I. Introduction

Bank fraud is a serious legal and financial problem in the Philippines. It may involve unauthorized withdrawals, phishing, identity theft, credit card fraud, forged checks, online banking scams, ATM skimming, SIM-swap attacks, fraudulent fund transfers, fake loans, insider manipulation, or unauthorized use of bank accounts.

Because banking is built on trust, the law imposes duties on banks to exercise diligence, protect depositors, maintain account security, and comply with regulatory standards. At the same time, depositors and account holders are expected to act with reasonable care, especially in protecting passwords, personal information, one-time passwords, mobile banking credentials, checks, and cards.

A person who becomes a victim of bank fraud in the Philippines may pursue several remedies at the same time: an internal bank complaint, a complaint with the Bangko Sentral ng Pilipinas, a criminal complaint before law enforcement or the prosecutor’s office, a civil action for recovery of money and damages, and, in some cases, complaints before other government agencies.

II. Meaning of Bank Fraud

Bank fraud generally refers to any dishonest, deceptive, or unauthorized act involving a bank, bank account, banking transaction, payment instrument, financial product, or electronic banking channel.

It may be committed by:

A stranger or scammer;
A cybercriminal;
A bank employee;
A third-party service provider;
A merchant;
A borrower;
A co-account holder or authorized signatory;
A person using forged documents;
A person who obtained the victim’s credentials through deception;
A syndicate engaged in financial scams.

Bank fraud may affect:

Deposit accounts;
Credit cards;
Debit cards;
ATM cards;
Online banking accounts;
Mobile banking wallets;
Checks;
Loans;
Remittances;
Investment-linked bank products;
Corporate accounts;
Trust accounts;
Payment gateways and merchant accounts.

III. Common Forms of Bank Fraud in the Philippines

A. Unauthorized Electronic Fund Transfers

This occurs when money is transferred from a bank account without the account holder’s consent.

Examples include unauthorized transfers through:

Online banking;
Mobile banking apps;
InstaPay;
PESONet;
QR payments;
Linked e-wallets;
Card-not-present transactions;
Unauthorized bill payments.

These cases often involve compromised credentials, phishing, malware, SIM swapping, social engineering, or insider access.

B. Phishing and Smishing

Phishing involves fraudulent emails, websites, or messages designed to obtain confidential banking information.

Smishing is phishing through SMS or text messages.

Common schemes include fake bank alerts saying:

“Your account has been locked”;
“Verify your account immediately”;
“You received a refund”;
“Update your mobile banking profile”;
“Your card has been compromised.”

The link leads to a fake bank website where the victim enters login credentials, OTPs, PINs, card numbers, or personal details.

C. Vishing

Vishing is voice phishing. A scammer calls the victim pretending to be from the bank, a government agency, a payment platform, or a fraud department.

The scammer may ask for:

OTPs;
CVV codes;
Card numbers;
Password resets;
Mobile banking credentials;
Device registration codes;
Answers to security questions.

Banks generally remind clients that legitimate bank representatives should not ask for passwords, OTPs, PINs, or full card security credentials.

D. ATM Skimming

ATM skimming involves the illegal capture of card data through devices installed on ATM machines. The stolen data may be used to clone cards and withdraw money.

Skimming may involve:

Fake card readers;
Hidden cameras;
Keypad overlays;
Card-trapping devices;
Compromised ATMs.

E. Card Fraud

Credit card or debit card fraud may involve:

Unauthorized purchases;
Online card-not-present transactions;
Lost or stolen cards;
Counterfeit cards;
Use of card details obtained through phishing;
Unauthorized cash advances;
Merchant collusion;
Fraudulent chargebacks.

F. Check Fraud

Check fraud may involve:

Forged signatures;
Altered amounts;
Counterfeit checks;
Stolen checks;
Check kiting;
Unauthorized issuance by company personnel;
Encashment using false identity;
Fraudulent endorsements.

Banks have obligations to examine checks with the diligence required by law and banking practice. However, liability may depend on the facts, including the depositor’s negligence, check custody, promptness of reporting, and whether the forgery was detectable.

G. Identity Theft

Identity theft occurs when a person uses another’s personal information to open accounts, obtain loans, apply for credit cards, access existing accounts, or conduct fraudulent transactions.

This may involve stolen IDs, falsified documents, compromised mobile numbers, fake employment certificates, or unauthorized use of personal data.

H. Loan Fraud

Loan fraud may involve:

False income documents;
Fake employment;
Fraudulent collateral;
Use of stolen identity;
Misrepresentation of financial capacity;
Submission of forged titles or appraisals;
Borrowers acting through dummies;
Collusion with bank employees.

I. Insider Bank Fraud

Insider fraud involves fraud committed by bank officers, employees, agents, or representatives.

Examples include:

Unauthorized account access;
Manipulation of balances;
Misappropriation of deposits;
Unauthorized withdrawals;
Falsified bank documents;
Fake investment products;
Unauthorized loans;
Collusion with external fraudsters;
Tampering with customer records.

Banks may be held liable for the acts of employees performed in connection with banking operations, especially when the bank failed to exercise required diligence or supervision.

J. Unauthorized Account Opening

A victim may discover that an account was opened in his or her name without consent. This may be used for money laundering, scam proceeds, mule accounts, loan fraud, or other illegal activities.

