpl. Charrie D. Tama, a member of this Station, who
mainly engaged and had communication thru Messenger with Ms. Margaret J. Ada,
person of interest of the alleged Estafa and Identity Theft filed by the complainant, Ms.
Mary Jane S. Idica with the Police Blotter Entry No. 0310-2023 Pg. 023.

This further certifies that the engagement has made thru the use of the personal
cellphone and identity of Ms. Marie Tess C. Balita, one of the witnesses.

This certification is being issued this 14th day of February 2023 for the legal
proceedings of this case.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
SCREENSHOTS OF CONVERSATION/TRANSACTION THRU MESSENGER OF
MARGARET ADA AND THE PNP USING THE IDENTITY OF MARIE TESS C.
BALITA

ENGAGEMENT WITH THE SUSPECT EXHIBIT

5_A_Engagement with the 5_B_Engagement with the


Suspect.jpg Suspect.jpg
5_C_Engagement with the 5_D_Engagement with the
Suspect.jpg Suspect.jpg
5_E_Engagement with the 5_F_Engagement with the
Suspect.jpg Suspect.jpg
5_G_Engagement with the 5_H_Engagement with the
Suspect.jpg Suspect.jpg
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

MEMORANDUM
FOR : Director
Anti-Cybercrime Group

FROM : Chief of Investigation

SUBJECT : Spot Report re: Arrested Person

DATE : 14 February 2023

I. References:
a. Police Blotter Entry No. 0310-2023 Pg. 023, dated February 14, 2023.

II. Brief Narrative of the Incident:


In connection with the above reference, please be informed that at about
3:55PM of this date at the Main Entrance of Arveemar Subdivision, Bantay, Ilocos Sur,
joint operatives of this Station led by PEMS. Tolits D. Tahimik together with the Bantay
Municipal Police Station, was able to arrested one MARGARET ADA y JUKE, Filipino,
female, married, 35 years old, Online Seller, and a resident of Barangay III, Bantay,
Ilocos Sur by virtue of entrapment operation.

III. Action Taken:


Arrested person was appraised of her constitutional rights in a dialect known to
her during her arrest and was brought to Ilocos Sur Gabriela Silang General Hospital for
medical examination and now under the custody of this Station for the taking of her
personal information, mug shot, and ten prints/fingerprints, and for proper disposition
(IOC – PMSg. CHARMAINE ANGELA ANCHO – 0906-987-6789)

IV. Remarks:
To be presented to the court of origin.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
Republic of the Philippines )
Bantay, Ilocos Sur ) s.s.
x- - - - - - - - - - - - - - - - - - - - - -x

JOINT AFFIDAVIT OF ARREST

We, PEMS. Tolits D. Tahimik and PSSg. Dopium D. Cruz, both members of the
Philippine National Police, presently assigned at the Anti-Cybercrime Group – Ilocos
Sur Police Provincial Office, do hereby depose and state THAT:

1. We are among the members of the Anti-Cybercrime Group – Ilocos Sur Police
Provincial Office who conducted entrapment operations at the Barangay III,
Bantay, Ilocos Sur.

2. Said operation stemmed from the complaint of Mary Jane Idica y Sativa, single,
25 years old, Instructor, and a resident of Barangay Cabittaogan, Sta. Catalina
Ilocos Sur for the violation of

3. At about 12:32 in the afternoon of February 14, 2023, one Mary Jane Idica y
Sativa, single, 25 years old, Instructor, and a resident of Barangay Cabittaogan,
Sta. Catalina Ilocos Sur, came into this station reporting that one Margaret Ada
y Juke was allegedly scammed her after she sent her details to Ms. Ada.

4. Upon investigation, in her transaction with Margaret Ada, she inquired to Ms. Ada
thru Messenger regarding the iPhone 12 (256 GB) that she posted in Facebook
Marketplace. Ms. Ada was capable to convince her was able to close the deal.
Ms. Idica gave Ms. Ada a photo of her two (2) valid IDs, a selfie holding the said
IDs, and sent the receipt of the down payment of the said item as it was
demanded by Ms. Ada. Ms. Ada gave Ms. Idica a dummy tracking number and
said that it was already shipped. But days have passed by, the said item is still
not being received by Ms. Idica. After Ms. Idica learned that she was blocked by
Ms. Ada in all her social media accounts, her friend, Marie Tess C. Balita
informed her about her identity and photos that were circulating on Facebook and
is being tagged as a “scammer.” According to Ms. Idica, this was her first time
transacting online and she believed that Ms. Ada unlawfully and surreptitiously
used her identity and pretended to be her for her fraudulent activities.

