Can Circumstantial Evidence Convict in White-Collar Crimes?

Introduction

White-collar crimes are often committed through documents, financial records, electronic communications, layered transactions, and coordinated acts rather than in the presence of eyewitnesses. For this reason, prosecutors may need to establish criminal liability through a series of indirect facts instead of direct testimony describing the actual commission of the offense.

Philippine law permits conviction based on circumstantial evidence. The controlling requirement, however, remains demanding: the proven circumstances must form an unbroken chain leading to the accused’s guilt and must produce moral certainty beyond reasonable doubt. Suspicion, association, official position, or access to records, standing alone, is not enough.

What Is Circumstantial Evidence?

Circumstantial evidence is evidence of facts other than the principal fact in issue, from which the existence of that principal fact may be inferred. In a white-collar prosecution, the prosecution may not have a witness who saw the accused falsify a document, divert funds, manipulate payroll, or authorize an anomalous transaction. It may instead rely on the accused’s access, conduct, communications, control over the transaction, and resulting benefit.

The absence of direct evidence does not automatically require acquittal. The Supreme Court has recognized that circumstantial evidence may establish the commission of the crime, the identity of the perpetrator, and the accused’s participation, provided that the totality of the evidence satisfies the constitutional standard of proof.

What Does Rule 133, Section 4 Require?

Under Rule 133, Section 4 of the 2019 Amendments to the 1989 Revised Rules on Evidence, circumstantial evidence is sufficient for conviction when:

• There is more than one circumstance;
• The facts from which the inferences are derived are proven; and
• The combination of all the circumstances produces a conviction beyond reasonable doubt.

The same provision expressly states that inferences cannot be based on other inferences. Each important circumstance must therefore rest on evidence presented in court, rather than on speculation or an assumption derived from another unproven assumption.

Rule 133, Section 2 also provides that proof beyond reasonable doubt does not require absolute certainty or the exclusion of every possibility of error. Moral certainty is sufficient—the degree of proof that produces conviction in an unprejudiced mind.

How Courts Assess the Chain of Circumstances

The controlling test is qualitative rather than merely quantitative. A large number of weak circumstances does not necessarily establish guilt. Conversely, a smaller number of firmly proven and mutually reinforcing circumstances may be sufficient.

In Balagtas v. People of the Philippines, G.R. No. 257483, January 10, 2024, the Supreme Court reiterated that the circumstances must constitute an unbroken chain pointing to the accused, to the exclusion of all others, as the guilty person. The circumstances must be consistent with one another, consistent with guilt, and inconsistent with every reasonable hypothesis of innocence.

Similarly, in Solis v. People of the Philippines, G.R. No. 255485, June 4, 2025, the Court explained that direct evidence is not inherently superior to circumstantial evidence. Circumstantial evidence may establish the elements of the offense when the proven circumstances form a complete and reliable chain. Nevertheless, the evidence must exclude the reasonable possibility that another person committed the crime.

In Dimaapi v. People of the Philippines, G.R. No. 241649, April 17, 2024, the Court stated that where the proven circumstances allow two or more explanations, one consistent with innocence and another with guilt, the evidence does not reach moral certainty.

What Must Be Proven in a White-Collar Case?

Circumstantial evidence does not eliminate the prosecution’s obligation to prove every element of the offense charged. The prosecution must establish both the criminal act and the accused’s participation in it.

Depending on the charge, the prosecution may need to prove matters such as:

• The existence and ownership of the property, funds, or documents involved;
• The specific act of taking, conversion, falsification, fraud, or unlawful approval;
• The accused’s legal relationship to the property or transaction;
• The accused’s knowledge, intent, bad faith, or participation, when required by law;
• The resulting injury, prejudice, or financial loss, when an element of the offense; and
• The identity of the person who committed or cooperated in the offense.

The prosecution cannot replace proof of an essential element with the accused’s position, access, or alleged motive. These facts may be relevant circumstances, but they must connect the accused to the prohibited act in a manner that excludes reasonable alternative explanations.

Building an Unbroken Evidentiary Chain

A persuasive circumstantial-evidence presentation should show how each proven fact connects with the next. The evidence must not consist of unrelated suspicious circumstances. It should instead establish a logical sequence leading from opportunity and preparation to execution, concealment, and benefit.