K. Mule Accounts

A mule account is a bank account used to receive, transfer, or conceal proceeds of fraud or other unlawful activities. Sometimes the account holder knowingly participates; in other cases, the account holder is tricked into allowing use of the account.

A person who lends, sells, or rents a bank account may face serious criminal, civil, and regulatory consequences.

L. Investment and Deposit Scams Using Bank Accounts

Fraudsters often use bank accounts to receive money from victims in fake investment schemes, fake online selling, fake jobs, romance scams, cryptocurrency scams, and pyramid-type schemes.

Even if the bank is not the fraudster, victims may need the bank’s assistance to trace, freeze, or recover funds.

IV. Legal Framework Relevant to Bank Fraud

Bank fraud cases may involve several laws and legal principles.

A. Civil Code

The Civil Code governs obligations, contracts, negligence, damages, fraud, quasi-delicts, and civil liability.

Important principles include:

A person who causes damage through fault or negligence may be liable;
Fraud may vitiate consent;
Bad faith may justify damages;
Employers may be liable for acts of employees under certain conditions;
Banks may be liable for breach of contractual obligations;
Victims may recover actual damages, moral damages, exemplary damages, attorney’s fees, and costs when legally justified.

B. Revised Penal Code

Certain fraudulent acts may constitute crimes under the Revised Penal Code, including:

Estafa;
Falsification;
Forgery;
Theft;
Qualified theft;
Malversation, if public funds or accountable public officers are involved;
Use of falsified documents;
Other deceit-related offenses.

C. Cybercrime Prevention Act

When fraud is committed through computer systems, online banking, mobile apps, electronic communications, phishing links, malware, or unauthorized access, the Cybercrime Prevention Act may apply.

Possible cybercrime-related offenses include:

Illegal access;
Computer-related fraud;
Computer-related identity theft;
Computer-related forgery;
Misuse of devices;
Aiding or abetting cybercrime;
Attempted cybercrime.

Certain traditional crimes may also carry higher penalties when committed through information and communications technology.

D. Access Devices Regulation Law

Fraud involving credit cards, debit cards, ATM cards, account access devices, card numbers, PINs, and similar access credentials may fall under access device laws.

The law may cover unauthorized use, possession, production, trafficking, or fraudulent use of access devices.

E. Electronic Commerce Act

Electronic documents, electronic signatures, digital records, and electronic transactions may be relevant in proving online banking activity, authentication, transaction logs, email communications, and digital consent.

F. Data Privacy Act

Bank fraud often involves personal data breaches or misuse of personal information.

A complaint may involve:

Unauthorized processing of personal data;
Failure to secure personal information;
Unauthorized disclosure;
Identity theft risks;
Failure to notify affected data subjects when required;
Failure to implement reasonable security measures.

The National Privacy Commission may become relevant when the fraud involves personal data protection issues.

G. Anti-Money Laundering Law

When bank fraud proceeds are transferred, layered, withdrawn, converted, or concealed, anti-money laundering laws may apply.

The Anti-Money Laundering Council may be involved in suspicious transaction reports, freezing orders, and asset preservation measures.

Banks are covered persons under anti-money laundering regulations and must conduct customer due diligence, monitor suspicious activity, and report covered or suspicious transactions.

H. General Banking Law and BSP Regulations

Banks are regulated by the Bangko Sentral ng Pilipinas. They are expected to observe sound banking practices, risk management standards, consumer protection rules, cybersecurity requirements, and internal control obligations.

A bank’s failure to properly handle fraud complaints may result in regulatory scrutiny.

I. Financial Consumer Protection Rules

Financial consumers have rights to fair treatment, disclosure, data protection, reasonable complaint handling, and responsible financial service practices.

Banks and financial institutions must maintain appropriate consumer assistance mechanisms.

J. Rules on Evidence and Electronic Evidence

Bank fraud cases often depend on documentary and electronic evidence, such as:

Bank statements;
Transaction histories;
SMS notifications;
Email records;
Screenshots;
IP logs;
device logs;
CCTV footage;
ATM journal logs;
call recordings;
account opening forms;
KYC documents;
merchant records;
digital authentication records.

Electronic evidence must be properly authenticated and preserved.

V. Duties of Banks in Fraud-Related Cases

Banks in the Philippines are expected to exercise a high degree of diligence because banking is imbued with public interest.

A. Duty to Safeguard Deposits

Banks must maintain systems and controls reasonably designed to protect depositors’ funds.

This includes:

Secure authentication;
Fraud monitoring;
Proper transaction controls;
Internal checks;
Employee supervision;
Cybersecurity measures;
Proper handling of suspicious transactions;
Prompt response to customer reports.

B. Duty of Diligence

The relationship between a bank and its depositor is generally contractual, but negligence principles may also apply.

A bank may be liable if loss was caused by its failure to exercise the required diligence, such as:

Honoring forged checks despite visible irregularities;
Allowing unauthorized withdrawals due to deficient verification;
Failure to act promptly after notice of fraud;
Weak internal controls;
Employee fraud within the scope of banking operations;
Failure to follow its own security protocols;
Improper account opening procedures;
Negligent release of account information.

C. Duty to Investigate Complaints

When a customer reports fraudulent activity, the bank should investigate within a reasonable period.

The bank may review:

Transaction logs;
Authentication records;
Device registration;
ATM or branch CCTV;
IP addresses;
Card-present or card-not-present indicators;
Merchant information;
Beneficiary accounts;
Internal access logs;
Account history.