5. Ms. Idica contacted one Rose Pula y Sikat, who is believed to be one of the
victims of Ms. Ada who also posted on Facebook and asked her to come to this
Station for the clarification of the incident. After a while, Ms. Pula came to this
Station and told her story. Ms. Pula then told Ms. Idica that should the latter files
a criminal and civil case against Ms. Ada, she is willing to testify as a witness
thereof.

6. Through the direction of the Chief of Investigation, PLT. Bruce D. Magkamali,


member of this Station responded to the incident by searching for the said
suspect on the internet. It was confirmed that the identity and pictures of Ms.
Idica were already circulating online, and had been tagged as a “scammer.”

7. The identification and geolocation of the suspect was found to through the use of
the IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police
Provincial Office with the following details:
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines
8. Request letter addressed to the Head of Office of the National Bureau of
Investigation was submitted for the verification of the identity of Ms. Ada. Given
to the emergency of the matter, a positive response was received by this Station
without delay.

9. To hold the geolocation of Ms. Ada, PCpl. Charrie D. Tama engaged with Ms.
Ada using the identity and personal phone of Ms. Marie Tess Balita. PCpl. Tama
proposed that the mode of delivery of the item will be booked by her thru
Lalamove Express Delivery which Ms. Ada agreed with.

10. Joint operatives of Anti-Cybercrime Group-ISPPO together with the Bantay


Municipal Police Station proceeded to the Main Entrance of Arveemar
Subdivision, Bantay, Ilocos Sur as the said pick-up point address stated by Ms.
Ada and strategically positioned themselves in the area. Thereupon, Pat. Boss I.
Amo disguised as Lalamove rider. Few minutes after, Ms. Ada arrived at the said
location and had a little talk with Pat. Amo. Pat. Amo received the item placed in
a paper bag wrapped with clear packaging tape. Upon handing over the marked
money to Ms. Ada, operatives of immediately approached the subject and
announced her arrest.

11. Ms. Ada was arrested at the Main Entrance of Arveemar Subdivision, Bantay,
Ilocos Sur at 3:55 in the afternoon of February 14, 2023. Ms. Ada was appraised
by her constitutional rights in a dialect known to her during her arrest and was
submitted for medical examination at the Gabriela Silang General Hospital. After
which, she was taken into custody for the taking of her personal information, mug
shot, and ten prints/fingerprints, and for proper disposition.

12. Among the items confiscated from the suspect’s possessions are: a) four (4)
pieces of One-thousand-peso bill and two (2) Five-hundred-peso bill; and b) one
(1) Unit of Oppo Reno 3 Pro, color aurora blue, with a Serial Number of
Q4JZS4UCOFFENJ4T and IMEI1: 864910040231594/IMEI2: 864910040231586.
Confiscated cellphone from Ms. Ada were subjected for Forensic Examination at
the Criminal Investigation and Detection Group - Anti-Transnational Crime and
Cyber Crime Division, Ilocos Sur Police Provincial Office for confirmation and
retrieval of information pertinent to this case.

13. IN TRUTH TO THESE WE HEREUNTO affixed our signatures below to the


truthfulness of the foregoing.

PSSg. Dopium D. Cruz PEMS. Tolits D. Tahimik


1st Affiant 2nd Affiant

SUBSCRIBED AND SWORN to before me this 14th day of February 2023 at


Bantay, Ilocos Sur, Philippines.