A typical evidentiary chain in a financial or corporate crime may include:

Stage	Possible Evidence	Purpose
Access	Job descriptions, authorization records, system credentials, custody documents	Shows the accused’s ability to affect the transaction
Control	Approval signatures, instructions, emails, audit trails, meeting records	Shows decision-making authority or operational control
Irregularity	Altered records, inconsistent amounts, duplicate payments, missing supporting documents	Establishes that the transaction was not ordinary
Participation	Handwriting, metadata, communications, witness testimony, system logs	Connects the accused to the irregular act
Benefit or concealment	Unexplained deposits, related-party transfers, false explanations, destruction of records	Supports intent and participation, subject to the elements of the offense

Each item must be independently proven. For example, an audit finding may establish that funds were missing, but it does not automatically prove who took the funds. Likewise, the accused’s signature on an approval document may show participation in an administrative step, but it does not invariably prove knowledge of fraud.

Documentary and Electronic Evidence

White-collar prosecutions commonly depend on documentary and electronic evidence. The 2019 Amendments to the 1989 Revised Rules on Evidence expressly recognize electronic, optical, and similar means of recording and presentation. These may include transaction databases, emails, digital messages, access logs, electronic approvals, spreadsheets, and accounting-system records, subject to the applicable requirements on authentication, relevance, integrity, and admissibility.

The prosecution should establish who created or maintained the record, how it was generated, how it was stored, and whether it was altered. A document that merely appears suspicious may have limited value if its origin, completeness, or reliability has not been established.

Electronic evidence is most persuasive when corroborated by independent proof, such as bank records, testimony from the records custodian, audit results, delivery documents, or communications from persons who participated in the transaction.

Examples of Circumstantial Proof

Payroll or Fund Misappropriation

In Balagtas v. People of the Philippines, the Court sustained the use of circumstances showing that the accused received payroll summaries, consolidated them, obtained the corresponding cash, and submitted figures that differed from the amounts prepared by the unit supervisors. The accused’s handwriting also appeared on the padded payroll summary.

The lesson is that custody and access are not sufficient by themselves. They become significant when combined with proven discrepancies, exclusive control over the relevant process, possession of the altered document, and other facts that point to the accused rather than to another possible actor.

Robbery or Unlawful Entry Connected With Business Premises

In Dimaapi v. People of the Philippines, the Court accepted a circumstantial chain involving the accused’s presence at the scene, possession of tools used to break into the premises, and the immediate discovery of loss and damage. Actual possession of the stolen items was not indispensable where the circumstances collectively pointed to the accused and excluded other rational explanations.

Use of Business Premises for Trafficking

In Planteras, Jr. v. People of the Philippines, G.R. No. 238889, October 16, 2018, the Court held that liability for promoting trafficking may be established through circumstances showing the owner’s knowledge of, and permission for, the illegal activities conducted in the establishment.

The case illustrates that circumstantial evidence may prove knowledge and acquiescence. However, the circumstances must still establish the statutory elements of the offense and cannot rest solely on ownership or managerial status.

Limits: Position, Inaction, and Association

Holding a position of authority does not automatically establish criminal participation. In Satuaito, et al. v. People, G.R. Nos. 239523-33, January 22, 2025, the Supreme Court held that conspiracy and the elements of the charged offenses must be proven beyond reasonable doubt. Mere position or passive inaction is insufficient to establish criminal liability.

The same distinction applies to association with the principal offender. Friendship, employment, family relationship, or presence at a meeting may be relevant, but these facts must be connected to an overt act or legally sufficient participation.

Inferences must be drawn from proven facts. A court may infer intent from conduct and surrounding circumstances, but it may not infer an unproven fact merely because it would make the prosecution’s theory more convenient.

Conspiracy and Circumstantial Evidence

Conspiracy may be proven through circumstantial evidence when the acts of the accused demonstrate a common design or concerted action. Coordinated approvals, synchronized communications, deliberate division of tasks, concealment, and shared benefits may support such an inference.

Still, conspiracy is not presumed from the fact that several persons were involved in the same transaction. The prosecution must prove the accused’s knowing and intentional cooperation. An employee who merely performed a routine act, without proof of knowledge or agreement, should not be treated as a conspirator solely because the transaction later proved irregular.