D. Duty to Provide Consumer Assistance

Banks should have customer assistance channels where clients can file complaints, report unauthorized transactions, request blocking of accounts or cards, and seek reversal or investigation.

E. Duty to Preserve Records

When fraud is reported, relevant records should be preserved. This may include transaction data, call recordings, CCTV, internal logs, and communications.

Failure to preserve evidence may prejudice the customer and may be relevant in later proceedings.

F. Duty of Confidentiality

Banks are also bound by bank secrecy and confidentiality rules. They cannot freely disclose information about other accounts, even if those accounts received fraudulent funds, except through lawful processes, regulatory mechanisms, court orders, or legally recognized exceptions.

VI. Duties of Bank Customers

While banks have strict responsibilities, customers also have duties.

A customer should:

Protect passwords, PINs, OTPs, cards, checkbooks, and devices;
Avoid clicking suspicious links;
Use official bank apps and websites;
Promptly report lost cards or unauthorized transactions;
Regularly review account statements;
Secure registered SIM cards and email accounts;
Avoid sharing credentials with anyone;
Avoid lending or selling bank accounts;
Keep evidence of suspicious communications;
Cooperate in the bank’s investigation.

Customer negligence may reduce or defeat recovery, depending on the circumstances.

Examples of conduct that may be considered negligent include:

Voluntarily giving OTPs to a scammer;
Sharing PINs or passwords;
Writing PINs on ATM cards;
Failing to report loss of card or phone within a reasonable time;
Allowing another person to use online banking access;
Ignoring repeated bank alerts;
Leaving signed blank checks unsecured.

However, the mere fact that fraud occurred does not automatically prove customer negligence. Each case must be examined based on evidence.

VII. Immediate Steps After Discovering Bank Fraud

A victim should act quickly. Time is critical because funds may be moved within minutes.

A. Contact the Bank Immediately

Report the incident through official bank channels:

Fraud hotline;
Branch;
Official mobile app;
Official email;
Customer service;
Relationship manager, for corporate or priority accounts.

Ask the bank to:

Block the card or account;
Freeze online banking access;
Stop pending transactions, if possible;
Trace the fund transfer;
File a dispute;
Issue a complaint reference number;
Preserve records;
Provide a written acknowledgment of the complaint.

B. Change Credentials

Immediately change:

Online banking password;
Email password;
Mobile banking PIN;
App password;
Security questions;
Passwords for linked e-wallets;
Passwords for accounts using the same credentials.

C. Secure the Registered SIM and Device

If there is suspicion of SIM swap or phone compromise:

Contact the telecom provider;
Block or replace the SIM;
Scan the device for malware;
Remove suspicious apps;
Log out of all sessions;
Reset the device if necessary.

D. Preserve Evidence

Save and print:

Bank statements;
Transaction alerts;
SMS messages;
Emails;
Screenshots of suspicious links or pages;
Call logs;
Chat conversations;
Receipts;
Complaint reference numbers;
Names of bank personnel spoken to;
Dates and times of calls;
Police blotter or cybercrime report;
Affidavit of loss or complaint-affidavit.

Do not delete suspicious messages or apps before preserving evidence.

E. File a Written Complaint with the Bank

A written complaint should clearly state:

Account holder’s name;
Account number or card number, partially masked when appropriate;
Date and time of unauthorized transaction;
Amount involved;
Type of transaction;
Beneficiary or merchant, if known;
Why the transaction is unauthorized;
Steps taken after discovery;
Relief requested;
Attachments and evidence.

F. Request Provisional Credit or Reversal

Depending on the bank’s policies and the nature of the transaction, the victim may request reversal, provisional credit, chargeback, or reimbursement.

For credit card fraud, chargeback mechanisms may be available, especially when the transaction is unauthorized or disputed within the required period.

G. Report to Law Enforcement

For cyber-related fraud, reports may be made to cybercrime units of law enforcement agencies. For non-cyber fraud, reports may be made to the police, National Bureau of Investigation, or prosecutor’s office.

H. Consider Filing a BSP Complaint

If the bank fails to act, delays unreasonably, gives an inadequate response, or refuses relief without sufficient explanation, the customer may elevate the matter to the BSP’s financial consumer assistance channels.

VIII. Filing a Bank Fraud Complaint with the Bank

A. Purpose

The internal bank complaint is usually the first and fastest remedy. It allows the bank to investigate, freeze or trace funds, block access, and determine whether reimbursement or reversal is warranted.

B. Contents of the Complaint

A bank fraud complaint should contain:

Full name of complainant;
Contact information;
Account or card details;
Description of the incident;
Chronology of events;
List of unauthorized transactions;
Statement that the transactions were not authorized;
Explanation of how the fraud was discovered;
Evidence attached;
Relief requested.

C. Reliefs to Request

The complainant may request:

Reversal of unauthorized transactions;
Reimbursement;
Provisional credit;
Blocking of compromised account or card;
Issuance of replacement card;
Investigation report;
Trace of recipient account;
Preservation of CCTV, logs, and records;
Written explanation of denial, if any;
Certification of disputed transactions;
Assistance in law enforcement proceedings.

D. Importance of Written Records

Victims should avoid relying solely on phone calls. A written complaint creates a record and helps prove that the bank was promptly notified.