ATTY. AIANNE D. DECANO


Administering Officer
ARREST AND BOOKING
SHEET
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

PNP ARREST AND BOOKING SHEET

BLOTTER ENTRY NR: 0310-2023 DATE: 14 FEBRUARY 2023

ADA MARGARET JUKE


(Last Name) (First Name) (Middle Name)
ADDRESS: BRGY. III, BANTAY, ILOCOS SUR
TEL NO: N/A POB: Bantay, Ilocos DOB: May 11, 1988
MARITAL STATUS: SINGLE WIDOWER SEX: MALE
MARRIED SEPARATED FEMALE
AGE: 35 WEIGHT: 70 KGS HEIGHT: 5’5’’ EYES: BLACK HAIR: BLACK
COMPLEXION: FARE OCCUPATION: ONLINE SELLER
HIGHEST EDUCATIONAL ATTAINMENT: COLLEGE GRADUATE
NAME OF SCHOOL: DIVINE WORLD COLLEGE OF VIGAN
LOCATION OF THE SCHOOL: BRGY. II, VIGAN CITY, ILOCOS SUR
IDENTIFYING MARKS/CHARACTERISTICS: BIRTH MARK ON THE BACK
DRIVER’S LICENSE NR: N/A ISSUED AT:____ ON:____
OTHER CARDS: N/A ID NR:________
NAME OF FATHER: GANZA ADA
ADDRESS: BRGY. III, BANTAY, ILOCOS SUR
NAME OF MOTHER: EMMA ADA
ADDRESS: BRGY. III, BANTAY, ILOCOS SUR
NAME & ADDRESS OF PERSON TO BE CONTACTED IN CASE OF EMERGENCY:
NAME: EMMA ADA RELATIONSHIP: MOTHER
ADDRESS: BRGY. III, BANTAY, ILOCOS SUR TEL NO: 077-8263
LAWYER: N/A TEL NO: N/A
DOCTOR: N/A TEL NO: N/A
HEALTH PROBLEM: N/A
OFFENSE CHARGE: ART. 315, (SWINDLING/ESTAFA) PARS. 1(B) AND 2(A) OF THE
REVISED PENAL CODE AND SECTION 4 (B) 3 (COMPUTER-RELATED IDENTITY
THEFT) OF RA NO. 10175 (CYBERCRIME PREVENTION ACT OF 2012)
WHERE ARRESTED: MAIN ENTRANCE OF ARVEEMAR SUBDIVISION, BANTAY,
ILOCOS SUR
DATE ARRESTED: 14 FEBRUARY 2023
NAME OF ARRESTING OFFICER: PEMS. Tolits D. Tahimik and PSSg. Dopium D. Cruz
MEDICAL EXAMINATION CONDUCTED AT: GABRIELA SILANG GENERAL HOSPITAL
BY: DR. CARLA L. JUAN ON: FEBRUARY 14, 2023
FINGERPRINT TAKEN BY: PCpl. Boss I. Amo

ARRESTING OFFICER: PEMS. Tolits D. Tahimik and PSSg. Dopium D. Cruz


DUTY INVESTIGATOR: PMSg. Charmaine Angela Ancho
BOOKED BY: PSSg. Dopium D. Cruz
SIGNATURE OF PERSON ARRESTED: ____________:
(INDICATE IF SUSPECT REFUSE TO SIGN)
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

February 14, 2023

Request for Medical Examination of Arrested Suspect/s

ATTENDING PHYSICIAN
Gabriela Silang General Hospital
City of Vigan, Ilocos Sur

Sir/Ma’am:

We respectfully request for the Medical Examination of the following suspect/s


who were arrested by personnel of this Office on February 14, 2023;

a. MARGARET ADA y JUKE, female, 35 years old, Filipino, online seller and a
resident of Barangay III, Bantay, Ilocos Sur.

Please furnish the arresting officer/s, PEMS. Tolits D. Tahimik and PSSg.
Dopium D. Cruz a copy of the Medical Examination result for our reference.

Thank you for your cooperation on this matter.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
GABRIELA SILANG GENERAL HOSPITAL
Tamag, Vigan City, Ilocos Sur
Telephone No.: 077-67545

MEDICAL CERTIFICATE

February 14, 2023


TO WHOM IT MAY CONCERN:
This is to certify that MARGARET J. ADA female, 35 years old, Filipino, online
seller and a resident of Barangay III, Bantay, Ilocos Sur, was carefully examined and
concluded that she is in good mental and physical health. No indication of abrasions or
bruises. Hence, she is free from any physical abuse.
This medical certification was conducted at Ilocos Sur Gabriela Silang General
Hospital, Tamag, Vigan City, Ilocos Sur.
This certification is issued this 14th day of February upon the request of PLT.
Bruce D. Magkamali for legal purposes.