Relationship Between Circumstantial Evidence and Qualified Theft

In theft cases, the prosecution must prove the elements of the specific form of theft charged. In Balagtas v. People of the Philippines, the Court explained that qualified theft based on grave abuse of confidence requires proof of a special relationship of trust and confidence and its grave abuse in the commission of the crime.

If the special relationship is not proven beyond reasonable doubt, the offense cannot be qualified on that basis. Any proven abuse of confidence may be considered only in the manner allowed by law, and the court must still determine whether the elements of simple theft or another offense have been established.

In Medina v. People, G.R. No. 255632, August 30, 2023, the Court also emphasized the distinction between juridical possession and material possession. Where an employee has only material possession of property and the prosecution fails to prove the required taking and juridical possession, neither estafa nor qualified theft may be sustained on that theory.

Difference Between Preliminary Investigation and Trial

The evidentiary assessment at preliminary investigation is different from the court’s determination after trial. Under Department Circular No. 15, Series of 2024, the quantum for preliminary investigations and inquest proceedings is described as prima facie evidence with reasonable certainty of conviction.

This standard requires the prosecutor to assess whether the evidence, if left uncontroverted, is admissible, credible, and capable of establishing the elements of the offense and the identity of the responsible person. It also includes a summary evaluation of the respondent’s counter-affidavit.

The filing of an information does not mean that guilt has already been established. At trial, the prosecution must still prove every element beyond reasonable doubt, and the accused remains entitled to the presumption of innocence.

Common Weaknesses in a Circumstantial-Evidence Case

A prosecution may fail even when the transaction appears suspicious. Courts may acquit where the evidence does not establish who performed the unlawful act, where the chain contains material gaps, or where another person could reasonably have committed the offense.

• The evidence proves a financial loss but not the accused’s taking or conversion;
• The accused had access but several other persons had equal access;
• The audit report identifies irregularities but does not establish criminal intent or participation;
• The prosecution relies on an inference derived from another unproven inference;
• The accused’s position is treated as proof of conspiracy without evidence of agreement; or
• The circumstances support both guilt and a reasonable theory of innocence.

In People v. Reyes, et al., G.R. Nos. 247563 and 250517, June 13, 2023, the Court found that inferences drawn from audit findings were insufficient to sustain conviction because the circumstances did not meet the requirements for a complete circumstantial-evidence chain.

Trial Presentation: Recommended Method

For the prosecution, the evidence should be presented in chronological and functional order. Begin with the legitimate transaction or process, identify the accused’s assigned role, establish the deviation, prove the accused’s acts connected with that deviation, and then present evidence of resulting injury, benefit, or concealment.

For the defense, the analysis should focus on each link rather than merely denying the entire theory. Counsel should identify who else had access, demonstrate ordinary explanations for the accused’s conduct, challenge the authenticity or completeness of records, and show which element remains unproven.

Both sides should distinguish established facts from conclusions. A witness should testify about matters personally known, while the court—not the witness—should draw the ultimate inference from the proven circumstances.

Practical Checklist

Before relying on circumstantial evidence, counsel should ask:

• What exact fact is each piece of evidence intended to prove?
• Is the underlying fact supported by admissible evidence?
• Does the evidence prove an element of the offense or merely create suspicion?
• Who else had access, authority, motive, or opportunity?
• Are the circumstances mutually consistent?
• Does the chain exclude every reasonable hypothesis consistent with innocence?
• Is the conclusion based on an inference from a proven fact rather than on another inference?

Conclusion

Circumstantial evidence can secure a conviction in a white-collar crime, but only when the circumstances are independently proven and collectively establish guilt beyond reasonable doubt. The decisive issue is not whether there is direct evidence, but whether the complete evidentiary chain points fairly and exclusively to the accused.

Prosecutors should connect financial records, electronic data, witness testimony, control mechanisms, and post-transaction conduct to each statutory element. Defense counsel should test every link, identify reasonable alternative explanations, and insist that access, position, association, or negligence not be converted into criminal liability without proof of the required act and mental state.

The safest trial approach is therefore disciplined and element-based: prove each circumstance, explain its connection to the next, confront competing explanations, and determine whether the totality produces moral certainty rather than mere probability.

About Nicolas and De Vega Law Offices

 Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.