IX. Complaint Before the Bangko Sentral ng Pilipinas

A. Role of the BSP

The BSP supervises banks and certain financial institutions. It also handles financial consumer complaints through appropriate channels.

The BSP does not always act like a trial court that awards damages in the same way regular courts do. However, it may require the financial institution to respond, explain, mediate, or address the complaint according to consumer protection rules.

B. When to File with the BSP

A BSP complaint may be appropriate when:

The bank ignores the complaint;
The bank delays action;
The bank gives no clear explanation;
The bank refuses reimbursement despite evidence;
The bank fails to provide dispute resolution;
The bank’s handling violates consumer protection rules;
There is a pattern of unfair or unsafe banking practice.

C. What to Attach

Attach:

Written complaint to the bank;
Bank’s response, if any;
Transaction records;
Screenshots;
Reference numbers;
Police or cybercrime report, if available;
Affidavit or narrative;
Relevant correspondence.

D. Possible Outcomes

A BSP complaint may result in:

Bank response or reconsideration;
Mediation or facilitation;
Corrective action;
Regulatory review;
Referral to proper agency;
Clarification of consumer rights;
Documentation useful for civil or criminal action.

X. Criminal Remedies

Bank fraud may constitute a criminal offense. The proper charge depends on the facts.

A. Estafa

Estafa may apply where a person defrauds another through deceit, abuse of confidence, false pretenses, fraudulent acts, or misappropriation.

Examples:

A scammer induces a victim to transfer funds to a bank account;
A person receives money for a false investment;
A person misappropriates entrusted funds;
A person uses deceit to obtain banking access.

B. Theft or Qualified Theft

Theft may apply where money or property is taken without consent and with intent to gain.

Qualified theft may apply in cases involving grave abuse of confidence, such as where an employee misappropriates funds entrusted by the employer or bank.

C. Falsification and Use of Falsified Documents

Falsification may apply where bank documents, checks, signatures, IDs, loan documents, or corporate authorizations are forged or altered.

Use of falsified documents may be separately punishable.

D. Forgery

Forgery may arise in altered checks, forged endorsements, counterfeit instruments, or falsified signatures.

E. Cybercrime Offenses

Cybercrime charges may apply when fraud is committed through:

Phishing websites;
Hacked accounts;
Unauthorized online banking access;
Malware;
SIM-swap assisted attacks;
Fraudulent electronic communications;
Computer-related identity theft;
Manipulated electronic records.

F. Access Device Fraud

This may apply where fraud involves credit cards, debit cards, ATM cards, card numbers, PINs, account numbers, or access credentials.

G. Identity Theft

Identity theft may be charged when a person fraudulently uses another’s identifying information to access accounts, open accounts, obtain loans, or make transactions.

H. Money Laundering

If fraud proceeds are transferred, withdrawn, layered, converted, or concealed, money laundering issues may arise.

The primary fraud may be the unlawful activity, while subsequent handling of proceeds may trigger anti-money laundering consequences.

I. Where to File a Criminal Complaint

Depending on the nature of the case, the complaint may be filed with:

The local police;
Cybercrime units;
National Bureau of Investigation;
Prosecutor’s office;
Other specialized government units, depending on the offense.

J. Complaint-Affidavit

A criminal complaint usually requires a complaint-affidavit containing:

Identity of complainant;
Identity of respondent, if known;
Facts showing the offense;
Date, place, and manner of commission;
Amount involved;
Evidence attached;
Witness affidavits, if any;
Certification and verification requirements, as applicable.

K. Evidence in Criminal Cases

Useful evidence includes:

Bank statements;
Transaction slips;
SMS and email alerts;
Chat messages;
Screenshots of fraudulent websites;
Recipient bank account details;
Account names;
CCTV footage;
IP logs, if obtained lawfully;
Device records;
Police blotter;
Bank complaint records;
Affidavits of witnesses;
Certifications from the bank.

L. Freezing and Tracing Funds

Victims may request assistance in tracing funds, but banks are limited by confidentiality rules and procedural requirements.

In some cases, law enforcement, prosecutors, courts, or anti-money laundering authorities may seek orders or coordinate with banks to preserve or trace funds.

XI. Civil Remedies

A victim of bank fraud may file a civil action to recover money and damages.

A. Action for Sum of Money

If a person or entity received or retained money belonging to the victim, the victim may file an action to recover the amount.

This may be against:

The fraudster;
The recipient account holder;
A person who benefited from the fraud;
A bank, if legally liable;
Other responsible parties.

B. Action for Damages

Damages may be sought when the bank or another party acted with negligence, bad faith, fraud, breach of contract, or violation of legal duty.

Possible damages include:

Actual or compensatory damages;
Moral damages;
Exemplary damages;
Nominal damages;
Temperate damages;
Attorney’s fees;
Litigation expenses;
Interest.

C. Breach of Contract Against the Bank

The depositor-bank relationship is contractual. If the bank failed to honor its obligations or wrongfully debited the depositor’s account, the depositor may sue for breach of contract.

Possible examples:

Unauthorized withdrawal allowed by bank negligence;
Payment of a forged check;
Failure to follow account mandate;
Failure to block account after timely notice;
Wrongful dishonor due to bank error;
Unauthorized fund transfer caused by system failure.

D. Quasi-Delict or Negligence

A bank may be sued for negligence if the loss resulted from failure to exercise due care.