DR. AALIYAH KYLA J. LAPUZ


Attending Physician
MUGSHOTS OF THE ARRESTED PERSON

NAME OF THE SUSPECT: ADA, MARGARET JUKE


(Family) (First) (Middle)

Blotter Entry No: 0310-2023

ADA, MARGARET y JUKE


VIOL. OF RA 10175 SEC. 4(b)(3) and
ART. 315 pars. 1(b) & 2(a) of RPC
CC# 1234-5-23-A
February 14, 2023

ADA, MARGARET y JUKE


VIOL. OF RA 10175 SEC. 4(b)(3) and
ART. 315 pars. 1(b) & 2(a) of RPC
CC# 1234-5-23-A
February 14, 2023

ADA, MARGARET y JUKE


VIOL. OF RA 10175 SEC. 4(b)(3) and
ART. 315 pars. 1(b) & 2(a) of RPC
CC# 1234-5-23-A
February 14, 2023

ADA, MARGARET y JUKE


VIOL. OF RA 10175 SEC. 4(b)(3) and
ART. 315 pars. 1(b) & 2(a) of RPC
CC# 1234-5-23-A
February 14, 2023
TEN PRINTS OF THE ARRESTED PERSON

ADA, MARGARET JUKE

ANTI-CYBERCRIME
GROUP - ILOCOS SUR
MARGA POLICE PROVINCIAL 05/11/1988
BRGY. III, BANTAY, ILOCOS OFFICE

SUR PHILIPPINES ILOCOS SUR

02/14/2023
PICTURE OF THE ARRESTED PERSON
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

February 14, 2023

INVENTORY SHEET/RECEIPT FOR PROPERTY /GOODS RECOVERED


Inventory Sheet of article/items seized and recovered from the suspect during the
conduct of entrapment operation and her arrest on February 14, 2023 at 3:55PM, at the
Main Entrance of Arveemar Subdivision, Bantay, Ilocos Sur.

ITEMS/ARTICLE QUANTITY
Oppo Reno 3 Pro cellphone, color aurora blue,
with a Serial Number of Q4JZS4UCOFFENJ4T
One (1)
and IMEI1: 864910040231594/IMEI2:
864910040231586
One-thousand-peso bill Four (4)
Five-hundred-peso bill Two (2)

PSSg. Dopium D. Cruz


Seizing Officer

Witness by:
HON. ARJAY PUGAL
Barangay Captain
PHOTO OF CONFISCATED ITEM
SERIAL NUMBER:
Q4JZS4UCOFFENJ4T

IMEI1:
864910040231594
IMEI2:
864910040231586.

Four (4) pieces of one-


thousand-peso bill and two (2)
pieces of five-hundred-peso
bill recovered from the
suspect
Republic of the Philippines
NATIONAL POLICE COMMISSION
Philippine National Police
ILOCOS SUR POLICE PROVINCIAL OFFICE
ANTI-CYBERCRIME GROUP
Camp Elpidio R. Quirino, Bantay, Ilocos Sur

MEMORANDUM
FOR : Director, CIDG
(Attn: Chief, ATCCD)

FROM : Chief of Investigation


Anti-Cybercrime Group

SUBJECT : Request for Digital Forensic Examination

DATE : 14 February 2023

1. References:
Spot Report re: Estafa and Identity Theft dated, February 14, 2023

2. Request that Anti-Transnational and Cyber Crime Division (ATCCD),


CIDG conduct digital forensic examination on the accompanying specimen specifically
describe on the attached Digital Forensic Examination Request Form.

3. Background of the case with the following information:

a) NATURE OF CASE : Violation of RA 10175, Section 4(b)3 and


Article 315, pars. 1(c) & 2(c) of the
Revised Penal Code

b) VICTIM : Mary Jane Idica y Sativa, Filipino,


female, single, 25 years old, Instructor, and a
resident of Brgy. Cabittaogan, Sta. Catalina
Ilocos Sur

c) SUSPECT : Margaret Ada y Juke, Filipino, female,


married, 35 years old, Online Seller, and a
resident of Barangay III, Bantay, Ilocos Sur

d) TDPO : On February 6, 2023 at about


10:30AM at Barangay Cabittaogan, Sta.
Catalina, Ilocos Sur

4. Facts of the Case:

That on or about 12:32 in the afternoon of February 14, 2023, one Mary
Jane Idica y Sativa, single, 25 years old, Instructor, and a resident of Brgy. Cabittaogan,
Sta. Catalina Ilocos Sur, filed a complaint to this Station that she was scammed and her
identity was circulating on Facebook and had been tagged as scammer. Ms. Idica
believed that it was one Margaret Ada y Juke who allegedly scammed her and used her
identity unlawfully and surreptitiously, and pretended to be her for her fraudulent
activities.
The identification and geolocation of the suspect was found to through the
use of IP Address recovered by the Anti-Cybercrime Group of Ilocos Sur Police
Provincial Office with the following details:
IP Address: 49.150.71.46
Internet Service Provider: Philippine Long Distance Telephone Company
IP Location: Bantay, Ilocos Sur, Philippines

Suspect was arrested by virtue of Entrapment Operation and operatives


were able to confiscate a cellphone in the possession of the suspect which was
believed to be used for the commission of the said fraudulent activity.

5. Herewith is/are the required storage media necessary for the digital
forensic examination:

Submitted Digital Media for Required Storage Media


Examination

Oppo Reno 3 Pro cellphone, color


aurora blue, with a Serial Number of
Q4JZS4UCOFFENJ4T and IMEI1: Two (2) pieces DVD-R with Case
864910040231594/IMEI2:
864910040231586

6. The bearer of this request is PMSg. Charmaine Angela Ancho as the


investigator-on case.

7. Further, request that this Office be furnished a copy of the ATCCD digital
forensic examination result for our reference.

PLT. BRUCE D. MAGKAMALI


Chief, Investigation Section
Republic of the Philippines
Department of the Interior and Local Government
National Police Commission
PHILIPPINE NATIONAL POLICE
CRIMINAL INVESTIGATION AND DETECTION GROUP
ANTI-TRANSNATIONAL AND CYBER CRIME DIVISION

DIGITAL FORENSICS EXAMINATION REQUEST FORM


SECTION I: TYPE OF REQUEST
A. Request For:

Lab: On-site Technical Assistance Training

Others: __________________________________
B. Mode of Request:

Initial (Original agency investigation) Follow-up (Prosecutor follow-up


request)

Others:__________________________________

SECTION II: CASE INFORMATION


A. Submitting Agency: B. Date: C. Time:
ANTI-CYBERCRIME GROUP - ISPPO FEBRUARY 14, 2023 4:05 PM
D. Agency Address: BANTAY, ILOCOS SUR
E. Agency Case Number: F. Nature of the Crime/s:
CRIMNAL CASE NO. 1234-5-23-A VIOLATION OF ARTICLE 315, PAR. 1(b) &
2(a) of the RPC and RA 10175, SECTION
4(b)3
G. Legal Authority: Note:
Provide a copy of the Search
Search Warrant Warrant, Affidavit, Written Consent,
Court Order Consent Acknowledgement Form, and
Consent to Search Synopsis of the case or other
Others* ENTRAPMENT Documentation.
OPERATION
H. Investigators Name: (last, first) I. Cellphone Number: J. Office Number:
PMSg. ANCHO, CHARMAINE ANGELA 0906-987-6789 077-543-23
K. Investigators Email: L. Is Investigator ISDE Trained?
[email protected] Yes No

SECTION III: COURT/SUSPECT/S INFORMATION


A. Prosecutor Assigned: (last, first) B. Phone Number: C. Email Address:
ATTY. AIANNE D. DECANO 0915-975-2350 [email protected]
D. Suspect/s Name: (last, first) E. In custody/Detained:
ADA, MARGARET JUKE Yes No

SECTION IV: EVIDENCE INFORMATION


A. Search/Seized/ Date: B. Time: C. Location:
FEBRUARY 14, 2023 3:55 PM MAIN ENTRANCE,
ARVEEMAR SUBDIVISION,
BANTAY, ILOCOS SUR
D. Items to be Examined:
Description
Item #: Type of Items/Media Serial Numbers
(make & model)
1 CELLPHONE OPPO RENO 3 PRO, Q4JZS4UCOFFENJ4T
COLOR AURORAL
BLUE
E. Has anyone viewed/examined/accessed this evidence prior to submission?
Yes No

F. List any Digital Forensic Lab members consulted: NONE

G. Special Handling: (check all that apply) *

Bio Hazard Classified Material Drug Related National Interest


Suspected Terrorism Others: FRAUDULENT ACTIVITY

SECTION V: SERVICES REQUESTED


The said confiscated cellphone was believed to be used for the commission of the
fraudulent activity by one Margaret Ada y Juke who allegedly scammed and
unlawfully and surreptitiously used the identity of Mary Jane Idica y Sativa and
pretended to be her.