Examples:

Inadequate verification of identity;
Poor monitoring of suspicious transactions;
Failure to supervise employees;
Failure to protect account data;
Failure to preserve evidence;
Defective ATM or online banking controls.

E. Fraud or Misrepresentation

If a bank employee or representative induced the customer into a fraudulent transaction, civil liability may arise based on fraud, agency principles, employer liability, or apparent authority, depending on the facts.

F. Unjust Enrichment

If a recipient account holder received money without legal basis, the victim may invoke unjust enrichment or related civil principles to recover the funds.

G. Injunction and Provisional Remedies

In urgent cases, a party may seek provisional remedies, such as:

Preliminary injunction;
Attachment;
Temporary restraining order;
Preservation orders in cybercrime cases;
Other court processes to prevent dissipation of funds or evidence.

Availability depends on the facts, urgency, and legal requirements.

H. Small Claims

If the amount falls within the jurisdictional threshold for small claims and the claim is for payment or reimbursement of money, the victim may consider small claims proceedings.

Small claims are designed to be faster and do not require lawyers to appear for the parties. However, complex fraud cases involving many parties, cyber evidence, injunctions, or damages beyond the small claims framework may need ordinary civil or criminal proceedings.

XII. Administrative and Regulatory Remedies

A. BSP Consumer Assistance

For banks and BSP-supervised financial institutions, a complaint may be elevated to the BSP if internal resolution fails.

B. National Privacy Commission

A complaint may be filed with the National Privacy Commission when the fraud involves:

Unauthorized processing of personal data;
Data breach;
Failure to secure customer information;
Unauthorized disclosure of bank-related personal information;
Identity theft caused by data protection failure.

C. Securities and Exchange Commission

If the fraud involves investment solicitation, fake investment schemes, corporate fraud, or securities-related matters, the SEC may be relevant.

D. Department of Trade and Industry

If the fraud involves consumer transactions, online selling, or merchant practices, DTI processes may be relevant, depending on the facts.

E. Insurance Commission

If the fraud involves bancassurance, insurance products sold through banks, or insurance-linked financial products, the Insurance Commission may have jurisdiction over insurance aspects.

XIII. Liability of Banks for Fraud

Bank liability depends on facts, evidence, legal duties, and the applicable standard of diligence.

A. When Banks May Be Liable

A bank may be liable when the loss is caused by:

Bank negligence;
Failure of internal controls;
Employee fraud;
Payment of forged instruments due to lack of diligence;
Unauthorized transactions permitted by system weakness;
Failure to act after notice;
Breach of contractual obligations;
Violation of consumer protection rules;
Failure to observe required banking standards.

B. When Banks May Deny Liability

A bank may deny liability when it claims that:

The customer authorized the transaction;
The transaction passed proper authentication;
The customer shared OTPs, passwords, or PINs;
The customer’s device or email was compromised;
The customer delayed reporting the incident;
The bank followed applicable procedures;
The loss was caused solely by third-party criminal acts;
The disputed transaction was valid under the bank’s records.

These defenses are not automatically conclusive. Authentication records, customer conduct, bank controls, and surrounding circumstances must be examined.

C. Contributory Negligence

If both the bank and customer were negligent, liability may be apportioned or reduced depending on the facts.

For example, a customer who gave an OTP to a scammer may be considered negligent, but if the bank also ignored obvious red flags or failed to act after immediate notice, the bank may still bear liability in whole or in part.

D. High Degree of Diligence

Philippine jurisprudence has repeatedly emphasized that banks are expected to exercise a high degree of diligence because their business is affected with public interest. This principle is often invoked in cases involving forged checks, unauthorized withdrawals, misapplied deposits, and bank employee misconduct.

XIV. Liability of Recipient Account Holders

Fraud proceeds are often sent to bank accounts belonging to individuals or entities. These account holders may claim they were merely used as conduits.

Possible legal consequences include:

Civil liability to return money;
Criminal liability if they knowingly participated;
Investigation for money laundering;
Freezing or closure of accounts;
Inclusion in bank fraud watchlists;
Prosecution for estafa, theft, cybercrime, or other offenses depending on participation.

A person should never lend, sell, rent, or allow use of a bank account for unknown transactions.

XV. Corporate Bank Fraud

Bank fraud involving corporate accounts may be more complex because of authorized signatories, internal approvals, board resolutions, treasury controls, and employee access.

A. Common Corporate Scenarios

Unauthorized fund transfers by employees;
Fake supplier payments;
Payroll diversion;
Altered account details in invoices;
Business email compromise;
Check fraud;
Forged board resolutions;
Unauthorized loans;
Collusion between employees and outsiders;
Fraudulent use of corporate credit cards.

B. Corporate Controls

Companies should maintain:

Dual authorization for transfers;
Segregation of duties;
Maker-checker controls;
Daily transaction limits;
Vendor verification protocols;
Callback procedures for new bank details;
Regular reconciliation;
Audit trails;
Restricted access to online banking;
Immediate revocation of access for resigned employees.

C. Remedies

A company may pursue:

Internal investigation;
Bank complaint;
Criminal complaint against employee or third party;
Civil recovery action;
Labor proceedings, if employee misconduct is involved;
Insurance claim, if covered by fidelity or cyber insurance;
BSP complaint, if bank negligence is involved.

XVI. Check Fraud and Forged Signatures

Check fraud remains a major area of banking litigation.

A. Forged Drawer’s Signature

If the drawer’s signature is forged, the check is generally unauthorized. The bank’s liability may depend on whether it failed to detect the forgery and whether the depositor was negligent.

B. Forged Endorsement

If the endorsement is forged, issues may arise among the drawer, drawee bank, collecting bank, payee, and holder.

C. Material Alteration

If a check is altered as to amount, payee, date, or other material terms, the legal consequences depend on who was negligent and whether the alteration was apparent.

D. Depositor’s Duty to Review Statements

Depositors should promptly review bank statements and report unauthorized checks or withdrawals. Delay may affect recovery, especially if the delay allowed further fraud.

E. Bank’s Duty to Examine Checks

Banks must examine checks carefully. The level of care required is high because banks handle instruments daily and have the expertise and systems to detect irregularities.

XVII. Electronic Banking Fraud

Electronic banking fraud is increasingly common.

A. Key Issues

Electronic banking disputes often involve:

Whether the transaction was authenticated;
Whether OTP or biometric authentication was used;
Whether device registration was valid;
Whether the customer received alerts;
Whether the bank’s fraud system detected suspicious activity;
Whether the customer promptly reported the incident;
Whether the bank could have stopped the transaction;
Whether the receiving bank acted properly;
Whether the transaction was reversible.

B. Common Evidence

Important evidence includes:

Login history;
IP addresses;
Device ID;
OTP delivery logs;
SMS records;
Email alerts;
App notification logs;
Beneficiary enrollment history;
Transaction timestamps;
Fraud rule triggers;
Customer service recordings.

C. Common Bank Position

Banks often argue that transactions authenticated by correct credentials and OTP are presumed valid.

D. Common Customer Position

Customers may argue that:

Authentication was compromised through no fault of their own;
The bank’s security system was inadequate;
The bank failed to detect unusual activity;
The bank failed to act after prompt notice;
The bank allowed suspicious recipient accounts;
The transaction was inconsistent with the customer’s usual behavior;
The bank failed to provide clear warnings or safeguards.

The outcome depends heavily on evidence.

XVIII. Fraud Involving E-Wallets and Linked Bank Accounts

Many bank fraud incidents involve transfers to or from e-wallets.

Legal issues may involve:

The bank;
The e-wallet provider;
The receiving account holder;
Payment gateway operators;
Merchants;
Telecom providers;
Cybercriminals.

Victims should complain to all relevant institutions because funds may pass through multiple platforms quickly.

XIX. SIM Swap and Mobile Number Takeover

SIM swap fraud occurs when a fraudster gains control of the victim’s mobile number, allowing interception of OTPs and banking alerts.

Possible responsible parties may include:

The fraudster;
Accomplices;
Negligent telecom personnel;
Account holders who received proceeds;
Banks, if they failed to implement reasonable controls;
Other platforms used in the fraud.

Victims should report immediately to both the bank and telecom provider.

Evidence includes:

SIM replacement records;
Telecom complaint records;
Time of loss of signal;
Time of unauthorized banking transactions;
OTP logs;
Device registration records;
Identification documents used for SIM replacement.

XX. Bank Secrecy and Fraud Investigation

Bank secrecy laws may limit what information a bank can disclose to a private complainant, especially regarding recipient accounts.

A victim may know that funds were transferred to a certain account number, but the bank may refuse to disclose the full identity or account details without legal authority.

This does not mean the victim has no remedy. Information may be obtained through:

Law enforcement investigation;
Prosecutor’s subpoena;
Court order;
AMLC processes;
Regulatory coordination;
Civil discovery, where applicable;
Other lawful procedures.

XXI. Drafting a Bank Fraud Complaint

A strong complaint should be factual, chronological, and evidence-based.

A. Suggested Structure

1. Heading Name of bank, branch or department, and subject.

2. Identity of complainant Full name, contact details, account relationship.

3. Description of account Account type, branch, masked account number, card type if applicable.

4. Chronology State events in sequence, with dates and times.

5. Unauthorized transactions List transaction date, amount, recipient, reference number, and channel.

6. Statement of non-authorization Clearly state that the complainant did not authorize, initiate, approve, or benefit from the transactions.

7. Prompt reporting State when and how the incident was reported.

8. Evidence Identify attached screenshots, statements, SMS, emails, and reference numbers.

9. Relief requested Ask for investigation, reversal, reimbursement, preservation of evidence, and written findings.

10. Reservation of rights Reserve the right to file civil, criminal, administrative, and regulatory complaints.

B. Sample Bank Complaint Language

I respectfully report unauthorized transactions in my account and request immediate investigation, reversal, and reimbursement. I did not authorize, initiate, approve, or benefit from the disputed transactions. Upon discovery, I immediately contacted your official customer service channel and requested blocking of my account/card. I request that the bank preserve all relevant records, including transaction logs, authentication records, device registration records, IP logs, call recordings, CCTV footage, and internal access logs. I reserve all rights to pursue civil, criminal, administrative, and regulatory remedies.

XXII. Filing a Complaint-Affidavit for Criminal Proceedings

A. Purpose

A complaint-affidavit is used to initiate criminal investigation and preliminary investigation.