Requested this office to conduct Digital Forensic Examination to verify and confirm if the
confiscated item was used by the suspect for the commission of the crime and recover
pertinent information that will link to the suspect.
Please identify the types of evidence/information to be searched for/ recovered:

Financial Word Processing (Other/Keywords – Please be


Records /Text Documents specific)
• Verify accounts logged in
* Internet History Credit Card Facebook and Messenger
and log files info/Check-writing App including their links.
programs
*Email/IM/Text
Messages Child Pornography

Contact Lists Images

Call History Owner Information

* Clarification and comments: NONE


If child pornography images are found during the course of an examination, the
examiner will:
1. Use a hard drive duplicator from the Digital Forensic Lab to duplicate the
original hard drive.
2. Replace the original drive with a duplicate hard drive of equal or greater
size.
3. Remove all child pornography from the duplicate hard drive (which will
remain on-site or will be returned to the victim/suspect (when required to do
so)).
4. Maintain the original hard drive and image in the Digital Forensic Lab for
analysis.
SECTION VI: REQUESTING INVESTIGATOR /INVESTIGATOR ON CASE
A. Rank / Name /Title:
PMSg. CHARMAINE ANGELA B. Signature:
ANCHO

SECTION VII: DIGITAL FORENSIC LAB USE ONLY

A. Lab
Case #:

Process Rank/Name Signature Time/Date


D. Receive
d by

E. Assigne
d by

F. Assigne
d to

G. Priority

Imaging Examination/Analysis Report Submitted


H. Lab
Case Archived Pulled out
Status
Remarks:__________________________________________________
___
Republic of the Philippines
Department of the Interior and Local Government
National Police Commission
PHILIPPINE NATIONAL POLICE
CRIMINAL INVESTIGATION AND DETECTION GROUP
ANTI-TRANSNATIONAL AND CYBER CRIME DIVISION

DIGITAL FORENSIC EXAMINATION REPORT

Introduction

A request for service was issued to conduct a digital forensic examination of the
confiscated cellphone belonging to Margaret Juke Ada, evidence item marked CAA-1-
02-14-2023. The request for examination was issued by PLT. Bruce D. Magkamali,
Chief of Investigation of the Anti-Cybercrime Group – Ilocos Sur Provincial Police Office
to verify and confirm if the confiscated cellphone was used by Margaret Juke Ada for
the commission of fraudulent activity, and to recover pertinent information that will link
the her.

The report was written by PMSg. Rommel P. Rabara, a digital forensic examiner.
The examination uncovered information that is associated with Margaret Juke Ada.

Summary

The evidence item marked CAA-1-02-14-2023 was examined on 02/14/2023.


With the consultation from the case inspector and legal counsel, the examination
proceeded and only inspected the types of evidence/information to be
searched/recovered.

The registry files of the system and the data of the user were inspected on the
same day using the RegRipper (v 2.8) Tool for extracting/parsing information from the
registry. This tool is used because of its standard and acceptance in digital forensic
community.

The important data present such as the registry files and information of the user,
active accounts on Facebook and Messenger including their links were found by going
through the logical file system particularly the SAM (Security Accounts Manager)
Registry File. Through the analyzation, it was found out that there are two (2) accounts
that are active both in Facebook and Messenger App namely, Margaret Juke Ada and
Mary Jane Idica. Further, the account of Mary Jane Idica was just recently registered on
the device. The users also have the same passwords and never has a failed attempt in
logging in.

Conclusion

From the evidence, this Office concludes that it is probable that Margaret Juke
Ada uses the same account that was logged in on the two (2) afore mentioned
applications since passwords of both accounts are the same. In addition, Margaret Juke
Ada seemed to have been using it for quite a while since the account of Mary Jane Idica
was just recent added to the device.

PMSg. Rommel P. Rabara


Examiner

You might also like