B. Contents

It should contain:

Personal circumstances of complainant;
Statement of facts;
Description of fraudulent acts;
Amount lost;
Identity of suspects, if known;
Bank account or wallet where funds were sent;
Evidence of deceit or unauthorized access;
Steps taken after discovery;
Legal offenses believed committed;
Prayer for prosecution.

C. Attachments

Attach:

Valid ID;
Bank statements;
Transaction receipts;
Screenshots;
SMS and email alerts;
Complaint to bank;
Bank response;
Police blotter;
Cybercrime report;
Communications with scammer;
Proof of ownership of account;
Other supporting documents.

XXIII. Remedies Against the Fraudster

Against the fraudster, the victim may pursue:

Criminal prosecution;
Civil action for recovery of money;
Civil liability arising from crime;
Damages;
Attachment of property, if legally available;
Restitution through criminal proceedings;
Coordination with banks and law enforcement for tracing proceeds.

The challenge is often identifying the fraudster, especially in cyber fraud. Recipient account information, telecom records, IP logs, and surveillance footage may be important.

XXIV. Remedies Against the Bank

Against the bank, the victim may seek:

Internal reversal or reimbursement;
BSP complaint;
Civil action for sum of money;
Civil action for damages;
Complaint for violation of financial consumer protection rules;
Data privacy complaint, if personal data mishandling is involved;
Injunction or preservation of evidence, when appropriate.

The key issue is whether the bank breached its duty or whether the loss was caused solely by the victim or a third party.

XXV. Remedies Against a Bank Employee

If a bank employee participated in the fraud, possible remedies include:

Criminal complaint for estafa, qualified theft, falsification, or related crimes;
Complaint to the bank’s management;
Civil action for damages;
Complaint to regulators;
Inclusion of the bank as defendant if employer liability or negligent supervision is involved.

Banks may be liable for employee acts connected with banking functions, especially if the customer dealt with the employee as part of ordinary banking business.

XXVI. Remedies Against a Receiving Bank

If fraud proceeds were transferred to another bank, the receiving bank may not automatically be liable to the victim. However, it may have duties regarding suspicious accounts, account opening, fraud reports, and regulatory compliance.

A victim may request the originating bank to coordinate with the receiving bank for:

Fund recall;
Account freeze, if possible;
Investigation;
Preservation of records;
Identification through lawful process.

A receiving bank may become legally exposed if it negligently allowed obvious mule accounts, ignored suspicious activity, or failed to comply with regulatory duties. Liability still depends on proof.

XXVII. Prescription and Timeliness

Fraud victims should act quickly. Delay can harm both practical recovery and legal rights.

A. Practical Deadlines

Banks often impose reporting windows for card disputes, chargebacks, unauthorized transactions, or statement errors. Missing these periods may weaken the claim.

B. Civil Prescription

Civil actions are subject to prescriptive periods depending on the nature of the claim, such as written contract, oral contract, quasi-delict, injury to rights, or fraud.

C. Criminal Prescription

Criminal offenses also prescribe depending on the penalty and classification of the offense.

D. Importance of Prompt Action

Prompt action helps:

Preserve funds;
Freeze suspicious accounts;
Recover transaction records;
Obtain CCTV before deletion;
Strengthen credibility;
Avoid defenses based on delay;
Preserve legal remedies.

XXVIII. Damages Recoverable in Bank Fraud Cases

Depending on the facts, a victim may claim:

A. Actual Damages

Actual damages refer to the amount actually lost and proven.

Examples:

Unauthorized withdrawal amount;
Fraudulent transfer amount;
Bank charges;
Penalties caused by the fraud;
Costs of restoring identity;
Documented expenses.

B. Moral Damages

Moral damages may be awarded for mental anguish, serious anxiety, social humiliation, besmirched reputation, or similar injury, when legally justified.

In banking cases, moral damages may be available when the bank acted fraudulently, in bad faith, or with gross negligence, depending on the circumstances.

C. Exemplary Damages

Exemplary damages may be awarded by way of example or correction, especially where conduct is wanton, fraudulent, reckless, oppressive, or malevolent.

D. Nominal Damages

Nominal damages may be awarded where a legal right was violated but no substantial actual damage is proven.

E. Temperate Damages

Temperate damages may be awarded where some loss occurred but the exact amount cannot be proven with certainty.

F. Attorney’s Fees

Attorney’s fees may be awarded when allowed by law, such as when the defendant’s act compelled the plaintiff to litigate or incur expenses to protect rights.

XXIX. Defenses Commonly Raised by Banks

Banks may raise several defenses:

The transaction was authenticated;
Correct OTP was entered;
Correct PIN was used;
The customer disclosed credentials;
The customer’s device was compromised;
The customer failed to report promptly;
The bank followed security protocols;
The bank had no participation in the fraud;
The transaction was irreversible;
Bank secrecy prevents disclosure of recipient details;
The customer was negligent;
The loss was caused by a third party.

A complainant should prepare evidence to address these defenses.

XXX. Defenses Commonly Raised by Accused Persons

Respondents in criminal or civil cases may argue:

They did not own or control the recipient account;
They were also victims;
They merely lent the account without knowledge;
There was no deceit;
The transaction was authorized;
The complainant voluntarily transferred the money;
The evidence is insufficient;
Identity was not proven;
The complaint is civil, not criminal;
They returned or offered to return the money.

The strength of these defenses depends on proof, intent, and circumstances.

XXXI. Burden of Proof

A. Internal Bank Complaint

The bank investigates based on records, policies, and regulatory standards. The customer should provide clear evidence and a coherent narrative.

B. Civil Case

The plaintiff must prove the claim by preponderance of evidence.

C. Criminal Case

The prosecution must prove guilt beyond reasonable doubt.

D. Administrative or Regulatory Complaint

The standard depends on the agency and proceeding, often involving substantial evidence in administrative contexts.

XXXII. Settlement and Compromise

Bank fraud disputes may be settled.

Possible settlement terms include:

Reimbursement;
Partial reimbursement;
Waiver of fees and charges;
Account closure;
Corrective action;
Confidentiality clause;
Release and quitclaim;
Reservation of criminal claims against fraudsters;
Installment restitution by respondent.

A victim should be careful before signing a waiver. Some waivers may release the bank, employees, fraudsters, or related parties from further liability.

XXXIII. Insurance and Indemnity

Some losses may be covered by:

Credit card fraud protection;
Cyber insurance;
Corporate crime insurance;
Fidelity bonds;
Banker’s blanket bonds;
Unauthorized transaction protection programs;
Merchant protection policies.

Coverage depends on policy terms, exclusions, notice requirements, and proof of loss.

XXXIV. Preventive Measures for Individuals

Individuals should:

Never share OTPs, PINs, CVVs, or passwords;
Use only official bank apps;
Type bank URLs manually instead of clicking links;
Activate transaction alerts;
Set low transfer limits where possible;
Use strong unique passwords;
Enable biometrics and multi-factor authentication;
Avoid public Wi-Fi for banking;
Regularly review account statements;
Report suspicious activity immediately;
Keep cards and checkbooks secure;
Destroy old cards and bank documents properly;
Avoid saving card details on unsecured websites;
Update devices and apps;
Beware of callers claiming urgency or account compromise.

XXXV. Preventive Measures for Businesses

Businesses should:

Require dual approval for transfers;
Verify supplier bank changes by callback;
Use separate maker and approver roles;
Limit online banking access;
Conduct daily reconciliation;
Use corporate cards with controls;
Train employees against phishing;
Secure email systems;
Adopt incident response protocols;
Maintain audit logs;
Review user access regularly;
Use transaction limits;
Insure against cyber and fidelity risks;
Require board authority for major banking transactions;
Immediately disable access of separated employees.

XXXVI. Practical Checklist for Victims

A bank fraud victim should do the following:

Call the bank’s official fraud hotline immediately;
Block card, account, app, and online banking access;
Request fund recall or transaction dispute;
Obtain a reference number;
Change passwords and secure devices;
Contact telecom provider if SIM swap is suspected;
Preserve all evidence;
File a written complaint with the bank;
Request written investigation results;
File police, NBI, or cybercrime complaint;
File BSP complaint if bank response is inadequate;
Consider NPC complaint if personal data breach is involved;
Consult counsel for civil or criminal action;
Monitor credit reports, accounts, and identity misuse;
Do not communicate further with scammers except to preserve evidence.

XXXVII. Sample Reliefs in a Formal Complaint

A complainant may ask for:

Immediate investigation;
Reversal of unauthorized transactions;
Full reimbursement;
Provisional credit pending investigation;
Blocking of compromised access;
Issuance of new account or card;
Preservation of records;
Written explanation of findings;
Assistance in fund recall;
Coordination with recipient bank;
Certification of disputed transactions;
Waiver of charges and interest caused by fraud;
Correction of credit records;
Damages, where legally proper;
Referral to law enforcement, if bank personnel are involved.

XXXVIII. Key Legal Issues in Bank Fraud Disputes

Most bank fraud cases revolve around several central questions:

Was the transaction authorized?
Who had control of the credentials?
Was there customer negligence?
Did the bank exercise the required degree of diligence?
Did the bank act promptly after notice?
Was the loss caused by a system weakness?
Was a bank employee involved?
Was the recipient account suspicious?
Were regulatory rules followed?
Can the money still be traced or recovered?
What evidence is available?
What remedy is most practical?

The answer to these questions determines whether the victim should focus on bank reimbursement, criminal prosecution, civil recovery, regulatory pressure, or all remedies at once.

XXXIX. Conclusion

Bank fraud complaints in the Philippines require fast action, organized evidence, and the correct use of legal remedies. The victim should immediately notify the bank, block compromised access, preserve evidence, and file a written complaint. If the bank’s response is inadequate, the matter may be elevated to the BSP or other regulators. If a crime was committed, a complaint may be filed with law enforcement or the prosecutor’s office. If money was lost, a civil action may be pursued against the fraudster, recipient account holder, negligent bank, or other responsible parties.

Philippine law provides multiple remedies: internal bank dispute processes, BSP consumer assistance, criminal prosecution, civil recovery, damages, data privacy complaints, anti-money laundering mechanisms, and provisional court remedies. The best approach depends on the nature of the fraud, the amount involved, the available evidence, the role of the bank, and the speed with which the victim acts.

The central principle is that banking is a business affected with public interest, and banks must exercise high diligence. But customers must also protect their credentials, report fraud promptly, and cooperate in investigations. In every case, the outcome depends on evidence: what happened, when it happened, who authorized it, how the transaction was authenticated, what the bank did, what the customer did, and whether the loss could have been prevented or recovered.